feat: mail service

integration/authsessionuser/authsession_user_test.go

@@ -64,6 +64,31 @@ func TestAuthsessionUserBlackBoxConfirmForExistingUserKeepsCreateOnlySettings(t
 	require.Equal(t, "Europe/Paris", account.User.TimeZone)
 }
 
+func TestAuthsessionUserBlackBoxAcceptLanguageSetsLocalizedPreferredLanguage(t *testing.T) {
+	t.Parallel()
+
+	h := newAuthsessionUserHarness(t)
+	email := "localized@example.com"
+
+	challengeID := h.sendChallengeWithAcceptLanguage(t, email, "fr-FR, en;q=0.8")
+	deliveries := h.mailStub.RecordedDeliveries()
+	require.NotEmpty(t, deliveries)
+	require.Equal(t, "fr-FR", deliveries[len(deliveries)-1].Locale)
+
+	code := lastMailCodeFor(t, h.mailStub, email)
+	response := h.confirmCode(t, challengeID, code)
+	var confirmBody struct {
+		DeviceSessionID string `json:"device_session_id"`
+	}
+	requireJSONStatus(t, response, http.StatusOK, &confirmBody)
+	require.True(t, strings.HasPrefix(confirmBody.DeviceSessionID, "device-session-"))
+
+	lookupResponse, account := lookupUserByEmail(t, h.userServiceURL, email)
+	require.Equalf(t, http.StatusOK, lookupResponse.StatusCode, formatStatusError(lookupResponse))
+	require.Equal(t, "fr-FR", account.User.PreferredLanguage)
+	require.Equal(t, testTimeZone, account.User.TimeZone)
+}
+
 func TestAuthsessionUserBlackBoxBlockedEmailSendIsSuccessShapedAndConfirmIsRejectedWithoutCreatingUser(t *testing.T) {
 	t.Parallel()
 

integration/authsessionuser/harness_test.go

@@ -82,9 +82,18 @@ func newAuthsessionUserHarness(t *testing.T) *authsessionUserHarness {
 func (h *authsessionUserHarness) sendChallenge(t *testing.T, email string) string {
 	t.Helper()
 
-	response := postJSONValue(t, h.authsessionPublicURL+"/api/v1/public/auth/send-email-code", map[string]string{
-		"email": email,
-	})
+	return h.sendChallengeWithAcceptLanguage(t, email, "")
+}
+
+func (h *authsessionUserHarness) sendChallengeWithAcceptLanguage(t *testing.T, email string, acceptLanguage string) string {
+	t.Helper()
+
+	response := postJSONValueWithHeaders(
+		t,
+		h.authsessionPublicURL+"/api/v1/public/auth/send-email-code",
+		map[string]string{"email": email},
+		map[string]string{"Accept-Language": acceptLanguage},
+	)
 	require.Equal(t, http.StatusOK, response.StatusCode)
 
 	var body struct {
@@ -116,12 +125,24 @@ type httpResponse struct {
 func postJSONValue(t *testing.T, targetURL string, body any) httpResponse {
 	t.Helper()
 
+	return postJSONValueWithHeaders(t, targetURL, body, nil)
+}
+
+func postJSONValueWithHeaders(t *testing.T, targetURL string, body any, headers map[string]string) httpResponse {
+	t.Helper()
+
 	payload, err := json.Marshal(body)
 	require.NoError(t, err)
 
 	request, err := http.NewRequest(http.MethodPost, targetURL, bytes.NewReader(payload))
 	require.NoError(t, err)
 	request.Header.Set("Content-Type", "application/json")
+	for key, value := range headers {
+		if value == "" {
+			continue
+		}
+		request.Header.Set(key, value)
+	}
 
 	client := &http.Client{
 		Timeout: 250 * time.Millisecond,