d27917b824
Co-authored-by: izzy <me@insrt.uk> Signed-off-by: Zomatree <me@zomatree.live> Signed-off-by: izzy <me@insrt.uk>
67 lines
2.0 KiB
Rust
67 lines
2.0 KiB
Rust
//! Re-generate recovery codes for an account.
|
|
//! PATCH /mfa/recovery
|
|
use revolt_database::{Account, ValidatedTicket, Database};
|
|
use revolt_result::Result;
|
|
use rocket::serde::json::Json;
|
|
use rocket::State;
|
|
|
|
/// # Generate Recovery Codes
|
|
///
|
|
/// Re-generate recovery codes for an account.
|
|
#[openapi(tag = "MFA")]
|
|
#[patch("/recovery")]
|
|
pub async fn generate_recovery(
|
|
db: &State<Database>,
|
|
mut account: Account,
|
|
_ticket: ValidatedTicket,
|
|
) -> Result<Json<Vec<String>>> {
|
|
// Generate new codes
|
|
account.mfa.generate_recovery_codes();
|
|
|
|
// Save account model
|
|
account.save(db).await?;
|
|
|
|
// Return them to the user
|
|
Ok(Json(account.mfa.recovery_codes))
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use crate::{rocket, util::test::TestHarness};
|
|
use revolt_database::MFATicket;
|
|
use rocket::http::{ContentType, Header, Status};
|
|
#[rocket::async_test]
|
|
async fn success() {
|
|
let harness = TestHarness::new().await;
|
|
let (account, session, _) = harness.new_user().await;
|
|
|
|
let ticket1 = MFATicket::new(account.id.to_string(), true);
|
|
ticket1.save(&harness.db).await.unwrap();
|
|
|
|
let ticket2 = MFATicket::new(account.id, true);
|
|
ticket2.save(&harness.db).await.unwrap();
|
|
|
|
let res = harness.client
|
|
.patch("/auth/mfa/recovery")
|
|
.header(Header::new("X-Session-Token", session.token.clone()))
|
|
.header(Header::new("X-MFA-Ticket", ticket1.token))
|
|
.header(ContentType::JSON)
|
|
.dispatch()
|
|
.await;
|
|
|
|
assert_eq!(res.status(), Status::Ok);
|
|
assert!(res.into_json::<Vec<String>>().await.is_some());
|
|
|
|
let res = harness.client
|
|
.post("/auth/mfa/recovery")
|
|
.header(Header::new("X-Session-Token", session.token))
|
|
.header(Header::new("X-MFA-Ticket", ticket2.token))
|
|
.header(ContentType::JSON)
|
|
.dispatch()
|
|
.await;
|
|
|
|
assert_eq!(res.status(), Status::Ok);
|
|
assert_eq!(res.into_json::<Vec<String>>().await.unwrap().len(), 10);
|
|
}
|
|
}
|