23ed9bb417e2f9b1dcfa62d54181009469238ff4
[motion2.git] / server / components / auth / service.js
1 // *************************************************************************
2 // *                                                                       *
3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
5 // *                                                                       *
6 // *************************************************************************
7 // *                                                                       *
8 // * Email: info@xcally.com                                                *
9 // * Website: https://www.xcally.com                                       *
10 // *                                                                       *
11 // *************************************************************************
12 // *                                                                       *
13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
14 // * copyright treaties, as well as other intellectual property laws and   *
15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
16 // *                                                                       *
17 // *************************************************************************
18 var _0x7aaa=['disposition','then','status','unmanaged','json','Unmanaged.','Forbidden.','catch','authorization','startsWith','headers','Basic','find','authenticate','Wrong\x20credentials.','Bearer','Unknown\x20authorization\x20format','query','getUuid','apikey','sub','isEqual','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','User\x20not\x20found.','User\x20object\x20not\x20found.','update','Forbidden','isMiddleware','signToken','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','cookie','motion.token','redirect','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','validatePasswordPattern','test','ValidationError','The\x20password\x20must\x20be\x20at\x20least\x208\x20characters\x20long\x20and\x20have\x201\x20lowercase\x20character,\x201\x20uppercase\x20character,\x201\x20number\x20and\x201\x20special\x20character\x20~!@#$%^&-_=+[{]}.','validatePasswordHistory','decryptString','split','toLowerCase','format','The\x20password\x20must\x20be\x20different\x20from\x20the\x20previous\x20%d\x20passwords.\x20Please\x20choose\x20another\x20one.','The\x20password\x20must\x20be\x20different\x20from\x20the\x20last\x20one.\x20Please\x20choose\x20another\x20one.','length','unshift','encryptString','promisify','sign','secret','secrets','payload','options','verify','toString','hex','floor','now','../../config/environment','../encryptor','lodash','jsonwebtoken','composable-middleware','basic-auth','bluebird','util','session','role','name','internal','permissions','md5secret','voicePause','chatPause','mailPause','faxPause','smsPause','openchannelPause','pauseType','showWebBar','lastLoginAt','lastPauseAt','allowmessenger','phoneBarAutoAnswer','phoneBarAutoAnswerDelay','phoneBarDnd','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarRemoteControlPort','hotdesk','userProfileId','settingsEnabled','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','findOne','params','closed'];(function(_0x5b338b,_0xe6462e){var _0x14d0ca=function(_0xbf59de){while(--_0xbf59de){_0x5b338b['push'](_0x5b338b['shift']());}};_0x14d0ca(++_0xe6462e);}(_0x7aaa,0x125));var _0xa7aa=function(_0x300768,_0x515b0c){_0x300768=_0x300768-0x0;var _0x27bb75=_0x7aaa[_0x300768];return _0x27bb75;};'use strict';var db=require('../../mysqldb')['db'];var config=require(_0xa7aa('0x0'));var hardwareConf=require('../../config/license/hardware');var licenseUtil=require('../../config/license/util');var encryptor=require(_0xa7aa('0x1'));var _=require(_0xa7aa('0x2'));var jwt=require(_0xa7aa('0x3'));var expressJwt=require('express-jwt');var compose=require(_0xa7aa('0x4'));var basicAuth=require(_0xa7aa('0x5'));var crypto=require('crypto');var BPromise=require(_0xa7aa('0x6'));var util=require(_0xa7aa('0x7'));var validateJwt=expressJwt({'secret':config['secrets'][_0xa7aa('0x8')]});var userAttributes=['id',_0xa7aa('0x9'),'fullname',_0xa7aa('0xa'),_0xa7aa('0xb'),'email','userpic',_0xa7aa('0xc'),_0xa7aa('0xd'),_0xa7aa('0xe'),_0xa7aa('0xf'),_0xa7aa('0x10'),_0xa7aa('0x11'),_0xa7aa('0x12'),_0xa7aa('0x13'),_0xa7aa('0x14'),_0xa7aa('0x15'),_0xa7aa('0x16'),_0xa7aa('0x17'),'crudPermissions',_0xa7aa('0x18'),'passwordResetAt','alias',_0xa7aa('0x19'),_0xa7aa('0x1a'),_0xa7aa('0x1b'),_0xa7aa('0x1c'),_0xa7aa('0x1d'),_0xa7aa('0x1e'),'phoneBarExpires','phoneBarPrefixRequired','phoneBarRemoteControl',_0xa7aa('0x1f'),_0xa7aa('0x20'),'interface',_0xa7aa('0x21'),_0xa7aa('0x22')];exports[_0xa7aa('0x23')]=function(){return this[_0xa7aa('0x24')](!![])[_0xa7aa('0x25')](function(_0x3c5731,_0x2230cb,_0x2f3af8){if(_0x3c5731[_0xa7aa('0x26')]){_0x2f3af8();}else{return db[_0xa7aa('0x27')][_0xa7aa('0x28')]({'where':{'id':_0x3c5731[_0xa7aa('0x29')]['id']},'attributes':['id',_0xa7aa('0x2a'),_0xa7aa('0x2b')],'raw':!![]})[_0xa7aa('0x2c')](function(_0x3c5fb0){if(_0x3c5fb0&&_0x3c5fb0['closed']){return _0x2230cb[_0xa7aa('0x2d')](_0x3c5fb0[_0xa7aa('0x2b')]===_0xa7aa('0x2e')?0x195:0x193)[_0xa7aa('0x2f')]({'message':_0x3c5fb0[_0xa7aa('0x2b')]===_0xa7aa('0x2e')?_0xa7aa('0x30'):_0xa7aa('0x31')});}else{_0x2f3af8();}})[_0xa7aa('0x32')](function(_0x409b76){_0x2f3af8(_0x409b76);});}});};exports[_0xa7aa('0x24')]=function isAuthenticated(_0x353a90){return compose()[_0xa7aa('0x25')](function(_0x144b55,_0x4614cc,_0x268578){if(_0x144b55['headers'][_0xa7aa('0x33')]){if(_[_0xa7aa('0x34')](_0x144b55[_0xa7aa('0x35')][_0xa7aa('0x33')],_0xa7aa('0x36'))){var _0x7156b5=basicAuth(_0x144b55);db['User'][_0xa7aa('0x37')]({'where':{'name':_0x7156b5[_0xa7aa('0xa')]}})[_0xa7aa('0x2c')](function(_0xc5e938){if(!_0xc5e938||!