From 5e86d7ab9c5200d794c3adb2b422d20a2aefd2ce Mon Sep 17 00:00:00 2001 From: Flam3rboy <34555296+Flam3rboy@users.noreply.github.com> Date: Sat, 13 Aug 2022 02:00:50 +0200 Subject: restructure to single project --- api/src/routes/users/@me/mfa/codes.ts | 45 ----------------------------------- 1 file changed, 45 deletions(-) delete mode 100644 api/src/routes/users/@me/mfa/codes.ts (limited to 'api/src/routes/users/@me/mfa/codes.ts') diff --git a/api/src/routes/users/@me/mfa/codes.ts b/api/src/routes/users/@me/mfa/codes.ts deleted file mode 100644 index 4224a1c0..00000000 --- a/api/src/routes/users/@me/mfa/codes.ts +++ /dev/null @@ -1,45 +0,0 @@ -import { Router, Request, Response } from "express"; -import { route } from "@fosscord/api"; -import { BackupCode, Config, FieldErrors, generateMfaBackupCodes, MfaCodesSchema, User } from "@fosscord/util"; -import bcrypt from "bcrypt"; - -const router = Router(); - -// TODO: This route is replaced with users/@me/mfa/codes-verification in newer clients - -router.post("/", route({ body: "MfaCodesSchema" }), async (req: Request, res: Response) => { - const { password, regenerate } = req.body as MfaCodesSchema; - - const user = await User.findOneOrFail({ where: { id: req.user_id }, select: ["data"] }); - - if (!await bcrypt.compare(password, user.data.hash || "")) { - throw FieldErrors({ password: { message: req.t("auth:login.INVALID_PASSWORD"), code: "INVALID_PASSWORD" } }); - } - - var codes: BackupCode[]; - if (regenerate && Config.get().security.twoFactor.generateBackupCodes) { - await BackupCode.update( - { user: { id: req.user_id } }, - { expired: true } - ); - - codes = generateMfaBackupCodes(req.user_id); - await Promise.all(codes.map(x => x.save())); - } - else { - codes = await BackupCode.find({ - where: { - user: { - id: req.user_id, - }, - expired: false - } - }); - } - - return res.json({ - backup_codes: codes.map(x => ({ ...x, expired: undefined })), - }) -}); - -export default router; -- cgit 1.5.1