Catch OTP errors

server/core/helpers/otp.ts

@@ -1,6 +1,7 @@
-import { Secret, TOTP } from 'otpauth'
 import { CONFIG } from '@server/initializers/config.js'
 import { WEBSERVER } from '@server/initializers/constants.js'
+import { Secret, TOTP } from 'otpauth'
+import { logger } from './logger.js'
 import { decrypt } from './peertube-crypto.js'
 
 async function isOTPValid (options: {
@@ -9,6 +10,7 @@ async function isOTPValid (options: {
 }) {
   const { token, encryptedSecret } = options
 
+  try {
     const secret = await decrypt(encryptedSecret, CONFIG.SECRETS.PEERTUBE)
 
     const totp = new TOTP({
@@ -25,6 +27,11 @@ async function isOTPValid (options: {
     if (delta === null) return false
 
     return true
+  } catch (err) {
+    logger.error('Cannot decrypt/validate OTP', { err })
+
+    return false
+  }
 }
 
 function generateOTPSecret (email: string) {
@@ -42,8 +49,7 @@ function generateOTPSecret (email: string) {
 }
 
 export {
-  isOTPValid,
+  generateOTPSecret, isOTPValid
-  generateOTPSecret
 }
 
 // ---------------------------------------------------------------------------