52 lines
2.0 KiB
Go
52 lines
2.0 KiB
Go
package entities
|
|
|
|
import (
|
|
"time"
|
|
|
|
"go.mongodb.org/mongo-driver/v2/bson"
|
|
)
|
|
|
|
// User represents a system user
|
|
type User struct {
|
|
ID bson.ObjectID `bson:"_id,omitempty"`
|
|
Email string `bson:"email"`
|
|
Username string `bson:"username"`
|
|
PasswordHash string `bson:"password_hash"`
|
|
FirstName string `bson:"first_name"`
|
|
LastName string `bson:"last_name"`
|
|
Avatar string `bson:"avatar,omitempty"`
|
|
GroupIDs []bson.ObjectID `bson:"group_ids,omitempty"`
|
|
Permissions []string `bson:"permissions,omitempty"`
|
|
IsActive bool `bson:"is_active"`
|
|
EmailVerified bool `bson:"email_verified"`
|
|
CreatedAt time.Time `bson:"created_at"`
|
|
UpdatedAt time.Time `bson:"updated_at"`
|
|
LastLoginAt *time.Time `bson:"last_login_at,omitempty"`
|
|
}
|
|
|
|
// UserProviderLink links external OAuth/OIDC providers to a user
|
|
type UserProviderLink struct {
|
|
ID bson.ObjectID `bson:"_id,omitempty"`
|
|
UserID bson.ObjectID `bson:"user_id"`
|
|
ProviderID bson.ObjectID `bson:"provider_id"`
|
|
ProviderUserID string `bson:"provider_user_id"`
|
|
Email string `bson:"email"`
|
|
ProfileData map[string]any `bson:"profile_data,omitempty"`
|
|
AccessToken string `bson:"access_token"` // Consider encrypting in production
|
|
RefreshToken string `bson:"refresh_token,omitempty"`
|
|
AccessTokenExp *time.Time `bson:"access_token_exp,omitempty"`
|
|
LinkedAt time.Time `bson:"linked_at"`
|
|
LastUsedAt *time.Time `bson:"last_used_at,omitempty"`
|
|
}
|
|
|
|
// AccountRecovery represents account recovery tokens
|
|
type AccountRecovery struct {
|
|
ID bson.ObjectID `bson:"_id,omitempty"`
|
|
UserID bson.ObjectID `bson:"user_id"`
|
|
Token string `bson:"token"`
|
|
Type string `bson:"type"` // "password_reset", "email_verification"
|
|
ExpiresAt time.Time `bson:"expires_at"`
|
|
UsedAt *time.Time `bson:"used_at,omitempty"`
|
|
CreatedAt time.Time `bson:"created_at"`
|
|
}
|