server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xee14=['User','User\x20not\x20found.','User\x20object\x20not\x20found.','../../config/license/util','getLicense','Forbidden','isMiddleware','signToken','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','motion.token','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','regenerateApiKey','promisify','sign','secret','session','options','toString','floor','now','HS512','../../config/license/hardware','lodash','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','secrets','role','name','internal','email','userpic','permissions','md5secret','chatPause','mailPause','smsPause','openchannelPause','pauseType','showWebBar','lastPauseAt','crudPermissions','allowmessenger','passwordResetAt','alias','phoneBarAutoAnswer','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarExpires','phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','hotdesk','interface','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','findOne','params','closed','then','status','disposition','unmanaged','Unmanaged.','Forbidden.','catch','headers','authorization','startsWith','Basic','find','authenticate','pass','json','Wrong\x20credentials.','Bearer','Unknown\x20authorization\x20format','query','getUuid','apikey','sub','isEqual','apiKeyNonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore'];(function(_0x1c34e7,_0x33f9a8){var _0x378cb1=function(_0x10b5e3){while(--_0x10b5e3){_0x1c34e7['push'](_0x1c34e7['shift']());}};_0x378cb1(++_0x33f9a8);}(_0xee14,0x13a));var _0x4ee1=function(_0x3071d5,_0x1c99a3){_0x3071d5=_0x3071d5-0x0;var _0x431115=_0xee14[_0x3071d5];return _0x431115;};'use strict';var db=require('../../mysqldb')['db'];var config=require('../../config/environment');var hardwareConf=require(_0x4ee1('0x0'));var _=require(_0x4ee1('0x1'));var jwt=require(_0x4ee1('0x2'));var expressJwt=require(_0x4ee1('0x3'));var compose=require(_0x4ee1('0x4'));var basicAuth=require(_0x4ee1('0x5'));var crypto=require(_0x4ee1('0x6'));var BPromise=require(_0x4ee1('0x7'));var validateJwt=expressJwt({'secret':config[_0x4ee1('0x8')]['session']});var userAttributes=['id',_0x4ee1('0x9'),'fullname',_0x4ee1('0xa'),_0x4ee1('0xb'),_0x4ee1('0xc'),_0x4ee1('0xd'),_0x4ee1('0xe'),_0x4ee1('0xf'),'voicePause',_0x4ee1('0x10'),_0x4ee1('0x11'),'faxPause',_0x4ee1('0x12'),_0x4ee1('0x13'),_0x4ee1('0x14'),_0x4ee1('0x15'),'lastLoginAt',_0x4ee1('0x16'),_0x4ee1('0x17'),_0x4ee1('0x18'),_0x4ee1('0x19'),_0x4ee1('0x1a'),_0x4ee1('0x1b'),'phoneBarAutoAnswerDelay',_0x4ee1('0x1c'),_0x4ee1('0x1d'),_0x4ee1('0x1e'),_0x4ee1('0x1f'),_0x4ee1('0x20'),_0x4ee1('0x21'),_0x4ee1('0x22'),_0x4ee1('0x23'),_0x4ee1('0x24'),'userProfileId'];exports[_0x4ee1('0x25')]=function(){return this[_0x4ee1('0x26')](!![])[_0x4ee1('0x27')](function(_0x1b1e0e,_0x123c5e,_0x38fc33){if(_0x1b1e0e[_0x4ee1('0x28')]){_0x38fc33();}else{return db[_0x4ee1('0x29')][_0x4ee1('0x2a')]({'where':{'id':_0x1b1e0e[_0x4ee1('0x2b')]['id']},'attributes':['id',_0x4ee1('0x2c'),'disposition'],'raw':!![]})[_0x4ee1('0x2d')](function(_0x3db827){if(_0x3db827&&_0x3db827[_0x4ee1('0x2c')]){return _0x123c5e[_0x4ee1('0x2e')](_0x3db827[_0x4ee1('0x2f')]===_0x4ee1('0x30')?0x195:0x193)['json']({'message':_0x3db827[_0x4ee1('0x2f')]===_0x4ee1('0x30')?