server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x0689=['ChatInteraction','findOne','params','closed','disposition','then','status','unmanaged','json','Unmanaged.','Forbidden.','headers','authorization','Basic','User','find','pass','startsWith','Bearer','Unknown\x20authorization\x20format','query','apikey','getUuid','sub','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','catch','User\x20not\x20found.','User\x20object\x20not\x20found.','canUpdate','../../config/license/util','getLicense','update','Forbidden','isMiddleware','signToken','setTokenCookie','cookie','motion.token','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','promisify','sign','payload','options','verify','randomBytes','hex','floor','now','toString','HS512','../../config/environment','lodash','jsonwebtoken','express-jwt','composable-middleware','basic-auth','crypto','bluebird','secrets','session','role','name','userpic','permissions','md5secret','voicePause','chatPause','mailPause','faxPause','smsPause','openchannelPause','showWebBar','lastLoginAt','lastPauseAt','crudPermissions','passwordResetAt','alias','phoneBarAutoAnswer','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarEnableSettings','phoneBarPrefixRequired','phoneBarRemoteControl','hotdesk','interface','isChatInteractionAuthorized','isAuthenticated','use','user'];(function(_0x50521f,_0x4375b3){var _0x29b4be=function(_0x1cb06e){while(--_0x1cb06e){_0x50521f['push'](_0x50521f['shift']());}};_0x29b4be(++_0x4375b3);}(_0x0689,0x161));var _0x9068=function(_0x21024f,_0x35e650){_0x21024f=_0x21024f-0x0;var _0x26e8f8=_0x0689[_0x21024f];return _0x26e8f8;};'use strict';var db=require('../../mysqldb')['db'];var config=require(_0x9068('0x0'));var hardwareConf=require('../../config/license/hardware');var _=require(_0x9068('0x1'));var jwt=require(_0x9068('0x2'));var expressJwt=require(_0x9068('0x3'));var compose=require(_0x9068('0x4'));var basicAuth=require(_0x9068('0x5'));var crypto=require(_0x9068('0x6'));var BPromise=require(_0x9068('0x7'));var validateJwt=expressJwt({'secret':config[_0x9068('0x8')][_0x9068('0x9')]});var userAttributes=['id',_0x9068('0xa'),'fullname',_0x9068('0xb'),'internal','email',_0x9068('0xc'),_0x9068('0xd'),_0x9068('0xe'),_0x9068('0xf'),_0x9068('0x10'),_0x9068('0x11'),_0x9068('0x12'),_0x9068('0x13'),_0x9068('0x14'),'pauseType',_0x9068('0x15'),_0x9068('0x16'),_0x9068('0x17'),_0x9068('0x18'),'allowmessenger',_0x9068('0x19'),_0x9068('0x1a'),_0x9068('0x1b'),'phoneBarAutoAnswerDelay',_0x9068('0x1c'),_0x9068('0x1d'),_0x9068('0x1e'),'phoneBarExpires',_0x9068('0x1f'),_0x9068('0x20'),'phoneBarRemoteControlPort',_0x9068('0x21'),_0x9068('0x22'),'userProfileId'];exports[_0x9068('0x23')]=function(){return this[_0x9068('0x24')](!![])[_0x9068('0x25')](function(_0x430000,_0x576b34,_0x133346){if(_0x430000[_0x9068('0x26')]){_0x133346();}else{return db[_0x9068('0x27')][_0x9068('0x28')]({'where':{'id':_0x430000[_0x9068('0x29')]['id']},'attributes':['id',_0x9068('0x2a'),_0x9068('0x2b')],'raw':!![]})[_0x9068('0x2c')](function(_0xddd745){if(_0xddd745&&_0xddd745['closed']){return _0x576b34[_0x9068('0x2d')](_0xddd745[_0x9068('0x2b')]===_0x9068('0x2e')?0x195:0x193)[_0x9068('0x2f')]({'message':_0xddd745[_0x9068('0x2b')]===_0x9068('0x2e')?