server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x62bc=['phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','hotdesk','interface','use','user','ChatInteraction','closed','disposition','then','status','json','unmanaged','Unmanaged.','Forbidden.','catch','isAuthenticated','headers','authorization','startsWith','Basic','find','pass','Bearer','Unknown\x20authorization\x20format','apikey','getUuid','query','User','sub','isEqual','apiKeyNonce','nonce','User\x20not\x20found.','User\x20object\x20not\x20found.','canUpdate','../../config/license/util','getLicense','Forbidden','isMiddleware','signToken','setTokenCookie','motion.token','redirect','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','promisify','options','verify','randomBytes','toString','hex','now','../../mysqldb','../../config/environment','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','secrets','session','role','fullname','name','internal','email','userpic','permissions','md5secret','voicePause','chatPause','mailPause','faxPause','smsPause','lastPauseAt','allowmessenger','alias','phoneBarAutoAnswerDelay','phoneBarDnd','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarExpires'];(function(_0x3dd15e,_0x1f0015){var _0x231fd0=function(_0x4f680a){while(--_0x4f680a){_0x3dd15e['push'](_0x3dd15e['shift']());}};_0x231fd0(++_0x1f0015);}(_0x62bc,0x97));var _0xc62b=function(_0x3dd15e,_0x1f0015){_0x3dd15e=_0x3dd15e-0x0;var _0x231fd0=_0x62bc[_0x3dd15e];return _0x231fd0;};'use strict';var db=require(_0xc62b('0x0'))['db'];var config=require(_0xc62b('0x1'));var hardwareConf=require('../../config/license/hardware');var _=require('lodash');var jwt=require(_0xc62b('0x2'));var expressJwt=require(_0xc62b('0x3'));var compose=require(_0xc62b('0x4'));var basicAuth=require(_0xc62b('0x5'));var crypto=require(_0xc62b('0x6'));var BPromise=require('bluebird');var validateJwt=expressJwt({'secret':config[_0xc62b('0x7')][_0xc62b('0x8')]});var userAttributes=['id',_0xc62b('0x9'),_0xc62b('0xa'),_0xc62b('0xb'),_0xc62b('0xc'),_0xc62b('0xd'),_0xc62b('0xe'),_0xc62b('0xf'),_0xc62b('0x10'),_0xc62b('0x11'),_0xc62b('0x12'),_0xc62b('0x13'),_0xc62b('0x14'),_0xc62b('0x15'),'openchannelPause','pauseType','showWebBar','lastLoginAt',_0xc62b('0x16'),'crudPermissions',_0xc62b('0x17'),'passwordResetAt',_0xc62b('0x18'),'phoneBarAutoAnswer',_0xc62b('0x19'),_0xc62b('0x1a'),_0xc62b('0x1b'),_0xc62b('0x1c'),_0xc62b('0x1d'),_0xc62b('0x1e'),_0xc62b('0x1f'),_0xc62b('0x20'),_0xc62b('0x21'),_0xc62b('0x22'),_0xc62b('0x23'),'userProfileId'];exports['isChatInteractionAuthorized']=function(){return this['isAuthenticated'](!![])[_0xc62b('0x24')](function(_0x1d1e56,_0x150d91,_0x2168c9){if(_0x1d1e56[_0xc62b('0x25')]){_0x2168c9();}else{return db[_0xc62b('0x26')]['findOne']({'where':{'id':_0x1d1e56['params']['id']},'attributes':['id',_0xc62b('0x27'),_0xc62b('0x28')],'raw':!![]})[_0xc62b('0x29')](function(_0x5e85ce){if(_0x5e85ce&&_0x5e85ce[_0xc62b('0x27')]){return _0x150d91[_0xc62b('0x2a')](_0x5e85ce[_0xc62b('0x28')]==='unmanaged'?0x195:0x193)[_0xc62b('0x2b')]({'message':_0x5e85ce[_0xc62b('0x28')]===_0xc62b('0x2c')?