Method UseRecoveryCode

internal/database/two_factors.go:116–133

UseRecoveryCode validates a recovery code of given user and marks it as used if valid. It returns ErrTwoFactorRecoveryCodeNotFound if the code is invalid or already used.

(ctx context.Context, userID int64, code string)

// if valid. It returns ErrTwoFactorRecoveryCodeNotFound if the code is invalid
// or already used.
func (s *TwoFactorsStore) UseRecoveryCode(ctx context.Context, userID int64, code string) error {
	return s.db.WithContext(ctx).Transaction(func(tx *gorm.DB) error {
		var recoveryCode TwoFactorRecoveryCode
		err := tx.Where("user_id = ? AND code = ? AND is_used = ?", userID, code, false).First(&recoveryCode).Error
		if err != nil {
			if err == gorm.ErrRecordNotFound {
				return ErrTwoFactorRecoveryCodeNotFound{Code: code}
			}
			return errors.Wrap(err, "get unused recovery code")
		}

		err = tx.Model(&recoveryCode).Update("is_used", true).Error
		if err != nil {
			return errors.Wrap(err, "mark recovery code as used")
		}
		return nil
	})
}

// generateRecoveryCodes generates N number of recovery codes for 2FA.
func generateRecoveryCodes(userID int64, n int) ([]*TwoFactorRecoveryCode, error) {