NewEmailVerification creates an object which can be sent to a user in serialized form to verify that they control an email address.

ParseAndVerifyEmailVerificationToken parses a string into a an EmailVerification, verifies the signature, and ensures that required claims are present.

ParseAndVerifyPasswordResetToken parses a string into a an PasswordReset, verifies the signature, and ensures that required claims are present.

Claim representing where a user should be sent after verifying their email address.

ClaimEmailVerificationEmail represents the email to be verified.

Claim representing where a user should be sent after responding to an invitation.

ClaimPasswordResetCallback represents where a user should be sent after resetting their password.

ClaimPasswordResetPassword represents the hash of the password to be reset; in other words, the old password.

An Invitation is a token that can be used for verifying an email address and resetting a password in a single stroke.

RemoteIdentity represents a User's identity at an IDP.

UserRepo implementations maintain a persistent set of users.