Enter Code
diff --git a/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.server.ts b/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.server.ts
index e69de29..4d70b23 100644
--- a/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.server.ts
+++ b/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.server.ts
@@ -0,0 +1,46 @@
+import db from "$lib/drizzle";
+import {eq} from "drizzle-orm";
+import {Argon2id} from "oslo/password";
+import {alphabet, generateRandomString} from "oslo/crypto";
+import {redirect} from "sveltekit-flash-message/server";
+import {notSignedInMessage} from "$lib/flashMessages";
+import type { PageServerLoad } from '../../../$types';
+import {recovery_codes, users} from "../../../../../../../schema";
+
+export const load: PageServerLoad = async (event) => {
+ const user = event.locals.user;
+
+ if (!user) {
+ redirect(302, '/login', notSignedInMessage, event);
+ }
+
+ const dbUser = await db.query.users.findFirst({
+ where: eq(users.id, user.id),
+ });
+
+ if (dbUser?.two_factor_enabled) {
+ const recoveryCodes = await db.query.recovery_codes.findMany({
+ where: eq(recovery_codes.userId, user.id),
+ });
+
+ if (recoveryCodes.length === 0) {
+ const recoveryCodes = Array.from({length: 5}, () => generateRandomString(10, alphabet('A-Z', '0-9')));
+ if (recoveryCodes) {
+ for (const code of recoveryCodes) {
+ await db.insert(recovery_codes).values({
+ userId: user.id,
+ code: await new Argon2id().hash(code),
+ });
+ }
+ }
+ return {
+ recoveryCodes,
+ };
+ }
+ return {
+ recoveryCodes: [],
+ }
+ } else {
+ redirect(302, '/profile', { message: 'Two-Factor Authentication is not enabled', type: 'error' }, event);
+ }
+}
\ No newline at end of file
diff --git a/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.svelte b/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.svelte
index e69de29..6f6580f 100644
--- a/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.svelte
+++ b/src/routes/(app)/(protected)/profile/security/two-factor/recovery-codes/+page.svelte
@@ -0,0 +1,18 @@
+
+
+Two-Factor Authentication is enabled
+{#if recoveryCodes && recoveryCodes.length > 0}
+ {#if recoveryCodes.length > 0}
+ Please copy the recovery codes below as they will not be shown again.
+ {#each recoveryCodes as code}
+ {code}
+ {/each}
+ {/if}
+{:else}
+ You have already viewed your recovery codes.
+ If you wish to generate new codes, please disable and then re-enable two-factor authentication.
+{/if}
\ No newline at end of file