fiber-firebase-functions 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +74 -0
- package/lib/auth/is_user_disabled.js +37 -36
- package/lib/auth/is_user_disabled.js.map +1 -1
- package/lib/auth/is_user_exists.js +31 -30
- package/lib/auth/is_user_exists.js.map +1 -1
- package/lib/auth/otp.js +92 -25
- package/lib/auth/otp.js.map +1 -1
- package/lib/auth/reset_password.js +327 -0
- package/lib/auth/reset_password.js.map +1 -0
- package/lib/auth/user.js +44 -32
- package/lib/auth/user.js.map +1 -1
- package/lib/common/config.js +9 -5
- package/lib/common/config.js.map +1 -1
- package/lib/common/locale.js +119 -0
- package/lib/common/locale.js.map +1 -0
- package/lib/email/email.js +96 -0
- package/lib/email/email.js.map +1 -0
- package/lib/email/templates/new_user.js +491 -0
- package/lib/email/templates/new_user.js.map +1 -0
- package/{src/email/send_email.ts → lib/email/templates.js} +7 -17
- package/lib/email/templates.js.map +1 -0
- package/lib/index.js +6 -0
- package/lib/index.js.map +1 -1
- package/lib/middleware/rate_limiter.js +8 -8
- package/lib/middleware/rate_limiter.js.map +1 -1
- package/package.json +6 -4
- package/src/auth/is_user_disabled.ts +31 -29
- package/src/auth/is_user_exists.ts +25 -23
- package/src/auth/otp.ts +89 -24
- package/src/auth/reset_password.ts +317 -0
- package/src/auth/user.ts +34 -24
- package/src/common/config.ts +20 -10
- package/src/common/locale.ts +121 -0
- package/src/email/email.ts +70 -0
- package/src/email/templates/new_user.ts +493 -0
- package/src/email/templates.ts +34 -0
- package/src/index.ts +6 -0
- package/src/middleware/rate_limiter.ts +8 -8
- package/src/auth/update_password.ts +0 -224
|
@@ -104,13 +104,13 @@ async function isRateLimited(identifier, rule) {
|
|
|
104
104
|
if (!rule)
|
|
105
105
|
return RateLimitCheckStatus.MISSING_RULE;
|
|
106
106
|
const config = (0, config_1.appInitialize)();
|
|
107
|
-
const
|
|
108
|
-
if (!
|
|
107
|
+
const rateLimiter = config.rateLimiter;
|
|
108
|
+
if (!rateLimiter)
|
|
109
109
|
return RateLimitCheckStatus.MISSING_DATABASE_CONFIG;
|
|
110
110
|
try {
|
|
111
111
|
const databaseConfig = {
|
|
112
|
-
appName:
|
|
113
|
-
url:
|
|
112
|
+
appName: rateLimiter.appName,
|
|
113
|
+
url: rateLimiter.url,
|
|
114
114
|
};
|
|
115
115
|
const database = (0, realtime_database_1.realtimeDatabase)(databaseConfig);
|
|
116
116
|
const reference = database.ref("__fbs__limiter").child(identifier.id).child(identifier.target).child("__fbs__timestamps");
|
|
@@ -142,13 +142,13 @@ async function recordRateLimitHit(identifier, rule) {
|
|
|
142
142
|
if (!rule)
|
|
143
143
|
return SetRateLimitStatus.MISSING_RULE;
|
|
144
144
|
const config = (0, config_1.appInitialize)();
|
|
145
|
-
const
|
|
146
|
-
if (!
