Inna
20e1d5a6b5
Mueve la página de login a /log-in y actualiza todas las referencias (enlace CONECTAR del header y los redirect de auth de ~45 páginas). /login ahora da 404. La API /api/auth/login no se toca (solo la ruta de página). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
188 lines
7.3 KiB
TypeScript
188 lines
7.3 KiB
TypeScript
import crypto from 'node:crypto'
|
|
import type { RowDataPacket } from 'mysql2'
|
|
import { db, DB } from './db'
|
|
import { normalizeEmail, bnetMakeRegistration } from './bnet'
|
|
import { sendMail } from './mail'
|
|
|
|
const GMAIL_RE = /^[a-zA-Z0-9._%+-]+@gmail\.com$/
|
|
|
|
export interface Result {
|
|
success: boolean
|
|
error?: string
|
|
redirect?: string
|
|
}
|
|
|
|
function emailShell(title: string, bodyHtml: string): string {
|
|
return `<!DOCTYPE html><html lang="es"><body style="font-family:Arial,sans-serif;background:#1b120b;color:#e8dccb;padding:24px">
|
|
<div style="max-width:600px;margin:0 auto;background:#241812;border:1px solid #4a3320;border-radius:8px;padding:28px">
|
|
<h1 style="color:#d79602;margin:0 0 8px">Nova WoW</h1><h2 style="margin:0 0 16px">${title}</h2>${bodyHtml}
|
|
</div></body></html>`
|
|
}
|
|
|
|
/**
|
|
* Recuperación por email/usuario (anti-enumeración: respuesta genérica siempre).
|
|
* `value` es el nombre de usuario (type=password) o el correo (resto).
|
|
*/
|
|
export async function requestRecovery(type: string, value: string): Promise<Result> {
|
|
value = (value || '').trim()
|
|
const site = process.env.SITE_URL || ''
|
|
|
|
// La contraseña se recupera por NOMBRE DE USUARIO (p.ej. 15#1): se resuelve el
|
|
// correo Battle.net asociado y se envía el enlace de restablecimiento.
|
|
if (type === 'password') {
|
|
if (!value || value.length > 20) return { success: false, error: 'invalidUsername' }
|
|
try {
|
|
const [acc] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT battlenet_account FROM account WHERE username = ? LIMIT 1',
|
|
[value],
|
|
)
|
|
const bnetId = acc[0]?.battlenet_account
|
|
if (bnetId) {
|
|
const [bn] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT email FROM battlenet_accounts WHERE id = ?',
|
|
[bnetId],
|
|
)
|
|
const email = bn[0]?.email
|
|
if (email) {
|
|
const token = crypto.randomBytes(32).toString('hex')
|
|
await db(DB.default).query(
|
|
'INSERT INTO home_passwordreset (email, token, created_at, used) VALUES (?, ?, NOW(), 0)',
|
|
[email, token],
|
|
)
|
|
const link = `${site}/reset-password?token=${token}`
|
|
await sendMail(
|
|
email,
|
|
'Restablecer contraseña - Nova WoW',
|
|
emailShell(
|
|
'Restablecer contraseña',
|
|
`<p>Pulsa para elegir una nueva contraseña (válido 1 hora):</p>
|
|
<p><a href="${link}" style="display:inline-block;padding:12px 22px;background:#d79602;color:#1b120b;text-decoration:none;border-radius:6px;font-weight:bold">Restablecer</a></p>
|
|
<p style="font-size:13px;word-break:break-all"><a href="${link}" style="color:#2471a9">${link}</a></p>`,
|
|
),
|
|
)
|
|
}
|
|
}
|
|
} catch {
|
|
/* acore no disponible: respuesta genérica igualmente */
|
|
}
|
|
return { success: true }
|
|
}
|
|
|
|
// El resto se recupera por CORREO.