_0x4ee1('0x31'):_0x4ee1('0x32')});}else{_0x38fc33();}})[_0x4ee1('0x33')](function(_0x224b54){_0x38fc33(_0x224b54);});}});};exports[_0x4ee1('0x26')]=function isAuthenticated(_0x40fd98){return compose()[_0x4ee1('0x27')](function(_0x3e5038,_0x4faaf6,_0x53d43f){if(_0x3e5038[_0x4ee1('0x34')][_0x4ee1('0x35')]){if(_[_0x4ee1('0x36')](_0x3e5038[_0x4ee1('0x34')][_0x4ee1('0x35')],_0x4ee1('0x37'))){var _0x57d45d=basicAuth(_0x3e5038);db['User'][_0x4ee1('0x38')]({'where':{'name':_0x57d45d[_0x4ee1('0xa')]}})['then'](function(_0x35900d){if(!_0x35900d||!_0x35900d[_0x4ee1('0x39')](_0x57d45d[_0x4ee1('0x3a')])){return _0x4faaf6[_0x4ee1('0x2e')](0x191)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x3c')});}_0x3e5038[_0x4ee1('0x28')]={'id':_0x35900d['id']};_0x53d43f();})['catch'](function(_0x1f7b74){_0x53d43f(_0x1f7b74);});}else if(_['startsWith'](_0x3e5038[_0x4ee1('0x34')]['authorization'],_0x4ee1('0x3d'))){validateJwt(_0x3e5038,_0x4faaf6,_0x53d43f);}else{if(_0x40fd98){_0x53d43f();}else{return _0x4faaf6[_0x4ee1('0x2e')](0x193)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x3e')});}}}else if(_0x3e5038[_0x4ee1('0x3f')]['apikey']){var _0x1f7483={'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0x4ee1('0x40')]()};verifyJwt(_0x3e5038[_0x4ee1('0x3f')][_0x4ee1('0x41')],_0x1f7483)[_0x4ee1('0x2d')](function(_0xac31e9){return db['User'][_0x4ee1('0x38')]({'where':{'id':_0xac31e9[_0x4ee1('0x42')]}})[_0x4ee1('0x2d')](function(_0x2e37a3){if(!_0x2e37a3||!_[_0x4ee1('0x43')](_0x2e37a3[_0x4ee1('0x44')],_0xac31e9['nonce'])){return _0x4faaf6['status'](0x193)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x45')});}_0x3e5038[_0x4ee1('0x28')]={'id':_0x2e37a3['id']};_0x53d43f();});})['catch'](function(_0x963c2b){_0x53d43f(_0x963c2b);});}else if(_0x40fd98){_0x53d43f();}else{return _0x4faaf6[_0x4ee1('0x2e')](0x193)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x3e')});}})[_0x4ee1('0x27')](function(_0x115590,_0x1d3d64,_0x199e11){if(_0x115590[_0x4ee1('0x28')]){db[_0x4ee1('0x46')][_0x4ee1('0x38')]({'where':{'id':_0x115590[_0x4ee1('0x28')]['id']},'attributes':userAttributes})[_0x4ee1('0x2d')](function(_0x55ac4a){if(!_0x55ac4a){return _0x1d3d64[_0x4ee1('0x2e')](0x194)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x47')});}_0x115590['user']=_0x55ac4a;_0x199e11();})['catch'](function(_0x257f67){_0x199e11(_0x257f67);});}else if(_0x40fd98){_0x199e11();}else{return _0x1d3d64[_0x4ee1('0x2e')](0x194)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x48')});}});};exports['canUpdate']=function canUpdate(){return compose()[_0x4ee1('0x27')](function(_0x2ed16f,_0x11721a,_0x49fa73){return require(_0x4ee1('0x49'))[_0x4ee1('0x4a')]()[_0x4ee1('0x2d')](function(_0x325b59){if(_0x325b59['update']){_0x49fa73();}else{return _0x11721a[_0x4ee1('0x2e')](0x193)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x4b')});}})[_0x4ee1('0x33')](function(_0x45bb22){_0x49fa73(_0x45bb22);});});};exports[_0x4ee1('0x4c')]=function(_0x543b2e,_0x3e2ca7,_0x37176a){_0x543b2e[_0x4ee1('0x4c')]=!![];return _0x37176a();};exports[_0x4ee1('0x4d')]=function signToken(_0x6600f5){return signJwt(_0x6600f5);};exports[_0x4ee1('0x4e')]=function(_0x3f0d8b,_0xaac883){if(!