_0x9068('0x30'):_0x9068('0x31')});}else{_0x133346();}})['catch'](function(_0x5787fd){_0x133346(_0x5787fd);});}});};exports['isAuthenticated']=function isAuthenticated(_0x4537e7){return compose()['use'](function(_0x57d6f9,_0xa13014,_0x290d94){if(_0x57d6f9[_0x9068('0x32')][_0x9068('0x33')]){if(_['startsWith'](_0x57d6f9[_0x9068('0x32')][_0x9068('0x33')],_0x9068('0x34'))){var _0x2f12a0=basicAuth(_0x57d6f9);db[_0x9068('0x35')][_0x9068('0x36')]({'where':{'name':_0x2f12a0['name']}})[_0x9068('0x2c')](function(_0x3ee9aa){if(!_0x3ee9aa||!_0x3ee9aa['authenticate'](_0x2f12a0[_0x9068('0x37')])){return _0xa13014[_0x9068('0x2d')](0x191)['json']({'message':'Wrong\x20credentials.'});}_0x57d6f9[_0x9068('0x26')]={'id':_0x3ee9aa['id']};_0x290d94();})['catch'](function(_0x1d197a){_0x290d94(_0x1d197a);});}else if(_[_0x9068('0x38')](_0x57d6f9[_0x9068('0x32')][_0x9068('0x33')],_0x9068('0x39'))){validateJwt(_0x57d6f9,_0xa13014,_0x290d94);}else{if(_0x4537e7){_0x290d94();}else{return _0xa13014['status'](0x193)[_0x9068('0x2f')]({'message':_0x9068('0x3a')});}}}else if(_0x57d6f9[_0x9068('0x3b')][_0x9068('0x3c')]){var _0x5abbb6={'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0x9068('0x3d')]()};verifyJwt(_0x57d6f9[_0x9068('0x3b')][_0x9068('0x3c')],_0x5abbb6)[_0x9068('0x2c')](function(_0x412526){return db[_0x9068('0x35')][_0x9068('0x36')]({'where':{'id':_0x412526[_0x9068('0x3e')]}})[_0x9068('0x2c')](function(_0x339b03){if(!_0x339b03||!_['isEqual'](_0x339b03[_0x9068('0x3f')],_0x412526[_0x9068('0x40')])){return _0xa13014[_0x9068('0x2d')](0x193)['json']({'message':_0x9068('0x41')});}_0x57d6f9[_0x9068('0x26')]={'id':_0x339b03['id']};_0x290d94();});})[_0x9068('0x42')](function(_0x1a8026){_0x290d94(_0x1a8026);});}else if(_0x4537e7){_0x290d94();}else{return _0xa13014['status'](0x193)[_0x9068('0x2f')]({'message':'Unknown\x20authorization\x20format'});}})[_0x9068('0x25')](function(_0x507c8a,_0x408068,_0xe64fb4){if(_0x507c8a[_0x9068('0x26')]){db[_0x9068('0x35')][_0x9068('0x36')]({'where':{'id':_0x507c8a['user']['id']},'attributes':userAttributes})[_0x9068('0x2c')](function(_0x19a5f7){if(!_0x19a5f7){return _0x408068[_0x9068('0x2d')](0x194)[_0x9068('0x2f')]({'message':_0x9068('0x43')});}_0x507c8a[_0x9068('0x26')]=_0x19a5f7;_0xe64fb4();})[_0x9068('0x42')](function(_0xf626cf){_0xe64fb4(_0xf626cf);});}else if(_0x4537e7){_0xe64fb4();}else{return _0x408068[_0x9068('0x2d')](0x194)['json']({'message':_0x9068('0x44')});}});};exports[_0x9068('0x45')]=function canUpdate(){return compose()[_0x9068('0x25')](function(_0xe6f096,_0x52f537,_0x5d0dab){return require(_0x9068('0x46'))[_0x9068('0x47')]()[_0x9068('0x2c')](function(_0x2c0adc){if(_0x2c0adc[_0x9068('0x48')]){_0x5d0dab();}else{return _0x52f537[_0x9068('0x2d')](0x193)[_0x9068('0x2f')]({'message':_0x9068('0x49')});}})[_0x9068('0x42')](function(_0x58e2a4){_0x5d0dab(_0x58e2a4);});});};exports[_0x9068('0x4a')]=function(_0x8f132c,_0x41961d,_0x3749ff){_0x8f132c[_0x9068('0x4a')]=!![];return _0x3749ff();};exports[_0x9068('0x4b')]=function signToken(_0x3c4b6a){return signJwt(_0x3c4b6a);};exports[_0x9068('0x4c')]=function(_0x53201f,_0x145881){if(!