feat: require tfa to fetch passwords

Longridge-High-School · Mar 5, 2024 · 1f4e906 · 1f4e906
1 parent f615741
commit 1f4e906
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/app/routes/api.password.$password.get.tsx b/app/routes/api.password.$password.get.tsx
@@ -11,6 +11,15 @@ export const loader = async ({request, params}: LoaderFunctionArgs) => {
 
   const prisma = getPrisma()
 
+  const userTotp = await prisma.user.findFirstOrThrow({
+    where: {id: user.id},
+    select: {id: true, totpSecret: true}
+  })
+
+  if (userTotp.totpSecret === '') {
+    return json({password: "Can't fetch password without 2FA on your account"})
+  }
+
   const password = await prisma.password.findFirstOrThrow({
     where: {id: params.password}
   })