server/api/authLocal/authLocal.controller.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x77d2=['save','xCally\x20Motion\x20Password\x20Reset','You\x20are\x20receiving\x20this\x20because\x20you\x20(or\x20someone\x20else)\x20have\x20requested\x20the\x20reset\x20of\x20the\x20password\x20for\x20your\x20account.\x0a\x0a','Please\x20click\x20on\x20the\x20following\x20link,\x20or\x20paste\x20this\x20into\x20your\x20browser\x20to\x20complete\x20the\x20process:\x0a\x0a','https://','If\x20you\x20did\x20not\x20request\x20this,\x20please\x20ignore\x20this\x20email\x20and\x20your\x20password\x20will\x20remain\x20unchanged.\x0a','status','send','params','token','now','Password\x20reset\x20token\x20is\x20invalid\x20or\x20has\x20expired.','securePassword','passwordHistoryLimit','enforcePasswordHistory','previousPasswords','validatePasswordHistory','password','resetPasswordToken','resetPasswordExpires','Password\x20reset!','use','util','passport-local','Strategy','jayson/promise','lodash','moment','../../mysqldb','../../components/auth/service','http','Setting','findOne','allowedLoginAttempts','blockDuration','then','name','disabled','blocked','blockedAt','loginAttempts','admin','user','Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.','add','minutes','clearBlockUser','getLicense','catch','MailAccount','find','email','MailServerOut','Smtp','CloudProvider','getSmtpOptions','format','SendMail','error','SendMail\x20error:\x20%s.\x20Please\x20contact\x20your\x20Administrator!','message','login','authenticate','local-login','Something\x20went\x20wrong,\x20please\x20try\x20again.','role','signToken','json','forgot','Email\x20parameter\x20is\x20missing','generate','body','trim','User','This\x20email\x20is\x20not\x20registered.','The\x20user\x20is\x20disabled.\x20Please\x20contact\x20the\x20administrator.'];(function(_0x42f247,_0x5bbeca){var _0x411317=function(_0x240bd6){while(--_0x240bd6){_0x42f247['push'](_0x42f247['shift']());}};_0x411317(++_0x5bbeca);}(_0x77d2,0x1de));var _0x277d=function(_0x27af45,_0x1b57aa){_0x27af45=_0x27af45-0x0;var _0x18df21=_0x77d2[_0x27af45];return _0x18df21;};'use strict';var util=require(_0x277d('0x0'));var passport=require('passport');var LocalStrategy=require(_0x277d('0x1'))[_0x277d('0x2')];var jayson=require(_0x277d('0x3'));var _=require(_0x277d('0x4'));var rs=require('randomstring');var moment=require(_0x277d('0x5'));var db=require(_0x277d('0x6'))['db'];var authService=require(_0x277d('0x7'));var utils=require('../../config/utils');var client=jayson['client'][_0x277d('0x8')]({'port':0x232b});function localAuthenticate(_0x1bde23,_0x6924df,_0x2fcf0b,_0x10f0f1){var _0x3967b7,_0x4bab89;return db[_0x277d('0x9')][_0x277d('0xa')]({'where':{'id':0x1},'attributes':[_0x277d('0xb'),_0x277d('0xc')],'raw':!![]})[_0x277d('0xd')](function(_0x50099e){_0x3967b7=_0x50099e;return _0x1bde23[_0x277d('0xa')]({'attributes':['id',_0x277d('0xe'),'password','salt','role',_0x277d('0xf'),_0x277d('0x10'),_0x277d('0x11'),_0x277d('0x12')],'where':{'name':_0x6924df,'role':{'$or':[_0x277d('0x13'),_0x277d('0x14'),'agent']}}});})[_0x277d('0xd')](function(_0x336486){if(!_0x336486||_0x336486&&_0x336486[_0x277d('0xe')]!==_0x6924df){throw new Error('Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.');}else{_0x4bab89=_0x336486;return _0x4bab89;}})[_0x277d('0xd')](function(){_0x4bab89['authenticate'](_0x2fcf0b,function(_0x36cbb2,_0x91c98f){var _0xd0ab76=_0x4bab89[_0x277d('0x12')]+0x1;if(_0x36cbb2){return _0x10f0f1(_0x36cbb2);}else if(!