|
|
const email = value
|
|
if (!email || !GMAIL_RE.test(email)) return { success: false, error: 'invalidEmail' }
|
|
|
|
if (type === 'securitytoken') {
|
|
try {
|
|
const [bn] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT id FROM battlenet_accounts WHERE email = ?',
|
|
[normalizeEmail(email)],
|
|
)
|
|
if (bn[0]) {
|
|
const [games] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT id, username FROM account WHERE battlenet_account = ? ORDER BY battlenet_index',
|
|
[bn[0].id],
|
|
)
|
|
const ids = games.map((g) => g.id)
|
|
if (ids.length) {
|
|
const placeholders = ids.map(() => '?').join(',')
|
|
const [toks] = await db(DB.default).query<RowDataPacket[]>(
|
|
`SELECT user_id, token FROM home_securitytoken WHERE user_id IN (${placeholders})`,
|
|
ids,
|
|
)
|
|
if (toks.length) {
|
|
const nameById = new Map(games.map((g) => [g.id, g.username]))
|
|
const list = toks
|
|
.map((r) => `<li><strong>${nameById.get(r.user_id) ?? r.user_id}</strong>: <code>${r.token}</code></li>`)
|
|
.join('')
|
|
await sendMail(
|
|
email,
|
|
'Tu Token de seguridad - Nova WoW',
|
|
emailShell(
|
|
'Tu Token de seguridad',
|
|
`<p>Token(s) de seguridad de las cuentas asociadas a <strong>${email}</strong>:</p><ul>${list}</ul>
|
|
<p style="font-size:13px;color:#b1997f">Consérvalo en un lugar seguro y no lo compartas.</p>`,
|
|
),
|
|
)
|
|
}
|
|
}
|
|
}
|
|
} catch {
|
|
/* ignore */
|
|
}
|
|
return { success: true }
|
|
}
|
|
|
|
if (type === 'accountname') {
|
|
try {
|
|
const [acc] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT id FROM battlenet_accounts WHERE email = ?',
|
|
[normalizeEmail(email)],
|
|
)
|
|
if (acc[0]) {
|
|
const [games] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT username FROM account WHERE battlenet_account = ? ORDER BY battlenet_index',
|
|
[acc[0].id],
|
|
)
|
|
const list = games.map((g) => `<li>${g.username}</li>`).join('') || '<li>—</li>'
|
|
await sendMail(
|
|
email,
|
|
'Tus cuentas de juego - Nova WoW',
|
|
emailShell('Tus cuentas de juego', `<p>Cuentas asociadas a <strong>${email}</strong>:</p><ul>${list}</ul>`),
|
|
)
|
|
}
|
|
} catch {
|
|
/* ignore */
|
|
}
|
|
return { success: true }
|
|
}
|
|
|
|
if (type === 'activation') {
|
|
try {
|
|
const [rows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT hash, password FROM home_accountactivation WHERE email = ? AND old_email IS NULL ORDER BY created_at DESC LIMIT 1',
|
|
[email],
|
|
)
|
|
if (rows[0]) {
|
|
const link = `${site}/activate-account?act=${rows[0].hash}`
|
|
await sendMail(
|
|
email,
|
|
`Activación de la cuenta ${email} - Nova WoW`,
|
|
emailShell('Activa tu cuenta', `<p><a href="${link}" style="color:#d79602">Activar cuenta</a></p><p style="font-size:13px;word-break:break-all">${link}</p>`),
|
|
)
|
|
}
|
|
} catch {
|
|
/* ignore */
|
|
}
|
|
return { success: true }
|
|
}
|
|
|
|
return { success: false, error: 'invalidType' }
|
|
}
|
|
|
|
export async function resetPassword(token: string, newPassword: string, confPassword: string): Promise<Result> {
|
|
const [rows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT id, email, created_at FROM home_passwordreset WHERE token = ? AND used = 0',
|
|
[token],
|
|
)
|
|
const pr = rows[0]
|
|
if (!pr) return { success: false, error: 'invalidLink' }
|
|
if (Date.now() - new Date(pr.created_at).getTime() > 3600_000) return { success: false, error: 'expiredLink' }
|
|
if (!newPassword || newPassword !== confPassword) return { success: false, error: 'passwordMismatch' }
|
|
if (newPassword.length > 16) return { success: false, error: 'passwordTooLong' }
|
|
|
|
try {
|
|
const reg = bnetMakeRegistration(pr.email, newPassword)
|
|
const [res] = await db(DB.auth).query(
|
|
'UPDATE battlenet_accounts SET srp_version = ?, salt = ?, verifier = ? WHERE email = ?',
|
|
[reg.srpVersion, reg.salt, reg.verifier, normalizeEmail(pr.email)],
|
|
)
|
|
// @ts-expect-error affectedRows
|
|
if (!res.affectedRows) return { success: false, error: 'accountNotFound' }
|
|
} catch {
|
|
return { success: false, error: 'genericError' }
|
|
}
|
|
await db(DB.default).query('UPDATE home_passwordreset SET used = 1 WHERE id = ?', [pr.id])
|
|
return { success: true, redirect: '/log-in' }
|
|
}
|