summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/api/SigninApiService.ts
diff options
context:
space:
mode:
authorsyuilo <Syuilotan@yahoo.co.jp>2023-08-28 18:25:31 +0900
committerGitHub <noreply@github.com>2023-08-28 18:25:31 +0900
commit257c4fccf1193f111686f039e06cc4d00b9dce37 (patch)
treeb502d371495bc5a6c18349eb9fd9089cee4f4fa0 /packages/backend/src/server/api/SigninApiService.ts
parentMerge branch 'develop' of https://github.com/misskey-dev/misskey into develop (diff)
downloadsharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.tar.gz
sharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.tar.bz2
sharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.zip
feat: Refine 2fa (#11766)
* wip * Update 2fa.qrdialog.vue * Update 2fa.vue * Update CHANGELOG.md * tweak * :v:
Diffstat (limited to 'packages/backend/src/server/api/SigninApiService.ts')
-rw-r--r--packages/backend/src/server/api/SigninApiService.ts7
1 files changed, 7 insertions, 0 deletions
diff --git a/packages/backend/src/server/api/SigninApiService.ts b/packages/backend/src/server/api/SigninApiService.ts
index d68b2617e3..58a5cca4fc 100644
--- a/packages/backend/src/server/api/SigninApiService.ts
+++ b/packages/backend/src/server/api/SigninApiService.ts
@@ -160,6 +160,13 @@ export class SigninApiService {
});
}
+ if (profile.twoFactorBackupSecret?.includes(token)) {
+ await this.userProfilesRepository.update({ userId: profile.userId }, {
+ twoFactorBackupSecret: profile.twoFactorBackupSecret.filter((secret) => secret !== token),
+ });
+ return this.signinService.signin(request, reply, user);
+ }
+
const delta = OTPAuth.TOTP.validate({
secret: OTPAuth.Secret.fromBase32(profile.twoFactorSecret!),
digits: 6,