server/api/authLocal/authLocal.controller.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x6061=['minutes','Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.','clearBlockUser','getLicense','catch','MailAccount','email','MailServerOut','CloudProvider','Unable\x20to\x20find\x20a\x20configured\x20SMTP\x20service!','getSmtpOptions','merge','format','\x22%s\x22\x20<%s>','SendMail','error','message','stringify','status','send','login','Something\x20went\x20wrong,\x20please\x20try\x20again.','role','json','forgot','body','Email\x20parameter\x20is\x20missing','generate','trim','toLowerCase','findOne','User','This\x20email\x20is\x20not\x20registered.','The\x20user\x20is\x20disabled.\x20Please\x20contact\x20the\x20administrator.','The\x20user\x20is\x20blocked.\x20Please\x20contact\x20the\x20administrator.','resetPasswordToken','resetPasswordExpires','now','save','xCally\x20Motion\x20Password\x20Reset','https://','headers','host','/reset/','If\x20you\x20did\x20not\x20request\x20this,\x20please\x20ignore\x20this\x20email\x20and\x20your\x20password\x20will\x20remain\x20unchanged.\x0a','Reset\x20Email\x20sent!','reset','find','params','token','enforcePasswordHistory','passwordHistoryLimit','securePassword','validatePasswordPattern','previousPasswords','Password\x20reset!','passport','jayson/promise','lodash','randomstring','../../mysqldb','../../components/auth/service','../../config/utils','client','http','Setting','allowedLoginAttempts','blockDuration','then','name','password','salt','disabled','blocked','blockedAt','admin','user','agent','authenticate','add'];(function(_0x1e07de,_0x5d0da2){var _0x4e80ab=function(_0x20c63e){while(--_0x20c63e){_0x1e07de['push'](_0x1e07de['shift']());}};_0x4e80ab(++_0x5d0da2);}(_0x6061,0xd8));var _0x1606=function(_0x443173,_0x5f1e71){_0x443173=_0x443173-0x0;var _0x38d7d7=_0x6061[_0x443173];return _0x38d7d7;};'use strict';var util=require('util');var passport=require(_0x1606('0x0'));var LocalStrategy=require('passport-local')['Strategy'];var jayson=require(_0x1606('0x1'));var _=require(_0x1606('0x2'));var rs=require(_0x1606('0x3'));var moment=require('moment');var db=require(_0x1606('0x4'))['db'];var authService=require(_0x1606('0x5'));var utils=require(_0x1606('0x6'));var client=jayson[_0x1606('0x7')][_0x1606('0x8')]({'port':0x232b});function localAuthenticate(_0x2b318e,_0x32a334,_0x8e8344,_0x3e0022){var _0xaa69a8,_0x41bc78;return db[_0x1606('0x9')]['findOne']({'where':{'id':0x1},'attributes':[_0x1606('0xa'),_0x1606('0xb')],'raw':!![]})[_0x1606('0xc')](function(_0x186586){_0xaa69a8=_0x186586;return _0x2b318e['findOne']({'attributes':['id',_0x1606('0xd'),_0x1606('0xe'),_0x1606('0xf'),'role',_0x1606('0x10'),_0x1606('0x11'),_0x1606('0x12'),'loginAttempts'],'where':{'name':_0x32a334,'role':{'$or':[_0x1606('0x13'),_0x1606('0x14'),_0x1606('0x15')]}}});})[_0x1606('0xc')](function(_0x398d59){if(!_0x398d59||_0x398d59&&_0x398d59['name']!==_0x32a334){throw new Error('Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.');}else{_0x41bc78=_0x398d59;return _0x41bc78;}})[_0x1606('0xc')](function(){_0x41bc78[_0x1606('0x16')](_0x8e8344,function(_0x35547c,_0x5e85c8){var _0x2acac6=_0x41bc78['loginAttempts']+0x1;if(_0x35547c){return _0x3e0022(_0x35547c);}else if(!