server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x4848=['headers','startsWith','authorization','Basic','User','find','pass','Wrong\x20credentials.','getUuid','apikey','sub','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','Invalid\x20API\x20access\x20key','Unknown\x20authorization\x20format','User\x20not\x20found.','User\x20object\x20not\x20found.','canUpdate','../../config/license/util','getLicense','Forbidden','isMiddleware','signToken','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','cookie','motion.token','redirect','retrieveApiKey','isNil','generateApiKey','apiKeyIat','regenerateApiKey','query','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','sign','secret','payload','options','verify','randomBytes','hex','floor','now','toString','HS512','../../mysqldb','../../config/environment','../../config/license/hardware','lodash','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','secrets','session','role','name','internal','email','userpic','md5secret','chatPause','mailPause','smsPause','openchannelPause','pauseType','showWebBar','allowmessenger','passwordResetAt','alias','phoneBarAutoAnswer','phoneBarAutoAnswerDelay','phoneBarDnd','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarPrefixRequired','interface','userProfileId','isChatInteractionAuthorized','isAuthenticated','use','user','params','closed','disposition','then','status','unmanaged','json','Unmanaged.','Forbidden.','catch'];(function(_0x164c30,_0xc3af48){var _0x4c5320=function(_0x567724){while(--_0x567724){_0x164c30['push'](_0x164c30['shift']());}};_0x4c5320(++_0xc3af48);}(_0x4848,0x1af));var _0x8484=function(_0x273dc5,_0x268a81){_0x273dc5=_0x273dc5-0x0;var _0x46dae7=_0x4848[_0x273dc5];return _0x46dae7;};'use strict';var db=require(_0x8484('0x0'))['db'];var config=require(_0x8484('0x1'));var hardwareConf=require(_0x8484('0x2'));var _=require(_0x8484('0x3'));var jwt=require(_0x8484('0x4'));var expressJwt=require(_0x8484('0x5'));var compose=require(_0x8484('0x6'));var basicAuth=require(_0x8484('0x7'));var crypto=require(_0x8484('0x8'));var BPromise=require(_0x8484('0x9'));var validateJwt=expressJwt({'secret':config[_0x8484('0xa')][_0x8484('0xb')]});var userAttributes=['id',_0x8484('0xc'),'fullname',_0x8484('0xd'),_0x8484('0xe'),_0x8484('0xf'),_0x8484('0x10'),'permissions',_0x8484('0x11'),'voicePause',_0x8484('0x12'),_0x8484('0x13'),'faxPause',_0x8484('0x14'),_0x8484('0x15'),_0x8484('0x16'),_0x8484('0x17'),'lastLoginAt','lastPauseAt','crudPermissions',_0x8484('0x18'),_0x8484('0x19'),_0x8484('0x1a'),_0x8484('0x1b'),_0x8484('0x1c'),_0x8484('0x1d'),'phoneBarEnableRecording',_0x8484('0x1e'),_0x8484('0x1f'),'phoneBarExpires',_0x8484('0x20'),'phoneBarRemoteControl','phoneBarRemoteControlPort','hotdesk',_0x8484('0x21'),_0x8484('0x22')];exports[_0x8484('0x23')]=function(){return this[_0x8484('0x24')](!![])[_0x8484('0x25')](function(_0x54cfee,_0x4c84af,_0x4a3bc1){if(_0x54cfee[_0x8484('0x26')]){_0x4a3bc1();}else{return db['ChatInteraction']['findOne']({'where':{'id':_0x54cfee[_0x8484('0x27')]['id']},'attributes':['id',_0x8484('0x28'),_0x8484('0x29')],'raw':!![]})[_0x8484('0x2a')](function(_0x51b922){if(_0x51b922&&_0x51b922[_0x8484('0x28')]){return _0x4c84af[_0x8484('0x2b')](_0x51b922[_0x8484('0x29')]===_0x8484('0x2c')?0x195:0x193)[_0x8484('0x2d')]({'message':_0x51b922[_0x8484('0x29')]===_0x8484('0x2c')?