misskey/src/server/api/endpoints/i/2fa/unregister.ts

35 lines
581 B
TypeScript

import $ from 'cafy';
import * as bcrypt from 'bcryptjs';
import User from '../../../../../models/user';
import define from '../../../define';
export const meta = {
requireCredential: true,
secure: true,
params: {
password: {
validator: $.str
}
}
};
export default define(meta, async (ps, user) => {
// Compare password
const same = await bcrypt.compare(ps.password, user.password);
if (!same) {
throw new Error('incorrect password');
}
await User.update(user._id, {
$set: {
'twoFactorSecret': null,
'twoFactorEnabled': false
}
});
return;
});