_0x5e85c8){if(_0x41bc78[_0x1606('0x10')]){return _0x3e0022(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else if(_0xaa69a8[_0x1606('0xa')]>0x0){if(_0x41bc78['blocked']){if(_0xaa69a8['blockDuration']>0x0){if(moment(_0x41bc78[_0x1606('0x12')])[_0x1606('0x17')](_0xaa69a8['blockDuration'],_0x1606('0x18'))>moment()){return _0x3e0022(null,![],{'message':_0x1606('0x19')});}else{return utils[_0x1606('0x1a')](_0x41bc78,_0x2acac6,![],null)['then'](function(){return _0x3e0022(null,![],{'message':_0x1606('0x19')});});}}else{return _0x3e0022(null,![],{'message':_0x1606('0x19')});}}else{if(_0x2acac6>=_0xaa69a8[_0x1606('0xa')]){return utils[_0x1606('0x1a')](_0x41bc78,0x0,!![],moment())[_0x1606('0xc')](function(){return _0x3e0022(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});});}else{return utils[_0x1606('0x1a')](_0x41bc78,_0x2acac6,![],null)[_0x1606('0xc')](function(){return _0x3e0022(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});});}}}else{return _0x3e0022(null,![],{'message':_0x1606('0x19')});}}else{if(_0x41bc78[_0x1606('0x10')]){return _0x3e0022(null,![],{'message':'Incorrect\x20username\x20and/or\x20password.\x20Please\x20retry\x20again\x20or\x20contact\x20the\x20administrator.'});}else if(_0xaa69a8[_0x1606('0xa')]>0x0){if(_0x41bc78[_0x1606('0x11')]){if(_0xaa69a8[_0x1606('0xb')]>0x0){if(moment(_0x41bc78[_0x1606('0x12')])[_0x1606('0x17')](_0xaa69a8[_0x1606('0xb')],_0x1606('0x18'))>moment()){return _0x3e0022(null,![],{'message':_0x1606('0x19')});}else{return utils['clearBlockUser'](_0x41bc78,0x0,![],null)['then'](function(){return utils['getLicense'](_0x41bc78);})['then'](function(){return _0x3e0022(null,_0x41bc78);});}}else{return _0x3e0022(null,![],{'message':_0x1606('0x19')});}}else{return utils['clearBlockUser'](_0x41bc78,0x0,![],null)[_0x1606('0xc')](function(){return utils[_0x1606('0x1b')](_0x41bc78);})[_0x1606('0xc')](function(){return _0x3e0022(null,_0x41bc78);})['catch'](function(_0x18c581){return _0x3e0022(null,![],_0x18c581);});}}else{if(_0x41bc78[_0x1606('0x11')]){return _0x3e0022(null,![],{'message':_0x1606('0x19')});}else{return utils[_0x1606('0x1b')](_0x41bc78)['then'](function(){return _0x3e0022(null,_0x41bc78);});}}}});})[_0x1606('0x1c')](function(_0x5a0020){return _0x3e0022(null,![],_0x5a0020);});}function sendServiceMail(_0x145906){return db[_0x1606('0x1d')]['find']({'where':{'service':!![]},'attributes':['id',_0x1606('0xd'),_0x1606('0x1e')],'include':[{'model':db[_0x1606('0x1f')],'as':'Smtp','include':[{'model':db[_0x1606('0x20')],'as':'CloudProvider'}]}]})[_0x1606('0xc')](function(_0x22d65e){if(!_0x22d65e){throw new Error(_0x1606('0x21'));}var _0x207ee9=_0x22d65e[_0x1606('0x22')]();var _0x5c5841={'account':_0x207ee9,'message':_[_0x1606('0x23')]({'from':util[_0x1606('0x24')](_0x1606('0x25'),_0x22d65e[_0x1606('0xd')],_0x22d65e[_0x1606('0x1e')]||_0x22d65e['Smtp'][_0x1606('0x14')])},_0x145906)};return client['request'](_0x1606('0x26'),_0x5c5841);})[_0x1606('0xc')](function(_0x1a1444){if(_0x1a1444[_0x1606('0x27')]){throw new Error(util[_0x1606('0x24')]('SendMail\x20error:\x20%s.