@riocrypto/common-server 1.0.2703 → 1.0.2707

package/build/clients/cluster-client.d.ts

@@ -92,6 +92,10 @@ declare class ClusterClient {
         hasAuthenticatorEnabled: boolean;
     }>;
     verifyCode(phoneNumber: string, code?: string, authenticatorCode?: string): Promise<void>;
+    sendEmailVerificationCode(email: string): Promise<{
+        hasAuthenticatorEnabled: boolean;
+    }>;
+    verifyEmailCode(email: string, code: string): Promise<void>;
     sendVerificationEmail(userId: string, country?: Country): Promise<void>;
     registerFXTrade(orderId: string, provider: FXProvider, amount: number, price: number): Promise<void>;
     generateInvoice(orderId: string): Promise<void>;

package/build/clients/cluster-client.js

@@ -302,6 +302,25 @@ class ClusterClient {
             });
         });
     }
+    sendEmailVerificationCode(email) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.axios.post(`${this.baseUrl}/api/auth/email/send-verification`, { email }, {
+                headers: {
+                    "x-cluster-api-key": this.clusterApiKey,
+                },
+            });
+            return response.data;
+        });
+    }
+    verifyEmailCode(email, code) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.axios.post(`${this.baseUrl}/api/auth/email/verify`, { email, code }, {
+                headers: {
+                    "x-cluster-api-key": this.clusterApiKey,
+                },
+            });
+        });
+    }
     sendVerificationEmail(userId, country) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.axios.post(`${this.baseUrl}/api/kyc/email`, {

package/build/middlewares/authorize.js

@@ -13,6 +13,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authorize = void 0;
+const crypto_1 = __importDefault(require("crypto"));
 const user_1 = require("../models/user");
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const common_1 = require("@riocrypto/common");
@@ -33,7 +34,8 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                 if (!CLUSTER_API_KEY) {
                     throw new common_1.SecretManagerError();
                 }
-                if (apiKey === CLUSTER_API_KEY) {
+                if (apiKey.length === CLUSTER_API_KEY.length &&
+                    crypto_1.default.timingSafeEqual(Buffer.from(apiKey), Buffer.from(CLUSTER_API_KEY))) {
                     req.validClusterApiKey = true;
                 }
             }))());
@@ -48,7 +50,8 @@ const authorize = (req, res, next, mongoose, authorizationTypes) => __awaiter(vo
                 if (!GENESIS_ADMIN_KEY) {
                     throw new common_1.SecretManagerError();
                 }
-                if (apiKey === GENESIS_ADMIN_KEY) {
+                if (apiKey.length === GENESIS_ADMIN_KEY.length &&
+                    crypto_1.default.timingSafeEqual(Buffer.from(apiKey), Buffer.from(GENESIS_ADMIN_KEY))) {
                     req.validGenisisAdminKey = true;
                 }
             }))());

package/build/models/auth.d.ts

@@ -33,6 +33,8 @@ interface AuthAttrs {
     emailVerificationCode?: string;
     emailVerificationExpires?: Date;
     emailVerificationAttempts?: number;
+    securityAnswerAttempts?: number;
+    securityAnswerLockedUntil?: Date;
     authMethod?: AuthMethod;
     twoFactorConfigured?: boolean;
     twoFactorMethod?: string;
@@ -70,6 +72,8 @@ interface AuthDoc extends Document {
     emailVerificationCode?: string;
     emailVerificationExpires?: Date;
     emailVerificationAttempts?: number;
+    securityAnswerAttempts?: number;
+    securityAnswerLockedUntil?: Date;
     authMethod?: AuthMethod;
     twoFactorConfigured?: boolean;
     twoFactorMethod?: string;

package/build/models/auth.js

@@ -125,6 +125,13 @@ const buildAuth = (mongoose) => {
             type: Number,
             default: 0,
         },
+        securityAnswerAttempts: {
+            type: Number,
+            default: 0,
+        },
+        securityAnswerLockedUntil: {
+            type: Date,
+        },
         authMethod: {
             type: String,
         },
@@ -151,6 +158,8 @@ const buildAuth = (mongoose) => {
                 delete ret.emailVerificationCode;
                 delete ret.emailVerificationExpires;
                 delete ret.emailVerificationAttempts;
+                delete ret.securityAnswerAttempts;
+                delete ret.securityAnswerLockedUntil;
                 for (let apiKey of ret.apiKeys) {
                     delete apiKey.value;
                 }

package/build/models/telegram-session.d.ts

@@ -10,6 +10,7 @@ interface TelegramSessionAttrs {
     state: string;
     authId?: string;
     hasAuthenticatorEnabled?: boolean;
+    isEmailAuth?: boolean;
     quoteInputs?: {
         fiat?: Fiat;
         crypto?: Crypto;
@@ -38,6 +39,7 @@ interface TelegramSessionDoc extends mongoose.Document {
     state: string;
     authId?: string;
     hasAuthenticatorEnabled?: boolean;
+    isEmailAuth?: boolean;
     quoteInputs?: {
         fiat?: Fiat;
         crypto?: Crypto;

package/build/models/telegram-session.js

@@ -20,6 +20,9 @@ const buildTelegramSession = (mongoose) => {
         hasAuthenticatorEnabled: {
             type: Boolean,
         },
+        isEmailAuth: {
+            type: Boolean,
+        },
         telegramUsername: {
             type: String,
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.2703",
+  "version": "1.0.2707",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",