server/components/auth/service.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x4443=['Please\x20use\x20the\x20previous\x20API\x20access\x20key\x20to\x20generate\x20a\x20new\x20one','session','payload','randomBytes','toString','hex','floor','now','HS512','../../mysqldb','../../config/environment','../../config/license/hardware','lodash','jsonwebtoken','basic-auth','crypto','bluebird','secrets','role','name','email','userpic','md5secret','voicePause','mailPause','faxPause','smsPause','openchannelPause','pauseType','showWebBar','lastPauseAt','allowmessenger','phoneBarAutoAnswerDelay','phoneBarDnd','phoneBarEnableDtmfTone','phoneBarExpires','hotdesk','isChatInteractionAuthorized','use','ChatInteraction','findOne','params','closed','then','disposition','json','Unmanaged.','headers','authorization','User','find','authenticate','pass','status','Wrong\x20credentials.','user','catch','startsWith','Bearer','getUuid','query','sub','isEqual','apiKeyNonce','nonce','Invalid\x20API\x20access\x20key','Unknown\x20authorization\x20format','User\x20not\x20found.','getLicense','Forbidden','isMiddleware','setTokenCookie','It\x20looks\x20like\x20you\x20aren\x27t\x20logged\x20in,\x20please\x20try\x20again.','/dashboards/general','send','retrieveApiKey','isNil','apiKeyIat','generateApiKey','regenerateApiKey','apikey'];(function(_0x3700f2,_0xa2066e){var _0x4a43fd=function(_0x4a4956){while(--_0x4a4956){_0x3700f2['push'](_0x3700f2['shift']());}};_0x4a43fd(++_0xa2066e);}(_0x4443,0xab));var _0x3444=function(_0x321bb2,_0x202794){_0x321bb2=_0x321bb2-0x0;var _0x9c12ed=_0x4443[_0x321bb2];return _0x9c12ed;};'use strict';var db=require(_0x3444('0x0'))['db'];var config=require(_0x3444('0x1'));var hardwareConf=require(_0x3444('0x2'));var _=require(_0x3444('0x3'));var jwt=require(_0x3444('0x4'));var expressJwt=require('express-jwt');var compose=require('composable-middleware');var basicAuth=require(_0x3444('0x5'));var crypto=require(_0x3444('0x6'));var BPromise=require(_0x3444('0x7'));var validateJwt=expressJwt({'secret':config[_0x3444('0x8')]['session']});var userAttributes=['id',_0x3444('0x9'),'fullname',_0x3444('0xa'),'internal',_0x3444('0xb'),_0x3444('0xc'),'permissions',_0x3444('0xd'),_0x3444('0xe'),'chatPause',_0x3444('0xf'),_0x3444('0x10'),_0x3444('0x11'),_0x3444('0x12'),_0x3444('0x13'),_0x3444('0x14'),'lastLoginAt',_0x3444('0x15'),'crudPermissions',_0x3444('0x16'),'passwordResetAt','alias','phoneBarAutoAnswer',_0x3444('0x17'),_0x3444('0x18'),'phoneBarEnableRecording',_0x3444('0x19'),'phoneBarEnableSettings',_0x3444('0x1a'),'phoneBarPrefixRequired','phoneBarRemoteControl','phoneBarRemoteControlPort',_0x3444('0x1b'),'interface','userProfileId'];exports[_0x3444('0x1c')]=function(){return this['isAuthenticated'](!![])[_0x3444('0x1d')](function(_0x2693c8,_0x405314,_0x71a584){if(_0x2693c8['user']){_0x71a584();}else{return db[_0x3444('0x1e')][_0x3444('0x1f')]({'where':{'id':_0x2693c8[_0x3444('0x20')]['id']},'attributes':['id',_0x3444('0x21'),'disposition'],'raw':!![]})[_0x3444('0x22')](function(_0x229d83){if(_0x229d83&&_0x229d83['closed']){return _0x405314['status'](_0x229d83[_0x3444('0x23')]==='unmanaged'?0x195:0x193)[_0x3444('0x24')]({'message':_0x229d83['disposition']==='unmanaged'?