@opengis/fastify-table 2.5.53 → 3.0.0-beta.0

package/dist/server/routes/access/schema.js

@@ -1,127 +0,0 @@
-export default null;
-export { accessGroupSchema, accessUserSchema, accessGroupPostSchema, accessInterfaceSchema, accessUserPostSchema, };
-const accessGroupSchema = {
-    params: {
-        type: "object",
-        properties: {
-            id: { type: "string", pattern: "^([\\d\\w._-]+)$" },
-        },
-        required: ["id"],
-    },
-};
-const accessUserSchema = {
-    params: {
-        type: "object",
-        properties: {
-            id: { type: "string", pattern: "^([\\d\\w._-]+)$" },
-        },
-        required: ["id"],
-    },
-};
-const accessInterfaceSchema = {
-    params: {
-        type: "object",
-        properties: {
-            name: { type: "string", pattern: "^([\\d\\w._-]+)$" },
-        },
-        required: ["name"],
-    },
-};
-const accessGroupPostSchema = {
-    params: {
-        type: "object",
-        properties: {
-            id: { type: "string", pattern: "^([\\d\\w._-]+)$" },
-        },
-        required: ["id"],
-    },
-    body: {
-        type: "object",
-        properties: {
-            users: {
-                type: "array",
-                items: {
-                    type: "object",
-                    properties: {
-                        id: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                    },
-                },
-            },
-            routes: {
-                type: "array",
-                items: {
-                    type: "object",
-                    properties: {
-                        path: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                        resource: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                        actions: {
-                            type: "array",
-                            items: {
-                                type: "string",
-                                enum: ["read", "create", "update", "delete"],
-                            },
-                        },
-                    },
-                },
-            },
-        },
-    },
-};
-const accessUserPostSchema = {
-    params: {
-        type: "object",
-        properties: {
-            id: { type: "string", pattern: "^([\\d\\w._-]+)$" },
-        },
-        required: ["id"],
-    },
-    body: {
-        type: "object",
-        properties: {
-            users: {
-                type: "array",
-                items: {
-                    type: "object",
-                    properties: {
-                        id: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                    },
-                },
-            },
-            routes: {
-                type: "array",
-                items: {
-                    type: "object",
-                    properties: {
-                        path: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                        resource: {
-                            type: "string",
-                            pattern: "^([\\d\\w._-]+)$",
-                        },
-                        actions: {
-                            type: "array",
-                            items: {
-                                type: "string",
-                                enum: ["read", "create", "update", "delete"],
-                            },
-                        },
-                    },
-                },
-            },
-        },
-    },
-};

package/dist/server/routes/auth/controllers/2factor/providers/totp.d.ts

@@ -1,44 +0,0 @@
-import { ExtendedPG } from "../../../../../types/core.js";
-interface ISecret {
-    uid: string;
-    pg: ExtendedPG;
-}
-interface ICode {
-    uid: string;
-    code: string;
-    pg: ExtendedPG;
-    enable?: boolean;
-}
-declare const enableSecret: ({ uid, pg }: ISecret) => Promise<{
-    rowCount: any;
-}>;
-declare const deleteSecret: ({ uid, pg }: ISecret) => Promise<{
-    rowCount: any;
-}>;
-declare const getSecret: ({ uid, pg }: ISecret) => Promise<{
-    secret: any;
-    enabled: any;
-    recoveryCodes: any;
-}>;
-declare const generate: ({ uid, pg }: ISecret) => Promise<{
-    enabled: any;
-    qr?: undefined;
-    key?: undefined;
-    otp?: undefined;
-    recoveryCodes?: undefined;
-} | {
-    qr: string;
-    key: string;
-    otp: string;
-    recoveryCodes: `${string}-${string}-${string}-${string}-${string}`[];
-    enabled?: undefined;
-}>;
-declare const verify: ({ uid, code: token, pg }: ICode) => Promise<{
-    enabled: any;
-    recoveryCodes: any;
-}>;
-declare const toggle: ({ uid, code, pg, enable }: ICode) => Promise<any>;
-export { generate, verify, toggle, getSecret, enableSecret, deleteSecret };
-declare const _default: null;
-export default _default;
-//# sourceMappingURL=totp.d.ts.map

