server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xb03e=['disposition','then','status','json','unmanaged','Unmanaged.','headers','authorization','authenticate','pass','catch','startsWith','Bearer','Unknown\x20authorization\x20format','apikey','getUuid','query','Setting','allowedLoginAttempts','isEqual','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','blockDuration','blockedAt','minutes','Invalid\x20API\x20access\x20key','User','User\x20not\x20found.','User\x20object\x20not\x20found.','canUpdate','getLicense','Forbidden','isWebrtcLicence','isMiddleware','signToken','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','cookie','motion.token','redirect','/dashboards/general','retrieveApiKey','isNil','apiKeyIat','generateApiKey','apiKeyNonce','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','validatePasswordPattern','test','Sequelize','ValidationError','validatePasswordHistory','decryptString','split','toLowerCase','format','The\x20password\x20must\x20be\x20different\x20from\x20the\x20previous\x20%d\x20passwords.\x20Please\x20choose\x20another\x20one.','The\x20password\x20must\x20be\x20different\x20from\x20the\x20last\x20one.\x20Please\x20choose\x20another\x20one.','updatePasswordsHistory','length','splice','encryptString','join','promisify','sign','secret','payload','options','randomBytes','floor','now','../../config/environment','../../config/license/hardware','../../config/license/util','../encryptor','lodash','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','util','secrets','session','role','fullname','name','internal','userpic','permissions','md5secret','chatPause','faxPause','smsPause','openchannelPause','pauseType','showWebBar','lastLoginAt','lastPauseAt','crudPermissions','allowmessenger','passwordResetAt','alias','phoneBarAutoAnswer','phoneBarDnd','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','interface','userProfileId','privacyEnabled','settingsEnabled','wssPort','downloadVoiceRecordings','downloadOmnichannelInteractions','downloadAttachments','ignorePauseForPreviewCalls','selectRecallMeCampaign','chatAutoanswer','chatAutoanswerDelay','emailAutoanswer','emailAutoanswerDelay','smsAutoanswerDelay','openchannelAutoanswer','openchannelAutoanswerDelay','faxAutoanswer','faxAutoanswerDelay','whatsappAutoanswer','whatsappAutoanswerDelay','messengerSoundNotification','isChatInteractionAuthorized','use','user','findOne','params','closed'];(function(_0x3dbd93,_0x1ea5bb){var _0x28a67b=function(_0x3ba8a8){while(--_0x3ba8a8){_0x3dbd93['push'](_0x3dbd93['shift']());}};_0x28a67b(++_0x1ea5bb);}(_0xb03e,0x1eb));var _0xeb03=function(_0x361964,_0x18c5b1){_0x361964=_0x361964-0x0;var _0x329c5f=_0xb03e[_0x361964];return _0x329c5f;};'use strict';var db=require('../../mysqldb')['db'];var config=require(_0xeb03('0x0'));var hardwareConf=require(_0xeb03('0x1'));var licenseUtil=require(_0xeb03('0x2'));var encryptor=require(_0xeb03('0x3'));var _=require(_0xeb03('0x4'));var jwt=require(_0xeb03('0x5'));var expressJwt=require(_0xeb03('0x6'));var compose=require(_0xeb03('0x7'));var basicAuth=require(_0xeb03('0x8'));var crypto=require(_0xeb03('0x9'));var BPromise=require(_0xeb03('0xa'));var util=require(_0xeb03('0xb'));var moment=require('moment');var