Built motion from commit 26d08302.|2.6.31
[motion2.git] / server / components / auth / service.js
1 // *************************************************************************
2 // *                                                                       *
3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
5 // *                                                                       *
6 // *************************************************************************
7 // *                                                                       *
8 // * Email: info@xcally.com                                                *
9 // * Website: https://www.xcally.com                                       *
10 // *                                                                       *
11 // *************************************************************************
12 // *                                                                       *
13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
14 // * copyright treaties, as well as other intellectual property laws and   *
15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
16 // *                                                                       *
17 // *************************************************************************
18 var _0x9765=['minutes','Invalid\x20API\x20access\x20key','User\x20not\x20found.','User\x20object\x20not\x20found.','getLicense','update','Forbidden','isWebrtcLicence','webrtc','signToken','setTokenCookie','role','motion.token','redirect','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','validatePasswordPattern','test','ValidationError','validatePasswordHistory','decryptString','split','The\x20password\x20must\x20be\x20different\x20from\x20the\x20previous\x20%d\x20passwords.\x20Please\x20choose\x20another\x20one.','The\x20password\x20must\x20be\x20different\x20from\x20the\x20last\x20one.\x20Please\x20choose\x20another\x20one.','Sequelize','updatePasswordsHistory','length','splice','unshift','encryptString','join','promisify','sign','secret','session','payload','options','randomBytes','toString','hex','now','HS512','../../mysqldb','../../config/environment','../../config/license/hardware','../encryptor','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','util','moment','secrets','name','internal','email','userpic','permissions','voicePause','chatPause','mailPause','faxPause','smsPause','openchannelPause','showWebBar','lastPauseAt','crudPermissions','passwordResetAt','alias','phoneBarAutoAnswer','phoneBarAutoAnswerDelay','phoneBarEnableRecording','phoneBarEnableSettings','phoneBarExpires','phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','hotdesk','userProfileId','downloadOmnichannelInteractions','downloadAttachments','ignorePauseForPreviewCalls','selectRecallMeCampaign','chatAutoanswer','chatAutoanswerDelay','emailAutoanswer','emailAutoanswerDelay','openchannelAutoanswer','faxAutoanswer','faxAutoanswerDelay','whatsappAutoanswer','messengerSoundNotification','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','params','closed','query','forceDownload','disposition','unmanaged','json','Unmanaged.','Forbidden.','headers','authorization','startsWith','Basic','User','authenticate','pass','status','Wrong\x20credentials.','catch','Bearer','Unknown\x20authorization\x20format','apikey','getUuid','then','find','sub','findOne','blockDuration','isEqual','apiKeyNonce','nonce','blockedAt'];(function(_0xa63ea,_0x2a363c){var _0x25367d=function(_0x3d6479){while(--_0x3d6479){_0xa63ea['push'](_0xa63ea['shift']());}};_0x25367d(++_0x2a363c);}(_0x9765,0x1c3));var _0x5976=function(_0x25e7cb,_0x3579b7){_0x25e7cb=_0x25e7cb-0x0;var _0x375d92=_0x9765[_0x25e7cb];return _0x375d92;};'use strict';var db=require(_0x5976('0x0'))['db'];var config=require(_0x5976('0x1'));var hardwareConf=require(_0x5976('0x2'));var licenseUtil=require('../../config/license/util');var encryptor=require(_0x5976('0x3'));var _=require('lodash');var jwt=require(_0x5976('0x4'));var expressJwt=require(_0x5976('0x5'));var compose=require(_0x5976('0x6'));var basicAuth=require(_0x5976('0x7'));var crypto=require(_0x5976('0x8'));var BPromise=require(_0x5976('0x9'));var util=require(_0x5976('0xa'));var moment=require(_0x5976('0xb'));var validateJwt=expressJwt({'secret':config[_0x5976('0xc')]['session']});var userAttributes=['id','role','fullname',_0x5976('0xd'),_0x5976('0xe'),_0x5976('0xf'),_0x5976('0x10'),_0x5976('0x11'),'md5secret',_0x5976('0x12'),_0x5976('0x13'),_0x5976('0x14'),_0x5976('0x15'),_0x5976('0x16'),_0x5976('0x17'),'pauseType',_0x5976('0x18'),'lastLoginAt',_0x5976('0x19'),_0x5976('0x1a'),'allowmessenger',_0x5976('0x1b'),_0x5976('0x1c'),_0x5976('0x1d'),_0x5976('0x1e'),'phoneBarDnd',_0x5976('0x1f'),'phoneBarEnableDtmfTone',_0x5976('0x20'),_0x5976('0x21'),_0x5976('0x22'),_0x5976('0x23'),_0x5976('0x24'),_0x5976('0x25'),'interface',_0x5976('0x26'),'privacyEnabled','settingsEnabled','wssPort','downloadVoiceRecordings',_0x5976('0x27'),_0x5976('0x28'),_0x5976('0x29'),_0x5976('0x2a'),_0x5976('0x2b'),_0x5976('0x2c'),_0x5976('0x2d'),_0x5976('0x2e'),'smsAutoanswer','smsAutoanswerDelay',_0x5976('0x2f'),'openchannelAutoanswerDelay',_0x5976('0x30'),_0x5976('0x31'),_0x5976('0x32'),'whatsappAutoanswerDelay',_0x5976('0x33')];exports[_0x5976('0x34')]=function(){return this[_0x5976('0x35')](!![])[_0x5976('0x36')](function(_0x9ba09,_0x2de4fa,_0x100876){if(_0x9ba09[_0x5976('0x37')]){_0x100876();}else{return db[_0x5976('0x38')]['findOne']({'where':{'id':_0x9ba09[_0x5976('0x39')]['id']},'attributes':['id',_0x5976('0x3a'),'disposition'],'raw':!![]})['then'](function(_0x3c4b85){if(_0x3c4b85&&_0x3c4b85[_0x5976('0x3a')]&&!_0x9ba09[_0x5976('0x3b')][_0x5976('0x3c')]){return _0x2de4fa['status'](_0x3c4b85[_0x5976('0x3d')]===_0x5976('0x3e')?0x195:0x193)[_0x5976('0x3f')]({'message':_0x3c4b85[_0x5976('0x3d')]===_0x5976('0x3e')?_0x5976('0x40'):_0x5976('0x41')});}else{_0x100876();}})['catch'](function(_0x4dbbe9){_0x100876(_0x4dbbe9);});}});};exports['isAuthenticated']=function isAuthenticated(_0x2bd7a9){return compose()['use'](function(_0x46f1e2,_0x5ee30b,_0x547926){var _0x4566dd;if(_0x46f1e2[_0x5976('0x42')][_0x5976('0x43')]){if(_[_0x5976('0x44')](_0x46f1e2[_0x5976('0x42')]['authorization'],_0x5976('0x45'))){var _0x401592=basicAuth(_0x46f1e2);db[_0x5976('0x46')]['find']({'where':{'name':_0x401592['name']}})['then'](function(_0x483a98){if(!_0x483a98||!_0x483a98[_0x5976('0x47')](_0x401592[_0x5976('0x48')])){return _0x5ee30b[_0x5976('0x49')](0x191)[_0x5976('0x3f')]({'message':_0x5976('0x4a')});}_0x46f1e2['user']={'id':_0x483a98['id']};_0x547926();})[_0x5976('0x4b')](function(_0x1c4152){_0x547926(_0x1c4152);});}else if(_[_0x5976('0x44')](_0x46f1e2[_0x5976('0x42')]['authorization'],_0x5976('0x4c'))){validateJwt(_0x46f1e2,_0x5ee30b,_0x547926);}else{if(_0x2bd7a9){_0x547926();}else{return _0x5ee30b[_0x5976('0x49')](0x193)[_0x5976('0x3f')]({'message':_0x5976('0x4d')});}}}else if(_0x46f1e2[_0x5976('0x3b')][_0x5976('0x4e')]){try{var _0x5e4082={'audience':hardwareConf[_0x5976('0x4f')](),'issuer':hardwareConf[_0x5976('0x4f')]()};verifyJwt(_0x46f1e2[_0x5976('0x3b')][_0x5976('0x4e')],_0x5e4082)[_0x5976('0x50')](function(_0x315d95){return db[_0x5976('0x46')][_0x5976('0x51')]({'where':{'id':_0x315d95[_0x5976('0x52')]}})['then'](function(_0x53d5bf){_0x4566dd=_0x53d5bf;return db['Setting'][_0x5976('0x53')]({'where':{'id':0x1},'attributes':['allowedLoginAttempts',_0x5976('0x54')],'raw':!![]});})['then'](function(_0x24315a){if(!