|
|
145
|
+
const rateLimiter = config.rateLimiter;
|
|
146
|
+
if (!rateLimiter)
|
|
147
147
|
return SetRateLimitStatus.MISSING_DATABASE_CONFIG;
|
|
148
148
|
try {
|
|
149
149
|
const databaseConfig = {
|
|
150
|
-
appName:
|
|
151
|
-
url:
|
|
150
|
+
appName: rateLimiter.appName,
|
|
151
|
+
url: rateLimiter.url,
|
|
152
152
|
};
|
|
153
153
|
const database = (0, realtime_database_1.realtimeDatabase)(databaseConfig);
|
|
154
154
|
const reference = database.ref("__fbs__limiter").child(identifier.id).child(identifier.target).child("__fbs__timestamps");
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rate_limiter.js","sourceRoot":"","sources":["../../src/middleware/rate_limiter.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,sCAyCC;AAED,gDAqCC;AAzHD,sDAAwC;AACxC,6CAAiD;AACjD,mEAAiF;AAEjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,aAAa,EAAE,CAAC;AAC1B,CAAC;AAED,IAAY,oBASX;AATD,WAAY,oBAAoB;IAC5B,iEAAyC,CAAA;IACzC,uEAA+C,CAAA;IAC/C,+EAAuD,CAAA;IACvD,qDAA6B,CAAA;IAC7B,2EAAmD,CAAA;IACnD,qDAA6B,CAAA;IAC7B,2DAAmC,CAAA;IACnC,yDAAiC,CAAA;AACrC,CAAC,EATW,oBAAoB,oCAApB,oBAAoB,QAS/B;AAED,IAAY,kBASX;AATD,WAAY,kBAAkB;IAC1B,+DAAyC,CAAA;IACzC,qEAA+C,CAAA;IAC/C,6EAAuD,CAAA;IACvD,mDAA6B,CAAA;IAC7B,yEAAmD,CAAA;IACnD,mDAA6B,CAAA;IAC7B,yCAAmB,CAAA;IACnB,uDAAiC,CAAA;AACrC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AAaM,KAAK,UAAU,aAAa,CAAC,UAA+B,EAAE,IAAmB;IACpF,IAAI,CAAC,UAAU;QAAE,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,oBAAoB,CAAC,qBAAqB,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,oBAAoB,CAAC,yBAAyB,CAAC;IAE9E,IAAI,CAAC,IAAI;QAAE,OAAO,oBAAoB,CAAC,YAAY,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,
|
|
1
|
+
{"version":3,"file":"rate_limiter.js","sourceRoot":"","sources":["../../src/middleware/rate_limiter.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,sCAyCC;AAED,gDAqCC;AAzHD,sDAAwC;AACxC,6CAAiD;AACjD,mEAAiF;AAEjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,aAAa,EAAE,CAAC;AAC1B,CAAC;AAED,IAAY,oBASX;AATD,WAAY,oBAAoB;IAC5B,iEAAyC,CAAA;IACzC,uEAA+C,CAAA;IAC/C,+EAAuD,CAAA;IACvD,qDAA6B,CAAA;IAC7B,2EAAmD,CAAA;IACnD,qDAA6B,CAAA;IAC7B,2DAAmC,CAAA;IACnC,yDAAiC,CAAA;AACrC,CAAC,EATW,oBAAoB,oCAApB,oBAAoB,QAS/B;AAED,IAAY,kBASX;AATD,WAAY,kBAAkB;IAC1B,+DAAyC,CAAA;IACzC,qEAA+C,CAAA;IAC/C,6EAAuD,CAAA;IACvD,mDAA6B,CAAA;IAC7B,yEAAmD,CAAA;IACnD,mDAA6B,CAAA;IAC7B,yCAAmB,CAAA;IACnB,uDAAiC,CAAA;AACrC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AAaM,KAAK,UAAU,aAAa,CAAC,UAA+B,EAAE,IAAmB;IACpF,IAAI,CAAC,UAAU;QAAE,OAAO,oBAAoB,CAAC,kBAAkB,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,oBAAoB,CAAC,qBAAqB,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,oBAAoB,CAAC,yBAAyB,CAAC;IAE9E,IAAI,CAAC,IAAI;QAAE,OAAO,oBAAoB,CAAC,YAAY,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEvC,IAAI,CAAC,WAAW;QAAE,OAAO,oBAAoB,CAAC,uBAAuB,CAAC;IAEtE,IAAI,CAAC;QACD,MAAM,cAAc,GAAqB;YACrC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