server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x6657=['email','userpic','permissions','md5secret','voicePause','chatPause','mailPause','faxPause','openchannelPause','pauseType','showWebBar','lastPauseAt','allowmessenger','passwordResetAt','phoneBarAutoAnswer','phoneBarAutoAnswerDelay','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort','hotdesk','interface','userProfileId','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','findOne','params','disposition','then','closed','status','unmanaged','Unmanaged.','Forbidden.','catch','headers','authorization','Basic','authenticate','json','startsWith','Bearer','apikey','getUuid','query','User','find','sub','isEqual','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','Unknown\x20authorization\x20format','User\x20not\x20found.','canUpdate','../../config/license/util','getLicense','update','Forbidden','isMiddleware','signToken','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','cookie','motion.token','redirect','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','promisify','sign','secret','payload','verify','randomBytes','toString','hex','floor','HS512','../../mysqldb','../../config/license/hardware','lodash','jsonwebtoken','express-jwt','basic-auth','crypto','bluebird','secrets','session','role','fullname','name'];(function(_0x365a74,_0x706fb3){var _0x3ca21e=function(_0x7e8043){while(--_0x7e8043){_0x365a74['push'](_0x365a74['shift']());}};_0x3ca21e(++_0x706fb3);}(_0x6657,0x17f));var _0x7665=function(_0x42a0f6,_0x4ee755){_0x42a0f6=_0x42a0f6-0x0;var _0x259bdb=_0x6657[_0x42a0f6];return _0x259bdb;};'use strict';var db=require(_0x7665('0x0'))['db'];var config=require('../../config/environment');var hardwareConf=require(_0x7665('0x1'));var _=require(_0x7665('0x2'));var jwt=require(_0x7665('0x3'));var expressJwt=require(_0x7665('0x4'));var compose=require('composable-middleware');var basicAuth=require(_0x7665('0x5'));var crypto=require(_0x7665('0x6'));var BPromise=require(_0x7665('0x7'));var validateJwt=expressJwt({'secret':config[_0x7665('0x8')][_0x7665('0x9')]});var userAttributes=['id',_0x7665('0xa'),_0x7665('0xb'),_0x7665('0xc'),'internal',_0x7665('0xd'),_0x7665('0xe'),_0x7665('0xf'),_0x7665('0x10'),_0x7665('0x11'),_0x7665('0x12'),_0x7665('0x13'),_0x7665('0x14'),'smsPause',_0x7665('0x15'),_0x7665('0x16'),_0x7665('0x17'),'lastLoginAt',_0x7665('0x18'),'crudPermissions',_0x7665('0x19'),_0x7665('0x1a'),'alias',_0x7665('0x1b'),_0x7665('0x1c'),'phoneBarEnableRecording',_0x7665('0x1d'),_0x7665('0x1e'),'phoneBarExpires',_0x7665('0x1f'),_0x7665('0x20'),_0x7665('0x21'),_0x7665('0x22'),_0x7665('0x23'),_0x7665('0x24')];exports[_0x7665('0x25')]=function(){return this[_0x7665('0x26')](!![])[_0x7665('0x27')](function(_0x334ee6,_0x365469,_0xf730b0){if(_0x334ee6[_0x7665('0x28')]){_0xf730b0();}else{return db[_0x7665('0x29')][_0x7665('0x2a')]({'where':{'id':_0x334ee6[_0x7665('0x2b')]['id']},'attributes':['id','closed',_0x7665('0x2c')],'raw':!![]})[_0x7665('0x2d')](function(_0x4f1f1d){if(_0x4f1f1d&&_0x4f1f1d[_0x7665('0x2e')]){return _0x365469[_0x7665('0x2f')](_0x4f1f1d[_0x7665('0x2c')]===_0x7665('0x30')?0x195:0x193)['json']({'message':_0x4f1f1d[_0x7665('0x2c')]===_0x7665('0x30')?