Method Request

server/validate/email/validate.go:255–310

Send a request for confirmation to the user: makes a record in DB and nothing else.

(user t.Uid, email, lang, resp string, tmpToken []byte)

// Send a request for confirmation to the user: makes a record in DB and nothing else.
func (v *validator) Request(user t.Uid, email, lang, resp string, tmpToken []byte) (bool, error) {
	// Email validator cannot accept an immediate response.
	if resp != "" {
		return false, t.ErrFailed
	}

	// Normalize email to make sure Unicode case collisions don't lead to security problems.
	email = strings.ToLower(email)

	token := make([]byte, base64.StdEncoding.EncodedLen(len(tmpToken)))
	base64.StdEncoding.Encode(token, tmpToken)

	// Generate expected response as a random numeric string between 0 and 999999.
	code, err := crand.Int(crand.Reader, v.maxCodeValue)
	if err != nil {
		return false, err
	}
	resp = strconv.FormatInt(code.Int64(), 10)
	resp = strings.Repeat("0", v.CodeLength-len(resp)) + resp

	var template *textt.Template
	if v.langMatcher != nil {
		// Find the template for the requested language.
		// Make sure the language tag is standardized. Matcher is a bit dumber than Parse().
		normalized, _ := i18n.Parse(lang)
		// The matched tag is usually not in the list of available languages (e.g. es_ES -> es-u-rg-eszzzz).
		// Use index to find the template instead of tag.
		_, idx := i18n.MatchStrings(v.langMatcher, normalized.String())
		template = v.validationTempl[idx]
	} else {
		template = v.validationTempl[0]
	}

	content, err := validate.ExecuteTemplate(template, templateParts, map[string]any{
		"Token":   url.QueryEscape(string(token)),
		"Code":    resp,
		"HostUrl": v.HostUrl})
	if err != nil {
		return false, err
	}

	// Create or update validation record in DB.
	isNew, err := store.Users.UpsertCred(&t.Credential{
		User:   user.String(),
		Method: validatorName,
		Value:  email,
		Resp:   resp})
	if err != nil {
		return false, err
	}

	// Send email without blocking. Email sending may take long time.
	go v.send(email, content)

	return isNew, nil
}

// ResetSecret sends a message with instructions for resetting an authentication secret.