_0xc62b('0x2d'):_0xc62b('0x2e')});}else{_0x2168c9();}})[_0xc62b('0x2f')](function(_0x21c6ad){_0x2168c9(_0x21c6ad);});}});};exports[_0xc62b('0x30')]=function isAuthenticated(_0x53b9f5){return compose()['use'](function(_0x52fa7a,_0x472c31,_0x140ec5){if(_0x52fa7a[_0xc62b('0x31')][_0xc62b('0x32')]){if(_[_0xc62b('0x33')](_0x52fa7a[_0xc62b('0x31')][_0xc62b('0x32')],_0xc62b('0x34'))){var _0x1dee2e=basicAuth(_0x52fa7a);db['User'][_0xc62b('0x35')]({'where':{'name':_0x1dee2e[_0xc62b('0xb')]}})[_0xc62b('0x29')](function(_0x2f6077){if(!_0x2f6077||!_0x2f6077['authenticate'](_0x1dee2e[_0xc62b('0x36')])){return _0x472c31[_0xc62b('0x2a')](0x191)['json']({'message':'Wrong\x20credentials.'});}_0x52fa7a[_0xc62b('0x25')]={'id':_0x2f6077['id']};_0x140ec5();})[_0xc62b('0x2f')](function(_0x4da4bf){_0x140ec5(_0x4da4bf);});}else if(_['startsWith'](_0x52fa7a[_0xc62b('0x31')]['authorization'],_0xc62b('0x37'))){validateJwt(_0x52fa7a,_0x472c31,_0x140ec5);}else{if(_0x53b9f5){_0x140ec5();}else{return _0x472c31[_0xc62b('0x2a')](0x193)[_0xc62b('0x2b')]({'message':_0xc62b('0x38')});}}}else if(_0x52fa7a['query'][_0xc62b('0x39')]){try{var _0x163d63={'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0xc62b('0x3a')]()};verifyJwt(_0x52fa7a[_0xc62b('0x3b')][_0xc62b('0x39')],_0x163d63)[_0xc62b('0x29')](function(_0x46b0ac){return db[_0xc62b('0x3c')][_0xc62b('0x35')]({'where':{'id':_0x46b0ac[_0xc62b('0x3d')]}})[_0xc62b('0x29')](function(_0x230cd6){if(!_0x230cd6||!_[_0xc62b('0x3e')](_0x230cd6[_0xc62b('0x3f')],_0x46b0ac[_0xc62b('0x40')])){return _0x472c31['status'](0x191)[_0xc62b('0x2b')]({'message':'API\x20access\x20key\x20is\x20not\x20valid\x20anymore'});}_0x52fa7a[_0xc62b('0x25')]={'id':_0x230cd6['id']};_0x140ec5();});})[_0xc62b('0x2f')](function(){return _0x472c31[_0xc62b('0x2a')](0x191)[_0xc62b('0x2b')]({'message':'Invalid\x20API\x20access\x20key'});});}catch(_0x1c794d){_0x140ec5(_0x1c794d);}}else if(_0x53b9f5){_0x140ec5();}else{return _0x472c31[_0xc62b('0x2a')](0x193)[_0xc62b('0x2b')]({'message':_0xc62b('0x38')});}})[_0xc62b('0x24')](function(_0x375ed2,_0x235ece,_0x14a637){if(_0x375ed2[_0xc62b('0x25')]){db[_0xc62b('0x3c')][_0xc62b('0x35')]({'where':{'id':_0x375ed2[_0xc62b('0x25')]['id']},'attributes':userAttributes})[_0xc62b('0x29')](function(_0x1251ff){if(!_0x1251ff){return _0x235ece[_0xc62b('0x2a')](0x194)[_0xc62b('0x2b')]({'message':_0xc62b('0x41')});}_0x375ed2[_0xc62b('0x25')]=_0x1251ff;_0x14a637();})[_0xc62b('0x2f')](function(_0x2d6756){_0x14a637(_0x2d6756);});}else if(_0x53b9f5){_0x14a637();}else{return _0x235ece[_0xc62b('0x2a')](0x194)[_0xc62b('0x2b')]({'message':_0xc62b('0x42')});}});};exports[_0xc62b('0x43')]=function canUpdate(){return compose()[_0xc62b('0x24')](function(_0x476193,_0x3fe08c,_0xea115c){return require(_0xc62b('0x44'))[_0xc62b('0x45')]()[_0xc62b('0x29')](function(_0x34a595){if(_0x34a595['update']){_0xea115c();}else{return _0x3fe08c[_0xc62b('0x2a')](0x193)[_0xc62b('0x2b')]({'message':_0xc62b('0x46')});}})[_0xc62b('0x2f')](function(_0x25bc1d){_0xea115c(_0x25bc1d);});});};exports[_0xc62b('0x47')]=function(_0x39fb39,_0x5bbaf6,_0x3b0d6a){_0x39fb39['isMiddleware']=!![];return _0x3b0d6a();};exports[_0xc62b('0x48')]=function signToken(_0x1347c1){return signJwt(_0x1347c1);};exports[_0xc62b('0x49')]=function(_0x565ec6,_0x3f4531){if(!