Built motion from commit ffdca78c.|2.6.24
[motion2.git] / server / components / auth / service.js
1 // *************************************************************************
2 // *                                                                       *
3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
5 // *                                                                       *
6 // *************************************************************************
7 // *                                                                       *
8 // * Email: info@xcally.com                                                *
9 // * Website: https://www.xcally.com                                       *
10 // *                                                                       *
11 // *************************************************************************
12 // *                                                                       *
13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
14 // * copyright treaties, as well as other intellectual property laws and   *
15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
16 // *                                                                       *
17 // *************************************************************************
18 var _0xda3f=['phoneBarRemoteControlPort','hotdesk','interface','userProfileId','privacyEnabled','settingsEnabled','wssPort','downloadVoiceRecordings','downloadOmnichannelInteractions','ignorePauseForPreviewCalls','selectRecallMeCampaign','chatAutoanswer','chatAutoanswerDelay','emailAutoanswerDelay','smsAutoanswer','smsAutoanswerDelay','faxAutoanswer','faxAutoanswerDelay','whatsappAutoanswer','messengerSoundNotification','isChatInteractionAuthorized','isAuthenticated','use','user','ChatInteraction','params','closed','disposition','status','unmanaged','json','Unmanaged.','Forbidden.','catch','headers','User','find','then','authenticate','pass','Wrong\x20credentials.','startsWith','authorization','Bearer','query','apikey','getUuid','sub','Setting','findOne','blockDuration','isEqual','apiKeyNonce','nonce','API\x20access\x20key\x20is\x20not\x20valid\x20anymore','disabled','Invalid\x20API\x20access\x20key','blocked','add','minutes','Unknown\x20authorization\x20format','User\x20not\x20found.','getLicense','update','Forbidden','isWebrtcLicence','webrtc','isMiddleware','setTokenCookie','cookie','redirect','send','isNil','apiKeyIat','generateApiKey','regenerateApiKey','Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','validatePasswordPattern','test','Sequelize','ValidationError','The\x20password\x20must\x20be\x20at\x20least\x208\x20characters\x20long\x20and\x20have\x201\x20lowercase\x20character,\x201\x20uppercase\x20character,\x201\x20number\x20and\x201\x20special\x20character\x20~!