_0x3444('0x25'):'Forbidden.'});}else{_0x71a584();}})['catch'](function(_0x486bf1){_0x71a584(_0x486bf1);});}});};exports['isAuthenticated']=function isAuthenticated(_0x20b7d8){return compose()['use'](function(_0xe5cb29,_0x21c44a,_0x5d13cd){if(_0xe5cb29[_0x3444('0x26')][_0x3444('0x27')]){if(_['startsWith'](_0xe5cb29['headers'][_0x3444('0x27')],'Basic')){var _0x263be9=basicAuth(_0xe5cb29);db[_0x3444('0x28')][_0x3444('0x29')]({'where':{'name':_0x263be9['name']}})[_0x3444('0x22')](function(_0x3067c1){if(!_0x3067c1||!_0x3067c1[_0x3444('0x2a')](_0x263be9[_0x3444('0x2b')])){return _0x21c44a[_0x3444('0x2c')](0x191)[_0x3444('0x24')]({'message':_0x3444('0x2d')});}_0xe5cb29[_0x3444('0x2e')]={'id':_0x3067c1['id']};_0x5d13cd();})[_0x3444('0x2f')](function(_0x4e754d){_0x5d13cd(_0x4e754d);});}else if(_[_0x3444('0x30')](_0xe5cb29[_0x3444('0x26')]['authorization'],_0x3444('0x31'))){validateJwt(_0xe5cb29,_0x21c44a,_0x5d13cd);}else{if(_0x20b7d8){_0x5d13cd();}else{return _0x21c44a[_0x3444('0x2c')](0x193)[_0x3444('0x24')]({'message':'Unknown\x20authorization\x20format'});}}}else if(_0xe5cb29['query']['apikey']){try{var _0x4f9f50={'audience':hardwareConf['getUuid'](),'issuer':hardwareConf[_0x3444('0x32')]()};verifyJwt(_0xe5cb29[_0x3444('0x33')]['apikey'],_0x4f9f50)[_0x3444('0x22')](function(_0x25a695){return db[_0x3444('0x28')][_0x3444('0x29')]({'where':{'id':_0x25a695[_0x3444('0x34')]}})[_0x3444('0x22')](function(_0x404244){if(!_0x404244||!_[_0x3444('0x35')](_0x404244[_0x3444('0x36')],_0x25a695[_0x3444('0x37')])){return _0x21c44a[_0x3444('0x2c')](0x191)[_0x3444('0x24')]({'message':'API\x20access\x20key\x20is\x20not\x20valid\x20anymore'});}_0xe5cb29[_0x3444('0x2e')]={'id':_0x404244['id']};_0x5d13cd();});})[_0x3444('0x2f')](function(){return _0x21c44a['status'](0x191)[_0x3444('0x24')]({'message':_0x3444('0x38')});});}catch(_0x42d8e5){_0x5d13cd(_0x42d8e5);}}else if(_0x20b7d8){_0x5d13cd();}else{return _0x21c44a[_0x3444('0x2c')](0x193)['json']({'message':_0x3444('0x39')});}})[_0x3444('0x1d')](function(_0x2cc84b,_0x502269,_0x919faf){if(_0x2cc84b[_0x3444('0x2e')]){db[_0x3444('0x28')][_0x3444('0x29')]({'where':{'id':_0x2cc84b[_0x3444('0x2e')]['id']},'attributes':userAttributes})[_0x3444('0x22')](function(_0x2f3c0c){if(!_0x2f3c0c){return _0x502269[_0x3444('0x2c')](0x194)[_0x3444('0x24')]({'message':_0x3444('0x3a')});}_0x2cc84b['user']=_0x2f3c0c;_0x919faf();})[_0x3444('0x2f')](function(_0x2b6148){_0x919faf(_0x2b6148);});}else if(_0x20b7d8){_0x919faf();}else{return _0x502269[_0x3444('0x2c')](0x194)[_0x3444('0x24')]({'message':'User\x20object\x20not\x20found.'});}});};exports['canUpdate']=function canUpdate(){return compose()[_0x3444('0x1d')](function(_0xaa72c1,_0x513d5c,_0x477c3e){return require('../../config/license/util')[_0x3444('0x3b')]()[_0x3444('0x22')](function(_0x2aab99){if(_0x2aab99['update']){_0x477c3e();}else{return _0x513d5c[_0x3444('0x2c')](0x193)[_0x3444('0x24')]({'message':_0x3444('0x3c')});}})['catch'](function(_0x5463da){_0x477c3e(_0x5463da);});});};exports[_0x3444('0x3d')]=function(_0xcafaf6,_0x5043ad,_0x3ff074){_0xcafaf6[_0x3444('0x3d')]=!![];return _0x3ff074();};exports['signToken']=function signToken(_0x4e11ce){return signJwt(_0x4e11ce);};exports[_0x3444('0x3e')]=function(_0x30a8c8,_0x53ba78){if(!