Fixed 267U.pre2

2026-07-26 18:25:37 +09:00
parent 50bfaeafdf
commit 317d00a284
1286 changed files with 80222 additions and 1 deletions
@@ -0,0 +1,65 @@
+import rndstr from "rndstr";
+import { IsNull } from "typeorm";
+import config from "../../../config/index.js";
+import { Users, UserProfiles, PasswordResetRequests } from "../../../models/index.js";
+import { sendEmail } from "../../../services/send-email.js";
+import { genId } from "../../../misc/gen-id.js";
+import define from "../define.js";
+import { HOUR } from "../../../const.js";
+export const meta = {
+    tags: [
+        "reset password"
+    ],
+    requireCredential: false,
+    description: "Request a users password to be reset.",
+    limit: {
+        duration: HOUR,
+        max: 3
+    },
+    errors: {}
+};
+export const paramDef = {
+    type: "object",
+    properties: {
+        username: {
+            type: "string"
+        },
+        email: {
+            type: "string"
+        }
+    },
+    required: [
+        "username",
+        "email"
+    ]
+};
+export default define(meta, paramDef, async (ps)=>{
+    const user = await Users.findOneBy({
+        usernameLower: ps.username.toLowerCase(),
+        host: IsNull()
+    });
+    // 合致するユーザーが登録されていなかったら無視
+    if (user == null) {
+        return;
+    }
+    const profile = await UserProfiles.findOneByOrFail({
+        userId: user.id
+    });
+    // 合致するメアドが登録されていなかったら無視
+    if (profile.email !== ps.email) {
+        return;
+    }
+    // メアドが認証されていなかったら無視
+    if (!profile.emailVerified) {
+        return;
+    }
+    const token = rndstr("a-z0-9", 64);
+    await PasswordResetRequests.insert({
+        id: genId(),
+        createdAt: new Date(),
+        userId: profile.userId,
+        token
+    });
+    const link = `${config.url}/reset-password/${token}`;
+    sendEmail(ps.email, "Password reset requested", `To reset password, please click this link:<br><a href="${link}">${link}</a>`, `To reset password, please click this link: ${link}`);
+});