45 lines
1.2 KiB
TypeScript
45 lines
1.2 KiB
TypeScript
import otplib from 'otplib'
|
|
const { authenticator } = otplib
|
|
import { db, userIdentities, eq, and } from '~/drizzle/db'
|
|
import { createApiError } from '~~/server/utils/apiError'
|
|
|
|
export default defineEventHandler(async (event) => {
|
|
const user = event.context.user
|
|
if (!user) {
|
|
throw createApiError(401, 'AUTH_UNAUTHORIZED_ACCESS', '未授权访问')
|
|
}
|
|
const body = await readBody(event)
|
|
const { token, secret } = body
|
|
|
|
if (!token || !secret) {
|
|
throw createApiError(400, 'USER_MISSING_CODE_OR_SECRET', '缺少验证码或密钥')
|
|
}
|
|
|
|
const isValid = authenticator.check(token, secret)
|
|
if (!isValid) {
|
|
throw createApiError(400, 'USER_CODE_INVALID', '验证码错误')
|
|
}
|
|
|
|
// 检查是否已存在
|
|
const existing = await db.query.userIdentities.findFirst({
|
|
where: and(eq(userIdentities.userId, user.id), eq(userIdentities.provider, 'totp'))
|
|
})
|
|
|
|
if (existing) {
|
|
// 更新密钥
|
|
await db.update(userIdentities)
|
|
.set({ providerUserId: secret })
|
|
.where(eq(userIdentities.id, existing.id))
|
|
} else {
|
|
// 保存到数据库
|
|
await db.insert(userIdentities).values({
|
|
userId: user.id,
|
|
provider: 'totp',
|
|
providerUserId: secret,
|
|
createdAt: new Date()
|
|
})
|
|
}
|
|
|
|
return { success: true }
|
|
})
|