validateJwt=expressJwt({'secret':config[_0xeb03('0xc')][_0xeb03('0xd')]});var userAttributes=['id',_0xeb03('0xe'),_0xeb03('0xf'),_0xeb03('0x10'),_0xeb03('0x11'),'email',_0xeb03('0x12'),_0xeb03('0x13'),_0xeb03('0x14'),'voicePause',_0xeb03('0x15'),'mailPause',_0xeb03('0x16'),_0xeb03('0x17'),_0xeb03('0x18'),_0xeb03('0x19'),_0xeb03('0x1a'),_0xeb03('0x1b'),_0xeb03('0x1c'),_0xeb03('0x1d'),_0xeb03('0x1e'),_0xeb03('0x1f'),_0xeb03('0x20'),_0xeb03('0x21'),'phoneBarAutoAnswerDelay',_0xeb03('0x22'),_0xeb03('0x23'),_0xeb03('0x24'),_0xeb03('0x25'),'phoneBarExpires',_0xeb03('0x26'),_0xeb03('0x27'),_0xeb03('0x28'),'hotdesk',_0xeb03('0x29'),_0xeb03('0x2a'),_0xeb03('0x2b'),_0xeb03('0x2c'),_0xeb03('0x2d'),_0xeb03('0x2e'),_0xeb03('0x2f'),_0xeb03('0x30'),_0xeb03('0x31'),_0xeb03('0x32'),_0xeb03('0x33'),_0xeb03('0x34'),_0xeb03('0x35'),_0xeb03('0x36'),'smsAutoanswer',_0xeb03('0x37'),_0xeb03('0x38'),_0xeb03('0x39'),_0xeb03('0x3a'),_0xeb03('0x3b'),_0xeb03('0x3c'),_0xeb03('0x3d'),_0xeb03('0x3e')];exports[_0xeb03('0x3f')]=function(){return this['isAuthenticated'](!![])[_0xeb03('0x40')](function(_0x1707ec,_0x11ea85,_0x300dc0){if(_0x1707ec[_0xeb03('0x41')]){_0x300dc0();}else{return db['ChatInteraction'][_0xeb03('0x42')]({'where':{'id':_0x1707ec[_0xeb03('0x43')]['id']},'attributes':['id',_0xeb03('0x44'),_0xeb03('0x45')],'raw':!![]})[_0xeb03('0x46')](function(_0x119697){if(_0x119697&&_0x119697[_0xeb03('0x44')]){return _0x11ea85[_0xeb03('0x47')](_0x119697[_0xeb03('0x45')]==='unmanaged'?0x195:0x193)[_0xeb03('0x48')]({'message':_0x119697[_0xeb03('0x45')]===_0xeb03('0x49')?_0xeb03('0x4a'):'Forbidden.'});}else{_0x300dc0();}})['catch'](function(_0x1064a5){_0x300dc0(_0x1064a5);});}});};exports['isAuthenticated']=function isAuthenticated(_0x31a622){return compose()[_0xeb03('0x40')](function(_0x160a37,_0x5db8bb,_0xd4c8ec){var _0x5de53a;if(_0x160a37['headers']['authorization']){if(_['startsWith'](_0x160a37[_0xeb03('0x4b')][_0xeb03('0x4c')],'Basic')){var _0x528479=basicAuth(_0x160a37);db['User']['find']({'where':{'name':_0x528479[_0xeb03('0x10')]}})[_0xeb03('0x46')](function(_0x32aff7){if(!_0x32aff7||!_0x32aff7[_0xeb03('0x4d')](_0x528479[_0xeb03('0x4e')])){return _0x5db8bb['status'](0x191)[_0xeb03('0x48')]({'message':'Wrong\x20credentials.'});}_0x160a37[_0xeb03('0x41')]={'id':_0x32aff7['id']};_0xd4c8ec();})[_0xeb03('0x4f')](function(_0x19ceae){_0xd4c8ec(_0x19ceae);});}else if(_[_0xeb03('0x50')](_0x160a37[_0xeb03('0x4b')][_0xeb03('0x4c')],_0xeb03('0x51'))){validateJwt(_0x160a37,_0x5db8bb,_0xd4c8ec);}else{if(_0x31a622){_0xd4c8ec();}else{return _0x5db8bb[_0xeb03('0x47')](0x193)['json']({'message':_0xeb03('0x52')});}}}else if(_0x160a37['query'][_0xeb03('0x53')]){try{var _0xe3c81a={'audience':hardwareConf[_0xeb03('0x54')](),'issuer':hardwareConf[_0xeb03('0x54')]()};verifyJwt(_0x160a37[_0xeb03('0x55')][_0xeb03('0x53')],_0xe3c81a)['then'](function(_0x155b53){return db['User']['find']({'where':{'id':_0x155b53['sub']}})[_0xeb03('0x46')](function(_0x452868){_0x5de53a=_0x452868;return db[_0xeb03('0x56')][_0xeb03('0x42')]({'where':{'id':0x1},'attributes':[_0xeb03('0x57'),'blockDuration'],'raw':!![]});})[_0xeb03('0x46')](function(_0x166562){if(!_0x5de53a||!