_0x30a8c8[_0x3444('0x2e')]){return _0x53ba78[_0x3444('0x2c')](0x194)[_0x3444('0x24')]({'message':_0x3444('0x3f')});}var _0x5754ca={'payload':{'id':_0x30a8c8[_0x3444('0x2e')]['id'],'role':_0x30a8c8['user']['role']},'options':{'expiresIn':0x15180}};return signJwt(_0x5754ca)[_0x3444('0x22')](function(_0x1f4708){_0x53ba78['cookie']('motion.token',_0x1f4708);_0x53ba78['redirect'](_0x3444('0x40'));})[_0x3444('0x2f')](function(_0x579d46){return _0x53ba78['status'](0x1f4)[_0x3444('0x41')](_0x579d46);});};exports[_0x3444('0x42')]=function(_0x3eede8){if(_[_0x3444('0x43')](_0x3eede8[_0x3444('0x36')])||_[_0x3444('0x43')](_0x3eede8[_0x3444('0x44')])){return null;}else{return createJwt(_0x3eede8);}};exports[_0x3444('0x45')]=function(_0x212d8d){_0x212d8d[_0x3444('0x36')]=generateNonce();_0x212d8d[_0x3444('0x44')]=generateIssuedAt();return createJwt(_0x212d8d);};exports[_0x3444('0x46')]=function(_0x36fed3,_0x501009){var _0xc7d9f2=_0x36fed3[_0x3444('0x33')][_0x3444('0x47')];if(_0xc7d9f2){var _0xc7f3c2={'nonce':_0x501009['apiKeyNonce'],'iat':_0x501009[_0x3444('0x44')],'audience':hardwareConf[_0x3444('0x32')](),'issuer':hardwareConf[_0x3444('0x32')]()};return verifyJwt(_0xc7d9f2,_0xc7f3c2)[_0x3444('0x22')](function(){return generateApiKey(_0x501009);});}else{throw{'message':_0x3444('0x48')};}};function signJwt(_0x402d47){var _0x2ea5f8=BPromise['promisify'](jwt['sign'],{'context':jwt});var _0x58e0a8=_0x402d47['secret']||config['secrets'][_0x3444('0x49')];return new BPromise(function(_0xee2f87,_0xbcf2e3){_0x2ea5f8(_0x402d47[_0x3444('0x4a')],_0x58e0a8,_0x402d47['options'])[_0x3444('0x22')](function(_0x7d0de){_0xee2f87(_0x7d0de);})[_0x3444('0x2f')](function(_0x2e966c){_0xbcf2e3(_0x2e966c);});});}function verifyJwt(_0x16605b,_0x5354c1,_0x452279){var _0x1b9f67=BPromise['promisify'](jwt['verify'],{'context':jwt});var _0x4a22e5=_0x452279||config[_0x3444('0x8')][_0x3444('0x49')];return new BPromise(function(_0x28faaf,_0x180783){_0x1b9f67(_0x16605b,_0x4a22e5,_0x5354c1)[_0x3444('0x22')](function(_0xec2b68){_0x28faaf(_0xec2b68);})[_0x3444('0x2f')](function(_0x1ac8ac){_0x180783(_0x1ac8ac);});});}function generateNonce(){return crypto[_0x3444('0x4b')](0x10)[_0x3444('0x4c')](_0x3444('0x4d'));}function generateIssuedAt(){return Math[_0x3444('0x4e')](Date[_0x3444('0x4f')]()/0x3e8)[_0x3444('0x4c')]();}function createJwt(_0x25b12d){var _0x417ec6={'payload':{'iat':_0x25b12d[_0x3444('0x44')],'nonce':_0x25b12d[_0x3444('0x36')]},'options':{'algorithm':_0x3444('0x50'),'subject':_0x25b12d['id'][_0x3444('0x4c')](),'issuer':hardwareConf[_0x3444('0x32')](),'audience':hardwareConf[_0x3444('0x32')]()}};return signJwt(_0x417ec6)[_0x3444('0x22')](function(_0x19869b){return{'iat':_0x25b12d[_0x3444('0x44')],'nonce':_0x25b12d[_0x3444('0x36')],'token':_0x19869b};});}