View Source Franklin.Accounts.User (Franklin v0.1.0)
Link to this section Summary
Functions
Confirms the account by setting confirmed_at
.
A user changeset for changing the email.
A user changeset for changing the password.
A user changeset for registration.
Verifies the password.
Validates the current password otherwise adds an error to the changeset.
Link to this section Types
@type id() :: Ecto.UUID.t()
Link to this section Functions
Confirms the account by setting confirmed_at
.
A user changeset for changing the email.
It requires the email to change otherwise an error is added.
A user changeset for changing the password.
options
Options
:hash_password
- Hashes the password so it can be stored securely in the database and ensures the password field is cleared to prevent leaks in the logs. If password hashing is not needed and clearing the password field is not desired (like when using this changeset for validations on a LiveView form), this option can be set tofalse
. Defaults totrue
.
A user changeset for registration.
It is important to validate the length of both email and password. Otherwise databases may truncate the email without warnings, which could lead to unpredictable or insecure behaviour. Long passwords may also be very expensive to hash for certain algorithms.
options
Options
:hash_password
- Hashes the password so it can be stored securely in the database and ensures the password field is cleared to prevent leaks in the logs. If password hashing is not needed and clearing the password field is not desired (like when using this changeset for validations on a LiveView form), this option can be set tofalse
. Defaults totrue
.:validate_email
- Validates the uniqueness of the email, in case you don't want to validate the uniqueness of the email (like when using this changeset for validations on a LiveView form before submitting the form), this option can be set tofalse
. Defaults totrue
.
Verifies the password.
If there is no user or the user doesn't have a password, we call
Argon2.no_user_verify/0
to avoid timing attacks.
Validates the current password otherwise adds an error to the changeset.