BradNut/example-sveltekit-email-password-webauthn
1
0
Fork 0
mirror of https://github.com/BradNut/example-sveltekit-email-password-webauthn synced 2025-09-08 17:40:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

update totp

Browse source
This commit is contained in:
pilcrowOnPaper 2024-10-06 22:04:52 +09:00
parent 06282d4c85
commit f7de4102fe
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/routes/2fa/totp/setup/+page.server.ts
View file

@ -18,6 +18,9 @@ export async function load(event: RequestEvent) {
if (event.locals.user.registered2FA && !event.locals.session.twoFactorVerified) {
return redirect(302, get2FARedirect(event.locals.user));
}
if (event.locals.user.registeredTOTP) {
return redirect(302, "/");
}
const totpKey = new Uint8Array(20);
crypto.getRandomValues(totpKey);
@ -50,6 +53,11 @@ async function action(event: RequestEvent) {
message: "Forbidden"
});
}
if (event.locals.user.registeredTOTP) {
return fail(403, {
message: "Forbidden"
});
}
if (!totpUpdateBucket.check(event.locals.user.id, 1)) {
return fail(429, {
message: "Too many requests"