pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-02-28 07:46:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

check and verify 2fa backup code

Browse Source
This commit is contained in:
Milo Schwartz
2024-10-05 15:45:01 -04:00
parent 4a5e0e1c57
commit 863f94c8db
6 changed files with 79 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
server/routers/auth/changePassword.ts
View File

@@ -9,9 +9,8 @@ import { User, users } from "@server/db/schema";
import { eq } from "drizzle-orm";
import { response } from "@server/utils";
import { hashPassword, verifyPassword } from "./password";
import { verifyTotpCode } from "./verifyTotpCode";
import { verifyTotpCode } from "./2fa";
import { passwordSchema } from "./passwordSchema";
import logger from "@server/logger";
export const changePasswordBody = z.object({
oldPassword: z.string(),
@@ -72,7 +71,11 @@ export async function changePassword(
status: HttpCode.ACCEPTED,
});
}
const validOTP = await verifyTotpCode(code!, user.twoFactorSecret!);
const validOTP = await verifyTotpCode(
code!,
user.twoFactorSecret!,
user.id,
);
if (!validOTP) {
return next(