package/dist/server/routes/auth/controllers/2factor/providers/totp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../../../../../server/routes/auth/controllers/2factor/providers/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAW1D,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,UAAU,KAAK;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAuBD,QAAA,MAAM,YAAY,GAAU,aAAa,OAAO;;EAQ/C,CAAC;AAEF,QAAA,MAAM,YAAY,GAAU,aAAa,OAAO;;EAQ/C,CAAC;AAEF,QAAA,MAAM,SAAS,GAAU,aAAa,OAAO;;;;EAc5C,CAAC;AAuBF,QAAA,MAAM,QAAQ,GAAU,aAAa,OAAO;;;;;;;;;;;;EA0D3C,CAAC;AAEF,QAAA,MAAM,MAAM,GAAU,0BAA0B,KAAK;;;EAmBpD,CAAC;AAKF,QAAA,MAAM,MAAM,GAAU,2BAA2B,KAAK,iBAqBrD,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;;AAE3E,wBAAoB"}

package/dist/server/routes/auth/controllers/2factor/providers/totp.js

@@ -1,133 +0,0 @@
-import crypto from "node:crypto";
-import qrcode from "qrcode";
-import * as authenticator from "otplib";
-import config from "../../../../../../config.js";
-import { BadRequestError, ForbiddenError } from "../../../../../../errors.js";
-const TYPE = "TOTP";
-// equivalent to otplib@12.0.1 authenticator.keyuri(id,prefix,secret)
-// "otpauth://totp/SOFTPRO:777?secret=secret&period=30&digits=6&algorithm=SHA1&issuer=SOFTPRO"
-const getOTP = (id, secret) => {
-    const issuer = config.auth?.["2fa"]?.prefix || "SOFTPRO";
-    return `otpauth://totp/${issuer}:${encodeURIComponent(id.toString())}?secret=${secret}&period=30&digits=6&algorithm=SHA1&issuer=${encodeURIComponent(issuer)}`;
-};
-const enableSecret = async ({ uid, pg }) => {
-    const rowCount = await pg
-        .query("update admin.users_social_auth set enabled=true where uid = $1 and social_auth_type = $2", [uid, TYPE])
-        .then((r) => r.rowCount);
-    return { rowCount };
-};
-const deleteSecret = async ({ uid, pg }) => {
-    const rowCount = await pg
-        .query("delete from admin.users_social_auth where uid=$1 and social_auth_type = $2", [uid, TYPE])
-        .then((r) => r.rowCount);
-    return { rowCount };
-};
-const getSecret = async ({ uid, pg }) => {
-    const { social_auth_code: secret, enabled, recoveryCodes, } = await pg
-        .query(`select social_auth_code, enabled, social_auth_obj->'codesArray' as "recoveryCodes"
-    from admin.users_social_auth 
-    where uid = $1 and social_auth_type = $2`, [uid, TYPE])
-        .then((r) => r.rows?.[0] || {});
-    return { secret, enabled, recoveryCodes };
-};
-const addSecret = async ({ uid, secret, pg, recoveryCodes, otp }) => {
-    await pg.query(`insert into admin.users_social_auth(uid, social_auth_code, social_auth_type, social_auth_obj, social_auth_url, enabled)
-    values($1, $2, $3, $4::json, $5, false)`, [uid, secret, TYPE, { codesArray: recoveryCodes }, otp]);
-};
-const updateSecret = async ({ uid, pg, secret, recoveryCodes, otp }) => {
-    const result = await pg
-        .query(`update admin.users_social_auth
-    set social_auth_code=$3, social_auth_obj=$4::json, social_auth_url=$5
-    where uid = $1 and social_auth_type = $2`, [uid, TYPE, secret, { codesArray: recoveryCodes }, otp])
-        .then((r) => r.rows?.[0] || {});
-    return result;
-};
-// return a new secret until it's enabled
-const generate = async ({ uid, pg }) => {
-    const { enabled } = await getSecret({ uid, pg });
-    if (enabled)
-        return { enabled };
-    const secret = authenticator.generateSecret();