@#$%^&-_=+[{]}.','validatePasswordHistory','decryptString','split','toLowerCase','The\x20password\x20must\x20be\x20different\x20from\x20the\x20last\x20one.\x20Please\x20choose\x20another\x20one.','updatePasswordsHistory','length','splice','unshift','join','promisify','sign','secret','secrets','payload','options','verify','randomBytes','toString','hex','HS512','../../config/environment','../../config/license/hardware','jsonwebtoken','composable-middleware','basic-auth','bluebird','util','session','role','fullname','name','internal','email','userpic','permissions','md5secret','voicePause','chatPause','mailPause','smsPause','openchannelPause','pauseType','showWebBar','lastLoginAt','crudPermissions','passwordResetAt','alias','phoneBarEnableRecording','phoneBarEnableDtmfTone','phoneBarRemoteControl'];(function(_0x4aa83f,_0x33d05c){var _0x2d6394=function(_0x256701){while(--_0x256701){_0x4aa83f['push'](_0x4aa83f['shift']());}};_0x2d6394(++_0x33d05c);}(_0xda3f,0xec));var _0xfda3=function(_0x41c1aa,_0x4302dc){_0x41c1aa=_0x41c1aa-0x0;var _0x453a39=_0xda3f[_0x41c1aa];return _0x453a39;};'use strict';var db=require('../../mysqldb')['db'];var config=require(_0xfda3('0x0'));var hardwareConf=require(_0xfda3('0x1'));var licenseUtil=require('../../config/license/util');var encryptor=require('../encryptor');var _=require('lodash');var jwt=require(_0xfda3('0x2'));var expressJwt=require('express-jwt');var compose=require(_0xfda3('0x3'));var basicAuth=require(_0xfda3('0x4'));var crypto=require('crypto');var BPromise=require(_0xfda3('0x5'));var util=require(_0xfda3('0x6'));var moment=require('moment');var validateJwt=expressJwt({'secret':config['secrets'][_0xfda3('0x7')]});var userAttributes=['id',_0xfda3('0x8'),_0xfda3('0x9'),_0xfda3('0xa'),_0xfda3('0xb'),_0xfda3('0xc'),_0xfda3('0xd'),_0xfda3('0xe'),_0xfda3('0xf'),_0xfda3('0x10'),_0xfda3('0x11'),_0xfda3('0x12'),'faxPause',_0xfda3('0x13'),_0xfda3('0x14'),_0xfda3('0x15'),_0xfda3('0x16'),_0xfda3('0x17'),'lastPauseAt',_0xfda3('0x18'),'allowmessenger',_0xfda3('0x19'),_0xfda3('0x1a'),'phoneBarAutoAnswer','phoneBarAutoAnswerDelay','phoneBarDnd',_0xfda3('0x1b'),_0xfda3('0x1c'),'phoneBarEnableSettings','phoneBarExpires','phoneBarPrefixRequired',_0xfda3('0x1d'),_0xfda3('0x1e'),_0xfda3('0x1f'),_0xfda3('0x20'),_0xfda3('0x21'),_0xfda3('0x22'),_0xfda3('0x23'),_0xfda3('0x24'),_0xfda3('0x25'),_0xfda3('0x26'),'downloadAttachments',_0xfda3('0x27'),_0xfda3('0x28'),_0xfda3('0x29'),_0xfda3('0x2a'),'emailAutoanswer',_0xfda3('0x2b'),_0xfda3('0x2c'),_0xfda3('0x2d'),'openchannelAutoanswer','openchannelAutoanswerDelay',_0xfda3('0x2e'),_0xfda3('0x2f'),_0xfda3('0x30'),'whatsappAutoanswerDelay',_0xfda3('0x31')];exports[_0xfda3('0x32')]=function(){return this[_0xfda3('0x33')](!![])[_0xfda3('0x34')](function(_0xfb4ee9,_0x2b84b7,_0x2677f6){if(_0xfb4ee9[_0xfda3('0x35')]){_0x2677f6();}else{return db[_0xfda3('0x36')]['findOne']({'where':{'id':_0xfb4ee9[_0xfda3('0x37')]['id']},'attributes':['id',_0xfda3('0x38'),_0xfda3('0x39')],'raw':!![]})['then'](function(_0x45a977){if(_0x45a977&&_0x45a977[_0xfda3('0x38')]){return _0x2b84b7[_0xfda3('0x3a')](_0x45a977[_0xfda3('0x39')]===_0xfda3('0x3b')?0x195:0x193)[_0xfda3('0x3c')]({'message':_0x45a977['disposition']===_0xfda3('0x3b')?