upstream-rocketchat/apps/meteor/server/lib/2fa/code/EmailCheckForOAuth.ts

import { TwoFactorChallenges } from '@rocket.chat/models';
import { Meteor } from 'meteor/meteor';

import { EmailCheck } from './EmailCheck';
import type { TwoFactorUser } from './ICodeCheck';

export class EmailCheckForOAuth extends EmailCheck {
	public override readonly name = 'email-oauth';

	public readonly method = 'email';

	public async sendTwoFactorChallenge(user: TwoFactorUser): Promise<string> {
		const challengeId = await TwoFactorChallenges.createTwoFactorChallenge(user._id, 'email');
		await this.sendEmailCode(user);
		return challengeId;
	}

	public async verifyEmailTwoFactorChallenge(user: TwoFactorUser, challengeId: string, code: string): Promise<boolean> {
		const challenge = await TwoFactorChallenges.findOneByPendingChallengeId(challengeId);
		if (!challenge) {
			return false;
		}

		if (challenge.expireAt && challenge.expireAt < new Date()) {
			throw new Meteor.Error('error-challenge-expired', 'challenge expired');
		}

		const isCodeValid = await this.verify(user, code);

		if (!isCodeValid) {
			return false;
		}

		await TwoFactorChallenges.removeByPendingChallengeId(challengeId);

		return true;
	}
}