_0x8484('0x2e'):_0x8484('0x2f')});}else{_0x4a3bc1();}})[_0x8484('0x30')](function(_0x85f15f){_0x4a3bc1(_0x85f15f);});}});};exports[_0x8484('0x24')]=function isAuthenticated(_0x49dfa8){return compose()[_0x8484('0x25')](function(_0x429464,_0x7e8a28,_0x4cd994){if(_0x429464[_0x8484('0x31')]['authorization']){if(_[_0x8484('0x32')](_0x429464['headers'][_0x8484('0x33')],_0x8484('0x34'))){var _0x4d8cd0=basicAuth(_0x429464);db[_0x8484('0x35')][_0x8484('0x36')]({'where':{'name':_0x4d8cd0[_0x8484('0xd')]}})[_0x8484('0x2a')](function(_0x45fa0f){if(!_0x45fa0f||!_0x45fa0f['authenticate'](_0x4d8cd0[_0x8484('0x37')])){return _0x7e8a28[_0x8484('0x2b')](0x191)[_0x8484('0x2d')]({'message':_0x8484('0x38')});}_0x429464[_0x8484('0x26')]={'id':_0x45fa0f['id']};_0x4cd994();})['catch'](function(_0x3574c6){_0x4cd994(_0x3574c6);});}else if(_['startsWith'](_0x429464['headers'][_0x8484('0x33')],'Bearer')){validateJwt(_0x429464,_0x7e8a28,_0x4cd994);}else{if(_0x49dfa8){_0x4cd994();}else{return _0x7e8a28[_0x8484('0x2b')](0x193)[_0x8484('0x2d')]({'message':'Unknown\x20authorization\x20format'});}}}else if(_0x429464['query']['apikey']){try{var _0x391c58={'audience':hardwareConf[_0x8484('0x39')](),'issuer':hardwareConf[_0x8484('0x39')]()};verifyJwt(_0x429464['query'][_0x8484('0x3a')],_0x391c58)[_0x8484('0x2a')](function(_0x11a63c){return db[_0x8484('0x35')][_0x8484('0x36')]({'where':{'id':_0x11a63c[_0x8484('0x3b')]}})['then'](function(_0x165adb){if(!_0x165adb||!_['isEqual'](_0x165adb[_0x8484('0x3c')],_0x11a63c[_0x8484('0x3d')])){return _0x7e8a28['status'](0x191)[_0x8484('0x2d')]({'message':_0x8484('0x3e')});}_0x429464[_0x8484('0x26')]={'id':_0x165adb['id']};_0x4cd994();});})[_0x8484('0x30')](function(){return _0x7e8a28[_0x8484('0x2b')](0x191)['json']({'message':_0x8484('0x3f')});});}catch(_0x5a566f){_0x4cd994(_0x5a566f);}}else if(_0x49dfa8){_0x4cd994();}else{return _0x7e8a28['status'](0x193)[_0x8484('0x2d')]({'message':_0x8484('0x40')});}})[_0x8484('0x25')](function(_0x3e2260,_0x115c3c,_0x56c141){if(_0x3e2260[_0x8484('0x26')]){db['User']['find']({'where':{'id':_0x3e2260[_0x8484('0x26')]['id']},'attributes':userAttributes})['then'](function(_0x33ffc8){if(!_0x33ffc8){return _0x115c3c[_0x8484('0x2b')](0x194)[_0x8484('0x2d')]({'message':_0x8484('0x41')});}_0x3e2260[_0x8484('0x26')]=_0x33ffc8;_0x56c141();})[_0x8484('0x30')](function(_0x7e48ed){_0x56c141(_0x7e48ed);});}else if(_0x49dfa8){_0x56c141();}else{return _0x115c3c['status'](0x194)[_0x8484('0x2d')]({'message':_0x8484('0x42')});}});};exports[_0x8484('0x43')]=function canUpdate(){return compose()[_0x8484('0x25')](function(_0x14cfb2,_0x47a5fd,_0x425b98){return require(_0x8484('0x44'))[_0x8484('0x45')]()['then'](function(_0xe7070f){if(_0xe7070f['update']){_0x425b98();}else{return _0x47a5fd[_0x8484('0x2b')](0x193)[_0x8484('0x2d')]({'message':_0x8484('0x46')});}})[_0x8484('0x30')](function(_0x45dc12){_0x425b98(_0x45dc12);});});};exports[_0x8484('0x47')]=function(_0x5e1411,_0xb34aac,_0x2a1e8a){_0x5e1411['isMiddleware']=!![];return _0x2a1e8a();};exports[_0x8484('0x48')]=function signToken(_0x229c85){return signJwt(_0x229c85);};exports[_0x8484('0x49')]=function(_0x45966f,_0x4e5bd0){if(!