server/api/authLocal/authLocal.controller.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x6287=['role','disabled','blocked','blockedAt','agent','authenticate','loginAttempts','add','Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.','clearBlockUser','minutes','getLicense','catch','find','MailServerOut','CloudProvider','Unable\x20to\x20find\x20a\x20configured\x20SMTP\x20service!','getSmtpOptions','merge','format','\x22%s\x22\x20<%s>','user','request','SendMail','error','SendMail\x20error:\x20%s.\x20Please\x20contact\x20your\x20Administrator!','message','status','send','login','local-login','signToken','online','forgot','body','email','Email\x20parameter\x20is\x20missing','generate','trim','toLowerCase','Setting','User','This\x20email\x20is\x20not\x20registered.','The\x20user\x20is\x20disabled.\x20Please\x20contact\x20the\x20administrator.','The\x20user\x20is\x20blocked.\x20Please\x20contact\x20the\x20administrator.','resetPasswordToken','resetPasswordExpires','now','save','xCally\x20Motion\x20Password\x20Reset','You\x20are\x20receiving\x20this\x20because\x20you\x20(or\x20someone\x20else)\x20have\x20requested\x20the\x20reset\x20of\x20the\x20password\x20for\x20your\x20account.\x0a\x0a','Please\x20click\x20on\x20the\x20following\x20link,\x20or\x20paste\x20this\x20into\x20your\x20browser\x20to\x20complete\x20the\x20process:\x0a\x0a','https://','headers','host','If\x20you\x20did\x20not\x20request\x20this,\x20please\x20ignore\x20this\x20email\x20and\x20your\x20password\x20will\x20remain\x20unchanged.\x0a','Reset\x20Email\x20sent!','reset','params','token','securePassword','passwordHistoryLimit','enforcePasswordHistory','previousPasswords','validatePasswordHistory','Password\x20reset!','use','passport-local','Strategy','jayson/promise','lodash','../../mysqldb','../../components/auth/service','../../config/utils','client','http','findOne','allowedLoginAttempts','blockDuration','then','name','password'];(function(_0xa1f3d,_0x1df2d7){var _0x514c56=function(_0x5f1c02){while(--_0x5f1c02){_0xa1f3d['push'](_0xa1f3d['shift']());}};_0x514c56(++_0x1df2d7);}(_0x6287,0x18b));var _0x7628=function(_0x52ca59,_0x279dda){_0x52ca59=_0x52ca59-0x0;var _0x1ab7e5=_0x6287[_0x52ca59];return _0x1ab7e5;};'use strict';var util=require('util');var passport=require('passport');var LocalStrategy=require(_0x7628('0x0'))[_0x7628('0x1')];var jayson=require(_0x7628('0x2'));var _=require(_0x7628('0x3'));var rs=require('randomstring');var moment=require('moment');var db=require(_0x7628('0x4'))['db'];var authService=require(_0x7628('0x5'));var utils=require(_0x7628('0x6'));var client=jayson[_0x7628('0x7')][_0x7628('0x8')]({'port':0x232b});function localAuthenticate(_0x4c18e9,_0x5fe6fb,_0x4a8a03,_0x188209){var _0x3e37d5,_0x1f3210;return db['Setting'][_0x7628('0x9')]({'where':{'id':0x1},'attributes':[_0x7628('0xa'),_0x7628('0xb')],'raw':!![]})[_0x7628('0xc')](function(_0xfce202){_0x3e37d5=_0xfce202;return _0x4c18e9[_0x7628('0x9')]({'attributes':['id',_0x7628('0xd'),_0x7628('0xe'),'salt',_0x7628('0xf'),_0x7628('0x10'),_0x7628('0x11'),_0x7628('0x12'),'loginAttempts'],'where':{'name':_0x5fe6fb,'role':{'$or':['admin','user',_0x7628('0x13')]}}});})[_0x7628('0xc')](function(_0x6cbccb){if(!_0x6cbccb||_0x6cbccb&&_0x6cbccb[_0x7628('0xd')]!==_0x5fe6fb){throw new Error('Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.');}else{_0x1f3210=_0x6cbccb;return _0x1f3210;}})[_0x7628('0xc')](function(){_0x1f3210[_0x7628('0x14')](_0x4a8a03,function(_0x40d380,_0x500eee){var _0x2fca1e=_0x1f3210[_0x7628('0x15')]+0x1;if(_0x40d380){return _0x188209(_0x40d380);}else if(!