From 5e86d7ab9c5200d794c3adb2b422d20a2aefd2ce Mon Sep 17 00:00:00 2001 From: Flam3rboy <34555296+Flam3rboy@users.noreply.github.com> Date: Sat, 13 Aug 2022 02:00:50 +0200 Subject: restructure to single project --- api/src/routes/auth/mfa/totp.ts | 42 ----------------------------------------- 1 file changed, 42 deletions(-) delete mode 100644 api/src/routes/auth/mfa/totp.ts (limited to 'api/src/routes/auth/mfa/totp.ts') diff --git a/api/src/routes/auth/mfa/totp.ts b/api/src/routes/auth/mfa/totp.ts deleted file mode 100644 index 421dbafa..00000000 --- a/api/src/routes/auth/mfa/totp.ts +++ /dev/null @@ -1,42 +0,0 @@ -import { Router, Request, Response } from "express"; -import { route } from "@fosscord/api"; -import { BackupCode, FieldErrors, generateToken, TotpSchema, User } from "@fosscord/util"; -import { verifyToken } from "node-2fa"; -import { HTTPError } from "lambert-server"; -const router = Router(); - -router.post("/", route({ body: "TotpSchema" }), async (req: Request, res: Response) => { - const { code, ticket, gift_code_sku_id, login_source } = req.body as TotpSchema; - - const user = await User.findOneOrFail({ - where: { - totp_last_ticket: ticket, - }, - select: [ - "id", - "totp_secret", - "settings", - ], - }); - - const backup = await BackupCode.findOne({ where: { code: code, expired: false, consumed: false, user: { id: user.id } } }); - - if (!backup) { - const ret = verifyToken(user.totp_secret!, code); - if (!ret || ret.delta != 0) - throw new HTTPError(req.t("auth:login.INVALID_TOTP_CODE"), 60008); - } - else { - backup.consumed = true; - await backup.save(); - } - - await User.update({ id: user.id }, { totp_last_ticket: "" }); - - return res.json({ - token: await generateToken(user.id), - user_settings: user.settings, - }); -}); - -export default router; -- cgit 1.5.1