server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xedd4=['status','unmanaged','json','catch','headers','authorization','startsWith','Basic','User','authenticate','Wrong\x20credentials.','Bearer','getUuid','Setting','allowedLoginAttempts','blockDuration','isEqual','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','blocked','blockedAt','add','minutes','Invalid\x20API\x20access\x20key','getLicense','webrtc','Forbidden','isMiddleware','signToken','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','cookie','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','validatePasswordPattern','test','Sequelize','ValidationError','validatePasswordHistory','split','toLowerCase','format','The\x20password\x20must\x20be\x20different\x20from\x20the\x20previous\x20%d\x20passwords.\x20Please\x20choose\x20another\x20one.','The\x20password\x20must\x20be\x20different\x20from\x20the\x20last\x20one.\x20Please\x20choose\x20another\x20one.','updatePasswordsHistory','decryptString','length','splice','unshift','join','promisify','sign','secret','toString','hex','floor','HS512','../../mysqldb','../../config/environment','../../config/license/hardware','../../config/license/util','lodash','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','moment','secrets','session','role','fullname','name','email','md5secret','voicePause','chatPause','mailPause','openchannelPause','showWebBar','lastLoginAt','crudPermissions','allowmessenger','passwordResetAt','phoneBarAutoAnswer','phoneBarDnd','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarExpires','phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','userProfileId','privacyEnabled','settingsEnabled','wssPort','downloadVoiceRecordings','downloadOmnichannelInteractions','downloadAttachments','ignorePauseForPreviewCalls','selectRecallMeCampaign','chatAutoanswer','chatAutoanswerDelay','emailAutoanswer','emailAutoanswerDelay','smsAutoanswer','smsAutoanswerDelay','openchannelAutoanswer','faxAutoanswer','faxAutoanswerDelay','whatsappAutoanswer','whatsappAutoanswerDelay','messengerSoundNotification','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','findOne','closed','disposition','then','query','forceDownload'];(function(_0x5e9791,_0x34c262){var _0x43048e=function(_0x452ae6){while(--_0x452ae6){_0x5e9791['push'](_0x5e9791['shift']());}};_0x43048e(++_0x34c262);}(_0xedd4,0x1c4));var _0x4edd=function(_0x57a6e2,_0x240cb7){_0x57a6e2=_0x57a6e2-0x0;var _0x203abd=_0xedd4[_0x57a6e2];return _0x203abd;};'use strict';var db=require(_0x4edd('0x0'))['db'];var config=require(_0x4edd('0x1'));var hardwareConf=require(_0x4edd('0x2'));var licenseUtil=require(_0x4edd('0x3'));var encryptor=require('../encryptor');var _=require(_0x4edd('0x4'));var jwt=require(_0x4edd('0x5'));var expressJwt=require(_0x4edd('0x6'));var compose=require(_0x4edd('0x7'));var basicAuth=require(_0x4edd('0x8'));var crypto=require(_0x4edd('0x9'));var BPromise=require(_0x4edd('0xa'));var util=require('util');var moment=require(_0x4edd('0xb'));var validateJwt=expressJwt({'secret':config[_0x4edd('0xc')][_0x4edd('0xd')]});var