_[_0xeb03('0x58')](_0x5de53a['apiKeyNonce'],_0x155b53['nonce'])){return _0x5db8bb[_0xeb03('0x47')](0x191)[_0xeb03('0x48')]({'message':_0xeb03('0x59')});}if(_0x5de53a['disabled']){return _0x5db8bb[_0xeb03('0x47')](0x191)[_0xeb03('0x48')]({'message':'Invalid\x20API\x20access\x20key'});}if(_0x5de53a['blocked']){if(_0x166562[_0xeb03('0x5a')]>0x0){if(moment(_0x5de53a[_0xeb03('0x5b')])['add'](_0x166562[_0xeb03('0x5a')],_0xeb03('0x5c'))>moment()){return _0x5db8bb[_0xeb03('0x47')](0x191)[_0xeb03('0x48')]({'message':_0xeb03('0x5d')});}}else{return _0x5db8bb[_0xeb03('0x47')](0x191)[_0xeb03('0x48')]({'message':_0xeb03('0x5d')});}}_0x160a37[_0xeb03('0x41')]={'id':_0x5de53a['id']};_0xd4c8ec();});})[_0xeb03('0x4f')](function(){return _0x5db8bb[_0xeb03('0x47')](0x191)[_0xeb03('0x48')]({'message':_0xeb03('0x5d')});});}catch(_0x33414d){_0xd4c8ec(_0x33414d);}}else if(_0x31a622){_0xd4c8ec();}else{return _0x5db8bb[_0xeb03('0x47')](0x193)[_0xeb03('0x48')]({'message':_0xeb03('0x52')});}})[_0xeb03('0x40')](function(_0x35e53d,_0x138d13,_0x43e530){if(_0x35e53d[_0xeb03('0x41')]){db[_0xeb03('0x5e')]['find']({'where':{'id':_0x35e53d['user']['id']},'attributes':userAttributes})[_0xeb03('0x46')](function(_0x2262b7){if(!_0x2262b7){return _0x138d13[_0xeb03('0x47')](0x194)[_0xeb03('0x48')]({'message':_0xeb03('0x5f')});}_0x35e53d[_0xeb03('0x41')]=_0x2262b7;_0x43e530();})[_0xeb03('0x4f')](function(_0xcd049b){_0x43e530(_0xcd049b);});}else if(_0x31a622){_0x43e530();}else{return _0x138d13['status'](0x194)[_0xeb03('0x48')]({'message':_0xeb03('0x60')});}});};exports[_0xeb03('0x61')]=function canUpdate(){return compose()[_0xeb03('0x40')](function(_0x528c0f,_0x57f59e,_0x4ef29c){return licenseUtil[_0xeb03('0x62')]()['then'](function(_0x5bcc30){if(_0x5bcc30['update']){_0x4ef29c();}else{return _0x57f59e[_0xeb03('0x47')](0x193)[_0xeb03('0x48')]({'message':_0xeb03('0x63')});}})[_0xeb03('0x4f')](function(_0xb321da){_0x4ef29c(_0xb321da);});});};exports[_0xeb03('0x64')]=function isWebrtcLicence(){return compose()['use'](function(_0x35279d,_0x4bf739,_0x5c4fac){return licenseUtil[_0xeb03('0x62')]()[_0xeb03('0x46')](function(_0x205fa3){if(_0x205fa3['webrtc']){_0x5c4fac();}else{return _0x4bf739[_0xeb03('0x47')](0x193)[_0xeb03('0x48')]({'message':_0xeb03('0x63')});}})[_0xeb03('0x4f')](function(_0x3c8293){_0x5c4fac(_0x3c8293);});});};exports['isMiddleware']=function(_0x21a121,_0x4dc1f6,_0x13c295){_0x21a121[_0xeb03('0x65')]=!![];return _0x13c295();};exports[_0xeb03('0x66')]=function signToken(_0xa90a33){return signJwt(_0xa90a33);};exports[_0xeb03('0x67')]=function(_0x46f4a7,_0x42e73f){if(!_0x46f4a7[_0xeb03('0x41')]){return _0x42e73f[_0xeb03('0x47')](0x194)[_0xeb03('0x48')]({'message':_0xeb03('0x68')});}var _0x10ef7d={'payload':{'id':_0x46f4a7[_0xeb03('0x41')]['id'],'role':_0x46f4a7[_0xeb03('0x41')][_0xeb03('0xe')]},'options':{'expiresIn':0x15180}};return signJwt(_0x10ef7d)[_0xeb03('0x46')](function(_0xf5c1ab){_0x42e73f[_0xeb03('0x69')](_0xeb03('0x6a'),_0xf5c1ab);_0x42e73f[_0xeb03('0x6b')](_0xeb03('0x6c'));})[_0xeb03('0x4f')](function(_0x1761ab){return _0x42e73f[_0xeb03('0x47')](0x1f4)['send'](_0x1761ab);});};exports[_0xeb03('0x6d')]=function(_0x17bf76){if(_[_0xeb03('0x6e')](_0x17bf76['apiKeyNonce'])||_[_0xeb03('0x6e')](_0x17bf76[_0xeb03('0x6f')])){return null;}else{return createJwt(_0x17bf76);}};exports[_0xeb03('0x70')]=function(_0xf7e2b){_0xf7e2b[_0xeb03('0x71')]=generateNonce();_0xf7e2b[_0xeb03('0x6f')]=generateIssuedAt();return