server/api/authLocal/authLocal.controller.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xcc9e=['token','now','Password\x20reset\x20token\x20is\x20invalid\x20or\x20has\x20expired.','passwordHistoryLimit','securePassword','validatePasswordPattern','previousPasswords','validatePasswordHistory','Password\x20reset!','use','util','passport-local','Strategy','lodash','randomstring','moment','../../mysqldb','http','Setting','allowedLoginAttempts','then','password','disabled','blocked','blockedAt','agent','name','Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.','authenticate','loginAttempts','blockDuration','add','minutes','clearBlockUser','getLicense','catch','find','MailServerOut','CloudProvider','Unable\x20to\x20find\x20a\x20configured\x20SMTP\x20service!','merge','format','email','Smtp','request','SendMail','error','SendMail\x20error:\x20%s.\x20Please\x20contact\x20your\x20Administrator!','stringify','send','message','login','local-login','Something\x20went\x20wrong,\x20please\x20try\x20again.','role','json','online','forgot','body','Email\x20parameter\x20is\x20missing','findOne','User','This\x20email\x20is\x20not\x20registered.','The\x20user\x20is\x20disabled.\x20Please\x20contact\x20the\x20administrator.','resetPasswordExpires','save','xCally\x20Motion\x20Password\x20Reset','You\x20are\x20receiving\x20this\x20because\x20you\x20(or\x20someone\x20else)\x20have\x20requested\x20the\x20reset\x20of\x20the\x20password\x20for\x20your\x20account.\x0a\x0a','Please\x20click\x20on\x20the\x20following\x20link,\x20or\x20paste\x20this\x20into\x20your\x20browser\x20to\x20complete\x20the\x20process:\x0a\x0a','https://','headers','host','status','Reset\x20Email\x20sent!','reset','params'];(function(_0x15d913,_0x51cf7a){var _0x4ae65e=function(_0x2f39a1){while(--_0x2f39a1){_0x15d913['push'](_0x15d913['shift']());}};_0x4ae65e(++_0x51cf7a);}(_0xcc9e,0x13a));var _0xecc9=function(_0x12fbe1,_0x4b9cb6){_0x12fbe1=_0x12fbe1-0x0;var _0x5a6043=_0xcc9e[_0x12fbe1];return _0x5a6043;};'use strict';var util=require(_0xecc9('0x0'));var passport=require('passport');var LocalStrategy=require(_0xecc9('0x1'))[_0xecc9('0x2')];var jayson=require('jayson/promise');var _=require(_0xecc9('0x3'));var rs=require(_0xecc9('0x4'));var moment=require(_0xecc9('0x5'));var db=require(_0xecc9('0x6'))['db'];var authService=require('../../components/auth/service');var utils=require('../../config/utils');var client=jayson['client'][_0xecc9('0x7')]({'port':0x232b});function localAuthenticate(_0xf467b6,_0x5cafc8,_0x5619ad,_0x3d6975){var _0x1bfc7a,_0x40fe70;return db[_0xecc9('0x8')]['findOne']({'where':{'id':0x1},'attributes':[_0xecc9('0x9'),'blockDuration'],'raw':!![]})[_0xecc9('0xa')](function(_0x21210d){_0x1bfc7a=_0x21210d;return _0xf467b6['findOne']({'attributes':['id','name',_0xecc9('0xb'),'salt','role',_0xecc9('0xc'),_0xecc9('0xd'),_0xecc9('0xe'),'loginAttempts'],'where':{'name':_0x5cafc8,'role':{'$or':['admin','user',_0xecc9('0xf')]}}});})['then'](function(_0x59ac94){if(!_0x59ac94||_0x59ac94&&_0x59ac94[_0xecc9('0x10')]!==_0x5cafc8){throw new Error(_0xecc9('0x11'));}else{_0x40fe70=_0x59ac94;return _0x40fe70;}})[_0xecc9('0xa')](function(){_0x40fe70[_0xecc9('0x12')](_0x5619ad,function(_0x585beb,_0x5b88dc){var _0x2a1d1a=_0x40fe70[_0xecc9('0x13')]+0x1;if(_0x585beb){return _0x3d6975(_0x585beb);}else if(!