61 lines
1.6 KiB
JavaScript
61 lines
1.6 KiB
JavaScript
import { comparePassword } from "../../../../../misc/password.js";
|
|
import define from "../../../define.js";
|
|
import { UserProfiles, UserSecurityKeys, Users } from "../../../../../models/index.js";
|
|
import { publishMainStream } from "../../../../../services/stream.js";
|
|
export const meta = {
|
|
requireCredential: true,
|
|
secure: true
|
|
};
|
|
export const paramDef = {
|
|
type: "object",
|
|
properties: {
|
|
password: {
|
|
type: "string"
|
|
},
|
|
credentialId: {
|
|
type: "string"
|
|
}
|
|
},
|
|
required: [
|
|
"password",
|
|
"credentialId"
|
|
]
|
|
};
|
|
export default define(meta, paramDef, async (ps, user)=>{
|
|
const profile = await UserProfiles.findOneByOrFail({
|
|
userId: user.id
|
|
});
|
|
// Compare password
|
|
const same = await comparePassword(ps.password, profile.password);
|
|
if (!same) {
|
|
throw new Error("incorrect password");
|
|
}
|
|
// Make sure we only delete the user's own creds
|
|
await UserSecurityKeys.delete({
|
|
userId: user.id,
|
|
id: ps.credentialId
|
|
});
|
|
// 使われているキーがなくなったらパスワードレスログインをやめる
|
|
const keyCount = await UserSecurityKeys.count({
|
|
where: {
|
|
userId: user.id
|
|
},
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
lastUsed: true
|
|
}
|
|
});
|
|
if (keyCount === 0) {
|
|
await UserProfiles.update(me.id, {
|
|
usePasswordLessLogin: false
|
|
});
|
|
}
|
|
// Publish meUpdated event
|
|
publishMainStream(user.id, "meUpdated", await Users.pack(user.id, user, {
|
|
detail: true,
|
|
includeSecrets: true
|
|
}));
|
|
return {};
|
|
});
|