Method remove2faMethod

server/controllers/UserController.js:687–702

(userId, methodId, password)

  }

  async remove2faMethod(userId, methodId, password) {
    const user = await this.findById(userId);

    const isCorrect = await bcrypt.compare(password, user.password);
    if (!isCorrect) {
      return new Promise((resolve, reject) => reject(new Error(401)));
    }

    return db.User2fa.destroy({ where: { user_id: userId, id: methodId } })
      .then(() => {
        return new Promise((resolve) => resolve(true));
      })
      .catch((error) => {
        return new Promise((resolve, reject) => reject(error));
      });
  }

  validate2faToken(userId, token) {
    const user2FA = db.User2fa.findOne({ where: { user_id: userId, isEnabled: true } });