joshuaandClaude Opus 5.5
e52bf67015
Users can turn on 2FA from Profile & Security and receive a 6-digit login code by email or WhatsApp, with a "trust this device for 30 days" option. Admins can reset it for a locked-out user, and the self-service kiosk handles the code step at setup. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
66 lines
2.0 KiB
JavaScript
66 lines
2.0 KiB
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const {
|
|
registerUser,
|
|
loginUser,
|
|
verifyLoginTwoFactor,
|
|
resendLoginTwoFactor,
|
|
startEnableTwoFactor,
|
|
confirmEnableTwoFactor,
|
|
disableTwoFactor,
|
|
verifyPassword,
|
|
getUserProfile,
|
|
updateUserProfile,
|
|
getUsers,
|
|
checkUserExists,
|
|
getUserById,
|
|
updateUser,
|
|
deleteUser,
|
|
anonymizeUser,
|
|
requestPasswordReset,
|
|
resetPassword,
|
|
activateAccount,
|
|
revokeMySession,
|
|
adminRevokeUserSessions,
|
|
closeAccount,
|
|
getMyActivity,
|
|
} = require('../controllers/userController');
|
|
const { protect, admin, supervisor, loginLimiter} = require('../middleware/authMiddleware');
|
|
|
|
// Public routes
|
|
router.post('/', registerUser);
|
|
router.post('/login', loginLimiter, loginUser);
|
|
router.post('/login/2fa', loginLimiter, verifyLoginTwoFactor);
|
|
router.post('/login/2fa/resend', loginLimiter, resendLoginTwoFactor);
|
|
router.post('/forgot', requestPasswordReset);
|
|
router.post('/reset', resetPassword);
|
|
router.post('/activate', activateAccount);
|
|
|
|
// Protected routes
|
|
router.route('/profile')
|
|
.get(protect, getUserProfile)
|
|
.put(protect, updateUserProfile);
|
|
|
|
router.post('/revoke-sessions', protect, revokeMySession);
|
|
router.post('/close-account', protect, closeAccount);
|
|
router.get('/activity', protect, getMyActivity);
|
|
router.post('/verify-password', protect, loginLimiter, verifyPassword);
|
|
router.post('/2fa/enable', protect, loginLimiter, startEnableTwoFactor);
|
|
router.post('/2fa/confirm', protect, loginLimiter, confirmEnableTwoFactor);
|
|
router.post('/2fa/disable', protect, loginLimiter, disableTwoFactor);
|
|
|
|
// Admin routes
|
|
router.route('/')
|
|
.get(protect, supervisor, getUsers);
|
|
|
|
router.get('/check-exists', protect, supervisor, checkUserExists);
|
|
|
|
router.route('/:id')
|
|
.get(protect, admin, getUserById)
|
|
.put(protect, admin, updateUser)
|
|
.delete(protect, admin, deleteUser);
|
|
|
|
router.post('/:id/revoke-sessions', protect, admin, adminRevokeUserSessions);
|
|
router.post('/:id/anonymize', protect, admin, anonymizeUser);
|
|
|
|
module.exports = router; |