server/api/authLocal/authLocal.controller.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x9ec8=['MailServerOut','Smtp','CloudProvider','Unable\x20to\x20find\x20a\x20configured\x20SMTP\x20service!','getSmtpOptions','merge','\x22%s\x22\x20<%s>','request','SendMail','error','format','send','login','local-login','Something\x20went\x20wrong,\x20please\x20try\x20again.','json','online','body','email','toLowerCase','User','This\x20email\x20is\x20not\x20registered.','The\x20user\x20is\x20disabled.\x20Please\x20contact\x20the\x20administrator.','The\x20user\x20is\x20blocked.\x20Please\x20contact\x20the\x20administrator.','resetPasswordToken','resetPasswordExpires','now','save','You\x20are\x20receiving\x20this\x20because\x20you\x20(or\x20someone\x20else)\x20have\x20requested\x20the\x20reset\x20of\x20the\x20password\x20for\x20your\x20account.\x0a\x0a','Please\x20click\x20on\x20the\x20following\x20link,\x20or\x20paste\x20this\x20into\x20your\x20browser\x20to\x20complete\x20the\x20process:\x0a\x0a','https://','headers','host','If\x20you\x20did\x20not\x20request\x20this,\x20please\x20ignore\x20this\x20email\x20and\x20your\x20password\x20will\x20remain\x20unchanged.\x0a','status','params','token','enforcePasswordHistory','passwordHistoryLimit','securePassword','password','previousPasswords','validatePasswordHistory','Password\x20reset!','use','util','passport-local','Strategy','jayson/promise','randomstring','../../mysqldb','../../config/utils','client','http','Setting','findOne','allowedLoginAttempts','blockDuration','then','role','disabled','blockedAt','admin','user','name','Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.','authenticate','loginAttempts','blocked','clearBlockUser','add','minutes','getLicense','catch','MailAccount','find'];(function(_0x246cac,_0x3a71b3){var _0x56423c=function(_0x55987d){while(--_0x55987d){_0x246cac['push'](_0x246cac['shift']());}};_0x56423c(++_0x3a71b3);}(_0x9ec8,0x79));var _0x89ec=function(_0x47b8d4,_0x157abc){_0x47b8d4=_0x47b8d4-0x0;var _0x34eb0f=_0x9ec8[_0x47b8d4];return _0x34eb0f;};'use strict';var util=require(_0x89ec('0x0'));var passport=require('passport');var LocalStrategy=require(_0x89ec('0x1'))[_0x89ec('0x2')];var jayson=require(_0x89ec('0x3'));var _=require('lodash');var rs=require(_0x89ec('0x4'));var moment=require('moment');var db=require(_0x89ec('0x5'))['db'];var authService=require('../../components/auth/service');var utils=require(_0x89ec('0x6'));var client=jayson[_0x89ec('0x7')][_0x89ec('0x8')]({'port':0x232b});function localAuthenticate(_0x1a78cb,_0x1e0c54,_0x55b599,_0x4c3bf0){var _0x260120,_0x1527c9;return db[_0x89ec('0x9')][_0x89ec('0xa')]({'where':{'id':0x1},'attributes':[_0x89ec('0xb'),_0x89ec('0xc')],'raw':!![]})[_0x89ec('0xd')](function(_0x4ccddc){_0x260120=_0x4ccddc;return _0x1a78cb[_0x89ec('0xa')]({'attributes':['id','name','password','salt',_0x89ec('0xe'),_0x89ec('0xf'),'blocked',_0x89ec('0x10'),'loginAttempts'],'where':{'name':_0x1e0c54,'role':{'$or':[_0x89ec('0x11'),_0x89ec('0x12'),'agent']}}});})[_0x89ec('0xd')](function(_0x2a8d18){if(!_0x2a8d18||_0x2a8d18&&_0x2a8d18[_0x89ec('0x13')]!==_0x1e0c54){throw new Error(_0x89ec('0x14'));}else{_0x1527c9=_0x2a8d18;return _0x1527c9;}})[_0x89ec('0xd')](function(){_0x1527c9[_0x89ec('0x15')](_0x55b599,function(_0x3ce91b,_0x23be7f){var _0x3ec2f3=_0x1527c9[_0x89ec('0x16')]+0x1;if(_0x3ce91b){return _0x4c3bf0(_0x3ce91b);}else if(!