TokenService Implementation

Author: mckaragoz

UltimateAuth.slnx

@@ -3,7 +3,7 @@
     <File Path="Readme.md" />
     <File Path="Roadmap.md" />
   </Folder>
-  <Project Path="src/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.AspNetCore.csproj" Id="30d5db36-6dc8-46f6-9139-8b6b3d6053d5" />
+  <Project Path="src/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.Server.Users.csproj" Id="30d5db36-6dc8-46f6-9139-8b6b3d6053d5" />
   <Project Path="src/CodeBeam.UltimateAuth.Client/CodeBeam.UltimateAuth.Client.csproj" Id="eb60a3b7-ba9d-48c9-98ad-b28e879b23bf" />
   <Project Path="src/CodeBeam.UltimateAuth.Core/CodeBeam.UltimateAuth.Core.csproj" />
   <Project Path="src/CodeBeam.UltimateAuth.Server/CodeBeam.UltimateAuth.Server.csproj" Id="0a8cdd12-a8c4-4530-87e8-ae778c46322b" />

…ltimateAuth.AspNetCore/Handlers/.gitkeep …ateAuth.AspNetCore/Abstractions/.gitkeepsrc/CodeBeam.UltimateAuth.AspNetCore/Handlers/.gitkeep renamed to src/CodeBeam.UltimateAuth.AspNetCore/Abstractions/.gitkeep src/CodeBeam.UltimateAuth.AspNetCore/Handlers/.gitkeep renamed to src/CodeBeam.UltimateAuth.AspNetCore/Abstractions/.gitkeep

@@ -0,0 +1,16 @@
+using CodeBeam.UltimateAuth.Core.Models;
+
+namespace CodeBeam.UltimateAuth.Core.Abstractions
+{
+    /// <summary>
+    /// Validates access tokens (JWT or opaque) and resolves
+    /// the authenticated user context.
+    /// </summary>
+    public interface ITokenValidator
+    {
+        Task<TokenValidationResult<TUserId>> ValidateAsync<TUserId>(
+            string token,
+            TokenType type,
+            CancellationToken ct = default);
+    }
+}

…/CodeBeam.UltimateAuth.AspNetCore.csproj …odeBeam.UltimateAuth.Server.Users.csprojsrc/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.AspNetCore.csproj renamed to src/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.Server.Users.csproj src/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.AspNetCore.csproj renamed to src/CodeBeam.UltimateAuth.AspNetCore/CodeBeam.UltimateAuth.Server.Users.csproj

@@ -0,0 +1,13 @@
+namespace CodeBeam.UltimateAuth.Core.Abstractions
+{
+    /// <summary>
+    /// Securely hashes and verifies user passwords.
+    /// Designed for slow, adaptive, memory-hard algorithms
+    /// such as Argon2 or bcrypt.
+    /// </summary>
+    public interface IUAuthPasswordHasher
+    {
+        string Hash(string password);
+        bool Verify(string password, string hash);
+    }
+}

…ore/Abstractions/Issuers/ITokenHasher.cs …teAuth.Core/Abstractions/ITokenHasher.cssrc/CodeBeam.UltimateAuth.Core/Abstractions/Issuers/ITokenHasher.cs renamed to src/CodeBeam.UltimateAuth.Core/Abstractions/ITokenHasher.cs src/CodeBeam.UltimateAuth.Core/Abstractions/Issuers/ITokenHasher.cs renamed to src/CodeBeam.UltimateAuth.Core/Abstractions/ITokenHasher.cs

@@ -31,6 +31,7 @@ public interface IUserIdConverter<TUserId>
         /// Thrown when the input value cannot be parsed into a valid identifier.
         /// </exception>
         TUserId FromString(string value);
+        bool TryFromString(string value, out TUserId userId);
 
         /// <summary>
         /// Reconstructs a typed user identifier from its binary representation.
@@ -41,5 +42,6 @@ public interface IUserIdConverter<TUserId>
         /// Thrown when the input binary value cannot be parsed into a valid identifier.
         /// </exception>
         TUserId FromBytes(byte[] binary);
+        bool TryFromBytes(byte[] binary, out TUserId userId);
     }
 }

src/CodeBeam.UltimateAuth.Core/Abstractions/ITokenValidator.cs

@@ -0,0 +1,16 @@
+namespace CodeBeam.UltimateAuth.Core.Abstractions
+{
+    /// <summary>
+    /// Responsible for creating new user identifiers.
+    /// This abstraction allows UltimateAuth to remain
+    /// independent from the concrete user ID type.
+    /// </summary>
+    /// <typeparam name="TUserId">User identifier type.</typeparam>
+    public interface IUserIdFactory<TUserId>
+    {
+        /// <summary>
+        /// Creates a new unique user identifier.
+        /// </summary>
+        TUserId Create();
+    }
+}

src/CodeBeam.UltimateAuth.Core/Abstractions/IUAuthPasswordHasher.cs

@@ -0,0 +1,59 @@
+using CodeBeam.UltimateAuth.Core.Models;
+
+namespace CodeBeam.UltimateAuth.Core.Abstractions
+{
+    /// <summary>
+    /// Handles authentication flows such as login,
+    /// logout, session refresh and reauthentication.
+    /// </summary>
+    public interface IUAuthFlowService
+    {
+        // ---------- LOGIN ----------
+        Task<LoginResult> LoginAsync(
+            LoginRequest request,
+            CancellationToken ct = default);
+
+        Task<LoginResult> ExternalLoginAsync(
+            ExternalLoginRequest request,
+            CancellationToken ct = default);
+
+        // ---------- MFA ----------
+        Task<MfaChallengeResult> BeginMfaAsync(
+            BeginMfaRequest request,
+            CancellationToken ct = default);
+
+        Task<LoginResult> CompleteMfaAsync(
+            CompleteMfaRequest request,
+            CancellationToken ct = default);
+
+        // ---------- SESSION FLOW ----------
+        Task LogoutAsync(
+            LogoutRequest request,
+            CancellationToken ct = default);
+
+        Task LogoutAllAsync(
+            LogoutAllRequest request,
+            CancellationToken ct = default);
+
+        Task<SessionRefreshResult> RefreshSessionAsync(
+            SessionRefreshRequest request,
+            CancellationToken ct = default);
+
+        Task<ReauthResult> ReauthenticateAsync(
+            ReauthRequest request,
+            CancellationToken ct = default);
+
+        // ---------- PKCE ----------
+        Task<PkceChallengeResult> CreatePkceChallengeAsync(
+            PkceCreateRequest request,
+            CancellationToken ct = default);
+
+        Task<PkceVerificationResult> VerifyPkceAsync(
+            PkceVerifyRequest request,
+            CancellationToken ct = default);
+
+        Task ConsumePkceAsync(
+            PkceConsumeRequest request,
+            CancellationToken ct = default);
+    }
+}