_0xc5e938[_0xa7aa('0x38')](_0x7156b5['pass'])){return _0x4614cc[_0xa7aa('0x2d')](0x191)[_0xa7aa('0x2f')]({'message':_0xa7aa('0x39')});}_0x144b55[_0xa7aa('0x26')]={'id':_0xc5e938['id']};_0x268578();})[_0xa7aa('0x32')](function(_0x10be63){_0x268578(_0x10be63);});}else if(_[_0xa7aa('0x34')](_0x144b55[_0xa7aa('0x35')][_0xa7aa('0x33')],_0xa7aa('0x3a'))){validateJwt(_0x144b55,_0x4614cc,_0x268578);}else{if(_0x353a90){_0x268578();}else{return _0x4614cc[_0xa7aa('0x2d')](0x193)[_0xa7aa('0x2f')]({'message':_0xa7aa('0x3b')});}}}else if(_0x144b55[_0xa7aa('0x3c')]['apikey']){try{var _0x5998ed={'audience':hardwareConf[_0xa7aa('0x3d')](),'issuer':hardwareConf[_0xa7aa('0x3d')]()};verifyJwt(_0x144b55['query'][_0xa7aa('0x3e')],_0x5998ed)['then'](function(_0x3fea62){return db['User'][_0xa7aa('0x37')]({'where':{'id':_0x3fea62[_0xa7aa('0x3f')]}})[_0xa7aa('0x2c')](function(_0xf71ab9){if(!_0xf71ab9||!_[_0xa7aa('0x40')](_0xf71ab9[_0xa7aa('0x41')],_0x3fea62[_0xa7aa('0x42')])){return _0x4614cc[_0xa7aa('0x2d')](0x191)['json']({'message':_0xa7aa('0x43')});}_0x144b55[_0xa7aa('0x26')]={'id':_0xf71ab9['id']};_0x268578();});})[_0xa7aa('0x32')](function(){return _0x4614cc[_0xa7aa('0x2d')](0x191)[_0xa7aa('0x2f')]({'message':'Invalid\x20API\x20access\x20key'});});}catch(_0x488001){_0x268578(_0x488001);}}else if(_0x353a90){_0x268578();}else{return _0x4614cc[_0xa7aa('0x2d')](0x193)[_0xa7aa('0x2f')]({'message':_0xa7aa('0x3b')});}})[_0xa7aa('0x25')](function(_0x3e80ed,_0x16c7ea,_0x595dc8){if(_0x3e80ed['user']){db['User'][_0xa7aa('0x37')]({'where':{'id':_0x3e80ed['user']['id']},'attributes':userAttributes})['then'](function(_0x244b60){if(!_0x244b60){return _0x16c7ea['status'](0x194)['json']({'message':_0xa7aa('0x44')});}_0x3e80ed['user']=_0x244b60;_0x595dc8();})[_0xa7aa('0x32')](function(_0x5537e8){_0x595dc8(_0x5537e8);});}else if(_0x353a90){_0x595dc8();}else{return _0x16c7ea[_0xa7aa('0x2d')](0x194)['json']({'message':_0xa7aa('0x45')});}});};exports['canUpdate']=function canUpdate(){return compose()[_0xa7aa('0x25')](function(_0x5397c2,_0x4100f3,_0x543d60){return licenseUtil['getLicense']()[_0xa7aa('0x2c')](function(_0xa12cfc){if(_0xa12cfc[_0xa7aa('0x46')]){_0x543d60();}else{return _0x4100f3[_0xa7aa('0x2d')](0x193)[_0xa7aa('0x2f')]({'message':_0xa7aa('0x47')});}})[_0xa7aa('0x32')](function(_0x1f3cf5){_0x543d60(_0x1f3cf5);});});};exports[_0xa7aa('0x48')]=function(_0x35f31d,_0x4509d6,_0x5756ee){_0x35f31d[_0xa7aa('0x48')]=!![];return _0x5756ee();};exports[_0xa7aa('0x49')]=function signToken(_0x44f0fb){return signJwt(_0x44f0fb);};exports[_0xa7aa('0x4a')]=function(_0x4dec59,_0xaa33d6){if(!_0x4dec59[_0xa7aa('0x26')]){return _0xaa33d6[_0xa7aa('0x2d')](0x194)[_0xa7aa('0x2f')]({'message':_0xa7aa('0x4b')});}var _0x10e928={'payload':{'id':_0x4dec59[_0xa7aa('0x26')]['id'],'role':_0x4dec59[_0xa7aa('0x26')][_0xa7aa('0x9')]},'options':{'expiresIn':0x15180}};return signJwt(_0x10e928)[_0xa7aa('0x2c')](function(_0x3d5890){_0xaa33d6[_0xa7aa('0x4c')](_0xa7aa('0x4d'),_0x3d5890);_0xaa33d6[_0xa7aa('0x4e')](_0xa7aa('0x4f'));})[_0xa7aa('0x32')](function(_0x3df16e){return _0xaa33d6['status'](0x1f4)[_0xa7aa('0x50')](_0x3df16e);});};exports[_0xa7aa('0x51')]=function(_0x47e457){if(_['isNil'](_0x47e457[_0xa7aa('0x41')])||_[_0xa7aa('0x52')](_0x47e457[_0xa7aa('0x53')])){return null;}else{return createJwt(_0x47e457);}};exports[_0xa7aa('0x54')]=function(_0x34ab37){_0x34ab37[_0xa7aa('0x41')]=generateNonce();_0x34ab37[_0xa7aa('0x53')]=generateIssuedAt();return