-    // console.log('secret', secret, 'length', secret.length, 'token', authenticator.generate(secret), 'verified', authenticator.verify({ secret, token: authenticator.generate(secret) }) );
-    const recoveryCodes = [
-        crypto.randomUUID(),
-        crypto.randomUUID(),
-        crypto.randomUUID(),
-        crypto.randomUUID(),
-    ];
-    const userData = await pg
-        .query(`select social_auth_id as code, coalesce(login,email) as login, email from admin.users where uid=$1`, [uid])
-        .then((r) => r.rows?.[0] || {});
-    const { sufix } = config.auth?.["2fa"] || {};
-    if (sufix && !userData[sufix]) {
-        console.warn("⚠️ 2fa prefix not found at userData");
-    }
-    const otp = getOTP((sufix ? userData[sufix] : null) || userData.login || userData.code || uid, secret);
-    const qrCodeAsImageSource = await qrcode.toDataURL(otp);
-    // no entry in db
-    if (enabled === undefined) {
-        await addSecret({
-            uid,
-            secret,
-            pg,
-            recoveryCodes,
-            otp,
-        });
-    }
-    else {
-        await updateSecret({
-            uid,
-            secret,
-            pg,
-            recoveryCodes,
-            otp,
-        });
-    }
-    return {
-        qr: qrCodeAsImageSource,
-        key: secret,
-        otp,
-        recoveryCodes,
-    };
-};
-const verify = async ({ uid, code: token, pg }) => {
-    const { secret, enabled, recoveryCodes } = await getSecret({ uid, pg });
-    // console.debug('secret', secret, 'enabled', enabled, 'verification', 'token', authenticator.generate(secret), authenticator.verify({ token: authenticator.generate(secret), secret }));
-    if (!secret) {
-        throw new BadRequestError("Включіть двофакторну аутентифікацію");
-    }
-    const { valid } = await authenticator.verify({ token, secret });
-    const isValid = valid ||
-        recoveryCodes.reduce((result, recoveryCode) => result || recoveryCode === token, false);
-    if (!isValid) {
-        throw new ForbiddenError("Невірний код");
-    }
-    return { enabled, recoveryCodes };
-};
-// checks if code is correct
-// delete an entry from db to disable 2fa
-// set the enable flag in db to activate 2fa
-const toggle = async ({ uid, code, pg, enable }) => {
-    const { enabled, recoveryCodes } = await verify({
-        uid,
-        code,
-        pg,
-    });
-    if (enabled === enable) {
-        throw new BadRequestError("Вже знаходиться у даному стані");
-    }
-    if (enable) {
-        await enableSecret({
-            uid,
-            pg,
-        });
-        return recoveryCodes;
-    }
-    await deleteSecret({
-        uid,
-        pg,
-    });
-    return "Відключено";
-};
-export { generate, verify, toggle, getSecret, enableSecret, deleteSecret };
-export default null;

package/dist/server/routes/auth/controllers/2factor/qrcode.d.ts

@@ -1,4 +0,0 @@
-import { FastifyReply } from "fastify";
-import { ExtendedRequest } from "../../../../types/core.js";
-export default function qrCode(req: ExtendedRequest, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=qrcode.d.ts.map

package/dist/server/routes/auth/controllers/2factor/qrcode.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"qrcode.d.ts","sourceRoot":"","sources":["../../../../../../server/routes/auth/controllers/2factor/qrcode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAkB5D,wBAA8B,MAAM,CAClC,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,YAAY,kBAiDpB"}

