main
use crate::errors::ApiError;
pub use crate::services::register::*;
use api::http::{Json, State};
use api::middleware::RequestId;
use api::rest::{AppResponseData, NoData};
use session::Session;
#[utoipa::path(
post,
path = "/auth/register/code",
tag = "auth",
operation_id = "auth_register_code",
summary = "发送注册验证码",
description = "校验工作量证明（payload = 邮箱的 UTF-8 字节）与邮箱格式后，把 6 位验证码写入缓存并寄出。缓存键 `auth:code:register:{email}`，有效期由 `verify_code_ttl_secs` 决定，发码限流键 `auth:rate:register:{email}`。",
request_body = RegisterCodeRequest,
responses(
(
status = 200,
description = "验证码已写入缓存并寄出",
body = AppResponseData<RegisterCodeResponse>,
example = json!({"code":200,"message":"success","data":{"expires_in_secs":600}})
),
(
status = 400,
description = "`invalid_email`（邮箱格式）/ `expired`（挑战过期）/ `invalid_payload`（payload 与邮箱不一致）/ `invalid_proof`（未满足难度）",
body = AppResponseData<NoData>,
example = json!({"code": "invalid_email", "message": "email is invalid"})
),
(
status = 409,
description = "`email_taken`（邮箱已注册）",
body = AppResponseData<NoData>,
example = json!({"code": "email_taken", "message": "email is already taken"})
),
(
status = 429,
description = "`rate_limited`（同一邮箱发码过于频繁）",
body = AppResponseData<NoData>,
example = json!({"code": "rate_limited", "message": "too many requests, retry after 60s"})
),
(
status = 500,
description = "`email`（投递失败）/ `cache` / `session` / `serialization` / `internal`",
body = AppResponseData<NoData>,
example = json!({"code": "internal", "message": "internal server error"})
)
)
)]
pub async fn register_code(
State(svc): State<crate::AuthService>,
session: Session,
body: Json<RegisterCodeRequest>,
request_id: RequestId,
) -> Result<AppResponseData<RegisterCodeResponse>, ApiError> {
let response = svc
.send_register_code(session, body.into_inner(), request_id.0)
.await?;
Ok(AppResponseData::ok(response))
}
#[utoipa::path(
post,
path = "/auth/register",
tag = "auth",
operation_id = "auth_register",
summary = "提交注册",
description = "校验工作量证明（payload = 用户名的 UTF-8 字节）、用户名/展示名/出生日期/邮箱、邮箱验证码（键 `auth:code:register:{email}`，尝试上限 `max_verify_attempts`）后，Argon2 重哈希口令并创建用户与初始档案。成功后写会话（user_id、security_version、renew）并记审计事件。",
request_body = UserRegisterRequest,
responses(
(
status = 200,
description = "注册成功且已登录",
body = AppResponseData<UserRegisterResponse>,
example = json!({"code":200,"message":"success","data":{"user_id":1234567,"username":"alice","displayname":"Alice"}})
),
(
status = 400,
description = "`invalid_username` / `invalid_displayname` / `invalid_email` / `invalid_birth_date` / `invalid_password` / `invalid_email_code`（验证码错误或已过期）/ `expired` / `invalid_payload` / `invalid_proof`",
body = AppResponseData<NoData>,
example = json!({"code": "invalid_email_code", "message": "email verification code is invalid"})
),
(
status = 403,
description = "`under_minimum_age`（未满最小年龄）",
body = AppResponseData<NoData>,
example = json!({"code": "under_minimum_age", "message": "you must be at least 13 years old"})
),
(
status = 409,
description = "`username_taken` / `email_taken`",
body = AppResponseData<NoData>,
example = json!({"code": "username_taken", "message": "username is already taken"})
),
(
status = 429,
description = "`email_code_attempts_exceeded`（验证码尝试次数用尽）",
body = AppResponseData<NoData>,
example = json!({"code": "email_code_attempts_exceeded", "message": "too many invalid email verification attempts"})
),
(
status = 500,
description = "`password_hash`（口令重哈希失败）/ `database` / `cache` / `session` / `serialization` / `internal`",
body = AppResponseData<NoData>,
example = json!({"code": "internal", "message": "internal server error"})
)
)
)]
pub async fn register(
State(svc): State<crate::AuthService>,
session: Session,
body: Json<UserRegisterRequest>,
request_id: RequestId,
) -> Result<AppResponseData<UserRegisterResponse>, ApiError> {
let user_agent = session.user_agent()?;
let ip_addr = session.client_ip()?;
let response = svc
.register(
session,
body.into_inner(),
user_agent,
ip_addr,
request_id.0,
)
.await?;
Ok(AppResponseData::ok(response))
}