philomena/lib/philomena_web/controllers/session/totp_controller.ex
2019-12-20 16:29:29 -05:00

35 lines
927 B
Elixir

defmodule PhilomenaWeb.Session.TotpController do
use PhilomenaWeb, :controller
alias PhilomenaWeb.LayoutView
alias Philomena.Users.User
alias Philomena.Repo
def new(conn, _params) do
changeset = Pow.Plug.change_user(conn)
render(conn, "new.html", layout: {LayoutView, "two_factor.html"}, changeset: changeset)
end
def create(conn, params) do
conn
|> Pow.Plug.current_user()
|> User.consume_totp_token_changeset(params)
|> Repo.update()
|> case do
{:error, _changeset} ->
{:ok, conn} =
conn
|> Pow.Plug.clear_authenticated_user()
conn
|> put_flash(:error, "Sorry, invalid TOTP token entered. Please sign in again.")
|> redirect(to: Routes.pow_session_path(conn, :new))
{:ok, user} ->
conn
|> PhilomenaWeb.TotpPlug.update_valid_totp_at_for_session(user)
|> redirect(to: "/")
end
end
end