feat: disable 2fa cli

app/lib/auth.ts

@@ -46,7 +46,7 @@ const createBetterAuth = (secret: string) =>
 		session: {
 			modelName: "sessionsTable",
 		},
-		plugins: [username({})],
+		plugins: [username(), twoFactor()],
 		advanced: {
 			disableOriginCheck: true,
 		},

app/server/cli/commands/disable-2fa.ts

@@ -0,0 +1,74 @@
+import { select } from "@inquirer/prompts";
+import { Command } from "commander";
+import { eq } from "drizzle-orm";
+import { toMessage } from "~/server/utils/errors";
+import { db } from "../../db/db";
+import { twoFactor, usersTable } from "../../db/schema";
+
+const listUsers = () => {
+	return db
+		.select({ id: usersTable.id, username: usersTable.username })
+		.from(usersTable);
+};
+
+const disable2FA = async (username: string) => {
+	const [user] = await db
+		.select()
+		.from(usersTable)
+		.where(eq(usersTable.username, username));
+
+	if (!user) {
+		throw new Error(`User "${username}" not found`);
+	}
+
+	if (!user.twoFactorEnabled) {
+		throw new Error(`User "${username}" does not have 2FA enabled`);
+	}
+
+	await db.transaction(async (tx) => {
+		await tx
+			.update(usersTable)
+			.set({ twoFactorEnabled: false })
+			.where(eq(usersTable.id, user.id));
+		await tx.delete(twoFactor).where(eq(twoFactor.userId, user.id));
+	});
+};
+
+export const disable2FACommand = new Command("disable-2fa")
+	.description("Disable two-factor authentication for a user")
+	.option("-u, --username <username>", "Username of the account")
+	.action(async (options) => {
+		console.log("\n🔐 Zerobyte 2FA Disable\n");
+
+		let username = options.username;
+
+		if (!username) {
+			const users = await listUsers();
+
+			if (users.length === 0) {
+				console.error("❌ No users found in the database.");
+				console.log(
+					"   Please create a user first by starting the application.",
+				);
+				process.exit(1);
+			}
+
+			username = await select({
+				message: "Select user to disable 2FA for:",
+				choices: users.map((u) => ({ name: u.username, value: u.username })),
+			});
+		}
+
+		try {
+			await disable2FA(username);
+			console.log(
+				`\n✅ Two-factor authentication has been disabled for user "${username}".`,
+			);
+			console.log("   The user can re-enable 2FA from their account settings.");
+		} catch (error) {
+			console.error(`\n❌ Failed to disable 2FA: ${toMessage(error)}`);
+			process.exit(1);
+		}
+
+		process.exit(0);
+	});

app/server/cli/index.ts

@@ -1,10 +1,12 @@
 import { Command } from "commander";
+import { disable2FACommand } from "./commands/disable-2fa";
 import { resetPasswordCommand } from "./commands/reset-password";
 
 const program = new Command();
 
 program.name("zerobyte").description("Zerobyte CLI - Backup automation tool built on top of Restic").version("1.0.0");
 program.addCommand(resetPasswordCommand);
+program.addCommand(disable2FACommand);
 
 export async function runCLI(argv: string[]): Promise<boolean> {
 	const args = argv.slice(2);