forked from mirrors/firefish
46af585cf7
Co-authored-by: Tamania <tamaina@hotmail.co.jp> Co-authored-by: Syuilo <syuilotan@yahoo.co.jp>
67 lines
1.4 KiB
TypeScript
67 lines
1.4 KiB
TypeScript
import { comparePassword } from "@/misc/password.js";
|
|
import define from "../../../define.js";
|
|
import { UserProfiles, UserSecurityKeys, Users } from "@/models/index.js";
|
|
import { publishMainStream } from "@/services/stream.js";
|
|
|
|
export const meta = {
|
|
requireCredential: true,
|
|
|
|
secure: true,
|
|
} as const;
|
|
|
|
export const paramDef = {
|
|
type: "object",
|
|
properties: {
|
|
password: { type: "string" },
|
|
credentialId: { type: "string" },
|
|
},
|
|
required: ["password", "credentialId"],
|
|
} as const;
|
|
|
|
export default define(meta, paramDef, async (ps, user) => {
|
|
const profile = await UserProfiles.findOneByOrFail({ userId: user.id });
|
|
|
|
// Compare password
|
|
const same = await comparePassword(ps.password, profile.password!);
|
|
|
|
if (!same) {
|
|
throw new Error("incorrect password");
|
|
}
|
|
|
|
// Make sure we only delete the user's own creds
|
|
await UserSecurityKeys.delete({
|
|
userId: user.id,
|
|
id: ps.credentialId,
|
|
});
|
|
|
|
// 使われているキーがなくなったらパスワードレスログインをやめる
|
|
const keyCount = await UserSecurityKeys.count({
|
|
where: {
|
|
userId: user.id,
|
|
},
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
lastUsed: true,
|
|
},
|
|
});
|
|
|
|
if (keyCount === 0) {
|
|
await UserProfiles.update(me.id, {
|
|
usePasswordLessLogin: false,
|
|
});
|
|
}
|
|
|
|
// Publish meUpdated event
|
|
publishMainStream(
|
|
user.id,
|
|
"meUpdated",
|
|
await Users.pack(user.id, user, {
|
|
detail: true,
|
|
includeSecrets: true,
|
|
}),
|
|
);
|
|
|
|
return {};
|
|
});
|