_0x500eee){if(_0x1f3210[_0x7628('0x10')]){return _0x188209(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else if(_0x3e37d5[_0x7628('0xa')]>0x0){if(_0x1f3210[_0x7628('0x11')]){if(_0x3e37d5['blockDuration']>0x0){if(moment(_0x1f3210[_0x7628('0x12')])[_0x7628('0x16')](_0x3e37d5['blockDuration'],'minutes')>moment()){return _0x188209(null,![],{'message':_0x7628('0x17')});}else{return utils[_0x7628('0x18')](_0x1f3210,_0x2fca1e,![],null)['then'](function(){return _0x188209(null,![],{'message':_0x7628('0x17')});});}}else{return _0x188209(null,![],{'message':_0x7628('0x17')});}}else{if(_0x2fca1e>=_0x3e37d5['allowedLoginAttempts']){return utils[_0x7628('0x18')](_0x1f3210,0x0,!![],moment())[_0x7628('0xc')](function(){return _0x188209(null,![],{'message':_0x7628('0x17')});});}else{return utils[_0x7628('0x18')](_0x1f3210,_0x2fca1e,![],null)[_0x7628('0xc')](function(){return _0x188209(null,![],{'message':_0x7628('0x17')});});}}}else{return _0x188209(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}}else{if(_0x1f3210[_0x7628('0x10')]){return _0x188209(null,![],{'message':_0x7628('0x17')});}else if(_0x3e37d5['allowedLoginAttempts']>0x0){if(_0x1f3210['blocked']){if(_0x3e37d5['blockDuration']>0x0){if(moment(_0x1f3210[_0x7628('0x12')])[_0x7628('0x16')](_0x3e37d5[_0x7628('0xb')],_0x7628('0x19'))>moment()){return _0x188209(null,![],{'message':_0x7628('0x17')});}else{return utils[_0x7628('0x18')](_0x1f3210,0x0,![],null)[_0x7628('0xc')](function(){return utils[_0x7628('0x1a')](_0x1f3210);})[_0x7628('0xc')](function(){return _0x188209(null,_0x1f3210);});}}else{return _0x188209(null,![],{'message':_0x7628('0x17')});}}else{return utils[_0x7628('0x18')](_0x1f3210,0x0,![],null)['then'](function(){return utils[_0x7628('0x1a')](_0x1f3210);})['then'](function(){return _0x188209(null,_0x1f3210);})['catch'](function(_0x32ee64){return _0x188209(null,![],_0x32ee64);});}}else{if(_0x1f3210[_0x7628('0x11')]){return _0x188209(null,![],{'message':_0x7628('0x17')});}else{return utils[_0x7628('0x1a')](_0x1f3210)[_0x7628('0xc')](function(){return _0x188209(null,_0x1f3210);});}}}});})[_0x7628('0x1b')](function(_0x9bc89f){return _0x188209(null,![],_0x9bc89f);});}function sendServiceMail(_0x240874){return db['MailAccount'][_0x7628('0x1c')]({'where':{'service':!![]},'attributes':['id',_0x7628('0xd'),'email'],'include':[{'model':db[_0x7628('0x1d')],'as':'Smtp','include':[{'model':db[_0x7628('0x1e')],'as':_0x7628('0x1e')}]}]})['then'](function(_0x472d14){if(!_0x472d14){throw new Error(_0x7628('0x1f'));}var _0x48980c=_0x472d14[_0x7628('0x20')]();var _0x497a0c={'account':_0x48980c,'message':_[_0x7628('0x21')]({'from':util[_0x7628('0x22')](_0x7628('0x23'),_0x472d14['name'],_0x472d14['email']||_0x472d14['Smtp'][_0x7628('0x24')])},_0x240874)};return client[_0x7628('0x25')](_0x7628('0x26'),_0x497a0c);})['then'](function(_0x4c7944){if(_0x4c7944[_0x7628('0x27')]){throw new Error(util[_0x7628('0x22')](_0x7628('0x28'),_0x4c7944['error'][_0x7628('0x29')]||JSON['stringify'](_0x4c7944['error'])));}return!![];});}function handleError(_0x289d40,_0x445b0b,_0x1c13b4){return _0x289d40[_0x7628('0x2a')](_0x445b0b||0x1f4)[_0x7628('0x2b')]({'message':_0x1c13b4?_0x1c13b4['message']||_0x1c13b4:''});}exports[_0x7628('0x2c')]=function(_0x3c1469,_0x520d4a,_0xb5dfa1){passport[_0x7628('0x14')](_0x7628('0x2d'),function(_0x315821,_0x22213,_0x3bf3d8){var _0x18e1c4=_0x315821||_0x3bf3d8;if(_0x18e1c4){return handleError(_0x520d4a,0x191,_0x18e1c4);}if(!