Function verifyPasscode

packages/core/src/libraries/passcode.ts:123–169

(
    jti: string | undefined,
    type: TemplateType,
    code: string,
    payload: { phone: string } | { email: string }
  )

  // eslint-disable-next-line complexity
  const verifyPasscode = async (
    jti: string | undefined,
    type: TemplateType,
    code: string,
    payload: { phone: string } | { email: string }
  ): Promise<void> => {
    const passcode = jti
      ? // Session based flows. E.g. SignIn, Register, etc.
        await findUnconsumedPasscodeByJtiAndType(jti, type)
      : // Generic flow. E.g. Triggered by management API
        await findUnconsumedPasscodeByIdentifierAndType({ type, ...payload });

    if (!passcode) {
      throw new RequestError('verification_code.not_found');
    }

    if ('phone' in payload && passcode.phone !== payload.phone) {
      throw new RequestError('verification_code.phone_mismatch');
    }

    if ('email' in payload && passcode.email !== payload.email) {
      throw new RequestError('verification_code.email_mismatch');
    }

    const { verificationCodePolicy } =
      await queries.signInExperiences.findDefaultSignInExperience();
    const expirationMs =
      (verificationCodePolicy.expirationDuration ??
        defaultVerificationCodePolicy.expirationDuration) * 1000;
    const maxTryCount =
      verificationCodePolicy.maxRetryAttempts ?? defaultVerificationCodePolicy.maxRetryAttempts;

    if (passcode.createdAt + expirationMs < Date.now()) {
      throw new RequestError('verification_code.expired');
    }

    if (passcode.tryCount >= maxTryCount) {
      throw new RequestError('verification_code.exceed_max_try');
    }

    if (code !== passcode.code) {
      await increasePasscodeTryCount(passcode.id);
      throw new RequestError('verification_code.code_mismatch');
    }

    await consumePasscode(passcode.id);
  };

  /**
   * Build the context information for the verification code email template.