Function verify_otp_from_web

default/methods/user/one_time_pass.py:114–158

()

@routes.route('/api/user/otp/verify', methods=['POST'])
def verify_otp_from_web():

	with sessionMaker.session_scope() as session:

		data = request.get_json(force=True)

		proposed_otp_code = data.get('otp', None)
		otp_current_session = data.get('otp_current_session', None)
		email = data.get('email', None)

		user = User.get_by_email(session, email)
		if user is None:
			return jsonify(error="No user"), 200, {'ContentType':'application/json'}

		if user.otp_current_session_expiry <= time.time():
			User.new_login_history(	session=session,
									success=False,
									otp_success=False,
									remote_address=request.remote_addr,
									user_id=user.id)
			return jsonify(error="Please login again, session expired"), 200, {'ContentType':'application/json'}

		if user.otp_current_session != otp_current_session:
			User.new_login_history(	session=session,
									success=False,
									otp_success=False,
									remote_address=request.remote_addr,
									user_id=user.id)
			return jsonify(error="Please login again, session invalid"), 200, {'ContentType':'application/json'}


		if OneTimePass.verify_otp(user, proposed_otp_code) is True:

			User.new_login_history(	session=session,
									success=True,
									otp_success=True,
									remote_address=request.remote_addr,
									user_id=user.id)

			setSecureCookie(user)

			return jsonify(user=user.serialize(), success = True), 200, {'ContentType':'application/json'}


		return jsonify(error="Invalid code"), 200, {'ContentType':'application/json'}