510de87607
* wip * wip * Update abuse-user-reports.ts * Update files.ts * Update list-remote.ts * Update list.ts * Update show-users.ts * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * wip * Update update.ts * Update search.ts * Update reactions.ts * Update search.ts * wip * wip * wip * wip * Update update.ts * Update relation.ts * Update available.ts * wip * wip * wip * Update packages/backend/src/server/api/define.ts Co-authored-by: Johann150 <johann.galle@protonmail.com> * Update define.ts * Update define.ts * typo * wip * wip * wip * wip * wip * wip * wip * wip * Update update.ts * wip * Update signup.ts * Update call.ts * minimum for limit * type * remove needless annotation * wip * Update signup.ts * wip * wip * fix * Update create.ts Co-authored-by: Johann150 <johann.galle@protonmail.com>
73 lines
1.7 KiB
TypeScript
73 lines
1.7 KiB
TypeScript
import { publishMainStream } from '@/services/stream';
|
|
import define from '../define';
|
|
import rndstr from 'rndstr';
|
|
import config from '@/config/index';
|
|
import ms from 'ms';
|
|
import { Users, UserProfiles, PasswordResetRequests } from '@/models/index';
|
|
import { sendEmail } from '@/services/send-email';
|
|
import { ApiError } from '../error';
|
|
import { genId } from '@/misc/gen-id';
|
|
import { IsNull } from 'typeorm';
|
|
|
|
export const meta = {
|
|
requireCredential: false,
|
|
|
|
limit: {
|
|
duration: ms('1hour'),
|
|
max: 3,
|
|
},
|
|
|
|
errors: {
|
|
|
|
},
|
|
} as const;
|
|
|
|
const paramDef = {
|
|
type: 'object',
|
|
properties: {
|
|
username: { type: 'string' },
|
|
email: { type: 'string' },
|
|
},
|
|
required: ['username', 'email'],
|
|
} as const;
|
|
|
|
// eslint-disable-next-line import/no-default-export
|
|
export default define(meta, paramDef, async (ps) => {
|
|
const user = await Users.findOne({
|
|
usernameLower: ps.username.toLowerCase(),
|
|
host: IsNull(),
|
|
});
|
|
|
|
// 合致するユーザーが登録されていなかったら無視
|
|
if (user == null) {
|
|
return;
|
|
}
|
|
|
|
const profile = await UserProfiles.findOneOrFail(user.id);
|
|
|
|
// 合致するメアドが登録されていなかったら無視
|
|
if (profile.email !== ps.email) {
|
|
return;
|
|
}
|
|
|
|
// メアドが認証されていなかったら無視
|
|
if (!profile.emailVerified) {
|
|
return;
|
|
}
|
|
|
|
const token = rndstr('a-z0-9', 64);
|
|
|
|
await PasswordResetRequests.insert({
|
|
id: genId(),
|
|
createdAt: new Date(),
|
|
userId: profile.userId,
|
|
token,
|
|
});
|
|
|
|
const link = `${config.url}/reset-password/${token}`;
|
|
|
|
sendEmail(ps.email, 'Password reset requested',
|
|
`To reset password, please click this link:<br><a href="${link}">${link}</a>`,
|
|
`To reset password, please click this link: ${link}`);
|
|
});
|