package/dist/server/routes/auth/controllers/2factor/qrcode.js

@@ -1,42 +0,0 @@
-import qr from "qrcode";
-import config from "../../../../../config.js";
-import pgClients from "../../../../plugins/pg/pgClients.js";
-import { getSecret, generate } from "./providers/totp.js";
-import { BadRequestError, NotFoundError, UnauthorizedError, } from "../../../../../errors.js";
-const headers = {
-    "Content-Type": "image/png",
-};
-export default async function qrCode(req, reply) {
-    const { pg = pgClients.client } = req;
-    const { uid } = req.user || {};
-    if (!uid) {
-        throw UnauthorizedError("unauthorized");
-    }
-    if (!pg || !pg?.pk?.["admin.users"] || !pg?.pk?.["admin.users_social_auth"]) {
-        throw BadRequestError("db connection / users/users_social_auth tables are required");
-    }
-    const userExists = await pg
-        .query(`select uid from admin.users where uid=$1`, [uid])
-        .then((el) => el.rows?.[0]?.uid);
-    if (!userExists) {
-        throw NotFoundError("invalid user");
-    }
-    const { enabled, secret } = await getSecret({ pg, uid });
-    const { otp } = secret
-        ? await pg
-            .query(`select social_auth_url as otp from admin.users_social_auth 
-          where uid=$1 and social_auth_type=$2`, [uid, "TOTP"])
-            ?.then((el) => el.rows?.[0] || {})
-        : await generate({ uid, pg });
-    const base64 = otp ? await qr.toDataURL(otp) : undefined;
-    if (enabled && !config.local && !config.debug) {
-        throw BadRequestError("2factor already enabled");
-    }
-    if (!otp || !base64) {
-        throw Error("generation error");
-    }
-    // substring to exclude data:image/png;base64,
-    return reply
-        .headers(headers)
-        .send(Buffer.from(base64.substring(22), "base64"));
-}

package/dist/server/routes/auth/controllers/2factor/recovery.d.ts

@@ -1,20 +0,0 @@
-import { FastifyReply } from "fastify";
-/**
- * Відновлення при втраті доступу до застосунку двохфакторної авторизації
- *
- * @method GET|POST
- * @summary Відновлення при втраті доступу до застосунку двохфакторної авторизації
- * @priority 3
- * @alias recovery
- * @type api
- * @tag auth
- * @requires 2fa
- * @param {Object} body.code Код, який використовується для перевірки у заданому провайдері двофакторної авторизації
- * @errors 500
- * @returns {Number} status Номер помилки
- * @returns {String|Object} error Опис помилки
- * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
- * @returns {String} redirect Шлях до переадресації
- */
-export default function recovery(req: any, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=recovery.d.ts.map

package/dist/server/routes/auth/controllers/2factor/recovery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../../../server/routes/auth/controllers/2factor/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAsBvC;;;;;;;;;;;;;;;;GAgBG;AAEH,wBAA8B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBA+EnE"}

