59 lines
1.0 KiB
TypeScript
59 lines
1.0 KiB
TypeScript
import { Secret, TOTP } from 'otpauth'
|
|
import { CONFIG } from '@server/initializers/config'
|
|
import { WEBSERVER } from '@server/initializers/constants'
|
|
import { decrypt } from './peertube-crypto'
|
|
|
|
async function isOTPValid (options: {
|
|
encryptedSecret: string
|
|
token: string
|
|
}) {
|
|
const { token, encryptedSecret } = options
|
|
|
|
const secret = await decrypt(encryptedSecret, CONFIG.SECRETS.PEERTUBE)
|
|
|
|
const totp = new TOTP({
|
|
...baseOTPOptions(),
|
|
|
|
secret
|
|
})
|
|
|
|
const delta = totp.validate({
|
|
token,
|
|
window: 1
|
|
})
|
|
|
|
if (delta === null) return false
|
|
|
|
return true
|
|
}
|
|
|
|
function generateOTPSecret (email: string) {
|
|
const totp = new TOTP({
|
|
...baseOTPOptions(),
|
|
|
|
label: email,
|
|
secret: new Secret()
|
|
})
|
|
|
|
return {
|
|
secret: totp.secret.base32,
|
|
uri: totp.toString()
|
|
}
|
|
}
|
|
|
|
export {
|
|
isOTPValid,
|
|
generateOTPSecret
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
function baseOTPOptions () {
|
|
return {
|
|
issuer: WEBSERVER.HOST,
|
|
algorithm: 'SHA1',
|
|
digits: 6,
|
|
period: 30
|
|
}
|
|
}
|