_0x23be7f){if(_0x1527c9[_0x89ec('0xf')]){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}else if(_0x260120['allowedLoginAttempts']>0x0){if(_0x1527c9[_0x89ec('0x17')]){if(_0x260120[_0x89ec('0xc')]>0x0){if(moment(_0x1527c9['blockedAt'])['add'](_0x260120[_0x89ec('0xc')],'minutes')>moment()){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}else{return utils['clearBlockUser'](_0x1527c9,_0x3ec2f3,![],null)['then'](function(){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});});}}else{return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}}else{if(_0x3ec2f3>=_0x260120[_0x89ec('0xb')]){return utils[_0x89ec('0x18')](_0x1527c9,0x0,!![],moment())[_0x89ec('0xd')](function(){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});});}else{return utils[_0x89ec('0x18')](_0x1527c9,_0x3ec2f3,![],null)[_0x89ec('0xd')](function(){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});});}}}else{return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}}else{if(_0x1527c9['disabled']){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}else if(_0x260120[_0x89ec('0xb')]>0x0){if(_0x1527c9[_0x89ec('0x17')]){if(_0x260120['blockDuration']>0x0){if(moment(_0x1527c9['blockedAt'])[_0x89ec('0x19')](_0x260120[_0x89ec('0xc')],_0x89ec('0x1a'))>moment()){return _0x4c3bf0(null,![],{'message':_0x89ec('0x14')});}else{return utils['clearBlockUser'](_0x1527c9,0x0,![],null)[_0x89ec('0xd')](function(){return utils[_0x89ec('0x1b')](_0x1527c9);})['then'](function(){return _0x4c3bf0(null,_0x1527c9);});}}else{return _0x4c3bf0(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}}else{return utils[_0x89ec('0x18')](_0x1527c9,0x0,![],null)[_0x89ec('0xd')](function(){return utils[_0x89ec('0x1b')](_0x1527c9);})[_0x89ec('0xd')](function(){return _0x4c3bf0(null,_0x1527c9);})[_0x89ec('0x1c')](function(_0xb712bd){return _0x4c3bf0(null,![],_0xb712bd);});}}else{if(_0x1527c9['blocked']){return _0x4c3bf0(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else{return utils[_0x89ec('0x1b')](_0x1527c9)['then'](function(){return _0x4c3bf0(null,_0x1527c9);});}}}});})[_0x89ec('0x1c')](function(_0x294cc9){return _0x4c3bf0(null,![],_0x294cc9);});}function sendServiceMail(_0x16383b){return db[_0x89ec('0x1d')][_0x89ec('0x1e')]({'where':{'service':!![]},'attributes':['id','name','email'],'include':[{'model':db[_0x89ec('0x1f')],'as':_0x89ec('0x20'),'include':[{'model':db[_0x89ec('0x21')],'as':'CloudProvider'}]}]})['then'](function(_0x19e91d){if(!_0x19e91d){throw new Error(_0x89ec('0x22'));}var _0x4bdccb=_0x19e91d[_0x89ec('0x23')]();var _0x364171={'account':_0x4bdccb,'message':_[_0x89ec('0x24')]({'from':util['format'](_0x89ec('0x25'),_0x19e91d['name'],_0x19e91d['email']||_0x19e91d[_0x89ec('0x20')][_0x89ec('0x12')])},_0x16383b)};return client[_0x89ec('0x26')](_0x89ec('0x27'),_0x364171);})['then'](function(_0x362bd4){if(_0x362bd4[_0x89ec('0x28')]){throw new Error(util[_0x89ec('0x29')]('SendMail\x20error:\x20%s.\x20Please\x20contact\x20your\x20Administrator!',_0x362bd4['error']['message']||JSON['stringify'](_0x362bd4[_0x89ec('0x28')])));}return!![];});}function handleError(_0x3a90af,_0x5dec08,_0x3b33bf){return _0x3a90af['status'](_0x5dec08||0x1f4)[_0x89ec('0x2a')]({'message':_0x3b33bf?_0x3b33bf['message']||_0x3b33bf:''});}exports[_0x89ec('0x2b')]=function(_0xc74fc3,_0x46980c,_0x2f7a81){passport[_0x89ec('0x15')](_0x89ec('0x2c'),function(_0x54da46,_0x1b5be5,_0x144284){var _0x140f44=_0x54da46||_0x144284;if(_0x140f44){return handleError(_0x46980c,0x191,_0x140f44);}if(!