mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-17 08:50:15 +01:00
e768a07738
* 🚀 feat: Implement v3 encryption and decryption methods for TOTP secrets * 🚀 feat: Refactor Two-Factor Authentication methods and enhance 2FA verification process * 🚀 feat: Update encryption methods to use hex decoding for legacy keys and improve error handling for AES-256-CTR * 🚀 feat: Update import paths in TwoFactorController for consistency and clarity
68 lines
1.9 KiB
JavaScript
68 lines
1.9 KiB
JavaScript
const express = require('express');
|
|
const {
|
|
refreshController,
|
|
registrationController,
|
|
resetPasswordController,
|
|
resetPasswordRequestController,
|
|
} = require('~/server/controllers/AuthController');
|
|
const { loginController } = require('~/server/controllers/auth/LoginController');
|
|
const { logoutController } = require('~/server/controllers/auth/LogoutController');
|
|
const { verify2FAWithTempToken } = require('~/server/controllers/auth/TwoFactorAuthController');
|
|
const {
|
|
enable2FA,
|
|
verify2FA,
|
|
disable2FA,
|
|
regenerateBackupCodes,
|
|
confirm2FA,
|
|
} = require('~/server/controllers/TwoFactorController');
|
|
const {
|
|
checkBan,
|
|
loginLimiter,
|
|
requireJwtAuth,
|
|
checkInviteUser,
|
|
registerLimiter,
|
|
requireLdapAuth,
|
|
requireLocalAuth,
|
|
resetPasswordLimiter,
|
|
validateRegistration,
|
|
validatePasswordReset,
|
|
} = require('~/server/middleware');
|
|
|
|
const router = express.Router();
|
|
|
|
const ldapAuth = !!process.env.LDAP_URL && !!process.env.LDAP_USER_SEARCH_BASE;
|
|
//Local
|
|
router.post('/logout', requireJwtAuth, logoutController);
|
|
router.post(
|
|
'/login',
|
|
loginLimiter,
|
|
checkBan,
|
|
ldapAuth ? requireLdapAuth : requireLocalAuth,
|
|
loginController,
|
|
);
|
|
router.post('/refresh', refreshController);
|
|
router.post(
|
|
'/register',
|
|
registerLimiter,
|
|
checkBan,
|
|
checkInviteUser,
|
|
validateRegistration,
|
|
registrationController,
|
|
);
|
|
router.post(
|
|
'/requestPasswordReset',
|
|
resetPasswordLimiter,
|
|
checkBan,
|
|
validatePasswordReset,
|
|
resetPasswordRequestController,
|
|
);
|
|
router.post('/resetPassword', checkBan, validatePasswordReset, resetPasswordController);
|
|
|
|
router.get('/2fa/enable', requireJwtAuth, enable2FA);
|
|
router.post('/2fa/verify', requireJwtAuth, verify2FA);
|
|
router.post('/2fa/verify-temp', checkBan, verify2FAWithTempToken);
|
|
router.post('/2fa/confirm', requireJwtAuth, confirm2FA);
|
|
router.post('/2fa/disable', requireJwtAuth, disable2FA);
|
|
router.post('/2fa/backup/regenerate', requireJwtAuth, regenerateBackupCodes);
|
|
|
|
module.exports = router;
|