full

utils/totpStore.js

@@ -0,0 +1,83 @@
+const mongoose = require('mongoose')
+const UserModel = require('../models/UserModel')
+
+function toObjectId (id) {
+  if (id instanceof mongoose.Types.ObjectId) return id
+  return new mongoose.Types.ObjectId(String(id))
+}
+
+async function readTotpState (userId) {
+  const doc = await UserModel.collection.findOne(
+    { _id: toObjectId(userId) },
+    { projection: { totp_secret: 1, totp_pending_secret: 1, totp_enabled: 1 } }
+  )
+
+  if (!doc) return null
+
+  return {
+    totp_secret: doc.totp_secret || null,
+    totp_pending_secret: doc.totp_pending_secret || null,
+    totp_enabled: Boolean(doc.totp_enabled),
+  }
+}
+
+async function setPendingSecret (userId, secret) {
+  const result = await UserModel.updateOne(
+    { _id: toObjectId(userId) },
+    { $set: { totp_pending_secret: secret } },
+    { strict: false }
+  )
+
+  if (!result.matchedCount) {
+    const err = new Error('USER_NOT_FOUND')
+    err.status = 404
+    err.userMessage = 'کاربر یافت نشد'
+    throw err
+  }
+}
+
+async function activateTotp (userId, secret) {
+  const result = await UserModel.updateOne(
+    { _id: toObjectId(userId) },
+    {
+      $set: {
+        totp_secret: secret,
+        totp_enabled: true,
+      },
+      $unset: { totp_pending_secret: '' },
+    },
+    { strict: false }
+  )
+
+  if (!result.matchedCount) {
+    const err = new Error('USER_NOT_FOUND')
+    err.status = 404
+    err.userMessage = 'کاربر یافت نشد'
+    throw err
+  }
+}
+
+async function deactivateTotp (userId) {
+  const result = await UserModel.updateOne(
+    { _id: toObjectId(userId) },
+    {
+      $set: { totp_enabled: false },
+      $unset: { totp_secret: '', totp_pending_secret: '' },
+    },
+    { strict: false }
+  )
+
+  if (!result.matchedCount) {
+    const err = new Error('USER_NOT_FOUND')
+    err.status = 404
+    err.userMessage = 'کاربر یافت نشد'
+    throw err
+  }
+}
+
+module.exports = {
+  readTotpState,
+  setPendingSecret,
+  activateTotp,
+  deactivateTotp,
+}