Daniel Hiller
2e4904f77d
Adds TOTP setup with QR code, login challenge, recovery codes and trusted devices that let a browser skip the second factor for 30 days. Admins can reset another user's second factor by confirming with their own password.
45 lines
977 B
JavaScript
45 lines
977 B
JavaScript
/*!
|
|
* Copyright (c) 2024 PLANKA Software GmbH
|
|
* Licensed under the Fair Use License: https://github.com/plankanban/planka/blob/master/LICENSE.md
|
|
*/
|
|
|
|
module.exports = {
|
|
inputs: {
|
|
userId: {
|
|
type: 'string',
|
|
required: true,
|
|
},
|
|
exceptSessionId: {
|
|
type: 'string',
|
|
allowNull: true,
|
|
},
|
|
},
|
|
|
|
async fn(inputs) {
|
|
const criteria = {
|
|
userId: inputs.userId,
|
|
deletedAt: null,
|
|
};
|
|
if (inputs.exceptSessionId) {
|
|
criteria.id = { '!=': inputs.exceptSessionId };
|
|
}
|
|
|
|
const sessions = await Session.find(criteria);
|
|
if (sessions.length === 0) {
|
|
return;
|
|
}
|
|
|
|
await Session.update(criteria).set({
|
|
deletedAt: new Date().toISOString(),
|
|
});
|
|
|
|
sessions.forEach((session) => {
|
|
if (session.accessToken) {
|
|
const roomName = `@accessToken:${session.accessToken}`;
|
|
sails.sockets.broadcast(roomName, 'logout');
|
|
sails.sockets.leaveAll(roomName);
|
|
}
|
|
});
|
|
},
|
|
};
|