_0x53201f[_0x9068('0x26')]){return _0x145881[_0x9068('0x2d')](0x194)[_0x9068('0x2f')]({'message':'It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.'});}var _0x4235be={'payload':{'id':_0x53201f['user']['id'],'role':_0x53201f[_0x9068('0x26')]['role']},'options':{'expiresIn':0x15180}};return signJwt(_0x4235be)[_0x9068('0x2c')](function(_0x1c165b){_0x145881[_0x9068('0x4d')](_0x9068('0x4e'),_0x1c165b);_0x145881['redirect'](_0x9068('0x4f'));})[_0x9068('0x42')](function(_0x23203e){return _0x145881[_0x9068('0x2d')](0x1f4)[_0x9068('0x50')](_0x23203e);});};exports[_0x9068('0x51')]=function(_0x520941){if(_['isNil'](_0x520941[_0x9068('0x3f')])||_[_0x9068('0x52')](_0x520941[_0x9068('0x53')])){return null;}else{return createJwt(_0x520941);}};exports[_0x9068('0x54')]=function(_0x370295){_0x370295[_0x9068('0x3f')]=generateNonce();_0x370295[_0x9068('0x53')]=generateIssuedAt();return createJwt(_0x370295);};exports[_0x9068('0x55')]=function(_0x13baa6,_0x13da8e){var _0x4e156d=_0x13baa6[_0x9068('0x3b')][_0x9068('0x3c')];if(_0x4e156d){var _0x5e381f={'nonce':_0x13da8e[_0x9068('0x3f')],'iat':_0x13da8e['apiKeyIat'],'audience':hardwareConf[_0x9068('0x3d')](),'issuer':hardwareConf['getUuid']()};return verifyJwt(_0x4e156d,_0x5e381f)[_0x9068('0x2c')](function(){return generateApiKey(_0x13da8e);});}else{throw{'message':_0x9068('0x56')};}};function signJwt(_0x5c04d3){var _0x19c16d=BPromise[_0x9068('0x57')](jwt[_0x9068('0x58')],{'context':jwt});var _0x27ba6e=_0x5c04d3['secret']||config[_0x9068('0x8')][_0x9068('0x9')];return new BPromise(function(_0x5ace24,_0x18430f){_0x19c16d(_0x5c04d3[_0x9068('0x59')],_0x27ba6e,_0x5c04d3[_0x9068('0x5a')])[_0x9068('0x2c')](function(_0x33ab7b){_0x5ace24(_0x33ab7b);})[_0x9068('0x42')](function(_0x33be91){_0x18430f(_0x33be91);});});}function verifyJwt(_0x552933,_0x49513f,_0x49e5b6){var _0x5e29b5=BPromise['promisify'](jwt[_0x9068('0x5b')],{'context':jwt});var _0xca8d6b=_0x49e5b6||config[_0x9068('0x8')][_0x9068('0x9')];return new BPromise(function(_0xcc3df7,_0x4578e5){_0x5e29b5(_0x552933,_0xca8d6b,_0x49513f)['then'](function(_0x41a1ac){_0xcc3df7(_0x41a1ac);})['catch'](function(_0x146964){_0x4578e5(_0x146964);});});}function generateNonce(){return crypto[_0x9068('0x5c')](0x10)['toString'](_0x9068('0x5d'));}function generateIssuedAt(){return Math[_0x9068('0x5e')](Date[_0x9068('0x5f')]()/0x3e8)[_0x9068('0x60')]();}function createJwt(_0x447113){var _0x2a6deb={'payload':{'iat':_0x447113[_0x9068('0x53')],'nonce':_0x447113[_0x9068('0x3f')]},'options':{'algorithm':_0x9068('0x61'),'subject':_0x447113['id'][_0x9068('0x60')](),'issuer':hardwareConf[_0x9068('0x3d')](),'audience':hardwareConf[_0x9068('0x3d')]()}};return signJwt(_0x2a6deb)[_0x9068('0x2c')](function(_0x2affa7){return{'iat':_0x447113[_0x9068('0x53')],'nonce':_0x447113[_0x9068('0x3f')],'token':_0x2affa7};});}