_0x5b88dc){if(_0x40fe70[_0xecc9('0xc')]){return _0x3d6975(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else if(_0x1bfc7a['allowedLoginAttempts']>0x0){if(_0x40fe70['blocked']){if(_0x1bfc7a[_0xecc9('0x14')]>0x0){if(moment(_0x40fe70[_0xecc9('0xe')])[_0xecc9('0x15')](_0x1bfc7a[_0xecc9('0x14')],_0xecc9('0x16'))>moment()){return _0x3d6975(null,![],{'message':_0xecc9('0x11')});}else{return utils[_0xecc9('0x17')](_0x40fe70,_0x2a1d1a,![],null)[_0xecc9('0xa')](function(){return _0x3d6975(null,![],{'message':_0xecc9('0x11')});});}}else{return _0x3d6975(null,![],{'message':_0xecc9('0x11')});}}else{if(_0x2a1d1a>=_0x1bfc7a[_0xecc9('0x9')]){return utils['clearBlockUser'](_0x40fe70,0x0,!![],moment())[_0xecc9('0xa')](function(){return _0x3d6975(null,![],{'message':_0xecc9('0x11')});});}else{return utils[_0xecc9('0x17')](_0x40fe70,_0x2a1d1a,![],null)[_0xecc9('0xa')](function(){return _0x3d6975(null,![],{'message':_0xecc9('0x11')});});}}}else{return _0x3d6975(null,![],{'message':_0xecc9('0x11')});}}else{if(_0x40fe70['disabled']){return _0x3d6975(null,![],{'message':_0xecc9('0x11')});}else if(_0x1bfc7a[_0xecc9('0x9')]>0x0){if(_0x40fe70['blocked']){if(_0x1bfc7a['blockDuration']>0x0){if(moment(_0x40fe70['blockedAt'])[_0xecc9('0x15')](_0x1bfc7a['blockDuration'],_0xecc9('0x16'))>moment()){return _0x3d6975(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else{return utils[_0xecc9('0x17')](_0x40fe70,0x0,![],null)['then'](function(){return utils[_0xecc9('0x18')](_0x40fe70);})[_0xecc9('0xa')](function(){return _0x3d6975(null,_0x40fe70);});}}else{return _0x3d6975(null,![],{'message':_0xecc9('0x11')});}}else{return utils[_0xecc9('0x17')](_0x40fe70,0x0,![],null)[_0xecc9('0xa')](function(){return utils['getLicense'](_0x40fe70);})[_0xecc9('0xa')](function(){return _0x3d6975(null,_0x40fe70);})[_0xecc9('0x19')](function(_0x4d51ea){return _0x3d6975(null,![],_0x4d51ea);});}}else{if(_0x40fe70[_0xecc9('0xd')]){return _0x3d6975(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else{return utils[_0xecc9('0x18')](_0x40fe70)[_0xecc9('0xa')](function(){return _0x3d6975(null,_0x40fe70);});}}}});})[_0xecc9('0x19')](function(_0x3ac5e6){return _0x3d6975(null,![],_0x3ac5e6);});}function sendServiceMail(_0x19a633){return db['MailAccount'][_0xecc9('0x1a')]({'where':{'service':!![]},'attributes':['id','name','email'],'include':[{'model':db[_0xecc9('0x1b')],'as':'Smtp','include':[{'model':db[_0xecc9('0x1c')],'as':'CloudProvider'}]}]})[_0xecc9('0xa')](function(_0x5b1bff){if(!_0x5b1bff){throw new Error(_0xecc9('0x1d'));}var _0x4e64cf=_0x5b1bff['getSmtpOptions']();var _0x1904d7={'account':_0x4e64cf,'message':_[_0xecc9('0x1e')]({'from':util[_0xecc9('0x1f')]('\x22%s\x22\x20<%s>',_0x5b1bff[_0xecc9('0x10')],_0x5b1bff[_0xecc9('0x20')]||_0x5b1bff[_0xecc9('0x21')]['user'])},_0x19a633)};return client[_0xecc9('0x22')](_0xecc9('0x23'),_0x1904d7);})[_0xecc9('0xa')](function(_0x1d2731){if(_0x1d2731[_0xecc9('0x24')]){throw new Error(util[_0xecc9('0x1f')](_0xecc9('0x25'),_0x1d2731[_0xecc9('0x24')]['message']||JSON[_0xecc9('0x26')](_0x1d2731[_0xecc9('0x24')])));}return!![];});}function handleError(_0x10000a,_0x29a160,_0x128203){return _0x10000a['status'](_0x29a160||0x1f4)[_0xecc9('0x27')]({'message':_0x128203?_0x128203[_0xecc9('0x28')]||_0x128203:''});}exports[_0xecc9('0x29')]=function(_0x21c0b1,_0x3491b8,_0x4a211f){passport['authenticate'](_0xecc9('0x2a'),function(_0x10f68e,_0x4f553a,_0x9ed9c8){var _0x3dab2b=_0x10f68e||_0x9ed9c8;if(_0x3dab2b){return handleError(_0x3491b8,0x191,_0x3dab2b);}if(!