summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/api/endpoints
diff options
context:
space:
mode:
authorsyuilo <Syuilotan@yahoo.co.jp>2023-08-28 18:25:31 +0900
committerGitHub <noreply@github.com>2023-08-28 18:25:31 +0900
commit257c4fccf1193f111686f039e06cc4d00b9dce37 (patch)
treeb502d371495bc5a6c18349eb9fd9089cee4f4fa0 /packages/backend/src/server/api/endpoints
parentMerge branch 'develop' of https://github.com/misskey-dev/misskey into develop (diff)
downloadsharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.tar.gz
sharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.tar.bz2
sharkey-257c4fccf1193f111686f039e06cc4d00b9dce37.zip
feat: Refine 2fa (#11766)
* wip * Update 2fa.qrdialog.vue * Update 2fa.vue * Update CHANGELOG.md * tweak * :v:
Diffstat (limited to 'packages/backend/src/server/api/endpoints')
-rw-r--r--packages/backend/src/server/api/endpoints/i/2fa/done.ts7
-rw-r--r--packages/backend/src/server/api/endpoints/i/2fa/unregister.ts1
2 files changed, 8 insertions, 0 deletions
diff --git a/packages/backend/src/server/api/endpoints/i/2fa/done.ts b/packages/backend/src/server/api/endpoints/i/2fa/done.ts
index e508a28cc0..2d1457b9b5 100644
--- a/packages/backend/src/server/api/endpoints/i/2fa/done.ts
+++ b/packages/backend/src/server/api/endpoints/i/2fa/done.ts
@@ -54,8 +54,11 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
throw new Error('not verified');
}
+ const backupCodes = Array.from({ length: 5 }, () => new OTPAuth.Secret().base32);
+
await this.userProfilesRepository.update(me.id, {
twoFactorSecret: profile.twoFactorTempSecret,
+ twoFactorBackupSecret: backupCodes,
twoFactorEnabled: true,
});
@@ -64,6 +67,10 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
detail: true,
includeSecrets: true,
}));
+
+ return {
+ backupCodes: backupCodes,
+ };
});
}
}
diff --git a/packages/backend/src/server/api/endpoints/i/2fa/unregister.ts b/packages/backend/src/server/api/endpoints/i/2fa/unregister.ts
index ee58fb2af4..e017e2ef53 100644
--- a/packages/backend/src/server/api/endpoints/i/2fa/unregister.ts
+++ b/packages/backend/src/server/api/endpoints/i/2fa/unregister.ts
@@ -46,6 +46,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { // eslint-
await this.userProfilesRepository.update(me.id, {
twoFactorSecret: null,
+ twoFactorBackupSecret: null,
twoFactorEnabled: false,
usePasswordLessLogin: false,
});