rudeshark.net/src/server/api/endpoints/i/2fa/unregister.ts
2018-07-06 02:58:29 +09:00

26 lines
616 B
TypeScript

import $ from 'cafy';
import * as bcrypt from 'bcryptjs';
import User, { ILocalUser } from '../../../../../models/user';
export default async (params: any, user: ILocalUser) => new Promise(async (res, rej) => {
// Get 'password' parameter
const [password, passwordErr] = $.str.get(params.password);
if (passwordErr) return rej('invalid password param');
// Compare password
const same = await bcrypt.compare(password, user.password);
if (!same) {
return rej('incorrect password');
}
await User.update(user._id, {
$set: {
'twoFactorSecret': null,
'twoFactorEnabled': false
}
});
res();
});