,GAAG,EAAE,WAAW,CAAC,GAAG;SACvB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAA,oCAAgB,EAAC,cAAc,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAEjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,UAAU,GAAa,KAAK,CAAC,GAAG,EAAE,CAAC;QAEvC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,oBAAoB,CAAC,eAAe,CAAC;QAChD,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,oBAAoB,CAAC,YAAY,CAAC;QAEhF,OAAO,oBAAoB,CAAC,eAAe,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,oBAAoB,CAAC,cAAc,CAAC;IAC/C,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,UAA+B,EAAE,IAAmB;IACzF,IAAI,CAAC,UAAU;QAAE,OAAO,kBAAkB,CAAC,kBAAkB,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC,qBAAqB,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,kBAAkB,CAAC,yBAAyB,CAAC;IAE5E,IAAI,CAAC,IAAI;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC;IAElD,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEvC,IAAI,CAAC,WAAW;QAAE,OAAO,kBAAkB,CAAC,uBAAuB,CAAC;IAEpE,IAAI,CAAC;QACD,MAAM,cAAc,GAAqB;YACrC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,GAAG,EAAE,WAAW,CAAC,GAAG;SACvB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAA,oCAAgB,EAAC,cAAc,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,UAAU,GAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC;QAE9E,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,OAAO,kBAAkB,CAAC,OAAO,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,kBAAkB,CAAC,cAAc,CAAC;IAC7C,CAAC;AACL,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "fiber-firebase-functions",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.4",
|
|
4
4
|
"description": "A collection of ready-to-use Firebase Cloud Functions utilities and wrappers designed for any application built by Fiber. Provides reusable helpers, common patterns, and production-grade modules to streamline backend development across all Fiber projects.",
|
|
5
5
|
"author": "Fiber",
|
|
6
6
|
"license": "FIBER-PROPRIETARY",
|
|
@@ -20,10 +20,12 @@
|
|
|
20
20
|
],
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"firebase-admin": "^13.6.0",
|
|
23
|
-
"firebase-functions": "^7.0.0"
|
|
23
|
+
"firebase-functions": "^7.0.0",
|
|
24
|
+
"validator": "^13.15.23"
|
|
24
25
|
},
|
|
25
26
|
"devDependencies": {
|
|
26
|
-
"
|
|
27
|
-
"ts-node": "^10.9.2"
|
|
27
|
+
"@types/validator": "^13.15.10",
|
|
28
|
+
"ts-node": "^10.9.2",
|
|
29
|
+
"typescript": "^5.9.3"
|
|
28
30
|
}
|
|
29
31
|
}
|
|
@@ -39,7 +39,7 @@ export enum UserDisabledByIdStatus {
|
|
|
39
39
|
MISSING_USER_ID = "MISSING_USER_ID",
|
|
40
40
|
ENABLED = "ENABLED",
|
|
41
41
|
DISABLED = "DISABLED",
|
|
42
|
-
|
|
42
|
+
USER_NOT_FOUND = "USER_NOT_FOUND",
|
|
43
43
|
INTERNAL_ERROR = "INTERNAL_ERROR",
|
|
44
44
|
}
|
|
45
45
|
|
|
@@ -47,46 +47,48 @@ export enum UserDisabledByEmailStatus {
|
|
|
47
47
|
MISSING_USER_ID = "MISSING_USER_ID",
|
|
48
48
|
ENABLED = "ENABLED",
|
|
49
49
|
