mirror/fosrl.pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2025-08-02 17:14:55 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

added change password endpoint

Browse source
This commit is contained in:
Milo Schwartz 2024-10-05 15:11:51 -04:00
parent 86fb43d570
commit e7080c4aa8
No known key found for this signature in database
9 changed files with 207 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

49
server/routers/external.ts
View file

@ -29,16 +29,6 @@ unauthenticated.get("/", (_, res) => {
// Authenticated Root routes
export const authenticated = Router();
authenticated.use(verifySessionUserMiddleware);
unauthenticated.use(
rateLimitMiddleware({
windowMin: 60,
max: 5,
type: "IP_AND_PATH",
skipCondition: (req) => {
return !["/auth/request-email-code"].includes(req.path);
},
}),
);
authenticated.put("/org", getUserOrgs, org.createOrg);
authenticated.get("/orgs", getUserOrgs, org.listOrgs); // TODO we need to check the orgs here
@ -107,19 +97,34 @@ authenticated.get("/user/:userId", user.getUser);
authenticated.delete("/user/:userId", user.deleteUser);
// Auth routes
unauthenticated.put("/auth/signup", auth.signup);
unauthenticated.post("/auth/login", auth.login);
unauthenticated.post("/auth/logout", auth.logout);
authenticated.post("/auth/verify-totp", auth.verifyTotp);
authenticated.post("/auth/request-totp-secret", auth.requestTotpSecret);
authenticated.post("/auth/disable-2fa", auth.disable2fa);
unauthenticated.post(
"/auth/verify-email",
verifySessionMiddleware,
auth.verifyEmail,
export const authRouter = Router();
unauthenticated.use("/auth", authRouter);
authRouter.use(
rateLimitMiddleware({
windowMin: 10,
max: 15,
type: "IP_AND_PATH",
}),
);
unauthenticated.post(
"/auth/request-email-code",
authRouter.put("/signup", auth.signup);
authRouter.post("/login", auth.login);
authRouter.post("/logout", auth.logout);
authRouter.post("/verify-totp", verifySessionUserMiddleware, auth.verifyTotp);
authRouter.post(
"/request-totp-secret",
verifySessionUserMiddleware,
auth.requestTotpSecret,
);
authRouter.post("/disable-2fa", verifySessionUserMiddleware, auth.disable2fa);
authRouter.post("/verify-email", verifySessionMiddleware, auth.verifyEmail);
authRouter.post(
"/request-email-code",
verifySessionMiddleware,
auth.requestEmailVerificationCode,
);
authRouter.post(
"/change-password",
verifySessionUserMiddleware,
auth.changePassword,
);