createJwt(_0xf7e2b);};exports[_0xeb03('0x72')]=function(_0x36f18e,_0x1fe50a){var _0x3bd612=_0x36f18e[_0xeb03('0x55')][_0xeb03('0x53')];if(_0x3bd612){var _0xf9beaf={'nonce':_0x1fe50a[_0xeb03('0x71')],'iat':_0x1fe50a['apiKeyIat'],'audience':hardwareConf[_0xeb03('0x54')](),'issuer':hardwareConf[_0xeb03('0x54')]()};return verifyJwt(_0x3bd612,_0xf9beaf)[_0xeb03('0x46')](function(){return generateApiKey(_0x1fe50a);});}else{throw{'message':_0xeb03('0x73')};}};exports[_0xeb03('0x74')]=function(_0x39e2c7){var _0x4320f7=new RegExp(/(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[?!@#\$%\^&\*~\-_=+[{\]\}])(?=.{8,})/);if(!_0x4320f7[_0xeb03('0x75')](_0x39e2c7))throw new db[(_0xeb03('0x76'))][(_0xeb03('0x77'))]('The\x20password\x20must\x20be\x20at\x20least\x208\x20characters\x20long\x20and\x20have\x201\x20lowercase\x20character,\x201\x20uppercase\x20character,\x201\x20number\x20and\x201\x20special\x20character\x20~!@#$%^&-_=+[{]}.');return;};exports[_0xeb03('0x78')]=function(_0x3a1cd2,_0x2bb0be,_0x62105a){var _0x58c096=encryptor[_0xeb03('0x79')](_0x2bb0be)[_0xeb03('0x7a')](',');for(var _0x2130c2=0x0;_0x2130c2<_0x62105a;_0x2130c2++){if(!_0x58c096[_0x2130c2])break;if(_0x3a1cd2[_0xeb03('0x7b')]()===_0x58c096[_0x2130c2][_0xeb03('0x7b')]()){var _0x4aa96e=util[_0xeb03('0x7c')](_0xeb03('0x7d'),_0x62105a);if(_0x62105a===0x1){_0x4aa96e=_0xeb03('0x7e');}throw new db['Sequelize'][(_0xeb03('0x77'))](_0x4aa96e);}}return;};exports[_0xeb03('0x7f')]=function(_0x4d9cfc,_0x1f6117){var _0x3102e3=_0x1f6117?encryptor[_0xeb03('0x79')](_0x1f6117)['split'](','):[];if(_0x3102e3[_0xeb03('0x80')]===0x5){_0x3102e3[_0xeb03('0x81')](-0x1,0x1);}_0x3102e3['unshift'](_0x4d9cfc);return encryptor[_0xeb03('0x82')](_0x3102e3[_0xeb03('0x83')](','));};function signJwt(_0x1972fb){var _0x3ac2de=BPromise[_0xeb03('0x84')](jwt[_0xeb03('0x85')],{'context':jwt});var _0x218ea5=_0x1972fb[_0xeb03('0x86')]||config['secrets'][_0xeb03('0xd')];return new BPromise(function(_0x50489b,_0xbcc043){_0x3ac2de(_0x1972fb[_0xeb03('0x87')],_0x218ea5,_0x1972fb[_0xeb03('0x88')])['then'](function(_0x1bd1b3){_0x50489b(_0x1bd1b3);})[_0xeb03('0x4f')](function(_0x14866f){_0xbcc043(_0x14866f);});});}function verifyJwt(_0x467a9d,_0x47c389,_0x3fe855){var _0x1cdf8e=BPromise['promisify'](jwt['verify'],{'context':jwt});var _0x583518=_0x3fe855||config[_0xeb03('0xc')][_0xeb03('0xd')];return new BPromise(function(_0x9148a6,_0x16ad3a){_0x1cdf8e(_0x467a9d,_0x583518,_0x47c389)[_0xeb03('0x46')](function(_0x461777){_0x9148a6(_0x461777);})[_0xeb03('0x4f')](function(_0x240178){_0x16ad3a(_0x240178);});});}function generateNonce(){return crypto[_0xeb03('0x89')](0x10)['toString']('hex');}function generateIssuedAt(){return Math[_0xeb03('0x8a')](Date[_0xeb03('0x8b')]()/0x3e8)['toString']();}function createJwt(_0x1c9851){var _0x3e003d={'payload':{'iat':_0x1c9851[_0xeb03('0x6f')],'nonce':_0x1c9851[_0xeb03('0x71')]},'options':{'algorithm':'HS512','subject':_0x1c9851['id']['toString'](),'issuer':hardwareConf[_0xeb03('0x54')](),'audience':hardwareConf[_0xeb03('0x54')]()}};return signJwt(_0x3e003d)[_0xeb03('0x46')](function(_0x50c482){return{'iat':_0x1c9851[_0xeb03('0x6f')],'nonce':_0x1c9851[_0xeb03('0x71')],'token':_0x50c482};});}