_0x91c98f){if(_0x4bab89[_0x277d('0xf')]){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}else if(_0x3967b7['allowedLoginAttempts']>0x0){if(_0x4bab89[_0x277d('0x10')]){if(_0x3967b7[_0x277d('0xc')]>0x0){if(moment(_0x4bab89[_0x277d('0x11')])[_0x277d('0x16')](_0x3967b7[_0x277d('0xc')],_0x277d('0x17'))>moment()){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}else{return utils[_0x277d('0x18')](_0x4bab89,_0xd0ab76,![],null)[_0x277d('0xd')](function(){return _0x10f0f1(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});});}}else{return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}}else{if(_0xd0ab76>=_0x3967b7[_0x277d('0xb')]){return utils['clearBlockUser'](_0x4bab89,0x0,!![],moment())['then'](function(){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});});}else{return utils[_0x277d('0x18')](_0x4bab89,_0xd0ab76,![],null)['then'](function(){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});});}}}else{return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}}else{if(_0x4bab89['disabled']){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}else if(_0x3967b7['allowedLoginAttempts']>0x0){if(_0x4bab89[_0x277d('0x10')]){if(_0x3967b7[_0x277d('0xc')]>0x0){if(moment(_0x4bab89[_0x277d('0x11')])[_0x277d('0x16')](_0x3967b7[_0x277d('0xc')],_0x277d('0x17'))>moment()){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}else{return utils[_0x277d('0x18')](_0x4bab89,0x0,![],null)[_0x277d('0xd')](function(){return utils[_0x277d('0x19')](_0x4bab89);})['then'](function(){return _0x10f0f1(null,_0x4bab89);});}}else{return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}}else{return utils[_0x277d('0x18')](_0x4bab89,0x0,![],null)[_0x277d('0xd')](function(){return utils[_0x277d('0x19')](_0x4bab89);})[_0x277d('0xd')](function(){return _0x10f0f1(null,_0x4bab89);})['catch'](function(_0x2b24ac){return _0x10f0f1(null,![],_0x2b24ac);});}}else{if(_0x4bab89[_0x277d('0x10')]){return _0x10f0f1(null,![],{'message':_0x277d('0x15')});}else{return utils['getLicense'](_0x4bab89)[_0x277d('0xd')](function(){return _0x10f0f1(null,_0x4bab89);});}}}});})[_0x277d('0x1a')](function(_0x2d5d0d){return _0x10f0f1(null,![],_0x2d5d0d);});}function sendServiceMail(_0x164e4e){return db[_0x277d('0x1b')][_0x277d('0x1c')]({'where':{'service':!![]},'attributes':['id','name',_0x277d('0x1d')],'include':[{'model':db[_0x277d('0x1e')],'as':_0x277d('0x1f'),'include':[{'model':db[_0x277d('0x20')],'as':_0x277d('0x20')}]}]})[_0x277d('0xd')](function(_0x5c4acd){if(!_0x5c4acd){throw new Error('Unable\x20to\x20find\x20a\x20configured\x20SMTP\x20service!');}var _0x48d4ea=_0x5c4acd[_0x277d('0x21')]();var _0x23570c={'account':_0x48d4ea,'message':_['merge']({'from':util[_0x277d('0x22')]('\x22%s\x22\x20<%s>',_0x5c4acd['name'],_0x5c4acd[_0x277d('0x1d')]||_0x5c4acd[_0x277d('0x1f')][_0x277d('0x14')])},_0x164e4e)};return client['request'](_0x277d('0x23'),_0x23570c);})[_0x277d('0xd')](function(_0x2b7fd8){if(_0x2b7fd8[_0x277d('0x24')]){throw new Error(util[_0x277d('0x22')](_0x277d('0x25'),_0x2b7fd8[_0x277d('0x24')]['message']||JSON['stringify'](_0x2b7fd8[_0x277d('0x24')])));}return!![];});}function handleError(_0x1eebe4,_0x491e95,_0x2c6218){return _0x1eebe4['status'](_0x491e95||0x1f4)['send']({'message':_0x2c6218?_0x2c6218[_0x277d('0x26')]||_0x2c6218:''});}exports[_0x277d('0x27')]=function(_0x253641,_0x57b000,_0x4fe75c){passport[_0x277d('0x28')](_0x277d('0x29'),function(_0xf991c7,_0x5a0fc7,_0xcb166d){var _0x522fa5=_0xf991c7||_0xcb166d;if(_0x522fa5){return handleError(_0x57b000,0x191,_0x522fa5);}if(!