Fixed 267U.pre2

2026-07-26 18:25:37 +09:00
parent 50bfaeafdf
commit 317d00a284
1286 changed files with 80222 additions and 1 deletions
@@ -0,0 +1,60 @@
+import { comparePassword } from "../../../../../misc/password.js";
+import define from "../../../define.js";
+import { UserProfiles, UserSecurityKeys, Users } from "../../../../../models/index.js";
+import { publishMainStream } from "../../../../../services/stream.js";
+export const meta = {
+    requireCredential: true,
+    secure: true
+};
+export const paramDef = {
+    type: "object",
+    properties: {
+        password: {
+            type: "string"
+        },
+        credentialId: {
+            type: "string"
+        }
+    },
+    required: [
+        "password",
+        "credentialId"
+    ]
+};
+export default define(meta, paramDef, async (ps, user)=>{
+    const profile = await UserProfiles.findOneByOrFail({
+        userId: user.id
+    });
+    // Compare password
+    const same = await comparePassword(ps.password, profile.password);
+    if (!same) {
+        throw new Error("incorrect password");
+    }
+    // Make sure we only delete the user's own creds
+    await UserSecurityKeys.delete({
+        userId: user.id,
+        id: ps.credentialId
+    });
+    // 使われているキーがなくなったらパスワードレスログインをやめる
+    const keyCount = await UserSecurityKeys.count({
+        where: {
+            userId: user.id
+        },
+        select: {
+            id: true,
+            name: true,
+            lastUsed: true
+        }
+    });
+    if (keyCount === 0) {
+        await UserProfiles.update(me.id, {
+            usePasswordLessLogin: false
+        });
+    }
+    // Publish meUpdated event
+    publishMainStream(user.id, "meUpdated", await Users.pack(user.id, user, {
+        detail: true,
+        includeSecrets: true
+    }));
+    return {};
+});