fix: a VPN user downloads the own OpenVPN client profile through /account, with the current password and code.

debian-package/src/usr/lib/vpn-router/web

@@ -1048,12 +1048,14 @@ def account(name, method, path, body):
       PUT  /account/passkeys   store the passkey: {"id", "credential", "label"?}, credential the browser's answer
       DELETE /account/passkeys/<id>
                                remove a passkey
+      POST   /account/profile  the user's OpenVPN client profile: {"current_password", "current_code"?}; {"name",
+                               "profile"}
       POST   /account/apple-profile
                                the user's Apple configuration profile of IKEv2 road-warrior access:
                                {"current_password", "current_code"?, "password"}, password encrypting the user's key in
                                it; {"name", "profile"}
 
-    A change but the removal of a passkey, and the Apple profile, need the current password and, for an enrolled user, a
+    A change but the removal of a passkey, and the profiles, need the current password and, for an enrolled user, a
     current code; a wrong
     one is 403 and counts as a failed login. A password change revokes the user's refresh tokens.
     """
@@ -1064,13 +1066,13 @@ def account(name, method, path, body):
     removing = method == 'DELETE' and path.startswith('/account/passkeys/') and len(path.strip('/').split('/')) == 3
     if not removing and route not in (('GET', '/account'), ('PUT', '/account/password'), ('POST', '/account/otp'),
                                       ('PUT', '/account/otp'), ('POST', '/account/passkeys'), ('PUT', '/account/passkeys'),
-                                      ('POST', '/account/apple-profile')):
+                                      ('POST', '/account/profile'), ('POST', '/account/apple-profile')):
         return 404, {'error': f'no route {method} {path}'}
     try:
         if route == ('PUT', '/account/password'):
             vpnrouter_users.check_password(body.get('password'))
         if route in (('PUT', '/account/password'), ('PUT', '/account/otp'), ('POST', '/account/passkeys'),
-                     ('POST', '/account/apple-profile')):
+                     ('POST', '/account/profile'), ('POST', '/account/apple-profile')):
             vpnrouter_users.login(name, body.get('current_password'), body.get('current_code'))
         with vpnrouter_users.session() as connection:
             if route == ('GET', '/account'):
@@ -1080,6 +1082,8 @@ def account(name, method, path, body):
                 document = vpnrouter_users.passwd(connection, name, body['password'])
             elif route == ('POST', '/account/otp'):
                 document = vpnrouter_users.otp_new(connection, name)
+            elif route == ('POST', '/account/profile'):
+                document = vpnrouter_users.profile(connection, name)
             elif route == ('POST', '/account/apple-profile'):
                 document = vpnrouter_users.apple_profile(connection, name, body.get('password'))
             elif route == ('POST', '/account/passkeys'):