_0x4566dd||!_[_0x5976('0x55')](_0x4566dd[_0x5976('0x56')],_0x315d95[_0x5976('0x57')])){return _0x5ee30b[_0x5976('0x49')](0x191)['json']({'message':'API\x20access\x20key\x20is\x20not\x20valid\x20anymore'});}if(_0x4566dd['disabled']){return _0x5ee30b[_0x5976('0x49')](0x191)[_0x5976('0x3f')]({'message':'Invalid\x20API\x20access\x20key'});}if(_0x4566dd['blocked']){if(_0x24315a['blockDuration']>0x0){if(moment(_0x4566dd[_0x5976('0x58')])['add'](_0x24315a[_0x5976('0x54')],_0x5976('0x59'))>moment()){return _0x5ee30b[_0x5976('0x49')](0x191)[_0x5976('0x3f')]({'message':_0x5976('0x5a')});}}else{return _0x5ee30b[_0x5976('0x49')](0x191)[_0x5976('0x3f')]({'message':_0x5976('0x5a')});}}_0x46f1e2[_0x5976('0x37')]={'id':_0x4566dd['id']};_0x547926();});})[_0x5976('0x4b')](function(){return _0x5ee30b[_0x5976('0x49')](0x191)[_0x5976('0x3f')]({'message':_0x5976('0x5a')});});}catch(_0x3fd83c){_0x547926(_0x3fd83c);}}else if(_0x2bd7a9){_0x547926();}else{return _0x5ee30b[_0x5976('0x49')](0x193)[_0x5976('0x3f')]({'message':_0x5976('0x4d')});}})[_0x5976('0x36')](function(_0x349a3c,_0x5a7cbe,_0x351da4){if(_0x349a3c[_0x5976('0x37')]){db[_0x5976('0x46')][_0x5976('0x51')]({'where':{'id':_0x349a3c[_0x5976('0x37')]['id']},'attributes':userAttributes})[_0x5976('0x50')](function(_0x1b1c06){if(!_0x1b1c06){return _0x5a7cbe[_0x5976('0x49')](0x194)[_0x5976('0x3f')]({'message':_0x5976('0x5b')});}_0x349a3c[_0x5976('0x37')]=_0x1b1c06;_0x351da4();})['catch'](function(_0x5c5b70){_0x351da4(_0x5c5b70);});}else if(_0x2bd7a9){_0x351da4();}else{return _0x5a7cbe[_0x5976('0x49')](0x194)[_0x5976('0x3f')]({'message':_0x5976('0x5c')});}});};exports['canUpdate']=function canUpdate(){return compose()[_0x5976('0x36')](function(_0x180fb9,_0x3b9a8b,_0x41c816){return licenseUtil[_0x5976('0x5d')]()[_0x5976('0x50')](function(_0x6eb715){if(_0x6eb715[_0x5976('0x5e')]){_0x41c816();}else{return _0x3b9a8b[_0x5976('0x49')](0x193)[_0x5976('0x3f')]({'message':_0x5976('0x5f')});}})[_0x5976('0x4b')](function(_0x2d4833){_0x41c816(_0x2d4833);});});};exports[_0x5976('0x60')]=function isWebrtcLicence(){return compose()['use'](function(_0x53c5dd,_0x114502,_0x17e11f){return licenseUtil[_0x5976('0x5d')]()[_0x5976('0x50')](function(_0x474cf3){if(_0x474cf3[_0x5976('0x61')]){_0x17e11f();}else{return _0x114502['status'](0x193)['json']({'message':_0x5976('0x5f')});}})['catch'](function(_0x576734){_0x17e11f(_0x576734);});});};exports['isMiddleware']=function(_0x4977ba,_0x90e65f,_0xa9d0e7){_0x4977ba['isMiddleware']=!![];return _0xa9d0e7();};exports[_0x5976('0x62')]=function signToken(_0x1dc35e){return signJwt(_0x1dc35e);};exports[_0x5976('0x63')]=function(_0x248cc9,_0x5ae6a8){if(!_0x248cc9[_0x5976('0x37')]){return _0x5ae6a8[_0x5976('0x49')](0x194)['json']({'message':'It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.'