| | | 1 | | using ArturRios.Mediator.Command; |
| | | 2 | | |
| | | 3 | | namespace ArturRios.Heimdall.Command.Input; |
| | | 4 | | |
| | | 5 | | /// <summary> |
| | | 6 | | /// Intent to reissue the email code for a two-factor challenge that is still outstanding |
| | | 7 | | /// (UC-46), so a person who never received the code UC-11 mailed can ask for another without |
| | | 8 | | /// restarting sign-in. Carries no acting-person identity and no address: the caller holds no |
| | | 9 | | /// bearer token yet, only the challenge token, submitted here as a plain request body field |
| | | 10 | | /// rather than an <c>Authorization</c> header (FR-2F-10) — the same shape |
| | | 11 | | /// <see cref="VerifyTwoFactorAuthCommand" /> uses. Whom the code is sent to is resolved from |
| | | 12 | | /// <see cref="ChallengeToken" /> itself, inside the handler, so this can never be used to mail a |
| | | 13 | | /// code to an address the caller chose. |
| | | 14 | | /// </summary> |
| | | 15 | | public class ResendTwoFactorChallengeCodeCommand : BaseCommand |
| | | 16 | | { |
| | | 17 | | /// <summary>The short-lived challenge token AF-11g returned from <c>POST /api/auth/login</c>.</summary> |
| | 216 | 18 | | public string ChallengeToken { get; set; } = string.Empty; |
| | | 19 | | } |