imageCaptcha.js

/*
 * Copyright (c) 2014-2020 Bjoern Kimminich.
 * SPDX-License-Identifier: MIT
 */

const svgCaptcha = require('svg-captcha')
const models = require('../models/index')
const Op = models.Sequelize.Op
const insecurity = require('../lib/insecurity')

function imageCaptchas () {
  return (req, res) => {
    const captcha = svgCaptcha.create({ size: 5, noise: 2, color: true })

    const imageCaptcha = {
      image: captcha.data,
      answer: captcha.text,
      UserId: insecurity.authenticatedUsers.from(req).data.id
    }
    const imageCaptchaInstance = models.ImageCaptcha.build(imageCaptcha)
    imageCaptchaInstance.save().then(() => {
      res.json(imageCaptcha)
    })
  }
}

imageCaptchas.verifyCaptcha = () => (req, res, next) => {
  const user = insecurity.authenticatedUsers.from(req)
  const UserId = user ? user.data ? user.data.id : undefined : undefined
  models.ImageCaptcha.findAll({
    limit: 1,
    where: {
      UserId: UserId,
      createdAt: {
        [Op.gt]: new Date(new Date() - 300000)
      }
    },
    order: [['createdAt', 'DESC']]
  }).then(captchas => {
    if (!captchas[0] || req.body.answer === captchas[0].dataValues.answer) {
      next()
    } else {
      res.status(401).send(res.__('Wrong answer to CAPTCHA. Please try again.'))
    }
  })
}

module.exports = imageCaptchas