_0xfda3('0x3d'):_0xfda3('0x3e')});}else{_0x2677f6();}})[_0xfda3('0x3f')](function(_0x33ffd4){_0x2677f6(_0x33ffd4);});}});};exports['isAuthenticated']=function isAuthenticated(_0x3c1549){return compose()[_0xfda3('0x34')](function(_0x301509,_0x474992,_0xe21ec6){var _0x3cfeb2;if(_0x301509[_0xfda3('0x40')]['authorization']){if(_['startsWith'](_0x301509[_0xfda3('0x40')]['authorization'],'Basic')){var _0x16b4a2=basicAuth(_0x301509);db[_0xfda3('0x41')][_0xfda3('0x42')]({'where':{'name':_0x16b4a2[_0xfda3('0xa')]}})[_0xfda3('0x43')](function(_0x35ec7a){if(!_0x35ec7a||!_0x35ec7a[_0xfda3('0x44')](_0x16b4a2[_0xfda3('0x45')])){return _0x474992[_0xfda3('0x3a')](0x191)['json']({'message':_0xfda3('0x46')});}_0x301509[_0xfda3('0x35')]={'id':_0x35ec7a['id']};_0xe21ec6();})[_0xfda3('0x3f')](function(_0x227357){_0xe21ec6(_0x227357);});}else if(_[_0xfda3('0x47')](_0x301509[_0xfda3('0x40')][_0xfda3('0x48')],_0xfda3('0x49'))){validateJwt(_0x301509,_0x474992,_0xe21ec6);}else{if(_0x3c1549){_0xe21ec6();}else{return _0x474992[_0xfda3('0x3a')](0x193)['json']({'message':'Unknown\x20authorization\x20format'});}}}else if(_0x301509[_0xfda3('0x4a')][_0xfda3('0x4b')]){try{var _0x58f805={'audience':hardwareConf[_0xfda3('0x4c')](),'issuer':hardwareConf[_0xfda3('0x4c')]()};verifyJwt(_0x301509[_0xfda3('0x4a')]['apikey'],_0x58f805)[_0xfda3('0x43')](function(_0x378bf0){return db[_0xfda3('0x41')][_0xfda3('0x42')]({'where':{'id':_0x378bf0[_0xfda3('0x4d')]}})['then'](function(_0xc6dd4e){_0x3cfeb2=_0xc6dd4e;return db[_0xfda3('0x4e')][_0xfda3('0x4f')]({'where':{'id':0x1},'attributes':['allowedLoginAttempts',_0xfda3('0x50')],'raw':!![]});})['then'](function(_0x2d9a3f){if(!_0x3cfeb2||!_[_0xfda3('0x51')](_0x3cfeb2[_0xfda3('0x52')],_0x378bf0[_0xfda3('0x53')])){return _0x474992[_0xfda3('0x3a')](0x191)[_0xfda3('0x3c')]({'message':_0xfda3('0x54')});}if(_0x3cfeb2[_0xfda3('0x55')]){return _0x474992['status'](0x191)[_0xfda3('0x3c')]({'message':_0xfda3('0x56')});}if(_0x3cfeb2[_0xfda3('0x57')]){if(_0x2d9a3f[_0xfda3('0x50')]>0x0){if(moment(_0x3cfeb2['blockedAt'])[_0xfda3('0x58')](_0x2d9a3f[_0xfda3('0x50')],_0xfda3('0x59'))>moment()){return _0x474992['status'](0x191)['json']({'message':_0xfda3('0x56')});}}else{return _0x474992[_0xfda3('0x3a')](0x191)[_0xfda3('0x3c')]({'message':_0xfda3('0x56')});}}_0x301509[_0xfda3('0x35')]={'id':_0x3cfeb2['id']};_0xe21ec6();});})[_0xfda3('0x3f')](function(){return _0x474992[_0xfda3('0x3a')](0x191)[_0xfda3('0x3c')]({'message':_0xfda3('0x56')});});}catch(_0x272d65){_0xe21ec6(_0x272d65);}}else if(_0x3c1549){_0xe21ec6();}else{return _0x474992['status'](0x193)[_0xfda3('0x3c')]({'message':_0xfda3('0x5a')});}})['use'](function(_0x1cfa17,_0x5b0296,_0x51a314){if(_0x1cfa17['user']){db[_0xfda3('0x41')][_0xfda3('0x42')]({'where':{'id':_0x1cfa17[_0xfda3('0x35')]['id']},'attributes':userAttributes})[_0xfda3('0x43')](function(_0x4c1f94){if(!