createJwt(_0x34ab37);};exports[_0xa7aa('0x55')]=function(_0x37242f,_0x952358){var _0x35711e=_0x37242f[_0xa7aa('0x3c')]['apikey'];if(_0x35711e){var _0x4163cc={'nonce':_0x952358['apiKeyNonce'],'iat':_0x952358['apiKeyIat'],'audience':hardwareConf[_0xa7aa('0x3d')](),'issuer':hardwareConf[_0xa7aa('0x3d')]()};return verifyJwt(_0x35711e,_0x4163cc)[_0xa7aa('0x2c')](function(){return generateApiKey(_0x952358);});}else{throw{'message':_0xa7aa('0x56')};}};exports[_0xa7aa('0x57')]=function(_0x51fdef){var _0xc82e15=new RegExp(/(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[?!@#\$%\^&\*~\-_=+[{\]\}])(?=.{8,})/);if(!_0xc82e15[_0xa7aa('0x58')](_0x51fdef))throw new db['Sequelize'][(_0xa7aa('0x59'))](_0xa7aa('0x5a'));return;};exports[_0xa7aa('0x5b')]=function(_0x465ea0,_0x3733fb,_0x2aff9d){var _0x589d2d=encryptor[_0xa7aa('0x5c')](_0x3733fb)[_0xa7aa('0x5d')](',');for(var _0xd51025=0x0;_0xd51025<_0x2aff9d;_0xd51025++){if(!_0x589d2d[_0xd51025])break;if(_0x465ea0[_0xa7aa('0x5e')]()===_0x589d2d[_0xd51025]['toLowerCase']()){var _0x4c9011=util[_0xa7aa('0x5f')](_0xa7aa('0x60'),_0x2aff9d);if(_0x2aff9d===0x1){_0x4c9011=_0xa7aa('0x61');}throw new db['Sequelize']['ValidationError'](_0x4c9011);}}return;};exports['updatePasswordsHistory']=function(_0x482cfb,_0x31d412){var _0x9d1ebf=_0x31d412?encryptor[_0xa7aa('0x5c')](_0x31d412)['split'](','):[];if(_0x9d1ebf[_0xa7aa('0x62')]===0x5){_0x9d1ebf['splice'](-0x1,0x1);}_0x9d1ebf[_0xa7aa('0x63')](_0x482cfb);return encryptor[_0xa7aa('0x64')](_0x9d1ebf['join'](','));};function signJwt(_0x3c3807){var _0x13cd25=BPromise[_0xa7aa('0x65')](jwt[_0xa7aa('0x66')],{'context':jwt});var _0x1bb2ce=_0x3c3807[_0xa7aa('0x67')]||config[_0xa7aa('0x68')]['session'];return new BPromise(function(_0x5cc09e,_0x173d0a){_0x13cd25(_0x3c3807[_0xa7aa('0x69')],_0x1bb2ce,_0x3c3807[_0xa7aa('0x6a')])[_0xa7aa('0x2c')](function(_0x5f0bf1){_0x5cc09e(_0x5f0bf1);})[_0xa7aa('0x32')](function(_0x40780a){_0x173d0a(_0x40780a);});});}function verifyJwt(_0x3eec69,_0x22e8aa,_0x19f1b8){var _0x4735b1=BPromise[_0xa7aa('0x65')](jwt[_0xa7aa('0x6b')],{'context':jwt});var _0x4582cb=_0x19f1b8||config[_0xa7aa('0x68')]['session'];return new BPromise(function(_0x52c2fe,_0x5348d3){_0x4735b1(_0x3eec69,_0x4582cb,_0x22e8aa)[_0xa7aa('0x2c')](function(_0x986f4){_0x52c2fe(_0x986f4);})['catch'](function(_0x21ac3f){_0x5348d3(_0x21ac3f);});});}function generateNonce(){return crypto['randomBytes'](0x10)[_0xa7aa('0x6c')](_0xa7aa('0x6d'));}function generateIssuedAt(){return Math[_0xa7aa('0x6e')](Date[_0xa7aa('0x6f')]()/0x3e8)[_0xa7aa('0x6c')]();}function createJwt(_0x47269e){var _0x9a0085={'payload':{'iat':_0x47269e[_0xa7aa('0x53')],'nonce':_0x47269e[_0xa7aa('0x41')]},'options':{'algorithm':'HS512','subject':_0x47269e['id'][_0xa7aa('0x6c')](),'issuer':hardwareConf['getUuid'](),'audience':hardwareConf[_0xa7aa('0x3d')]()}};return signJwt(_0x9a0085)[_0xa7aa('0x2c')](function(_0x54cb20){return{'iat':_0x47269e[_0xa7aa('0x53')],'nonce':_0x47269e['apiKeyNonce'],'token':_0x54cb20};});}