twoFactorAuth.js

// /imports/api/methods/twoFactorAuth.js

import { Meteor } from 'meteor/meteor';
import { ValidatedMethod } from 'meteor/mdg:validated-method';
import otplib from 'otplib';

const userIsLoggedIn = (userId: string) => {
  if (!userId) {
    throw new Meteor.Error('users.not-authorized');
  }
};

export const generateSecret = new ValidatedMethod({
  name: 'twoFactor.generateSecret',
  validate: null,
  run() {
    userIsLoggedIn(this.userId);

    if (Meteor.user().twoFactorEnabled) {
      throw new Meteor.Error('two-factor.generateSecret.already-enabled');
    }

    if (this.isSimulation) return null;
    const secret = otplib.authenticator.generateSecret();
    Meteor.users.update(this.userId, { $set: { 'services.twoFactorSecret': secret } });
    return secret;
  },
});