mirror of https://gitgud.io/fatchan/jschan.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
52 lines
1.5 KiB
52 lines
1.5 KiB
'use strict';
|
|
|
|
const redis = require(__dirname+'/../../lib/redis/redis.js')
|
|
, dynamicResponse = require(__dirname+'/../../lib/misc/dynamic.js')
|
|
, { Accounts } = require(__dirname+'/../../db/')
|
|
, doTwoFactor = require(__dirname+'/../../lib/misc/dotwofactor.js');
|
|
|
|
module.exports = async (req, res) => {
|
|
|
|
const { __ } = res.locals;
|
|
const username = res.locals.user.username.toLowerCase();
|
|
|
|
// Get the temporary secret from redis and check it exists
|
|
const tempSecret = await redis.get(`twofactor_tempsecret:${username}`);
|
|
if (!tempSecret || !username) {
|
|
return dynamicResponse(req, res, 403, 'message', {
|
|
'title': __('Forbidden'),
|
|
'message': __('2FA QR code expired, try again'),
|
|
'redirect': '/twofactor.html',
|
|
});
|
|
}
|
|
|
|
// Validate totp
|
|
const delta = await doTwoFactor(username, tempSecret, req.body.twofactor);
|
|
|
|
// Check if code was valid
|
|
if (delta === null) {
|
|
return dynamicResponse(req, res, 403, 'message', {
|
|
'title': __('Forbidden'),
|
|
'message': __('Incorrect 2FA code'),
|
|
'redirect': '/twofactor.html',
|
|
});
|
|
}
|
|
redis.del(`twofactor_tempsecret:${username}`);
|
|
|
|
// Successfully enabled 2FA
|
|
await Accounts.updateTwofactor(username, tempSecret);
|
|
|
|
// Logout all sessions, 2FA now required
|
|
await Promise.all([
|
|
req.session.destroy(),
|
|
redis.del(`users:${username}`),
|
|
redis.deletePattern(`sess:*:${username}`),
|
|
]);
|
|
|
|
return dynamicResponse(req, res, 200, 'message', {
|
|
'title': __('Success'),
|
|
'message': __('Two factor authentication enabled successfully'),
|
|
'redirect': '/login.html',
|
|
});
|
|
|
|
};
|
|
|