_0x7665('0x31'):_0x7665('0x32')});}else{_0xf730b0();}})[_0x7665('0x33')](function(_0x52cc46){_0xf730b0(_0x52cc46);});}});};exports[_0x7665('0x26')]=function isAuthenticated(_0x51d577){return compose()[_0x7665('0x27')](function(_0x158062,_0x4cf4b5,_0x5652dd){if(_0x158062[_0x7665('0x34')][_0x7665('0x35')]){if(_['startsWith'](_0x158062[_0x7665('0x34')][_0x7665('0x35')],_0x7665('0x36'))){var _0x488d86=basicAuth(_0x158062);db['User']['find']({'where':{'name':_0x488d86['name']}})[_0x7665('0x2d')](function(_0x3b22f4){if(!_0x3b22f4||!_0x3b22f4[_0x7665('0x37')](_0x488d86['pass'])){return _0x4cf4b5[_0x7665('0x2f')](0x191)[_0x7665('0x38')]({'message':'Wrong\x20credentials.'});}_0x158062['user']={'id':_0x3b22f4['id']};_0x5652dd();})[_0x7665('0x33')](function(_0x45f6a4){_0x5652dd(_0x45f6a4);});}else if(_[_0x7665('0x39')](_0x158062[_0x7665('0x34')][_0x7665('0x35')],_0x7665('0x3a'))){validateJwt(_0x158062,_0x4cf4b5,_0x5652dd);}else{if(_0x51d577){_0x5652dd();}else{return _0x4cf4b5['status'](0x193)[_0x7665('0x38')]({'message':'Unknown\x20authorization\x20format'});}}}else if(_0x158062['query'][_0x7665('0x3b')]){var _0x7425af={'audience':hardwareConf[_0x7665('0x3c')](),'issuer':hardwareConf[_0x7665('0x3c')]()};verifyJwt(_0x158062[_0x7665('0x3d')][_0x7665('0x3b')],_0x7425af)[_0x7665('0x2d')](function(_0x2c3686){return db[_0x7665('0x3e')][_0x7665('0x3f')]({'where':{'id':_0x2c3686[_0x7665('0x40')]}})[_0x7665('0x2d')](function(_0x44463c){if(!_0x44463c||!_[_0x7665('0x41')](_0x44463c[_0x7665('0x42')],_0x2c3686[_0x7665('0x43')])){return _0x4cf4b5[_0x7665('0x2f')](0x193)[_0x7665('0x38')]({'message':_0x7665('0x44')});}_0x158062['user']={'id':_0x44463c['id']};_0x5652dd();});})[_0x7665('0x33')](function(_0xd93b75){_0x5652dd(_0xd93b75);});}else if(_0x51d577){_0x5652dd();}else{return _0x4cf4b5[_0x7665('0x2f')](0x193)[_0x7665('0x38')]({'message':_0x7665('0x45')});}})[_0x7665('0x27')](function(_0x4da120,_0x3a7a39,_0x2d93b6){if(_0x4da120[_0x7665('0x28')]){db[_0x7665('0x3e')][_0x7665('0x3f')]({'where':{'id':_0x4da120['user']['id']},'attributes':userAttributes})[_0x7665('0x2d')](function(_0x5f2c96){if(!_0x5f2c96){return _0x3a7a39[_0x7665('0x2f')](0x194)['json']({'message':_0x7665('0x46')});}_0x4da120[_0x7665('0x28')]=_0x5f2c96;_0x2d93b6();})[_0x7665('0x33')](function(_0x2f03bb){_0x2d93b6(_0x2f03bb);});}else if(_0x51d577){_0x2d93b6();}else{return _0x3a7a39[_0x7665('0x2f')](0x194)[_0x7665('0x38')]({'message':'User\x20object\x20not\x20found.'});}});};exports[_0x7665('0x47')]=function canUpdate(){return compose()[_0x7665('0x27')](function(_0x99ff2f,_0x130ee6,_0x4d195d){return require(_0x7665('0x48'))[_0x7665('0x49')]()[_0x7665('0x2d')](function(_0x2aae93){if(_0x2aae93[_0x7665('0x4a')]){_0x4d195d();}else{return _0x130ee6['status'](0x193)[_0x7665('0x38')]({'message':_0x7665('0x4b')});}})[_0x7665('0x33')](function(_0x12e605){_0x4d195d(_0x12e605);});});};exports[_0x7665('0x4c')]=function(_0x30d450,_0x301cee,_0x46ea8a){_0x30d450[_0x7665('0x4c')]=!![];return _0x46ea8a();};exports[_0x7665('0x4d')]=function signToken(_0x586755){return signJwt(_0x586755);};exports['setTokenCookie']=function(_0x28f5e6,_0x3f20d6){if(!