add rate limiting and 2fa hardening

storage/storage.go

@@ -185,7 +185,7 @@ func SetUserTwoFactorSecret(userID, secret string) error {
 	return err
 }
 
-func EnableUserTwoFactorWithRecoveryCodes(userID string, recoveryCodeHashes []string) error {
+func EnableUserTwoFactorWithSecretAndRecoveryCodes(userID, twoFactorSecret string, recoveryCodeHashes []string) error {
 	tx, err := DB.Begin()
 	if err != nil {
 		return err
@@ -206,7 +206,7 @@ func EnableUserTwoFactorWithRecoveryCodes(userID string, recoveryCodeHashes []st
 		}
 	}
 
-	if _, err := tx.Exec("UPDATE users SET two_factor_enabled = 1 WHERE id = ?", userID); err != nil {
+	if _, err := tx.Exec("UPDATE users SET two_factor_enabled = 1, two_factor_secret = ? WHERE id = ?", twoFactorSecret, userID); err != nil {
 		return err
 	}