_0x3f0d8b[_0x4ee1('0x28')]){return _0xaac883[_0x4ee1('0x2e')](0x194)[_0x4ee1('0x3b')]({'message':_0x4ee1('0x4f')});}var _0x34fc7a={'payload':{'id':_0x3f0d8b['user']['id'],'role':_0x3f0d8b[_0x4ee1('0x28')][_0x4ee1('0x9')]},'options':{'expiresIn':0x15180}};return signJwt(_0x34fc7a)['then'](function(_0x3c759f){_0xaac883['cookie'](_0x4ee1('0x50'),_0x3c759f);_0xaac883['redirect'](_0x4ee1('0x51'));})[_0x4ee1('0x33')](function(_0x557126){return _0xaac883[_0x4ee1('0x2e')](0x1f4)[_0x4ee1('0x52')](_0x557126);});};exports[_0x4ee1('0x53')]=function(_0x3dfd9c){if(_['isNil'](_0x3dfd9c[_0x4ee1('0x44')])||_[_0x4ee1('0x54')](_0x3dfd9c[_0x4ee1('0x55')])){return null;}else{return createJwt(_0x3dfd9c);}};exports['generateApiKey']=function(_0x4fbe92){_0x4fbe92[_0x4ee1('0x44')]=generateNonce();_0x4fbe92[_0x4ee1('0x55')]=generateIssuedAt();return createJwt(_0x4fbe92);};exports[_0x4ee1('0x56')]=function(_0x1cc989,_0x15a48a){var _0x4ebcca=_0x1cc989['query'][_0x4ee1('0x41')];if(_0x4ebcca){var _0x266add={'nonce':_0x15a48a[_0x4ee1('0x44')],'iat':_0x15a48a[_0x4ee1('0x55')],'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0x4ee1('0x40')]()};return verifyJwt(_0x4ebcca,_0x266add)[_0x4ee1('0x2d')](function(){return generateApiKey(_0x15a48a);});}else{throw{'message':'Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one'};}};function signJwt(_0x21ebb8){var _0x16dc20=BPromise[_0x4ee1('0x57')](jwt[_0x4ee1('0x58')],{'context':jwt});var _0x38db17=_0x21ebb8[_0x4ee1('0x59')]||config[_0x4ee1('0x8')][_0x4ee1('0x5a')];return new BPromise(function(_0x390051,_0x4ebb28){_0x16dc20(_0x21ebb8['payload'],_0x38db17,_0x21ebb8[_0x4ee1('0x5b')])[_0x4ee1('0x2d')](function(_0x3bda30){_0x390051(_0x3bda30);})[_0x4ee1('0x33')](function(_0x58e963){_0x4ebb28(_0x58e963);});});}function verifyJwt(_0x35edf5,_0x3c66d1,_0x42dd8d){var _0x2bc77f=BPromise[_0x4ee1('0x57')](jwt['verify'],{'context':jwt});var _0x1c71ba=_0x42dd8d||config[_0x4ee1('0x8')][_0x4ee1('0x5a')];return new BPromise(function(_0x4bc298,_0x1a7dbd){_0x2bc77f(_0x35edf5,_0x1c71ba,_0x3c66d1)['then'](function(_0x572bbd){_0x4bc298(_0x572bbd);})['catch'](function(_0x30a1cd){_0x1a7dbd(_0x30a1cd);});});}function generateNonce(){return crypto['randomBytes'](0x10)[_0x4ee1('0x5c')]('hex');}function generateIssuedAt(){return Math[_0x4ee1('0x5d')](Date[_0x4ee1('0x5e')]()/0x3e8)[_0x4ee1('0x5c')]();}function createJwt(_0x5f4f78){var _0x3368ed={'payload':{'iat':_0x5f4f78[_0x4ee1('0x55')],'nonce':_0x5f4f78[_0x4ee1('0x44')]},'options':{'algorithm':_0x4ee1('0x5f'),'subject':_0x5f4f78['id'][_0x4ee1('0x5c')](),'issuer':hardwareConf[_0x4ee1('0x40')](),'audience':hardwareConf[_0x4ee1('0x40')]()}};return signJwt(_0x3368ed)['then'](function(_0x4c4178){return{'iat':_0x5f4f78[_0x4ee1('0x55')],'nonce':_0x5f4f78[_0x4ee1('0x44')],'token':_0x4c4178};});}