summary refs log tree commit diff
path: root/api/src/routes/users/@me/mfa/codes.ts
diff options
context:
space:
mode:
Diffstat (limited to 'api/src/routes/users/@me/mfa/codes.ts')
-rw-r--r--api/src/routes/users/@me/mfa/codes.ts45
1 files changed, 0 insertions, 45 deletions
diff --git a/api/src/routes/users/@me/mfa/codes.ts b/api/src/routes/users/@me/mfa/codes.ts
deleted file mode 100644

index 4224a1c0..00000000 --- a/api/src/routes/users/@me/mfa/codes.ts +++ /dev/null
@@ -1,45 +0,0 @@ -import { Router, Request, Response } from "express"; -import { route } from "@fosscord/api"; -import { BackupCode, Config, FieldErrors, generateMfaBackupCodes, MfaCodesSchema, User } from "@fosscord/util"; -import bcrypt from "bcrypt"; - -const router = Router(); - -// TODO: This route is replaced with users/@me/mfa/codes-verification in newer clients - -router.post("/", route({ body: "MfaCodesSchema" }), async (req: Request, res: Response) => { - const { password, regenerate } = req.body as MfaCodesSchema; - - const user = await User.findOneOrFail({ where: { id: req.user_id }, select: ["data"] }); - - if (!await bcrypt.compare(password, user.data.hash || "")) { - throw FieldErrors({ password: { message: req.t("auth:login.INVALID_PASSWORD"), code: "INVALID_PASSWORD" } }); - } - - var codes: BackupCode[]; - if (regenerate && Config.get().security.twoFactor.generateBackupCodes) { - await BackupCode.update( - { user: { id: req.user_id } }, - { expired: true } - ); - - codes = generateMfaBackupCodes(req.user_id); - await Promise.all(codes.map(x => x.save())); - } - else { - codes = await BackupCode.find({ - where: { - user: { - id: req.user_id, - }, - expired: false - } - }); - } - - return res.json({ - backup_codes: codes.map(x => ({ ...x, expired: undefined })), - }) -}); - -export default router;