userAttributes=['id',_0x4edd('0xe'),_0x4edd('0xf'),_0x4edd('0x10'),'internal',_0x4edd('0x11'),'userpic','permissions',_0x4edd('0x12'),_0x4edd('0x13'),_0x4edd('0x14'),_0x4edd('0x15'),'faxPause','smsPause',_0x4edd('0x16'),'pauseType',_0x4edd('0x17'),_0x4edd('0x18'),'lastPauseAt',_0x4edd('0x19'),_0x4edd('0x1a'),_0x4edd('0x1b'),'alias',_0x4edd('0x1c'),'phoneBarAutoAnswerDelay',_0x4edd('0x1d'),_0x4edd('0x1e'),_0x4edd('0x1f'),'phoneBarEnableSettings',_0x4edd('0x20'),_0x4edd('0x21'),_0x4edd('0x22'),_0x4edd('0x23'),'hotdesk','interface',_0x4edd('0x24'),_0x4edd('0x25'),_0x4edd('0x26'),_0x4edd('0x27'),_0x4edd('0x28'),_0x4edd('0x29'),_0x4edd('0x2a'),_0x4edd('0x2b'),_0x4edd('0x2c'),_0x4edd('0x2d'),_0x4edd('0x2e'),_0x4edd('0x2f'),_0x4edd('0x30'),_0x4edd('0x31'),_0x4edd('0x32'),_0x4edd('0x33'),'openchannelAutoanswerDelay',_0x4edd('0x34'),_0x4edd('0x35'),_0x4edd('0x36'),_0x4edd('0x37'),_0x4edd('0x38')];exports[_0x4edd('0x39')]=function(){return this[_0x4edd('0x3a')](!![])[_0x4edd('0x3b')](function(_0x3dea12,_0x8bc307,_0x3c9c47){if(_0x3dea12[_0x4edd('0x3c')]){_0x3c9c47();}else{return db[_0x4edd('0x3d')][_0x4edd('0x3e')]({'where':{'id':_0x3dea12['params']['id']},'attributes':['id',_0x4edd('0x3f'),_0x4edd('0x40')],'raw':!![]})[_0x4edd('0x41')](function(_0x2a741d){if(_0x2a741d&&_0x2a741d['closed']&&!_0x3dea12[_0x4edd('0x42')][_0x4edd('0x43')]){return _0x8bc307[_0x4edd('0x44')](_0x2a741d[_0x4edd('0x40')]===_0x4edd('0x45')?0x195:0x193)[_0x4edd('0x46')]({'message':_0x2a741d[_0x4edd('0x40')]==='unmanaged'?'Unmanaged.':'Forbidden.'});}else{_0x3c9c47();}})[_0x4edd('0x47')](function(_0x54e672){_0x3c9c47(_0x54e672);});}});};exports[_0x4edd('0x3a')]=function isAuthenticated(_0x4f0548){return compose()[_0x4edd('0x3b')](function(_0x14f6f6,_0xdda757,_0x3f7f82){var _0x532a6f;if(_0x14f6f6[_0x4edd('0x48')][_0x4edd('0x49')]){if(_[_0x4edd('0x4a')](_0x14f6f6['headers']['authorization'],_0x4edd('0x4b'))){var _0x39a966=basicAuth(_0x14f6f6);db[_0x4edd('0x4c')]['find']({'where':{'name':_0x39a966[_0x4edd('0x10')]}})[_0x4edd('0x41')](function(_0x33df3e){if(!_0x33df3e||!_0x33df3e[_0x4edd('0x4d')](_0x39a966['pass'])){return _0xdda757['status'](0x191)[_0x4edd('0x46')]({'message':_0x4edd('0x4e')});}_0x14f6f6[_0x4edd('0x3c')]={'id':_0x33df3e['id']};_0x3f7f82();})[_0x4edd('0x47')](function(_0x16993e){_0x3f7f82(_0x16993e);});}else if(_[_0x4edd('0x4a')](_0x14f6f6[_0x4edd('0x48')][_0x4edd('0x49')],_0x4edd('0x4f'))){validateJwt(_0x14f6f6,_0xdda757,_0x3f7f82);}else{if(_0x4f0548){_0x3f7f82();}else{return _0xdda757['status'](0x193)[_0x4edd('0x46')]({'message':'Unknown\x20authorization\x20format'});}}}else if(_0x14f6f6[_0x4edd('0x42')]['apikey']){try{var _0x1fc853={'audience':hardwareConf[_0x4edd('0x50')](),'issuer':hardwareConf[_0x4edd('0x50')]()};verifyJwt(_0x14f6f6[_0x4edd('0x42')]['apikey'],_0x1fc853)[_0x4edd('0x41')](function(_0x3f28ee){return db[_0x4edd('0x4c')]['find']({'where':{'id':_0x3f28ee['sub']}})[_0x4edd('0x41')](function(_0x18e978){_0x532a6f=_0x18e978;return db[_0x4edd('0x51')][_0x4edd('0x3e')]({'where':{'id':0x1},'attributes':[_0x4edd('0x52'),_0x4edd('0x53')],'raw':!![]});})[_0x4edd('0x41')](function(_0x1dba00){if(!_0x532a6f||!