Fixed 267U.pre2

2026-07-26 18:25:37 +09:00
parent 50bfaeafdf
commit 317d00a284
1286 changed files with 80222 additions and 1 deletions
@@ -0,0 +1,46 @@
+import { publishMainStream } from "../../../../../services/stream.js";
+import * as OTPAuth from "otpauth";
+import define from "../../../define.js";
+import { Users, UserProfiles } from "../../../../../models/index.js";
+export const meta = {
+    requireCredential: true,
+    secure: true
+};
+export const paramDef = {
+    type: "object",
+    properties: {
+        token: {
+            type: "string"
+        }
+    },
+    required: [
+        "token"
+    ]
+};
+export default define(meta, paramDef, async (ps, user)=>{
+    const token = ps.token.replace(/\s/g, "");
+    const profile = await UserProfiles.findOneByOrFail({
+        userId: user.id
+    });
+    if (profile.twoFactorTempSecret == null) {
+        throw new Error("二段階認証の設定が開始されていません");
+    }
+    const delta = OTPAuth.TOTP.validate({
+        secret: OTPAuth.Secret.fromBase32(profile.twoFactorTempSecret),
+        digits: 6,
+        token,
+        window: 1
+    });
+    if (delta === null) {
+        throw new Error("not verified");
+    }
+    await UserProfiles.update(user.id, {
+        twoFactorSecret: profile.twoFactorTempSecret,
+        twoFactorEnabled: true
+    });
+    const iObj = await Users.pack(user.id, user, {
+        detail: true,
+        includeSecrets: true
+    });
+    publishMainStream(user.id, "meUpdated", iObj);
+});