Class UserService

Application use cases for safe provisioning and password authentication.

Index

Constructors

Methods

authenticate changePassword create current updateCurrent

Constructors

constructor

new UserService(
    repository: UserRepository,
    passwordHasher: PasswordHasher,
    dummyHash: string,
): UserService
Parameters
- repository: UserRepository
- passwordHasher: PasswordHasher
- dummyHash: string
Returns UserService
- Defined in backend/src/application/user-service.ts:32

Methods

authenticate

authenticate(email: string, password: string): Promise<AuthenticatedUser | null>
Authenticate an email/password credential pair.

The lookup uses the same normalization as provisioning, and an unknown account is still verified against a dummy hash so the response time does not reveal whether the address exists.
Parameters
- email: string
  Candidate login address; normalized before lookup.
- password: string
  Candidate plaintext password.
Returns Promise<AuthenticatedUser | null>
The PublicUser for an enabled account whose password matched, otherwise null; the reason for a failure is deliberately not distinguished.
- Defined in backend/src/application/user-service.ts:91

changePassword

changePassword(
    userId: string,
    currentPassword: string,
    newPassword: string,
): Promise<void>
Verify the current credential, then atomically change it and revoke all sessions.
Parameters
- userId: string
- currentPassword: string
- newPassword: string
Returns Promise<void>
- Defined in backend/src/application/user-service.ts:132

create

create(
    email: string,
    displayName: string,
    password: string,
): Promise<PublicUser>
Provision a new enabled account.

The login address is normalized through normalizeEmail and the display name is trimmed before validation, so callers never need to pre-normalize input.
Parameters
- email: string
  Candidate login address; normalized and validated against EMAIL_MAX_LENGTH.
- displayName: string
  Non-empty display name of at most DISPLAY_NAME_MAX_LENGTH characters.
- password: string
  Plaintext password validated by the shared password policy.
Returns Promise<PublicUser>
The safe PublicUser representation; the credential hash is never returned.

Throws
UserInputError When the email or display name is invalid.

Throws
backend/src/application/password-service!PasswordPolicyError When the password violates the shared password policy.

Throws
backend/src/repository/user-repository!UserEmailConflictError When the login address already belongs to another account.
- Defined in backend/src/application/user-service.ts:56

current

current(userId: string, credentialVersion?: number): Promise<PublicUser | null>
Resolve the currently authenticated account for a session.
Parameters
- userId: string
  Identifier stored in the authenticated session.
- OptionalcredentialVersion: number
Returns Promise<PublicUser | null>
The PublicUser when the account exists and is enabled, otherwise null (a disabled or deleted account ends the session).
- Defined in backend/src/application/user-service.ts:107

updateCurrent

updateCurrent(
    userId: string,
    displayName: string,
    preferences: UserPreferences,
): Promise<PublicUser | null>
Update the authenticated account's bounded profile and preferences.
Parameters
- userId: string
- displayName: string
- preferences: UserPreferences
Returns Promise<PublicUser | null>
- Defined in backend/src/application/user-service.ts:115