_0x1b5be5){return handleError(_0x46980c,0x194,{'message':_0x89ec('0x2d')});}else{var _0x2d50d0={'payload':{'id':_0x1b5be5['id'],'role':_0x1b5be5[_0x89ec('0xe')]},'options':{'expiresIn':0x15180}};return authService['signToken'](_0x2d50d0)[_0x89ec('0xd')](function(_0x51eddd){_0x46980c[_0x89ec('0x2e')]({'id':_0x1b5be5['id'],'token':_0x51eddd,'statusCall':'','isAlreadyLogged':_0x1b5be5[_0x89ec('0x2f')]});});}})(_0xc74fc3,_0x46980c,_0x2f7a81);};exports['forgot']=function(_0xfcfe24,_0x4f1c84){if(!_0xfcfe24[_0x89ec('0x30')]['email']){return handleError(_0x4f1c84,0x1f4,{'message':'Email\x20parameter\x20is\x20missing'});}var _0x53d396=rs['generate']();_0xfcfe24[_0x89ec('0x30')][_0x89ec('0x31')]=_0xfcfe24['body'][_0x89ec('0x31')]['trim']()[_0x89ec('0x32')]();var _0x668ed;return db[_0x89ec('0x9')][_0x89ec('0xa')]({'where':{'id':0x1},'attributes':['allowedLoginAttempts','blockDuration'],'raw':!![]})[_0x89ec('0xd')](function(_0x27a078){_0x668ed=_0x27a078;return db[_0x89ec('0x33')][_0x89ec('0x1e')]({'where':{'email':_0xfcfe24[_0x89ec('0x30')][_0x89ec('0x31')]}});})[_0x89ec('0xd')](function(_0x447d43){if(!_0x447d43){throw new Error(_0x89ec('0x34'));}if(_0x447d43[_0x89ec('0xf')]){throw new Error(_0x89ec('0x35'));}if(_0x447d43[_0x89ec('0x17')]){if(moment(_0x447d43[_0x89ec('0x10')])[_0x89ec('0x19')](_0x668ed[_0x89ec('0xc')],_0x89ec('0x1a'))>moment()){throw new Error(_0x89ec('0x36'));}else{_0x447d43[_0x89ec('0x17')]=![];_0x447d43[_0x89ec('0x10')]=null;}}_0x447d43[_0x89ec('0x37')]=_0x53d396;_0x447d43[_0x89ec('0x38')]=Date[_0x89ec('0x39')]()+0x36ee80;return _0x447d43[_0x89ec('0x3a')]();})[_0x89ec('0xd')](function(){return sendServiceMail({'to':_0xfcfe24[_0x89ec('0x30')][_0x89ec('0x31')],'subject':'xCally\x20Motion\x20Password\x20Reset','text':_0x89ec('0x3b')+_0x89ec('0x3c')+_0x89ec('0x3d')+_0xfcfe24[_0x89ec('0x3e')][_0x89ec('0x3f')]+'/reset/'+_0x53d396+'\x0a\x0a'+_0x89ec('0x40')});})[_0x89ec('0xd')](function(){_0x4f1c84[_0x89ec('0x41')](0xc8)[_0x89ec('0x2a')]({'message':'Reset\x20Email\x20sent!'});})[_0x89ec('0x1c')](function(_0x565d89){return handleError(_0x4f1c84,0x1f4,_0x565d89);});};exports['reset']=function(_0x1f6f41,_0x242f25){return db[_0x89ec('0x33')][_0x89ec('0x1e')]({'where':{'resetPasswordToken':_0x1f6f41[_0x89ec('0x42')][_0x89ec('0x43')],'resetPasswordExpires':{'$gt':Date[_0x89ec('0x39')]()}}})['then'](function(_0x2e1f13){if(!_0x2e1f13){throw new Error('Password\x20reset\x20token\x20is\x20invalid\x20or\x20has\x20expired.');}return db[_0x89ec('0x9')][_0x89ec('0xa')]({'attributes':['id','securePassword',_0x89ec('0x44'),_0x89ec('0x45')]})['then'](function(_0x379be4){if(_0x379be4[_0x89ec('0x46')])authService['validatePasswordPattern'](_0x1f6f41[_0x89ec('0x30')][_0x89ec('0x47')]);if(!_0x379be4['enforcePasswordHistory']||!_0x2e1f13[_0x89ec('0x48')])return _0x2e1f13;authService[_0x89ec('0x49')](_0x1f6f41['body'][_0x89ec('0x47')],_0x2e1f13['previousPasswords'],_0x379be4[_0x89ec('0x45')]);return _0x2e1f13;})[_0x89ec('0xd')](function(){_0x2e1f13[_0x89ec('0x47')]=_0x1f6f41[_0x89ec('0x30')]['password'];_0x2e1f13[_0x89ec('0x37')]=null;_0x2e1f13[_0x89ec('0x38')]=null;return _0x2e1f13[_0x89ec('0x3a')]();});})[_0x89ec('0xd')](function(){_0x242f25[_0x89ec('0x41')](0xc8)[_0x89ec('0x2a')]({'message':_0x89ec('0x4a')});})['catch'](function(_0x85b65a){return handleError(_0x242f25,0x1f4,_0x85b65a);});};passport[_0x89ec('0x4b')]('local-login',new LocalStrategy({'usernameField':_0x89ec('0x13'),'passwordField':_0x89ec('0x47')},function(_0x1af8b3,_0x272569,_0x5af6f6){return localAuthenticate(db['User'],_0x1af8b3,_0x272569,_0x5af6f6);}));