badblocks/personal-site
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

more dev work

Browse source
This commit is contained in:
badblocks 2026-07-11 11:06:10 -07:00
parent 84261c9537
commit 441056cabc
Signed by: badblocks
SSH key fingerprint: SHA256:hEcM6BP4hKm9F7WsomNuXSBpPn2BSDnFzPSl3y1NerQ
12 changed files with 59 additions and 80 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/lib/Otp.ts
View file

@ -1,5 +1,6 @@
import { authenticator } from "otplib";
import { createHash } from "crypto";
import { createHmac } from "crypto";
import base32 from "thirty-two";
const submissionTimestamps = new Map<string, number[]>();
const otpRequestTimestamps = new Map<string, number[]>();
@ -52,9 +53,9 @@ function getUserSecret(phoneNumber: string, salt: string): string {
"Phone number and salt are required to generate a user secret.",
);
}
return createHash("sha256")
.update(phoneNumber + salt)
.digest("hex");
const digest = createHmac("sha256", salt).update(phoneNumber).digest("hex");
return base32.encode(digest).toString().replace(/=/g, "");
}
export function normalizePhone(phone: string) {