Claude
7a08546da6
Replace baked-in UOM/MysticMoon/UOMysticmoon branding with a BRAND_* env scheme so one prebuilt image runs as any shard; UOMysticmoon becomes the first tenant that sets these vars rather than a special case in the code. Architecture (chosen because the app ships as a prebuilt image): - server/src/config/brand.js + bot/src/brand.js read BRAND_* once at boot, with Runic Gateway defaults. - Text/colors reach the SPA at RUNTIME through the existing public settings API (settings.model.getPublic -> SiteContext), so no client rebuild. The admin-editable site title + contact email still override BRAND_NAME/email. - SiteContext applies BRAND_ACCENT_COLOR to the --accent CSS var at runtime. - Express templates the built index.html <title>/description/OG/favicon at serve time from BRAND_* (renderIndexHtml in app.js). - Server-side consumers read brand directly: emails, TOTP issuer, API docs, boot logs, HTML error page. Bot uses it for embed color + logs. Assets: logo/hero/favicon delivered from a ./brand:/app/brand bind-mount (BRAND_LOGO/HERO/FAVICON), with neutral defaults baked in; hero falls back to a built-in image when unset. Scope: also genericized package.json names (uomysticmoon-* -> runic-gateway-*) and the DB_NAME/DB_USER/COOKIE_NAME code defaults (runic_gateway/runic/ rg_token). Production keeps its real values by pinning them in .env — see .env.uomysticmoon.example, which reproduces the exact UOMysticmoon identity (proof the substitution works). Changing a deployed COOKIE_NAME invalidates existing sessions, so UOMysticmoon pins uomm_token. Verified: 193 server tests pass, client builds, app.js loads + templates the built index.html, brand transform injects title/description/OG/favicon.
46 lines
1.6 KiB
JavaScript
46 lines
1.6 KiB
JavaScript
// ── TOTP (RFC 6238) helpers ────────────────────────────────────────────────
|
|
//
|
|
// Thin wrapper around speakeasy so the controllers stay small and the verify
|
|
// logic is unit-testable in isolation. TOTP is opt-in per user: we generate a
|
|
// base32 secret, show the user a QR (otpauth URL) to add to their authenticator,
|
|
// confirm one code before enabling, and verify a code at login for users who
|
|
// have it enabled.
|
|
|
|
const speakeasy = require('speakeasy')
|
|
const QRCode = require('qrcode')
|
|
|
|
const brand = require('../config/brand')
|
|
|
|
const ISSUER = process.env.TOTP_ISSUER || brand.name
|
|
|
|
// Generate a new secret. Returns the base32 secret to persist plus the otpauth
|
|
// URL to encode in a QR code.
|
|
function generateSecret(username) {
|
|
const secret = speakeasy.generateSecret({
|
|
length: 20,
|
|
name: `${ISSUER} (${username})`,
|
|
issuer: ISSUER,
|
|
})
|
|
return { base32: secret.base32, otpauthUrl: secret.otpauth_url }
|
|
}
|
|
|
|
// Render an otpauth URL to a PNG data URL for <img src>.
|
|
async function qrDataUrl(otpauthUrl) {
|
|
return QRCode.toDataURL(otpauthUrl)
|
|
}
|
|
|
|
// Verify a user-supplied 6-digit code against a stored base32 secret. A window
|
|
// of 1 tolerates minor clock skew (±30s). Returns false for missing inputs
|
|
// rather than throwing.
|
|
function verifyCode(base32Secret, token) {
|
|
if (!base32Secret || !token) return false
|
|
return speakeasy.totp.verify({
|
|
secret: base32Secret,
|
|
encoding: 'base32',
|
|
token: String(token).trim(),
|
|
window: 1,
|
|
})
|
|
}
|
|
|
|
module.exports = { generateSecret, qrDataUrl, verifyCode, ISSUER }
|