meteor/meteor

import { Accounts } from 'meteor/accounts-base';

// Used in the various functions below to handle errors consistently
const reportError = (error, callback) => {
  if (callback) {
    callback(error);
  } else {
    throw error;
  }
};

/**
 * @summary Verify if the logged user has 2FA enabled
 * @locus Client
 * @param {Function} [callback] Called with a boolean on success that indicates whether the user has
 *    or not 2FA enabled, or with a single `Error` argument on failure.
 */
Accounts.has2faEnabled = callback => {
  Accounts.connection.call('has2faEnabled', callback);
};

/**
 * @summary Generates a svg QR code and save secret on user
 * @locus Client
 * @param {String} appName It's the name of your app that will show up when the user scans the QR code.
 * @param {Function} callback
 *   Called with a single `Error` argument on failure.
 *   Or, on success, called with an object containing the QR code in SVG format (svg),
 *   the QR secret (secret), and the URI so the user can manually activate the 2FA without reading the QR code (uri).
 */
Accounts.generate2faActivationQrCode = (appName, callback) => {
  if (!appName) {
    throw new Meteor.Error(
      500,
      'An app name is necessary when calling the function generate2faActivationQrCode'
    );
  }

  if (!callback) {
    throw new Meteor.Error(
      500,
      'A callback is necessary when calling the function generate2faActivationQrCode so a QR code can be provided'
    );
  }

  Accounts.connection.call('generate2faActivationQrCode', appName, callback);
};

/**
 * @summary Enable the user 2FA
 * @locus Client
 * @param {String} code Code received from the authenticator app.
 * @param {Function} [callback] Optional callback.
 *   Called with no arguments on success, or with a single `Error` argument
 *   on failure.
 */
Accounts.enableUser2fa = (code, callback) => {
  if (!code) {
    return reportError(
      new Meteor.Error(400, 'Must provide a code to validate'),
      callback
    );
  }
  Accounts.connection.call('enableUser2fa', code, callback);
};

/**
 * @summary Disable user 2FA
 * @locus Client
 * @param {Function} [callback] Optional callback.
 *   Called with no arguments on success, or with a single `Error` argument
 *   on failure.
 */
Accounts.disableUser2fa = callback => {
  Accounts.connection.call('disableUser2fa', callback);
};