package/dist/server/routes/auth/controllers/2factor/recovery.js

@@ -1,82 +0,0 @@
-import path from "node:path";
-import { fileURLToPath } from "url";
-import { readFile } from "node:fs/promises";
-import config from "../../../../../config.js";
-import getTemplate from "../../../../plugins/table/funcs/getTemplate.js";
-import pgClients from "../../../../plugins/pg/pgClients.js";
-import { handlebars } from "../../../../helpers/index.js";
-import { verify, deleteSecret } from "./providers/totp.js";
-import sendNotification from "../../../../plugins/auth/funcs/sendNotification.js";
-import { BadRequestError, NotFoundError, UnauthorizedError, } from "../../../../../errors.js";
-const template = "recovery-codes-email-template";
-const dirname = path.dirname(fileURLToPath(import.meta.url));
-/**
- * Відновлення при втраті доступу до застосунку двохфакторної авторизації
- *
- * @method GET|POST
- * @summary Відновлення при втраті доступу до застосунку двохфакторної авторизації
- * @priority 3
- * @alias recovery
- * @type api
- * @tag auth
- * @requires 2fa
- * @param {Object} body.code Код, який використовується для перевірки у заданому провайдері двофакторної авторизації
- * @errors 500
- * @returns {Number} status Номер помилки
- * @returns {String|Object} error Опис помилки
- * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
- * @returns {String} redirect Шлях до переадресації
- */
-export default async function recovery(req, reply) {
-    const { pg = pgClients.client, user, body = {}, method } = req;
-    if (!user?.uid) {
-        throw UnauthorizedError("unauthorized");
-    }
-    if (!user.twofa) {
-        throw BadRequestError("2fa not enabled");
-    }
-    if (!config.pg) {
-        throw Error("empty pg");
-    }
-    const { code } = body;
-    const { uid, email } = user || {};
-    if (!code) {
-        if (!email) {
-            throw NotFoundError("user recovery email not set");
-        }
-        const customPt = await getTemplate("pt", template);
-        const pt = customPt ||
-            (await readFile(path.join(dirname, `../../../../../dist/server/templates/pt/${template}.hbs`), "utf8"));
-        const recoveryCodes = await pg
-            .query(`select social_auth_obj->'codesArray' as "recoveryCodes" from admin.users_social_auth 
-      where uid = $1 and social_auth_type = $2`, [uid, "TOTP"])
-            .then((el) => el.rows?.[0]?.recoveryCodes || []);
-        if (!recoveryCodes?.length) {
-            throw NotFoundError("user recovery code not found");
-        }
-        const html = await handlebars.compile(pt)({
-            recoveryCodes: [recoveryCodes[0]],
-            domain: `${req.protocol || "https"}://${req.hostname}`,
-        });
-        await sendNotification({
-            pg,
-            to: email,
-            template: html,
-            title: `Recovery code for ${req.hostname} 2-factor authentication`,
-            nocache: config.local || config.debug || user?.user_type?.includes?.("admin"),
-        });
-        if (method === "POST") {
-            return reply.status(200).send({ redirectUrl: "/2factor?recovery=1" });
-        }
-        return reply.redirect("/2factor?recovery=1");
-    }
-    // validate recovery code
-    await verify({ uid, code, pg });
-    // delete old secret
-    await deleteSecret({ pg, uid });
-    const redirectUrl = config.auth?.link?.["2fa"]?.login || "/2factor";
-    if (method === "POST") {
-        return reply.status(200).send({ redirectUrl });
-    }
-    return reply.redirect(redirectUrl);
-}

package/dist/server/routes/auth/controllers/2factor/reset.d.ts

@@ -1,3 +0,0 @@
-import { FastifyReply } from "fastify";
-export default function reset(req: any, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=reset.d.ts.map

package/dist/server/routes/auth/controllers/2factor/reset.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../../../../../server/routes/auth/controllers/2factor/reset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQvC,wBAA8B,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBAchE"}

package/dist/server/routes/auth/controllers/2factor/reset.js

@@ -1,15 +0,0 @@
-import config from "../../../../../config.js";
-import pgClients from "../../../../plugins/pg/pgClients.js";
-import { deleteSecret } from "./providers/totp.js";
-import { BadRequestError } from "../../../../../errors.js";
-export default async function reset(req, reply) {
-    const { pg = pgClients.client, query } = req;
-    if (!query?.uid) {
-        throw BadRequestError("not enough query params: uid");
-    }
-    if (!config.pg) {
-        throw Error("empty pg");
-    }
-    await deleteSecret({ pg, uid: query.uid });
-    return reply.status(200).send({ ok: true });
-}

package/dist/server/routes/auth/controllers/2factor/verify.d.ts

@@ -1,20 +0,0 @@
-import { FastifyReply } from "fastify";
-/**
- * Перевірка двохфакторної авторизації для користувача
- *
- * @method POST
- * @summary Перевірка двохфакторної авторизації
- * @priority 3
- * @alias verify
- * @type api
- * @tag auth
- * @requires 2fa
- * @param {Object} code Код, який використовується для перевірки у заданому провайдері двофакторної авторизації
- * @errors 500
- * @returns {Number} status Номер помилки
- * @returns {String|Object} error Опис помилки
- * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
- * @returns {String} redirect Шлях до переадресації
- */
-export default function verifyFunction(req: any, reply: FastifyReply): Promise<never>;
-//# sourceMappingURL=verify.d.ts.map

package/dist/server/routes/auth/controllers/2factor/verify.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../../server/routes/auth/controllers/2factor/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA2BvC;;;;;;;;;;;;;;;;GAgBG;AAEH,wBAA8B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,kBA6DzE"}