_0x4f553a){return handleError(_0x3491b8,0x194,{'message':_0xecc9('0x2b')});}else{var _0x23da0d={'payload':{'id':_0x4f553a['id'],'role':_0x4f553a[_0xecc9('0x2c')]},'options':{'expiresIn':0x15180}};return authService['signToken'](_0x23da0d)[_0xecc9('0xa')](function(_0x1df114){_0x3491b8[_0xecc9('0x2d')]({'id':_0x4f553a['id'],'token':_0x1df114,'statusCall':'','isAlreadyLogged':_0x4f553a[_0xecc9('0x2e')]});});}})(_0x21c0b1,_0x3491b8,_0x4a211f);};exports[_0xecc9('0x2f')]=function(_0x4cc0e6,_0x553d52){if(!_0x4cc0e6[_0xecc9('0x30')][_0xecc9('0x20')]){return handleError(_0x553d52,0x1f4,{'message':_0xecc9('0x31')});}var _0x5270d6=rs['generate']();_0x4cc0e6[_0xecc9('0x30')][_0xecc9('0x20')]=_0x4cc0e6[_0xecc9('0x30')][_0xecc9('0x20')]['trim']()['toLowerCase']();var _0x8a6687;return db['Setting'][_0xecc9('0x32')]({'where':{'id':0x1},'attributes':[_0xecc9('0x9'),'blockDuration'],'raw':!![]})['then'](function(_0x2cd0db){_0x8a6687=_0x2cd0db;return db[_0xecc9('0x33')][_0xecc9('0x1a')]({'where':{'email':_0x4cc0e6['body'][_0xecc9('0x20')]}});})['then'](function(_0x5329de){if(!_0x5329de){throw new Error(_0xecc9('0x34'));}if(_0x5329de[_0xecc9('0xc')]){throw new Error(_0xecc9('0x35'));}if(_0x5329de[_0xecc9('0xd')]){if(moment(_0x5329de[_0xecc9('0xe')])[_0xecc9('0x15')](_0x8a6687[_0xecc9('0x14')],_0xecc9('0x16'))>moment()){throw new Error('The\x20user\x20is\x20blocked.\x20Please\x20contact\x20the\x20administrator.');}else{_0x5329de[_0xecc9('0xd')]=![];_0x5329de[_0xecc9('0xe')]=null;}}_0x5329de['resetPasswordToken']=_0x5270d6;_0x5329de[_0xecc9('0x36')]=Date['now']()+0x36ee80;return _0x5329de[_0xecc9('0x37')]();})[_0xecc9('0xa')](function(){return sendServiceMail({'to':_0x4cc0e6[_0xecc9('0x30')]['email'],'subject':_0xecc9('0x38'),'text':_0xecc9('0x39')+_0xecc9('0x3a')+_0xecc9('0x3b')+_0x4cc0e6[_0xecc9('0x3c')][_0xecc9('0x3d')]+'/reset/'+_0x5270d6+'\x0a\x0a'+'If\x20you\x20did\x20not\x20request\x20this,\x20please\x20ignore\x20this\x20email\x20and\x20your\x20password\x20will\x20remain\x20unchanged.\x0a'});})[_0xecc9('0xa')](function(){_0x553d52[_0xecc9('0x3e')](0xc8)[_0xecc9('0x27')]({'message':_0xecc9('0x3f')});})[_0xecc9('0x19')](function(_0x319568){return handleError(_0x553d52,0x1f4,_0x319568);});};exports[_0xecc9('0x40')]=function(_0x1c6f05,_0x2be612){return db[_0xecc9('0x33')][_0xecc9('0x1a')]({'where':{'resetPasswordToken':_0x1c6f05[_0xecc9('0x41')][_0xecc9('0x42')],'resetPasswordExpires':{'$gt':Date[_0xecc9('0x43')]()}}})['then'](function(_0xb2bac){if(!_0xb2bac){throw new Error(_0xecc9('0x44'));}return db[_0xecc9('0x8')]['findOne']({'attributes':['id','securePassword','enforcePasswordHistory',_0xecc9('0x45')]})[_0xecc9('0xa')](function(_0x10ee73){if(_0x10ee73[_0xecc9('0x46')])authService[_0xecc9('0x47')](_0x1c6f05[_0xecc9('0x30')][_0xecc9('0xb')]);if(!_0x10ee73['enforcePasswordHistory']||!_0xb2bac[_0xecc9('0x48')])return _0xb2bac;authService[_0xecc9('0x49')](_0x1c6f05['body'][_0xecc9('0xb')],_0xb2bac[_0xecc9('0x48')],_0x10ee73[_0xecc9('0x45')]);return _0xb2bac;})['then'](function(){_0xb2bac['password']=_0x1c6f05[_0xecc9('0x30')][_0xecc9('0xb')];_0xb2bac['resetPasswordToken']=null;_0xb2bac[_0xecc9('0x36')]=null;return _0xb2bac[_0xecc9('0x37')]();});})['then'](function(){_0x2be612[_0xecc9('0x3e')](0xc8)[_0xecc9('0x27')]({'message':_0xecc9('0x4a')});})[_0xecc9('0x19')](function(_0x118414){return handleError(_0x2be612,0x1f4,_0x118414);});};passport[_0xecc9('0x4b')](_0xecc9('0x2a'),new LocalStrategy({'usernameField':_0xecc9('0x10'),'passwordField':_0xecc9('0xb')},function(_0xc2ec26,_0x4b3b94,_0x2505b8){return localAuthenticate(db[_0xecc9('0x33')],_0xc2ec26,_0x4b3b94,_0x2505b8);}));