aboutsummaryrefslogtreecommitdiffstats
path: root/routes
diff options
context:
space:
mode:
authorAdam Soltys <[email protected]>2022-06-09 01:06:06 -0400
committerAdam Soltys <[email protected]>2022-06-08 22:08:07 -0700
commit3ae8bf7c50f7a1a845de0ae1387b8fec8ae77b4f (patch)
treea821f87a6b1cb8d0c56cd877b0065d00ae3c01cb /routes
parentbdca954090e7cbdf511f438452e1eddc66f033fc (diff)
downloadcoinos-server-3ae8bf7c50f7a1a845de0ae1387b8fec8ae77b4f.tar.gz
coinos-server-3ae8bf7c50f7a1a845de0ae1387b8fec8ae77b4f.zip
tweaks to sync routine
Diffstat (limited to 'routes')
-rw-r--r--routes/users.js69
1 files changed, 4 insertions, 65 deletions
diff --git a/routes/users.js b/routes/users.js
index 6bf9a063..78b3adf7 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -302,9 +302,7 @@ app.post(
})
);
-app.post(
- "/login",
- ah(async (req, res) => {
+let login = ah(async (req, res) => {
try {
const { params, sig, key } = req.body;
@@ -362,69 +360,10 @@ app.post(
res.status(401).end();
}
})
-);
-
-app.post(
- "/doggin",
- ah(async (req, res) => {
- try {
- const { params, sig, key } = req.body;
-
- if (sig) {
- const { callback } = params;
-
- try {
- const url = `${callback}&sig=${sig}&key=${key}`;
- const response = await axios.get(url);
- res.send(response.data);
- } catch (e) {
- l.error("problem calling lnurl login", e.message);
- res.status(500).send(e.message);
- }
-
- return;
- }
-
- let twofa = req.body.token;
-
- let user = await getUser(req.body.username);
- if (
- !user ||
- (user.password &&
- !(await bcrypt.compare(req.body.password, user.password)))
- ) {
- l.warn("invalid username or password attempt", req.body.username);
- return res.status(401).end();
- }
-
- if (
- user.twofa &&
- (typeof twofa === "undefined" ||
- !authenticator.check(twofa, user.otpsecret))
- ) {
- return res.status(401).send("2fa required");
- }
-
- l.info(
- "login",
- req.body.username,
- req.headers["x-forwarded-for"] || req.connection.remoteAddress
- );
-
- let payload = { username: user.username };
- let token = jwt.sign(payload, config.jwt);
- res.cookie("token", token, { expires: new Date(Date.now() + 432000000) });
- user.accounts = await user.getAccounts();
- user.keys = await user.getKeys();
- user = pick(user, ...whitelist);
- res.send({ user, token });
- } catch (e) {
- l.error("login error", e.message, req.connection.remoteAddress);
- res.status(401).end();
- }
- })
-);
+app.post("/login", login);
+app.post("/taboggan", login);
+app.post("/doggin", login);
app.post(
"/logout",