From 5e86d7ab9c5200d794c3adb2b422d20a2aefd2ce Mon Sep 17 00:00:00 2001 From: Flam3rboy <34555296+Flam3rboy@users.noreply.github.com> Date: Sat, 13 Aug 2022 02:00:50 +0200 Subject: restructure to single project --- api/src/routes/users/@me/mfa/totp/disable.ts | 41 ---------------------------- 1 file changed, 41 deletions(-) delete mode 100644 api/src/routes/users/@me/mfa/totp/disable.ts (limited to 'api/src/routes/users/@me/mfa/totp/disable.ts') diff --git a/api/src/routes/users/@me/mfa/totp/disable.ts b/api/src/routes/users/@me/mfa/totp/disable.ts deleted file mode 100644 index 2fe9355c..00000000 --- a/api/src/routes/users/@me/mfa/totp/disable.ts +++ /dev/null @@ -1,41 +0,0 @@ -import { Router, Request, Response } from "express"; -import { route } from "@fosscord/api"; -import { verifyToken } from 'node-2fa'; -import { HTTPError } from "lambert-server"; -import { User, generateToken, BackupCode, TotpDisableSchema } from "@fosscord/util"; - -const router = Router(); - -router.post("/", route({ body: "TotpDisableSchema" }), async (req: Request, res: Response) => { - const body = req.body as TotpDisableSchema; - - const user = await User.findOneOrFail({ where: { id: req.user_id }, select: ["totp_secret"] }); - - const backup = await BackupCode.findOne({ where: { code: body.code } }); - if (!backup) { - const ret = verifyToken(user.totp_secret!, body.code); - if (!ret || ret.delta != 0) - throw new HTTPError(req.t("auth:login.INVALID_TOTP_CODE"), 60008); - } - - await User.update( - { id: req.user_id }, - { - mfa_enabled: false, - totp_secret: "", - }, - ); - - await BackupCode.update( - { user: { id: req.user_id } }, - { - expired: true, - } - ); - - return res.json({ - token: await generateToken(user.id), - }); -}); - -export default router; \ No newline at end of file -- cgit 1.5.1