pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-02-24 13:56:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

check and verify 2fa backup code

Browse Source
This commit is contained in:
Milo Schwartz
2024-10-05 15:45:01 -04:00
parent 4a5e0e1c57
commit 863f94c8db
6 changed files with 79 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
server/routers/auth/disable2fa.ts
View File

@@ -9,7 +9,7 @@ import { twoFactorBackupCodes, User, users } from "@server/db/schema";
import { eq } from "drizzle-orm";
import { response } from "@server/utils";
import { verifyPassword } from "./password";
import { verifyTotpCode } from "./verifyTotpCode";
import { verifyTotpCode } from "./2fa";
export const disable2faBody = z.object({
password: z.string(),
@@ -66,7 +66,11 @@ export async function disable2fa(
}
}
const validOTP = await verifyTotpCode(code, user.twoFactorSecret!);
const validOTP = await verifyTotpCode(
code,
user.twoFactorSecret!,
user.id,
);
if (!validOTP) {
return next(