From 9f29f46be2c99b2f932f4196fa615a72f653e275 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Mon, 6 Jul 2020 22:23:37 -0700
Subject: fix login bugs

---
 lib/register.js | 121 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 121 insertions(+)
 create mode 100644 lib/register.js

(limited to 'lib')

diff --git a/lib/register.js b/lib/register.js
new file mode 100644
index 00000000..bc17496e
--- /dev/null
+++ b/lib/register.js
@@ -0,0 +1,121 @@
+const authenticator = require("otplib").authenticator;
+const axios = require("axios");
+const bcrypt = require("bcrypt");
+
+const DAY = 24 * 60 * 60 * 1000;
+
+let faucet = 1000;
+setInterval(() => (faucet = 2000), DAY);
+
+const gift = async user => {
+  const account = user.accounts[0];
+
+  if (faucet > 0) {
+    faucet -= 100;
+
+    account.balance = 100;
+    await account.save();
+
+    const payment = await db.Payment.create({
+      account_id: account.id,
+      user_id: user.id,
+      hash: "Welcome Gift",
+      amount: 100,
+      currency: user.currency,
+      rate: app.get("rates")[user.currency],
+      received: true,
+      confirmed: 1,
+      network: "GIFT"
+    });
+
+    await user.save();
+  }
+};
+
+register = async (user, ip, requireChallenge) => {
+  if (!(user && user.username)) throw new Error("Username required");
+
+  let exists = await db.User.count({ where: { username: user.username } });
+  if (exists) throw new Error(`Username ${user.username} taken`);
+
+  if (user.password && user.password === user.confirm) {
+    user.password = await bcrypt.hash(user.password, 1);
+  }
+
+  if (config.bitcoin) {
+    if (config.bitcoin.walletpass)
+      await bc.walletPassphrase(config.bitcoin.walletpass, 300);
+
+    user.address = await bc.getNewAddress("", "bech32");
+    addresses[user.address] = user.username;
+  }
+
+  if (config.liquid) {
+    if (config.liquid.walletpass)
+      await lq.walletPassphrase(config.liquid.walletpass, 300);
+
+    user.confidential = await lq.getNewAddress();
+    user.liquid = (await lq.getAddressInfo(user.confidential)).unconfidential;
+    addresses[user.liquid] = user.username;
+  }
+
+  if (
+    requireChallenge &&
+    (!challenge[ip] ||
+      user.response.toLowerCase() !== challenge[ip].toLowerCase())
+  ) {
+    l.info("failed challenge", ip, user.response, challenge[ip]);
+    throw new Error("Failed challenge");
+  }
+
+  delete challenge[ip];
+
+  let countries = {
+    CA: "CAD",
+    US: "USD",
+    JP: "JPY",
+    CN: "CNY",
+    AU: "AUD",
+    GB: "GBP",
+  };
+
+  if (!config.ipstack || ip.startsWith("127") || ip.startsWith("192"))
+    user.currency = "CAD";
+  else {
+    let info = await axios.get(
+      `http://api.ipstack.com/${ip}?access_key=${config.ipstack}`
+    );
+    user.currency = countries[info.data.country_code] || "USD";
+  }
+
+  user.currencies = [...new Set([user.currency, "CAD", "USD", "JPY"])];
+  user.fiat = false;
+  user.otpsecret = authenticator.generateSecret();
+
+  user = await db.User.create(user);
+
+  let account = await db.Account.create({
+    user_id: user.id,
+    asset: config.liquid.btcasset,
+    balance: 0,
+    pending: 0,
+    name: "Bitcoin",
+    ticker: "BTC",
+    precision: 8,
+  });
+
+  user.accounts = [account];
+
+  const d = ip.split(".");
+  const numericIp = ((+d[0] * 256 + +d[1]) * 256 + +d[2]) * 256 + +d[3];
+  if (Number.isInteger(numericIp)) {
+    user.ip = numericIp;
+    const ipExists = await db.User.findOne({ where: { ip: numericIp } });
+    if (!ipExists) await gift(user);
+  }
+
+  user.account_id = account.id;
+  await user.save();
+  l.info("new user", user.username, ip);
+  return user;
+};
-- 
cgit v1.2.3