});}var _0x5d4ac3={'payload':{'id':_0x248cc9['user']['id'],'role':_0x248cc9[_0x5976('0x37')][_0x5976('0x64')]},'options':{'expiresIn':0x15180}};return signJwt(_0x5d4ac3)[_0x5976('0x50')](function(_0x141b0c){_0x5ae6a8['cookie'](_0x5976('0x65'),_0x141b0c);_0x5ae6a8[_0x5976('0x66')]('/dashboards/general');})['catch'](function(_0x2284b6){return _0x5ae6a8[_0x5976('0x49')](0x1f4)['send'](_0x2284b6);});};exports[_0x5976('0x67')]=function(_0x3be287){if(_[_0x5976('0x68')](_0x3be287['apiKeyNonce'])||_[_0x5976('0x68')](_0x3be287[_0x5976('0x69')])){return null;}else{return createJwt(_0x3be287);}};exports[_0x5976('0x6a')]=function(_0x3ad9ea){_0x3ad9ea[_0x5976('0x56')]=generateNonce();_0x3ad9ea['apiKeyIat']=generateIssuedAt();return createJwt(_0x3ad9ea);};exports[_0x5976('0x6b')]=function(_0x4135f4,_0x388ece){var _0x36b6b1=_0x4135f4[_0x5976('0x3b')][_0x5976('0x4e')];if(_0x36b6b1){var _0x352f85={'nonce':_0x388ece['apiKeyNonce'],'iat':_0x388ece[_0x5976('0x69')],'audience':hardwareConf[_0x5976('0x4f')](),'issuer':hardwareConf[_0x5976('0x4f')]()};return verifyJwt(_0x36b6b1,_0x352f85)[_0x5976('0x50')](function(){return generateApiKey(_0x388ece);});}else{throw{'message':_0x5976('0x6c')};}};exports[_0x5976('0x6d')]=function(_0x3e9af8){var _0x56d3a3=new RegExp(/(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[?!@#\$%\^&\*~\-_=+[{\]\}])(?=.{8,})/);if(!_0x56d3a3[_0x5976('0x6e')](_0x3e9af8))throw new db['Sequelize'][(_0x5976('0x6f'))]('The\x20password\x20must\x20be\x20at\x20least\x208\x20characters\x20long\x20and\x20have\x201\x20lowercase\x20character,\x201\x20uppercase\x20character,\x201\x20number\x20and\x201\x20special\x20character\x20~!@#$%^&-_=+[{]}.');return;};exports[_0x5976('0x70')]=function(_0x4dd62b,_0x49dda9,_0x1cbeb9){var _0x31b09c=encryptor[_0x5976('0x71')](_0x49dda9)[_0x5976('0x72')](',');for(var _0x4459be=0x0;_0x4459be<_0x1cbeb9;_0x4459be++){if(!_0x31b09c[_0x4459be])break;if(_0x4dd62b['toLowerCase']()===_0x31b09c[_0x4459be]['toLowerCase']()){var _0x435dc2=util['format'](_0x5976('0x73'),_0x1cbeb9);if(_0x1cbeb9===0x1){_0x435dc2=_0x5976('0x74');}throw new db[(_0x5976('0x75'))][(_0x5976('0x6f'))](_0x435dc2);}}return;};exports[_0x5976('0x76')]=function(_0xf51eb9,_0x1f0ef6){var _0x23dcef=_0x1f0ef6?encryptor[_0x5976('0x71')](_0x1f0ef6)[_0x5976('0x72')](','):[];if(_0x23dcef[_0x5976('0x77')]===0x5){_0x23dcef[_0x5976('0x78')](-0x1,0x1);}_0x23dcef[_0x5976('0x79')](_0xf51eb9);return encryptor[_0x5976('0x7a')](_0x23dcef[_0x5976('0x7b')](','));};function signJwt(_0x377de2){var _0x2cbc65=BPromise[_0x5976('0x7c')](jwt[_0x5976('0x7d')],{'context':jwt});var _0x5d1ab2=_0x377de2[_0x5976('0x7e')]||config[_0x5976('0xc')][_0x5976('0x7f')];return new BPromise(function(_0x5e68c3,_0x2b9d99){_0x2cbc65(_0x377de2[_0x5976('0x80')],_0x5d1ab2,_0x377de2[_0x5976('0x81')])[_0x5976('0x50')](function(_0x29a6e0){_0x5e68c3(_0x29a6e0);})[_0x5976('0x4b')](function(_0x5198f1){_0x2b9d99(_0x5198f1);});});}function verifyJwt(_0x12b2b4,_0x4d034f,_0x5717c3){var _0x58890b=BPromise['promisify'](jwt['verify'],{'context':jwt});var _0xf060d5=_0x5717c3||config[_0x5976('0xc')][_0x5976('0x7f')];return new BPromise(function(_0x294da8,_0x486d0b){_0x58890b(_0x12b2b4,_0xf060d5,_0x4d034f)[_0x5976('0x50')](function(_0x3d160e){_0x294da8(_0x3d160e);})['catch'](function(_0x59fcf3){_0x486d0b(_0x59fcf3);});});}function generateNonce(){return crypto[_0x5976('0x82')](0x10)[_0x5976('0x83')](_0x5976('0x84'));}function generateIssuedAt(){return Math['floor'](Date[_0x5976('0x85')]()/0x3e8)[_0x5976('0x83')]();}function createJwt(_0x4f264b){var _0x463a05={'payload':{'iat':_0x4f264b[_0x5976('0x69')],'nonce':_0x4f264b[_0x5976('0x56')]},'options':{'algorithm':_0x5976('0x86'),'subject':_0x4f264b['id'][_0x5976('0x83')](),'issuer':hardwareConf[_0x5976('0x4f')](),'audience':hardwareConf[_0x5976('0x4f')]()}};return signJwt(_0x463a05)[_0x5976('0x50')](function(_0xed6f1e){return{'iat':_0x4f264b['apiKeyIat'],'nonce':_0x4f264b[_0x5976('0x56')],'token':_0xed6f1e};});}