_0x28f5e6['user']){return _0x3f20d6['status'](0x194)[_0x7665('0x38')]({'message':_0x7665('0x4e')});}var _0x4dfec7={'payload':{'id':_0x28f5e6[_0x7665('0x28')]['id'],'role':_0x28f5e6[_0x7665('0x28')][_0x7665('0xa')]},'options':{'expiresIn':0x15180}};return signJwt(_0x4dfec7)[_0x7665('0x2d')](function(_0x3cb235){_0x3f20d6[_0x7665('0x4f')](_0x7665('0x50'),_0x3cb235);_0x3f20d6[_0x7665('0x51')](_0x7665('0x52'));})[_0x7665('0x33')](function(_0xe56900){return _0x3f20d6[_0x7665('0x2f')](0x1f4)[_0x7665('0x53')](_0xe56900);});};exports[_0x7665('0x54')]=function(_0x4ebda0){if(_[_0x7665('0x55')](_0x4ebda0['apiKeyNonce'])||_[_0x7665('0x55')](_0x4ebda0[_0x7665('0x56')])){return null;}else{return createJwt(_0x4ebda0);}};exports[_0x7665('0x57')]=function(_0x375da9){_0x375da9[_0x7665('0x42')]=generateNonce();_0x375da9['apiKeyIat']=generateIssuedAt();return createJwt(_0x375da9);};exports[_0x7665('0x58')]=function(_0x42b7d3,_0x5dc646){var _0xe2650a=_0x42b7d3['query'][_0x7665('0x3b')];if(_0xe2650a){var _0x14a4bf={'nonce':_0x5dc646[_0x7665('0x42')],'iat':_0x5dc646['apiKeyIat'],'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0x7665('0x3c')]()};return verifyJwt(_0xe2650a,_0x14a4bf)[_0x7665('0x2d')](function(){return generateApiKey(_0x5dc646);});}else{throw{'message':'Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one'};}};function signJwt(_0x2343de){var _0x456d76=BPromise[_0x7665('0x59')](jwt[_0x7665('0x5a')],{'context':jwt});var _0x2e38d1=_0x2343de[_0x7665('0x5b')]||config[_0x7665('0x8')][_0x7665('0x9')];return new BPromise(function(_0x2fe046,_0x287e73){_0x456d76(_0x2343de[_0x7665('0x5c')],_0x2e38d1,_0x2343de['options'])[_0x7665('0x2d')](function(_0x5a21ee){_0x2fe046(_0x5a21ee);})[_0x7665('0x33')](function(_0x1cf4e2){_0x287e73(_0x1cf4e2);});});}function verifyJwt(_0x7dc436,_0x192f8d,_0x543425){var _0x310782=BPromise[_0x7665('0x59')](jwt[_0x7665('0x5d')],{'context':jwt});var _0x4375a3=_0x543425||config[_0x7665('0x8')]['session'];return new BPromise(function(_0x322b43,_0x5044ac){_0x310782(_0x7dc436,_0x4375a3,_0x192f8d)[_0x7665('0x2d')](function(_0x1052af){_0x322b43(_0x1052af);})['catch'](function(_0x4ef138){_0x5044ac(_0x4ef138);});});}function generateNonce(){return crypto[_0x7665('0x5e')](0x10)[_0x7665('0x5f')](_0x7665('0x60'));}function generateIssuedAt(){return Math[_0x7665('0x61')](Date['now']()/0x3e8)['toString']();}function createJwt(_0x141938){var _0x567c79={'payload':{'iat':_0x141938[_0x7665('0x56')],'nonce':_0x141938[_0x7665('0x42')]},'options':{'algorithm':_0x7665('0x62'),'subject':_0x141938['id']['toString'](),'issuer':hardwareConf[_0x7665('0x3c')](),'audience':hardwareConf[_0x7665('0x3c')]()}};return signJwt(_0x567c79)[_0x7665('0x2d')](function(_0x41a17e){return{'iat':_0x141938[_0x7665('0x56')],'nonce':_0x141938[_0x7665('0x42')],'token':_0x41a17e};});}