import { comparePassword } from "../../../../../misc/password.js";
import define from "../../../define.js";
import { UserProfiles, UserSecurityKeys, Users } from "../../../../../models/index.js";
import { publishMainStream } from "../../../../../services/stream.js";
export const meta = {
    requireCredential: true,
    secure: true
};
export const paramDef = {
    type: "object",
    properties: {
        password: {
            type: "string"
        },
        credentialId: {
            type: "string"
        }
    },
    required: [
        "password",
        "credentialId"
    ]
};
export default define(meta, paramDef, async (ps, user)=>{
    const profile = await UserProfiles.findOneByOrFail({
        userId: user.id
    });
    // Compare password
    const same = await comparePassword(ps.password, profile.password);
    if (!same) {
        throw new Error("incorrect password");
    }
    // Make sure we only delete the user's own creds
    await UserSecurityKeys.delete({
        userId: user.id,
        id: ps.credentialId
    });
    // 使われているキーがなくなったらパスワードレスログインをやめる
    const keyCount = await UserSecurityKeys.count({
        where: {
            userId: user.id
        },
        select: {
            id: true,
            name: true,
            lastUsed: true
        }
    });
    if (keyCount === 0) {
        await UserProfiles.update(me.id, {
            usePasswordLessLogin: false
        });
    }
    // Publish meUpdated event
    publishMainStream(user.id, "meUpdated", await Users.pack(user.id, user, {
        detail: true,
        includeSecrets: true
    }));
    return {};
});