package/dist/server/routes/auth/controllers/2factor/verify.js

@@ -1,75 +0,0 @@
-import path from "node:path";
-import { fileURLToPath } from "url";
-import { existsSync, readFileSync } from "node:fs";
-import config from "../../../../../config.js";
-import getTemplate from "../../../../plugins/table/funcs/getTemplate.js";
-import pgClients from "../../../../plugins/pg/pgClients.js";
-import { handlebars } from "../../../../helpers/index.js";
-import { verify, enableSecret } from "./providers/totp.js";
-import sendNotification from "../../../../plugins/auth/funcs/sendNotification.js";
-import { BadRequestError } from "../../../../../errors.js";
-const template = "recovery-codes-email-template";
-const dirname = path.dirname(fileURLToPath(import.meta.url));
-const defaultPt = existsSync(path.join(dirname, `../../../../templates/pt/${template}.hbs`))
-    ? readFileSync(path.join(dirname, `../../../../templates/pt/${template}.hbs`), "utf8")
-    : "Recovery codes: {{{code}}}";
-/**
- * Перевірка двохфакторної авторизації для користувача
- *
- * @method POST
- * @summary Перевірка двохфакторної авторизації
- * @priority 3
- * @alias verify
- * @type api
- * @tag auth
- * @requires 2fa
- * @param {Object} code Код, який використовується для перевірки у заданому провайдері двофакторної авторизації
- * @errors 500
- * @returns {Number} status Номер помилки
- * @returns {String|Object} error Опис помилки
- * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
- * @returns {String} redirect Шлях до переадресації
- */
-export default async function verifyFunction(req, reply) {
-    const code = req.method === "POST" ? req.body?.code : req.query?.code;
-    const { pg = pgClients.client, user = {} } = req;
-    const { uid, twofa, email } = user || {};
-    if (!twofa) {
-        throw BadRequestError("2fa not enabled");
-    }
-    if (!config.pg) {
-        throw Error("empty pg");
-    }
-    if (!code) {
-        throw BadRequestError(`not enough ${req.method === "POST" ? "body" : "query"} params: code`);
-    }
-    const { enabled } = await verify({ uid, code, pg });
-    await enableSecret({ pg, uid });
-    req.session.secondFactorPassed = true;
-    if (!enabled && email) {
-        const { recoveryCodes } = await pg
-            .query(`select social_auth_obj->'codesArray' as "recoveryCodes" 
-      from admin.users_social_auth where uid=$1 and social_auth_type='TOTP'`, [uid])
-            ?.then((el) => el.rows?.[0] || {});
-        const customPt = await getTemplate("pt", template);
-        const pt = customPt || defaultPt;
-        const html = await handlebars.compile(pt)({
-            recoveryCodes,
-            code: recoveryCodes,
-            domain: `${req.protocol || "https"}://${req.hostname}`,
-        });
-        await sendNotification({
-            pg,
-            to: email,
-            template: html,
-            title: `Recovery codes for ${req.hostname} 2-factor authentication`,
-            nocache: config.local || config.debug || user?.user_type?.includes?.("admin"),
-        });
-    }
-    const redirectUrl = req.headers?.referer?.match?.(/[?&]redirect=([^&]+)/)?.[1] || "/";
-    const safeRedirectUrl = redirectUrl.startsWith("/") ? redirectUrl : "/";
-    if (req.method === "POST") {
-        return reply.status(200).send({ redirectUrl: safeRedirectUrl });
-    }
-    return reply.redirect(safeRedirectUrl);
-}

package/dist/server/routes/auth/controllers/core/getUserInfo.d.ts

@@ -1,2 +0,0 @@
-export default function getUserInfo(req: any): Promise<{}>;
-//# sourceMappingURL=getUserInfo.d.ts.map

package/dist/server/routes/auth/controllers/core/getUserInfo.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getUserInfo.d.ts","sourceRoot":"","sources":["../../../../../../server/routes/auth/controllers/core/getUserInfo.ts"],"names":[],"mappings":"AAoCA,wBAA8B,WAAW,CAAC,GAAG,EAAE,GAAG,eAkFjD"}