24 lines
760 B
TypeScript
24 lines
760 B
TypeScript
import type { SupabaseClient } from '@supabase/supabase-js';
|
|
|
|
const ASSURANCE_LEVEL_2 = 'aal2';
|
|
|
|
/**
|
|
* @name checkRequiresMultiFactorAuthentication
|
|
* @description Checks if the current session requires multi-factor authentication.
|
|
* We do it by checking that the next assurance level is AAL2 and that the current assurance level is not AAL2.
|
|
* @param client
|
|
*/
|
|
export async function checkRequiresMultiFactorAuthentication(
|
|
client: SupabaseClient,
|
|
) {
|
|
const assuranceLevel = await client.auth.mfa.getAuthenticatorAssuranceLevel();
|
|
|
|
if (assuranceLevel.error) {
|
|
throw new Error(assuranceLevel.error.message);
|
|
}
|
|
|
|
const { nextLevel, currentLevel } = assuranceLevel.data;
|
|
|
|
return nextLevel === ASSURANCE_LEVEL_2 && nextLevel !== currentLevel;
|
|
}
|