_0x5a0fc7){return handleError(_0x57b000,0x194,{'message':_0x277d('0x2a')});}else{var _0x31a751={'payload':{'id':_0x5a0fc7['id'],'role':_0x5a0fc7[_0x277d('0x2b')]},'options':{'expiresIn':0x15180}};return authService[_0x277d('0x2c')](_0x31a751)['then'](function(_0x5aac48){_0x57b000[_0x277d('0x2d')]({'id':_0x5a0fc7['id'],'token':_0x5aac48,'statusCall':'','isAlreadyLogged':_0x5a0fc7['online']});});}})(_0x253641,_0x57b000,_0x4fe75c);};exports[_0x277d('0x2e')]=function(_0x34bd7a,_0x47cb4b){if(!_0x34bd7a['body'][_0x277d('0x1d')]){return handleError(_0x47cb4b,0x1f4,{'message':_0x277d('0x2f')});}var _0x3235a8=rs[_0x277d('0x30')]();_0x34bd7a[_0x277d('0x31')][_0x277d('0x1d')]=_0x34bd7a[_0x277d('0x31')][_0x277d('0x1d')][_0x277d('0x32')]()['toLowerCase']();var _0x30d336;return db[_0x277d('0x9')]['findOne']({'where':{'id':0x1},'attributes':['allowedLoginAttempts',_0x277d('0xc')],'raw':!![]})[_0x277d('0xd')](function(_0x1e6e19){_0x30d336=_0x1e6e19;return db[_0x277d('0x33')][_0x277d('0x1c')]({'where':{'email':_0x34bd7a[_0x277d('0x31')][_0x277d('0x1d')]}});})[_0x277d('0xd')](function(_0x29b72e){if(!_0x29b72e){throw new Error(_0x277d('0x34'));}if(_0x29b72e[_0x277d('0xf')]){throw new Error(_0x277d('0x35'));}if(_0x29b72e[_0x277d('0x10')]){if(moment(_0x29b72e[_0x277d('0x11')])[_0x277d('0x16')](_0x30d336[_0x277d('0xc')],'minutes')>moment()){throw new Error('The\x20user\x20is\x20blocked.\x20Please\x20contact\x20the\x20administrator.');}else{_0x29b72e[_0x277d('0x10')]=![];_0x29b72e['blockedAt']=null;}}_0x29b72e['resetPasswordToken']=_0x3235a8;_0x29b72e['resetPasswordExpires']=Date['now']()+0x36ee80;return _0x29b72e[_0x277d('0x36')]();})[_0x277d('0xd')](function(){return sendServiceMail({'to':_0x34bd7a[_0x277d('0x31')]['email'],'subject':_0x277d('0x37'),'text':_0x277d('0x38')+_0x277d('0x39')+_0x277d('0x3a')+_0x34bd7a['headers']['host']+'/reset/'+_0x3235a8+'\x0a\x0a'+_0x277d('0x3b')});})[_0x277d('0xd')](function(){_0x47cb4b[_0x277d('0x3c')](0xc8)[_0x277d('0x3d')]({'message':'Reset\x20Email\x20sent!'});})[_0x277d('0x1a')](function(_0x3b44a7){return handleError(_0x47cb4b,0x1f4,_0x3b44a7);});};exports['reset']=function(_0x4cd41b,_0x3e4f09){return db['User'][_0x277d('0x1c')]({'where':{'resetPasswordToken':_0x4cd41b[_0x277d('0x3e')][_0x277d('0x3f')],'resetPasswordExpires':{'$gt':Date[_0x277d('0x40')]()}}})[_0x277d('0xd')](function(_0x19f368){if(!_0x19f368){throw new Error(_0x277d('0x41'));}return db['Setting'][_0x277d('0xa')]({'attributes':['id',_0x277d('0x42'),'enforcePasswordHistory',_0x277d('0x43')]})[_0x277d('0xd')](function(_0x187c69){if(_0x187c69['securePassword'])authService['validatePasswordPattern'](_0x4cd41b[_0x277d('0x31')]['password']);if(!_0x187c69[_0x277d('0x44')]||!_0x19f368[_0x277d('0x45')])return _0x19f368;authService[_0x277d('0x46')](_0x4cd41b[_0x277d('0x31')][_0x277d('0x47')],_0x19f368['previousPasswords'],_0x187c69[_0x277d('0x43')]);return _0x19f368;})[_0x277d('0xd')](function(){_0x19f368[_0x277d('0x47')]=_0x4cd41b[_0x277d('0x31')][_0x277d('0x47')];_0x19f368[_0x277d('0x48')]=null;_0x19f368[_0x277d('0x49')]=null;return _0x19f368['save']();});})['then'](function(){_0x3e4f09[_0x277d('0x3c')](0xc8)['send']({'message':_0x277d('0x4a')});})['catch'](function(_0x1f2cb3){return handleError(_0x3e4f09,0x1f4,_0x1f2cb3);});};passport[_0x277d('0x4b')]('local-login',new LocalStrategy({'usernameField':_0x277d('0xe'),'passwordField':_0x277d('0x47')},function(_0x256835,_0x37468c,_0x503e12){return localAuthenticate(db['User'],_0x256835,_0x37468c,_0x503e12);}));