devstack/authorizer
4
0
Fork 0
Code Pull Requests Actions Activity

forgot password - with phone

Browse Source
This commit is contained in:
Mussie Teshome 2023-06-26 14:25:13 +03:00
parent 3b7c47bfb3
commit ea2a7db8e0
1 changed files with 105 additions and 53 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
server/resolvers/forgot_password.go
View File

@ -19,6 +19,7 @@ import (
"github.com/authorizerdev/authorizer/server/token"
"github.com/authorizerdev/authorizer/server/utils"
"github.com/authorizerdev/authorizer/server/validators"
"github.com/authorizerdev/authorizer/server/smsproviders"
)
// ForgotPasswordResolver is a resolver for forgot password mutation
@ -31,26 +32,34 @@ func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInpu
return res, err
}
disablePhoneVerification, _ := memorystore.Provider.GetBoolStoreEnvVariable(constants.EnvKeyDisablePhoneVerification)
isBasicAuthDisabled, err := memorystore.Provider.GetBoolStoreEnvVariable(constants.EnvKeyDisableBasicAuthentication)
if err != nil {
log.Debug("Error getting basic auth disabled: ", err)
isBasicAuthDisabled = true
}
if isBasicAuthDisabled {
log.Debug("Basic authentication is disabled")
return res, fmt.Errorf(`basic authentication is disabled for this instance`)
}
params.Email = strings.ToLower(params.Email)
if !validators.IsValidEmail(params.Email) {
log.Debug("Invalid email address: ", params.Email)
return res, fmt.Errorf("invalid email")
mobile := strings.TrimSpace(params.EmailOrPhone)
if !validators.IsValidEmail(params.EmailOrPhone) && len(mobile) < 10 {
log.Debug("Invalid email or phone: ", params.EmailOrPhone)
return res, fmt.Errorf("invalid email or phone")
}
if validators.IsValidEmail(params.EmailOrPhone) {
params.EmailOrPhone = strings.ToLower(params.EmailOrPhone)
log := log.WithFields(log.Fields{
"email": params.Email,
"email": params.EmailOrPhone,
})
user, err := db.Provider.GetUserByEmail(ctx, params.Email)
user, err := db.Provider.GetUserByEmail(ctx, params.EmailOrPhone)
if err != nil {
log.Debug("User not found: ", err)
return res, fmt.Errorf(`user with this email not found`)
@ -76,7 +85,7 @@ func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInpu
}
}
verificationToken, err := token.CreateVerificationToken(params.Email, constants.VerificationTypeForgotPassword, hostname, nonceHash, redirectURI)
verificationToken, err := token.CreateVerificationToken(params.EmailOrPhone, constants.VerificationTypeForgotPassword, hostname, nonceHash, redirectURI)
if err != nil {
log.Debug("Failed to create verification token", err)
return res, err
@ -85,7 +94,7 @@ func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInpu
Token: verificationToken,
Identifier: constants.VerificationTypeForgotPassword,
ExpiresAt: time.Now().Add(time.Minute * 30).Unix(),
Email: params.Email,
Email: params.EmailOrPhone,
Nonce: nonceHash,
RedirectURI: redirectURI,
})
@ -95,7 +104,7 @@ func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInpu
}
// execute it as go routine so that we can reduce the api latency
go email.SendEmail([]string{params.Email}, constants.VerificationTypeForgotPassword, map[string]interface{}{
go email.SendEmail([]string{params.EmailOrPhone}, constants.VerificationTypeForgotPassword, map[string]interface{}{
"user": user.ToMap(),
"organization": utils.GetOrganization(),
"verification_url": utils.GetForgotPasswordURL(verificationToken, redirectURI),
@ -107,3 +116,46 @@ func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInpu
return res, nil
}
if !disablePhoneVerification && len(mobile) > 9 {
if _, err := db.Provider.GetUserByPhoneNumber(ctx, refs.StringValue(&params.EmailOrPhone)); err != nil {
return res, fmt.Errorf("user with given phone number does not exist")
}
duration, _ := time.ParseDuration("10m")
smsCode := utils.GenerateOTP()
smsBody := strings.Builder{}
smsBody.WriteString("Your verification code is: ")
smsBody.WriteString(smsCode)
go func() {
_, err = db.Provider.UpsertSMSRequest(ctx, &models.SMSVerificationRequest{
PhoneNumber: params.EmailOrPhone,
Code: smsCode,
CodeExpiresAt: time.Now().Add(duration).Unix(),
})
if err != nil {
log.Debug("Failed to upsert sms otp: ", err)
return
}
err = smsproviders.SendSMS(params.EmailOrPhone, smsBody.String())
if err != nil {
log.Debug("Failed to send sms: ", err)
return
}
}()
res = &model.Response{
Message: `verification code has been sent to your phone`,
}
return res, nil
}
return res, nil
}