_0x4c1f94){return _0x5b0296[_0xfda3('0x3a')](0x194)[_0xfda3('0x3c')]({'message':_0xfda3('0x5b')});}_0x1cfa17[_0xfda3('0x35')]=_0x4c1f94;_0x51a314();})['catch'](function(_0x10482a){_0x51a314(_0x10482a);});}else if(_0x3c1549){_0x51a314();}else{return _0x5b0296[_0xfda3('0x3a')](0x194)[_0xfda3('0x3c')]({'message':'User\x20object\x20not\x20found.'});}});};exports['canUpdate']=function canUpdate(){return compose()[_0xfda3('0x34')](function(_0xb3a539,_0x1eea02,_0x14ca41){return licenseUtil[_0xfda3('0x5c')]()[_0xfda3('0x43')](function(_0xc9b167){if(_0xc9b167[_0xfda3('0x5d')]){_0x14ca41();}else{return _0x1eea02[_0xfda3('0x3a')](0x193)[_0xfda3('0x3c')]({'message':_0xfda3('0x5e')});}})[_0xfda3('0x3f')](function(_0x1b892b){_0x14ca41(_0x1b892b);});});};exports[_0xfda3('0x5f')]=function isWebrtcLicence(){return compose()['use'](function(_0x4a0cbd,_0x52b5c3,_0x2acde1){return licenseUtil[_0xfda3('0x5c')]()[_0xfda3('0x43')](function(_0x597e5a){if(_0x597e5a[_0xfda3('0x60')]){_0x2acde1();}else{return _0x52b5c3[_0xfda3('0x3a')](0x193)[_0xfda3('0x3c')]({'message':_0xfda3('0x5e')});}})[_0xfda3('0x3f')](function(_0x5131da){_0x2acde1(_0x5131da);});});};exports[_0xfda3('0x61')]=function(_0x442cf8,_0x481356,_0x36aa3a){_0x442cf8[_0xfda3('0x61')]=!![];return _0x36aa3a();};exports['signToken']=function signToken(_0x2105dc){return signJwt(_0x2105dc);};exports[_0xfda3('0x62')]=function(_0x15eb87,_0x4bcd2b){if(!_0x15eb87[_0xfda3('0x35')]){return _0x4bcd2b[_0xfda3('0x3a')](0x194)[_0xfda3('0x3c')]({'message':'It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.'});}var _0x30c01c={'payload':{'id':_0x15eb87[_0xfda3('0x35')]['id'],'role':_0x15eb87[_0xfda3('0x35')][_0xfda3('0x8')]},'options':{'expiresIn':0x15180}};return signJwt(_0x30c01c)[_0xfda3('0x43')](function(_0x49662b){_0x4bcd2b[_0xfda3('0x63')]('motion.token',_0x49662b);_0x4bcd2b[_0xfda3('0x64')]('/dashboards/general');})[_0xfda3('0x3f')](function(_0x6447){return _0x4bcd2b[_0xfda3('0x3a')](0x1f4)[_0xfda3('0x65')](_0x6447);});};exports['retrieveApiKey']=function(_0x244c24){if(_[_0xfda3('0x66')](_0x244c24[_0xfda3('0x52')])||_[_0xfda3('0x66')](_0x244c24[_0xfda3('0x67')])){return null;}else{return createJwt(_0x244c24);}};exports[_0xfda3('0x68')]=function(_0x1d051f){_0x1d051f['apiKeyNonce']=generateNonce();_0x1d051f['apiKeyIat']=generateIssuedAt();return createJwt(_0x1d051f);};exports[_0xfda3('0x69')]=function(_0x27d7f9,_0x218ee5){var _0x5489f5=_0x27d7f9['query'][_0xfda3('0x4b')];if(_0x5489f5){var _0x1d6606={'nonce':_0x218ee5[_0xfda3('0x52')],'iat':_0x218ee5[_0xfda3('0x67')],'audience':hardwareConf[_0xfda3('0x4c')](),'issuer':hardwareConf['getUuid']()};return verifyJwt(_0x5489f5,_0x1d6606)[_0xfda3('0x43')](function(){return generateApiKey(_0x218ee5);});}else{throw{'message':_0xfda3('0x6a')};}};exports[_0xfda3('0x6b')]=function(_0x375d8c){var _0x27c3cb=new RegExp(/(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[?!