DISABLED = "DISABLED",
|
|
50
|
-
|
|
50
|
+
USER_NOT_FOUND = "USER_NOT_FOUND",
|
|
51
51
|
INTERNAL_ERROR = "INTERNAL_ERROR",
|
|
52
52
|
}
|
|
53
53
|
|
|
54
|
-
export
|
|
55
|
-
|
|
54
|
+
export class IsUserDisabled {
|
|
55
|
+
static async withId(userId: string): Promise<UserDisabledByIdStatus> {
|
|
56
|
+
userId = userId.trim();
|
|
56
57
|
|
|
57
|
-
|
|
58
|
+
if (!userId || userId === "") return UserDisabledByIdStatus.MISSING_USER_ID;
|
|
58
59
|
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
60
|
+
try {
|
|
61
|
+
const user = await admin.auth().getUser(userId);
|
|
62
|
+
const isUserDisabled = user.disabled;
|
|
62
63
|
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
64
|
+
return isUserDisabled
|
|
65
|
+
? UserDisabledByIdStatus.DISABLED
|
|
66
|
+
: UserDisabledByIdStatus.ENABLED;
|
|
67
|
+
} catch (error: any) {
|
|
68
|
+
if (error.code === "auth/user-not-found") {
|
|
69
|
+
return UserDisabledByIdStatus.USER_NOT_FOUND;
|
|
70
|
+
}
|
|
71
|
+
return UserDisabledByIdStatus.INTERNAL_ERROR;
|
|
69
72
|
}
|
|
70
|
-
return UserDisabledByIdStatus.INTERNAL_ERROR;
|
|
71
73
|
}
|
|
72
|
-
}
|
|
73
74
|
|
|
74
|
-
|
|
75
|
-
|
|
75
|
+
static async withEmail(email: string): Promise<UserDisabledByEmailStatus> {
|
|
76
|
+
email = email.trim();
|
|
76
77
|
|
|
77
|
-
|
|
78
|
+
if (!email || email === "") return UserDisabledByEmailStatus.MISSING_USER_ID;
|
|
78
79
|
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
80
|
+
try {
|
|
81
|
+
const user = await admin.auth().getUserByEmail(email);
|
|
82
|
+
const isUserDisabled = user.disabled;
|
|
82
83
|
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
84
|
+
return isUserDisabled
|
|
85
|
+
? UserDisabledByEmailStatus.DISABLED
|
|
86
|
+
: UserDisabledByEmailStatus.ENABLED;
|
|
87
|
+
} catch (error: any) {
|
|
88
|
+
if (error.code === "auth/user-not-found") {
|
|
89
|
+
return UserDisabledByEmailStatus.USER_NOT_FOUND;
|
|
90
|
+
}
|
|
91
|
+
return UserDisabledByEmailStatus.INTERNAL_ERROR;
|
|
89
92
|
}
|
|
90
|
-
return UserDisabledByEmailStatus.INTERNAL_ERROR;
|
|
91
93
|
}
|
|
92
94
|
}
|
|
@@ -38,47 +38,49 @@ if (admin.apps.length === 0) {
|
|
|
38
38
|
export enum UserExistsByIdStatus {
|
|
39
39
|
MISSING_USER_ID = "MISSING_USER_ID",
|
|
40
40
|
EXISTS = "EXISTS",
|
|
41
|
-
|
|
41
|
+
USER_NOT_FOUND = "USER_NOT_FOUND",
|
|
42
42
|
INTERNAL_ERROR = "INTERNAL_ERROR",
|
|
43
43
|
}
|
|
44
44
|
|
|
45
45
|
export enum UserExistsByEmailStatus {
|
|
46
46
|
MISSING_USER_EMAIL = "MISSING_USER_EMAIL",
|
|
47
47
|
EXISTS = "EXISTS",
|
|
48
|
-
|
|
48
|
+
USER_NOT_FOUND = "USER_NOT_FOUND",
|
|
49
49
|
INTERNAL_ERROR = "INTERNAL_ERROR",
|
|
50
50
|
}
|
|
51
51
|
|
|
52
|
-
export
|
|
53
|
-
|
|
52
|
+
export class IsUserExists {
|
|
53
|
+
static async withId(userId: string): Promise<UserExistsByIdStatus> {
|
|
54
|
+
userId = userId.trim();
|
|
54
55
|
|
|
55
|
-
|
|
56
|
+