_[_0x4edd('0x54')](_0x532a6f[_0x4edd('0x55')],_0x3f28ee[_0x4edd('0x56')])){return _0xdda757[_0x4edd('0x44')](0x191)[_0x4edd('0x46')]({'message':_0x4edd('0x57')});}if(_0x532a6f['disabled']){return _0xdda757[_0x4edd('0x44')](0x191)[_0x4edd('0x46')]({'message':'Invalid\x20API\x20access\x20key'});}if(_0x532a6f[_0x4edd('0x58')]){if(_0x1dba00[_0x4edd('0x53')]>0x0){if(moment(_0x532a6f[_0x4edd('0x59')])[_0x4edd('0x5a')](_0x1dba00['blockDuration'],_0x4edd('0x5b'))>moment()){return _0xdda757[_0x4edd('0x44')](0x191)['json']({'message':'Invalid\x20API\x20access\x20key'});}}else{return _0xdda757[_0x4edd('0x44')](0x191)[_0x4edd('0x46')]({'message':_0x4edd('0x5c')});}}_0x14f6f6[_0x4edd('0x3c')]={'id':_0x532a6f['id']};_0x3f7f82();});})['catch'](function(){return _0xdda757[_0x4edd('0x44')](0x191)['json']({'message':_0x4edd('0x5c')});});}catch(_0x473bab){_0x3f7f82(_0x473bab);}}else if(_0x4f0548){_0x3f7f82();}else{return _0xdda757[_0x4edd('0x44')](0x193)['json']({'message':'Unknown\x20authorization\x20format'});}})['use'](function(_0x407d8d,_0x1c4f64,_0x48be95){if(_0x407d8d[_0x4edd('0x3c')]){db['User']['find']({'where':{'id':_0x407d8d[_0x4edd('0x3c')]['id']},'attributes':userAttributes})[_0x4edd('0x41')](function(_0xdc0ed2){if(!_0xdc0ed2){return _0x1c4f64[_0x4edd('0x44')](0x194)[_0x4edd('0x46')]({'message':'User\x20not\x20found.'});}_0x407d8d['user']=_0xdc0ed2;_0x48be95();})[_0x4edd('0x47')](function(_0x5a532c){_0x48be95(_0x5a532c);});}else if(_0x4f0548){_0x48be95();}else{return _0x1c4f64[_0x4edd('0x44')](0x194)[_0x4edd('0x46')]({'message':'User\x20object\x20not\x20found.'});}});};exports['canUpdate']=function canUpdate(){return compose()[_0x4edd('0x3b')](function(_0x3231f8,_0x189646,_0x486bc3){return licenseUtil['getLicense']()[_0x4edd('0x41')](function(_0x183312){if(_0x183312['update']){_0x486bc3();}else{return _0x189646[_0x4edd('0x44')](0x193)[_0x4edd('0x46')]({'message':'Forbidden'});}})[_0x4edd('0x47')](function(_0x1c6091){_0x486bc3(_0x1c6091);});});};exports['isWebrtcLicence']=function isWebrtcLicence(){return compose()['use'](function(_0x43f76a,_0x5e645a,_0x457323){return licenseUtil[_0x4edd('0x5d')]()['then'](function(_0x28b88b){if(_0x28b88b[_0x4edd('0x5e')]){_0x457323();}else{return _0x5e645a[_0x4edd('0x44')](0x193)[_0x4edd('0x46')]({'message':_0x4edd('0x5f')});}})[_0x4edd('0x47')](function(_0x90cfbb){_0x457323(_0x90cfbb);});});};exports['isMiddleware']=function(_0x4d7163,_0x1d5885,_0x519934){_0x4d7163[_0x4edd('0x60')]=!![];return _0x519934();};exports[_0x4edd('0x61')]=function signToken(_0x2d9236){return signJwt(_0x2d9236);};exports[_0x4edd('0x62')]=function(_0x45ab53,_0x4b5c36){if(!_0x45ab53[_0x4edd('0x3c')]){return _0x4b5c36[_0x4edd('0x44')](0x194)[_0x4edd('0x46')]({'message':_0x4edd('0x63')});}var _0x2d8fd2={'payload':{'id':_0x45ab53[_0x4edd('0x3c')]['id'],'role':_0x45ab53[_0x4edd('0x3c')]['role']},'options':{'expiresIn':0x15180}};return signJwt(_0x2d8fd2)['then'](function(_0x651deb){_0x4b5c36[_0x4edd('0x64')]('motion.token',_0x651deb);_0x4b5c36['redirect']('/dashboards/general');})[_0x4edd('0x47')](function(_0x2d0498){return _0x4b5c36[_0x4edd('0x44')](0x1f4)[_0x4edd('0x65')](_0x2d0498);});};exports[_0x4edd('0x66')]=function(_0x3d03e0){if(_[_0x4edd('0x67')](_0x3d03e0[_0x4edd('0x55')])||_[_0x4edd('0x67')](_0x3d03e0[_0x4edd('0x68')])){return null;}else{return createJwt(_0x3d03e0);}};exports[_0x4edd('0x69')]=function(_0x17e3e3){_0x17e3e3['apiKeyNonce']=generateNonce();_0x17e3e3['apiKeyIat']=generateIssuedAt();return