certd/packages/ui/certd-server/src/controller/user/mine/setting-two-factor-controller.ts

import { ALL, Body, Controller, Inject, Post, Provide } from "@midwayjs/core";
import { BaseController, Constants } from "@certd/lib-server";
import { UserSettingsService } from "../../../modules/mine/service/user-settings-service.js";
import { UserTwoFactorSetting } from "../../../modules/mine/service/models.js";
import { merge } from "lodash-es";
import { TwoFactorService } from "../../../modules/mine/service/two-factor-service.js";
import {isPlus} from "@certd/plus-core";
import { ApiTags } from "@midwayjs/swagger";

/**
 */
@Provide()
@Controller("/api/user/settings/twoFactor")
@ApiTags(['mine'])
export class UserTwoFactorSettingController extends BaseController {
  @Inject()
  service: UserSettingsService;

  @Inject()
  twoFactorService: TwoFactorService;



  @Post("/get", { description: Constants.per.authOnly, summary: "获取双因子认证设置" })
  async get() {
    const userId = this.getUserId();
    const setting = await this.service.getSetting<UserTwoFactorSetting>(userId,null, UserTwoFactorSetting);
    return this.ok(setting);
  }

  @Post("/save", { description: Constants.per.authOnly, summary: "保存双因子认证设置" })
  async save(@Body(ALL) bean: any) {
    if (!isPlus()) {
      throw new Error('本功能需要开通专业版')
    }
    const userId = this.getUserId();
    const setting = new UserTwoFactorSetting();
    merge(setting, bean);

    // 禁用时清除
    if(!setting.authenticator.enabled){
        setting.authenticator.secret = null;
        setting.authenticator.verified = false;
    }

    await this.service.saveSetting(userId,null, setting);
    return this.ok({});
  }

  @Post("/authenticator/qrcode", { description: Constants.per.authOnly, summary: "获取验证器二维码" })
  async authenticatorQrcode() {
    const userId = this.getUserId();
    const {qrcode,link,secret} = await this.twoFactorService.getAuthenticatorQrCode(userId);
    return this.ok({qrcode,link,secret}); 
  }

  @Post("/authenticator/save", { description: Constants.per.authOnly, summary: "保存验证器设置" })
  async authenticatorSave(@Body(ALL) bean: any) {
    if (!isPlus()) {
      throw new Error('本功能需要开通专业版')
    }
    const userId = this.getUserId();
    await this.twoFactorService.saveAuthenticator({
        userId,
        verifyCode: bean.verifyCode,
    });
    return this.ok();
  }

  @Post("/authenticator/off", { description: Constants.per.authOnly, summary: "关闭验证器" })
  async authenticatorOff() {
    const userId = this.getUserId();
    await this.twoFactorService.offAuthenticator(userId);
    return this.ok();
  }

}