if (!userId || userId === "") return UserExistsByIdStatus.MISSING_USER_ID;
|
|
56
57
|
|
|
57
|
-
|
|
58
|
-
|
|
58
|
+
try {
|
|
59
|
+
await admin.auth().getUser(userId);
|
|
59
60
|
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
61
|
+
return UserExistsByIdStatus.EXISTS;
|
|
62
|
+
} catch (error: any) {
|
|
63
|
+
if (error.code === "auth/user-not-found") {
|
|
64
|
+
return UserExistsByIdStatus.USER_NOT_FOUND;
|
|
65
|
+
}
|
|
66
|
+
return UserExistsByIdStatus.INTERNAL_ERROR;
|
|
64
67
|
}
|
|
65
|
-
return UserExistsByIdStatus.INTERNAL_ERROR;
|
|
66
68
|
}
|
|
67
|
-
}
|
|
68
69
|
|
|
69
|
-
|
|
70
|
-
|
|
70
|
+
static async withEmail(email: string): Promise<UserExistsByEmailStatus> {
|
|
71
|
+
email = email.trim();
|
|
71
72
|
|
|
72
|
-
|
|
73
|
+
if (!email || email === "") return UserExistsByEmailStatus.MISSING_USER_EMAIL;
|
|
73
74
|
|
|
74
|
-
|
|
75
|
-
|
|
75
|
+
try {
|
|
76
|
+
await admin.auth().getUserByEmail(email);
|
|
76
77
|
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
78
|
+
return UserExistsByEmailStatus.EXISTS;
|
|
79
|
+
} catch (error: any) {
|
|
80
|
+
if (error.code === "auth/user-not-found") {
|
|
81
|
+
return UserExistsByEmailStatus.USER_NOT_FOUND;
|
|
82
|
+
}
|
|
83
|
+
return UserExistsByEmailStatus.INTERNAL_ERROR;
|
|
81
84
|
}
|
|
82
|
-
return UserExistsByEmailStatus.INTERNAL_ERROR;
|
|
83
85
|
}
|
|
84
86
|
}
|
package/src/auth/otp.ts
CHANGED
|
@@ -29,42 +29,107 @@
|
|
|
29
29
|
* in legal action.
|
|
30
30
|
*/
|
|
31
31
|
|
|
32
|
+
import crypto from 'crypto';
|
|
32
33
|
import * as admin from "firebase-admin";
|
|
34
|
+
import { appInitialize } from "../common/config";
|
|
33
35
|
|
|
34
36
|
if (admin.apps.length === 0) {
|
|
35
37
|
admin.initializeApp();
|
|
36
38
|
}
|
|
37
39
|
|
|
38
|
-
export enum
|
|
39
|
-
|
|
40
|
-
TOO_MANY_REQUEST = "TOO_MANY_REQUEST",
|
|
40
|
+
export enum GenerateStatus {
|
|
41
|
+
MISSING_OTP_CONFIG = "MISSING_OTP_CONFIG",
|
|
41
42
|
SUCCESS = "SUCCESS",
|
|
42
|
-
INTERNAL_ERROR = "INTERNAL_ERROR",
|
|
43
43
|
}
|
|
44
44
|
|
|
45
|
-
export
|
|
46
|
-
|
|
47
|
-
|
|
45
|
+
export enum GetOTPStatus {
|
|
46
|
+
MISSING_OTP_CONFIG = "MISSING_OTP_CONFIG",
|
|
47
|
+
OTP_NOT_FOUND = "OTP_NOT_FOUND",
|
|
48
|
+
OTP_FOUND = "OTP_FOUND",
|
|
48
49
|
}
|
|
49
50
|
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
51
|
+
export class Otp {
|
|
52
|
+
static async generate(userId: string, type: string): Promise<GenerateStatus> {
|
|
53
|
+
const config = appInitialize();
|
|
54
|
+
const otp = config.otp;
|
|
53
55
|
|
|
54
|
-
|
|
56
|
+
if (otp.collection === undefined) return GenerateStatus.MISSING_OTP_CONFIG;
|
|
55
57
|
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
// await recordRateLimitHit(identifier, rule, databaseConfig);
|
|
58
|
+
const now = Date.now();
|
|
59
|
+
const otpCode = OTPUtils.generate();
|
|
60
|
+
const hashOtp = OTPUtils.hash(otpCode);