_0x22213){return handleError(_0x520d4a,0x194,{'message':'Something\x20went\x20wrong,\x20please\x20try\x20again.'});}else{var _0x33540a={'payload':{'id':_0x22213['id'],'role':_0x22213[_0x7628('0xf')]},'options':{'expiresIn':0x15180}};return authService[_0x7628('0x2e')](_0x33540a)[_0x7628('0xc')](function(_0x291982){_0x520d4a['json']({'id':_0x22213['id'],'token':_0x291982,'statusCall':'','isAlreadyLogged':_0x22213[_0x7628('0x2f')]});});}})(_0x3c1469,_0x520d4a,_0xb5dfa1);};exports[_0x7628('0x30')]=function(_0x3b60bd,_0x97f650){if(!_0x3b60bd[_0x7628('0x31')][_0x7628('0x32')]){return handleError(_0x97f650,0x1f4,{'message':_0x7628('0x33')});}var _0x8ec66b=rs[_0x7628('0x34')]();_0x3b60bd['body']['email']=_0x3b60bd[_0x7628('0x31')][_0x7628('0x32')][_0x7628('0x35')]()[_0x7628('0x36')]();var _0x39a9bf;return db[_0x7628('0x37')][_0x7628('0x9')]({'where':{'id':0x1},'attributes':[_0x7628('0xa'),_0x7628('0xb')],'raw':!![]})[_0x7628('0xc')](function(_0x354c10){_0x39a9bf=_0x354c10;return db[_0x7628('0x38')][_0x7628('0x1c')]({'where':{'email':_0x3b60bd['body'][_0x7628('0x32')]}});})['then'](function(_0x1fd78c){if(!_0x1fd78c){throw new Error(_0x7628('0x39'));}if(_0x1fd78c[_0x7628('0x10')]){throw new Error(_0x7628('0x3a'));}if(_0x1fd78c[_0x7628('0x11')]){if(moment(_0x1fd78c[_0x7628('0x12')])[_0x7628('0x16')](_0x39a9bf[_0x7628('0xb')],_0x7628('0x19'))>moment()){throw new Error(_0x7628('0x3b'));}else{_0x1fd78c['blocked']=![];_0x1fd78c[_0x7628('0x12')]=null;}}_0x1fd78c[_0x7628('0x3c')]=_0x8ec66b;_0x1fd78c[_0x7628('0x3d')]=Date[_0x7628('0x3e')]()+0x36ee80;return _0x1fd78c[_0x7628('0x3f')]();})[_0x7628('0xc')](function(){return sendServiceMail({'to':_0x3b60bd[_0x7628('0x31')]['email'],'subject':_0x7628('0x40'),'text':_0x7628('0x41')+_0x7628('0x42')+_0x7628('0x43')+_0x3b60bd[_0x7628('0x44')][_0x7628('0x45')]+'/reset/'+_0x8ec66b+'\x0a\x0a'+_0x7628('0x46')});})[_0x7628('0xc')](function(){_0x97f650[_0x7628('0x2a')](0xc8)[_0x7628('0x2b')]({'message':_0x7628('0x47')});})[_0x7628('0x1b')](function(_0x5ed076){return handleError(_0x97f650,0x1f4,_0x5ed076);});};exports[_0x7628('0x48')]=function(_0x500a8a,_0x2860d9){return db[_0x7628('0x38')][_0x7628('0x1c')]({'where':{'resetPasswordToken':_0x500a8a[_0x7628('0x49')][_0x7628('0x4a')],'resetPasswordExpires':{'$gt':Date[_0x7628('0x3e')]()}}})['then'](function(_0x22fc04){if(!_0x22fc04){throw new Error('Password\x20reset\x20token\x20is\x20invalid\x20or\x20has\x20expired.');}return db[_0x7628('0x37')][_0x7628('0x9')]({'attributes':['id',_0x7628('0x4b'),'enforcePasswordHistory',_0x7628('0x4c')]})[_0x7628('0xc')](function(_0xd8c8a){if(_0xd8c8a['securePassword'])authService['validatePasswordPattern'](_0x500a8a[_0x7628('0x31')][_0x7628('0xe')]);if(!_0xd8c8a[_0x7628('0x4d')]||!_0x22fc04[_0x7628('0x4e')])return _0x22fc04;authService[_0x7628('0x4f')](_0x500a8a[_0x7628('0x31')][_0x7628('0xe')],_0x22fc04[_0x7628('0x4e')],_0xd8c8a[_0x7628('0x4c')]);return _0x22fc04;})['then'](function(){_0x22fc04['password']=_0x500a8a[_0x7628('0x31')][_0x7628('0xe')];_0x22fc04[_0x7628('0x3c')]=null;_0x22fc04[_0x7628('0x3d')]=null;return _0x22fc04[_0x7628('0x3f')]();});})[_0x7628('0xc')](function(){_0x2860d9['status'](0xc8)[_0x7628('0x2b')]({'message':_0x7628('0x50')});})[_0x7628('0x1b')](function(_0x13d8a2){return handleError(_0x2860d9,0x1f4,_0x13d8a2);});};passport[_0x7628('0x51')]('local-login',new LocalStrategy({'usernameField':'name','passwordField':_0x7628('0xe')},function(_0x1b5641,_0x2837f4,_0x54d587){return localAuthenticate(db[_0x7628('0x38')],_0x1b5641,_0x2837f4,_0x54d587);}));