ammar/backend
1
0
Fork 0
mirror of https://github.com/SyncrowIOT/backend.git synced 2025-11-26 09:24:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

added otp limiter

Browse Source
This commit is contained in:
unknown
2024-08-21 11:19:19 +03:00
parent 72679fcfe8
commit 2581137f8b
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.env.example
View File

@ -88,3 +88,5 @@ FIREBASE_MEASUREMENT_ID=
FIREBASE_DATABASE_URL= FIREBASE_DATABASE_URL=
OTP_LIMITER=

12
src/auth/services/user-auth.service.ts
View File

@ -20,6 +20,7 @@ import { UserEntity } from '../../../libs/common/src/modules/user/entities/user.
import * as argon2 from 'argon2'; import * as argon2 from 'argon2';
import { differenceInSeconds } from '@app/common/helper/differenceInSeconds'; import { differenceInSeconds } from '@app/common/helper/differenceInSeconds';
import { LessThan, MoreThan } from 'typeorm'; import { LessThan, MoreThan } from 'typeorm';
import { ConfigService } from '@nestjs/config';
@Injectable() @Injectable()
export class UserAuthService { export class UserAuthService {
@ -32,6 +33,7 @@ export class UserAuthService {
private readonly emailService: EmailService, private readonly emailService: EmailService,
private readonly userRoleRepository: UserRoleRepository, private readonly userRoleRepository: UserRoleRepository,
private readonly roleTypeRepository: RoleTypeRepository, private readonly roleTypeRepository: RoleTypeRepository,
private readonly configService: ConfigService,
) {} ) {}
async signUp(userSignUpDto: UserSignUpDto): Promise<UserEntity> { async signUp(userSignUpDto: UserSignUpDto): Promise<UserEntity> {
@ -139,8 +141,10 @@ export class UserAuthService {
} }
async generateOTP(data: UserOtpDto): Promise<string> { async generateOTP(data: UserOtpDto): Promise<string> {
const threeDaysAgo = new Date(); const otpLimiter = new Date();
threeDaysAgo.setDate(threeDaysAgo.getDate() - 3); otpLimiter.setDate(
otpLimiter.getDate() - this.configService.get<number>('OTP_LIMITER'),
);
const userExists = await this.userRepository.exists({ const userExists = await this.userRepository.exists({
where: { where: {
region: data.regionUuid region: data.regionUuid
@ -159,14 +163,14 @@ export class UserAuthService {
await this.otpRepository.delete({ await this.otpRepository.delete({
email: data.email, email: data.email,
type: data.type, type: data.type,
createdAt: LessThan(threeDaysAgo), createdAt: LessThan(otpLimiter),
}); });
const countOfOtp = await this.otpRepository.count({ const countOfOtp = await this.otpRepository.count({
withDeleted: true, withDeleted: true,
where: { where: {
email: data.email, email: data.email,
type: data.type, type: data.type,
createdAt: MoreThan(threeDaysAgo), createdAt: MoreThan(otpLimiter),
}, },
}); });
const lastOtp = await this.otpRepository.findOne({ const lastOtp = await this.otpRepository.findOne({