|
|
60
61
|
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
62
|
+
await admin.firestore().collection(otp.collection).add({
|
|
63
|
+
__fbs__user_id: userId,
|
|
64
|
+
__fbs__created_at: now,
|
|
65
|
+
__fbs__otp_type: type,
|
|
66
|
+
__fbs__otp: hashOtp,
|
|
67
|
+
});
|
|
65
68
|
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
69
|
+
return GenerateStatus.SUCCESS;
|
|
70
|
+
}
|
|
71
|
+
|
|
72
|
+
static async get(userId: string, type: string): Promise<{ status: GetOTPStatus; otp?: string; }> {
|
|
73
|
+
const config = appInitialize();
|
|
74
|
+
const otp = config.otp;
|
|
75
|
+
|
|
76
|
+
if (otp.collection === undefined) return { status: GetOTPStatus.MISSING_OTP_CONFIG };
|
|
77
|
+
|
|
78
|
+
const snapshot = await admin.firestore()
|
|
79
|
+
.collection(otp.collection)
|
|
80
|
+
.where("__fbs__user_id", "==", userId)
|
|
81
|
+
.where("__fbs__otp_type", "==", type)
|
|
82
|
+
.orderBy("__fbs__created_at", "desc")
|
|
83
|
+
.limit(1)
|
|
84
|
+
.get();
|
|
85
|
+
|
|
86
|
+
if (snapshot.docs.length === 0) return { status: GetOTPStatus.OTP_NOT_FOUND };
|
|
87
|
+
|
|
88
|
+
const doc = snapshot.docs[0];
|
|
89
|
+
const data = doc?.data();
|
|
90
|
+
const otpCode = data?.__fbs__otp as string;
|
|
91
|
+
|
|
92
|
+
return { status: GetOTPStatus.MISSING_OTP_CONFIG, otp: otpCode };
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
|
|
96
|
+
class OTPUtils {
|
|
97
|
+
static generate(): string {
|
|
98
|
+
while (true) {
|
|
99
|
+
const buffer = crypto.randomBytes(4);
|
|
100
|
+
const number = buffer.readUInt32BE();
|
|
101
|
+
const otp = (number % 1000000).toString().padStart(6, '0');
|
|
102
|
+
|
|
103
|
+
if (this.hasAllIdenticalDigits(otp)) continue;
|
|
104
|
+
if (this.hasRepeatingPattern(otp)) continue;
|
|
105
|
+
if (this.hasMoreThanThreeConsecutiveIdenticalDigits(otp)) continue;
|
|
106
|
+
|
|
107
|
+
return otp;
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
|
|
111
|
+
static hash(otp: string): string {
|
|
112
|
+
return crypto.createHash('sha256').update(otp).digest('hex');
|
|
113
|
+
}
|
|
114
|
+
|
|
115
|
+
private static hasAllIdenticalDigits(str: string): boolean {
|
|
116
|
+
return /^(\d)\1{5}$/.test(str);
|
|
117
|
+
}
|
|
118
|
+
|
|
119
|
+
private static hasMoreThanThreeConsecutiveIdenticalDigits(str: string): boolean {
|
|
120
|
+
return /(\d)\1{3,}/.test(str);
|
|
121
|
+
}
|
|
122
|
+
|
|
123
|
+
private static hasRepeatingPattern(str: string): boolean {
|
|
124
|
+
const half = str.slice(0, 3);
|
|
125
|
+
if (half.repeat(2) === str) return true;
|
|
126
|
+
|
|
127
|
+
const pairs = str.match(/(..)/g);
|
|
128
|
+
if (pairs && pairs.length === 3 && new Set(pairs).size === 1) return true;
|
|
129
|
+
|
|
130
|
+
const mirror = half + half.split('').reverse().join('');
|
|
131
|
+
if (str === mirror) return true;
|
|
132
|
+
|
|
133
|
+
return false;
|
|
134
|
+
}
|
|
135
|
+
}
|