_0x565ec6[_0xc62b('0x25')]){return _0x3f4531['status'](0x194)[_0xc62b('0x2b')]({'message':'It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.'});}var _0x388674={'payload':{'id':_0x565ec6[_0xc62b('0x25')]['id'],'role':_0x565ec6['user'][_0xc62b('0x9')]},'options':{'expiresIn':0x15180}};return signJwt(_0x388674)[_0xc62b('0x29')](function(_0x22f883){_0x3f4531['cookie'](_0xc62b('0x4a'),_0x22f883);_0x3f4531[_0xc62b('0x4b')](_0xc62b('0x4c'));})[_0xc62b('0x2f')](function(_0x324c1c){return _0x3f4531[_0xc62b('0x2a')](0x1f4)[_0xc62b('0x4d')](_0x324c1c);});};exports[_0xc62b('0x4e')]=function(_0x34eff6){if(_[_0xc62b('0x4f')](_0x34eff6[_0xc62b('0x3f')])||_['isNil'](_0x34eff6[_0xc62b('0x50')])){return null;}else{return createJwt(_0x34eff6);}};exports[_0xc62b('0x51')]=function(_0x2047d8){_0x2047d8[_0xc62b('0x3f')]=generateNonce();_0x2047d8[_0xc62b('0x50')]=generateIssuedAt();return createJwt(_0x2047d8);};exports[_0xc62b('0x52')]=function(_0x14c2ca,_0x13122c){var _0x36376f=_0x14c2ca[_0xc62b('0x3b')][_0xc62b('0x39')];if(_0x36376f){var _0x4176df={'nonce':_0x13122c[_0xc62b('0x3f')],'iat':_0x13122c[_0xc62b('0x50')],'audience':hardwareConf[_0xc62b('0x3a')](),'issuer':hardwareConf[_0xc62b('0x3a')]()};return verifyJwt(_0x36376f,_0x4176df)[_0xc62b('0x29')](function(){return generateApiKey(_0x13122c);});}else{throw{'message':_0xc62b('0x53')};}};function signJwt(_0x4a0e2b){var _0x35f7d1=BPromise[_0xc62b('0x54')](jwt['sign'],{'context':jwt});var _0x349d64=_0x4a0e2b['secret']||config[_0xc62b('0x7')][_0xc62b('0x8')];return new BPromise(function(_0x22647c,_0x184a73){_0x35f7d1(_0x4a0e2b['payload'],_0x349d64,_0x4a0e2b[_0xc62b('0x55')])[_0xc62b('0x29')](function(_0x4b4828){_0x22647c(_0x4b4828);})['catch'](function(_0x124b19){_0x184a73(_0x124b19);});});}function verifyJwt(_0x2c45c5,_0x252289,_0x51c319){var _0x4b7fc1=BPromise['promisify'](jwt[_0xc62b('0x56')],{'context':jwt});var _0x3fe965=_0x51c319||config[_0xc62b('0x7')][_0xc62b('0x8')];return new BPromise(function(_0x1df6bd,_0x150c81){_0x4b7fc1(_0x2c45c5,_0x3fe965,_0x252289)['then'](function(_0x325c67){_0x1df6bd(_0x325c67);})[_0xc62b('0x2f')](function(_0x4cafa7){_0x150c81(_0x4cafa7);});});}function generateNonce(){return crypto[_0xc62b('0x57')](0x10)[_0xc62b('0x58')](_0xc62b('0x59'));}function generateIssuedAt(){return Math['floor'](Date[_0xc62b('0x5a')]()/0x3e8)[_0xc62b('0x58')]();}function createJwt(_0x2062c0){var _0x1b26b0={'payload':{'iat':_0x2062c0['apiKeyIat'],'nonce':_0x2062c0[_0xc62b('0x3f')]},'options':{'algorithm':'HS512','subject':_0x2062c0['id'][_0xc62b('0x58')](),'issuer':hardwareConf[_0xc62b('0x3a')](),'audience':hardwareConf['getUuid']()}};return signJwt(_0x1b26b0)[_0xc62b('0x29')](function(_0x32fd65){return{'iat':_0x2062c0[_0xc62b('0x50')],'nonce':_0x2062c0[_0xc62b('0x3f')],'token':_0x32fd65};});}