appPassword: add expiry

2026-02-12 12:58:50 +01:00
parent 93a0063941
commit e9c3e42aa6
16 changed files with 226 additions and 62 deletions
@@ -619,7 +619,8 @@ async function verifyAppPassword(userId, password, identifier) {

    const results = await appPasswords.list(userId);

-    const hashedPasswords = results.filter(r => r.identifier === identifier).map(r => r.hashedPassword);
+    const now = new Date();
+    const hashedPasswords = results.filter(r => r.identifier === identifier).filter(r => !r.expiresAt || new Date(r.expiresAt) > now).map(r => r.hashedPassword);
    const hash = crypto.createHash('sha256').update(password).digest('base64');

    if (hashedPasswords.includes(hash)) return;