createJwt(_0x17e3e3);};exports['regenerateApiKey']=function(_0x4cb384,_0x4c37cb){var _0x3476ac=_0x4cb384[_0x4edd('0x42')]['apikey'];if(_0x3476ac){var _0x343370={'nonce':_0x4c37cb[_0x4edd('0x55')],'iat':_0x4c37cb[_0x4edd('0x68')],'audience':hardwareConf[_0x4edd('0x50')](),'issuer':hardwareConf['getUuid']()};return verifyJwt(_0x3476ac,_0x343370)[_0x4edd('0x41')](function(){return generateApiKey(_0x4c37cb);});}else{throw{'message':_0x4edd('0x6a')};}};exports[_0x4edd('0x6b')]=function(_0x1e078c){var _0x50251d=new RegExp(/(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[?!@#\$%\^&\*~\-_=+[{\]\}])(?=.{8,})/);if(!_0x50251d[_0x4edd('0x6c')](_0x1e078c))throw new db[(_0x4edd('0x6d'))][(_0x4edd('0x6e'))]('The\x20password\x20must\x20be\x20at\x20least\x208\x20characters\x20long\x20and\x20have\x201\x20lowercase\x20character,\x201\x20uppercase\x20character,\x201\x20number\x20and\x201\x20special\x20character\x20~!@#$%^&-_=+[{]}.');return;};exports[_0x4edd('0x6f')]=function(_0x4d44a2,_0x24c070,_0xdce3b5){var _0x1a3f4d=encryptor['decryptString'](_0x24c070)[_0x4edd('0x70')](',');for(var _0x5d5d72=0x0;_0x5d5d72<_0xdce3b5;_0x5d5d72++){if(!_0x1a3f4d[_0x5d5d72])break;if(_0x4d44a2[_0x4edd('0x71')]()===_0x1a3f4d[_0x5d5d72]['toLowerCase']()){var _0x69168e=util[_0x4edd('0x72')](_0x4edd('0x73'),_0xdce3b5);if(_0xdce3b5===0x1){_0x69168e=_0x4edd('0x74');}throw new db[(_0x4edd('0x6d'))][(_0x4edd('0x6e'))](_0x69168e);}}return;};exports[_0x4edd('0x75')]=function(_0x267e55,_0x2a1478){var _0x27c672=_0x2a1478?encryptor[_0x4edd('0x76')](_0x2a1478)[_0x4edd('0x70')](','):[];if(_0x27c672[_0x4edd('0x77')]===0x5){_0x27c672[_0x4edd('0x78')](-0x1,0x1);}_0x27c672[_0x4edd('0x79')](_0x267e55);return encryptor['encryptString'](_0x27c672[_0x4edd('0x7a')](','));};function signJwt(_0x578fd4){var _0x40aa1b=BPromise[_0x4edd('0x7b')](jwt[_0x4edd('0x7c')],{'context':jwt});var _0x155ff2=_0x578fd4[_0x4edd('0x7d')]||config[_0x4edd('0xc')][_0x4edd('0xd')];return new BPromise(function(_0x44daf0,_0x392f35){_0x40aa1b(_0x578fd4['payload'],_0x155ff2,_0x578fd4['options'])['then'](function(_0xe23340){_0x44daf0(_0xe23340);})[_0x4edd('0x47')](function(_0x7e7b27){_0x392f35(_0x7e7b27);});});}function verifyJwt(_0x24b5c8,_0x2d3f40,_0x258b43){var _0x2b1d61=BPromise[_0x4edd('0x7b')](jwt['verify'],{'context':jwt});var _0x1c0858=_0x258b43||config[_0x4edd('0xc')][_0x4edd('0xd')];return new BPromise(function(_0x33f506,_0x4c984c){_0x2b1d61(_0x24b5c8,_0x1c0858,_0x2d3f40)['then'](function(_0x412847){_0x33f506(_0x412847);})[_0x4edd('0x47')](function(_0x25b4ad){_0x4c984c(_0x25b4ad);});});}function generateNonce(){return crypto['randomBytes'](0x10)[_0x4edd('0x7e')](_0x4edd('0x7f'));}function generateIssuedAt(){return Math[_0x4edd('0x80')](Date['now']()/0x3e8)[_0x4edd('0x7e')]();}function createJwt(_0x458891){var _0x40cb2b={'payload':{'iat':_0x458891[_0x4edd('0x68')],'nonce':_0x458891[_0x4edd('0x55')]},'options':{'algorithm':_0x4edd('0x81'),'subject':_0x458891['id'][_0x4edd('0x7e')](),'issuer':hardwareConf[_0x4edd('0x50')](),'audience':hardwareConf[_0x4edd('0x50')]()}};return signJwt(_0x40cb2b)[_0x4edd('0x41')](function(_0x20256d){return{'iat':_0x458891[_0x4edd('0x68')],'nonce':_0x458891[_0x4edd('0x55')],'token':_0x20256d};});}