_0x45966f[_0x8484('0x26')]){return _0x4e5bd0[_0x8484('0x2b')](0x194)[_0x8484('0x2d')]({'message':_0x8484('0x4a')});}var _0x483a4e={'payload':{'id':_0x45966f[_0x8484('0x26')]['id'],'role':_0x45966f['user'][_0x8484('0xc')]},'options':{'expiresIn':0x15180}};return signJwt(_0x483a4e)[_0x8484('0x2a')](function(_0x3f36a2){_0x4e5bd0[_0x8484('0x4b')](_0x8484('0x4c'),_0x3f36a2);_0x4e5bd0[_0x8484('0x4d')]('/dashboards/general');})['catch'](function(_0x23aaa0){return _0x4e5bd0[_0x8484('0x2b')](0x1f4)['send'](_0x23aaa0);});};exports[_0x8484('0x4e')]=function(_0x160891){if(_[_0x8484('0x4f')](_0x160891[_0x8484('0x3c')])||_[_0x8484('0x4f')](_0x160891['apiKeyIat'])){return null;}else{return createJwt(_0x160891);}};exports[_0x8484('0x50')]=function(_0x4cff81){_0x4cff81[_0x8484('0x3c')]=generateNonce();_0x4cff81[_0x8484('0x51')]=generateIssuedAt();return createJwt(_0x4cff81);};exports[_0x8484('0x52')]=function(_0x4980bc,_0x4b5dab){var _0x1ce316=_0x4980bc[_0x8484('0x53')][_0x8484('0x3a')];if(_0x1ce316){var _0x1dc2d7={'nonce':_0x4b5dab[_0x8484('0x3c')],'iat':_0x4b5dab[_0x8484('0x51')],'audience':hardwareConf[_0x8484('0x39')](),'issuer':hardwareConf[_0x8484('0x39')]()};return verifyJwt(_0x1ce316,_0x1dc2d7)[_0x8484('0x2a')](function(){return generateApiKey(_0x4b5dab);});}else{throw{'message':_0x8484('0x54')};}};function signJwt(_0x5ca0cd){var _0x4e51da=BPromise['promisify'](jwt[_0x8484('0x55')],{'context':jwt});var _0x4c3d6a=_0x5ca0cd[_0x8484('0x56')]||config[_0x8484('0xa')][_0x8484('0xb')];return new BPromise(function(_0x3c299b,_0x26c1cd){_0x4e51da(_0x5ca0cd[_0x8484('0x57')],_0x4c3d6a,_0x5ca0cd[_0x8484('0x58')])[_0x8484('0x2a')](function(_0x55a8db){_0x3c299b(_0x55a8db);})[_0x8484('0x30')](function(_0x95bbf5){_0x26c1cd(_0x95bbf5);});});}function verifyJwt(_0x106daf,_0x2aa6ee,_0x254cd9){var _0x155c5=BPromise['promisify'](jwt[_0x8484('0x59')],{'context':jwt});var _0x456e26=_0x254cd9||config['secrets']['session'];return new BPromise(function(_0x1e9562,_0x5967bf){_0x155c5(_0x106daf,_0x456e26,_0x2aa6ee)['then'](function(_0x46b3d3){_0x1e9562(_0x46b3d3);})[_0x8484('0x30')](function(_0x5012e9){_0x5967bf(_0x5012e9);});});}function generateNonce(){return crypto[_0x8484('0x5a')](0x10)['toString'](_0x8484('0x5b'));}function generateIssuedAt(){return Math[_0x8484('0x5c')](Date[_0x8484('0x5d')]()/0x3e8)[_0x8484('0x5e')]();}function createJwt(_0x16d248){var _0x5e2dad={'payload':{'iat':_0x16d248[_0x8484('0x51')],'nonce':_0x16d248[_0x8484('0x3c')]},'options':{'algorithm':_0x8484('0x5f'),'subject':_0x16d248['id']['toString'](),'issuer':hardwareConf[_0x8484('0x39')](),'audience':hardwareConf[_0x8484('0x39')]()}};return signJwt(_0x5e2dad)[_0x8484('0x2a')](function(_0x402200){return{'iat':_0x16d248[_0x8484('0x51')],'nonce':_0x16d248['apiKeyNonce'],'token':_0x402200};});}