@#\$%\^&\*~\-_=+[{\]\}])(?=.{8,})/);if(!_0x27c3cb[_0xfda3('0x6c')](_0x375d8c))throw new db[(_0xfda3('0x6d'))][(_0xfda3('0x6e'))](_0xfda3('0x6f'));return;};exports[_0xfda3('0x70')]=function(_0x3ed7c1,_0x1fa27a,_0x5b426b){var _0x28c8a9=encryptor[_0xfda3('0x71')](_0x1fa27a)[_0xfda3('0x72')](',');for(var _0x32c835=0x0;_0x32c835<_0x5b426b;_0x32c835++){if(!_0x28c8a9[_0x32c835])break;if(_0x3ed7c1[_0xfda3('0x73')]()===_0x28c8a9[_0x32c835][_0xfda3('0x73')]()){var _0x42c7a1=util['format']('The\x20password\x20must\x20be\x20different\x20from\x20the\x20previous\x20%d\x20passwords.\x20Please\x20choose\x20another\x20one.',_0x5b426b);if(_0x5b426b===0x1){_0x42c7a1=_0xfda3('0x74');}throw new db[(_0xfda3('0x6d'))]['ValidationError'](_0x42c7a1);}}return;};exports[_0xfda3('0x75')]=function(_0x178b06,_0x2a5efe){var _0x38dbc7=_0x2a5efe?encryptor['decryptString'](_0x2a5efe)['split'](','):[];if(_0x38dbc7[_0xfda3('0x76')]===0x5){_0x38dbc7[_0xfda3('0x77')](-0x1,0x1);}_0x38dbc7[_0xfda3('0x78')](_0x178b06);return encryptor['encryptString'](_0x38dbc7[_0xfda3('0x79')](','));};function signJwt(_0x4b1216){var _0x3452cf=BPromise[_0xfda3('0x7a')](jwt[_0xfda3('0x7b')],{'context':jwt});var _0x2f72e0=_0x4b1216[_0xfda3('0x7c')]||config[_0xfda3('0x7d')]['session'];return new BPromise(function(_0x1447d3,_0x471418){_0x3452cf(_0x4b1216[_0xfda3('0x7e')],_0x2f72e0,_0x4b1216[_0xfda3('0x7f')])[_0xfda3('0x43')](function(_0x4f7c29){_0x1447d3(_0x4f7c29);})['catch'](function(_0x285459){_0x471418(_0x285459);});});}function verifyJwt(_0x18ab57,_0x5afcf5,_0x550822){var _0x512d7b=BPromise[_0xfda3('0x7a')](jwt[_0xfda3('0x80')],{'context':jwt});var _0x4f3e45=_0x550822||config[_0xfda3('0x7d')][_0xfda3('0x7')];return new BPromise(function(_0x2f67a1,_0x2e042b){_0x512d7b(_0x18ab57,_0x4f3e45,_0x5afcf5)['then'](function(_0x1cd818){_0x2f67a1(_0x1cd818);})[_0xfda3('0x3f')](function(_0xc9878d){_0x2e042b(_0xc9878d);});});}function generateNonce(){return crypto[_0xfda3('0x81')](0x10)[_0xfda3('0x82')](_0xfda3('0x83'));}function generateIssuedAt(){return Math['floor'](Date['now']()/0x3e8)[_0xfda3('0x82')]();}function createJwt(_0x5856fa){var _0x238329={'payload':{'iat':_0x5856fa[_0xfda3('0x67')],'nonce':_0x5856fa[_0xfda3('0x52')]},'options':{'algorithm':_0xfda3('0x84'),'subject':_0x5856fa['id'][_0xfda3('0x82')](),'issuer':hardwareConf[_0xfda3('0x4c')](),'audience':hardwareConf[_0xfda3('0x4c')]()}};return signJwt(_0x238329)[_0xfda3('0x43')](function(_0x29b9fb){return{'iat':_0x5856fa[_0xfda3('0x67')],'nonce':_0x5856fa['apiKeyNonce'],'token':_0x29b9fb};});}