\x20Please\x20contact\x20your\x20Administrator!',_0x1a1444[_0x1606('0x27')][_0x1606('0x28')]||JSON[_0x1606('0x29')](_0x1a1444[_0x1606('0x27')])));}return!![];});}function handleError(_0x1e9118,_0x31bebf,_0x4023d2){return _0x1e9118[_0x1606('0x2a')](_0x31bebf||0x1f4)[_0x1606('0x2b')]({'message':_0x4023d2?_0x4023d2[_0x1606('0x28')]||_0x4023d2:''});}exports[_0x1606('0x2c')]=function(_0x114c74,_0x470612,_0x4c6c74){passport[_0x1606('0x16')]('local-login',function(_0x4f4645,_0x31f383,_0x3c4b8c){var _0x179adb=_0x4f4645||_0x3c4b8c;if(_0x179adb){return handleError(_0x470612,0x191,_0x179adb);}if(!_0x31f383){return handleError(_0x470612,0x194,{'message':_0x1606('0x2d')});}else{var _0x461a95={'payload':{'id':_0x31f383['id'],'role':_0x31f383[_0x1606('0x2e')]},'options':{'expiresIn':0x15180}};return authService['signToken'](_0x461a95)[_0x1606('0xc')](function(_0x411207){_0x470612[_0x1606('0x2f')]({'id':_0x31f383['id'],'token':_0x411207,'statusCall':'','isAlreadyLogged':_0x31f383['online']});});}})(_0x114c74,_0x470612,_0x4c6c74);};exports[_0x1606('0x30')]=function(_0x271cef,_0x49b35a){if(!_0x271cef[_0x1606('0x31')][_0x1606('0x1e')]){return handleError(_0x49b35a,0x1f4,{'message':_0x1606('0x32')});}var _0xcd6852=rs[_0x1606('0x33')]();_0x271cef[_0x1606('0x31')][_0x1606('0x1e')]=_0x271cef['body'][_0x1606('0x1e')][_0x1606('0x34')]()[_0x1606('0x35')]();var _0x70af2c;return db[_0x1606('0x9')][_0x1606('0x36')]({'where':{'id':0x1},'attributes':[_0x1606('0xa'),_0x1606('0xb')],'raw':!![]})[_0x1606('0xc')](function(_0x2678db){_0x70af2c=_0x2678db;return db[_0x1606('0x37')]['find']({'where':{'email':_0x271cef['body'][_0x1606('0x1e')]}});})[_0x1606('0xc')](function(_0x4d1e0b){if(!_0x4d1e0b){throw new Error(_0x1606('0x38'));}if(_0x4d1e0b[_0x1606('0x10')]){throw new Error(_0x1606('0x39'));}if(_0x4d1e0b['blocked']){if(moment(_0x4d1e0b['blockedAt'])[_0x1606('0x17')](_0x70af2c['blockDuration'],_0x1606('0x18'))>moment()){throw new Error(_0x1606('0x3a'));}else{_0x4d1e0b[_0x1606('0x11')]=![];_0x4d1e0b[_0x1606('0x12')]=null;}}_0x4d1e0b[_0x1606('0x3b')]=_0xcd6852;_0x4d1e0b[_0x1606('0x3c')]=Date[_0x1606('0x3d')]()+0x36ee80;return _0x4d1e0b[_0x1606('0x3e')]();})[_0x1606('0xc')](function(){return sendServiceMail({'to':_0x271cef['body'][_0x1606('0x1e')],'subject':_0x1606('0x3f'),'text':'You\x20are\x20receiving\x20this\x20because\x20you\x20(or\x20someone\x20else)\x20have\x20requested\x20the\x20reset\x20of\x20the\x20password\x20for\x20your\x20account.\x0a\x0a'+'Please\x20click\x20on\x20the\x20following\x20link,\x20or\x20paste\x20this\x20into\x20your\x20browser\x20to\x20complete\x20the\x20process:\x0a\x0a'+_0x1606('0x40')+_0x271cef[_0x1606('0x41')][_0x1606('0x42')]+_0x1606('0x43')+_0xcd6852+'\x0a\x0a'+_0x1606('0x44')});})[_0x1606('0xc')](function(){_0x49b35a[_0x1606('0x2a')](0xc8)[_0x1606('0x2b')]({'message':_0x1606('0x45')});})['catch'](function(_0x16871d){return handleError(_0x49b35a,0x1f4,_0x16871d);});};exports[_0x1606('0x46')]=function(_0x24af68,_0x312566){return db['User'][_0x1606('0x47')]({'where':{'resetPasswordToken':_0x24af68[_0x1606('0x48')][_0x1606('0x49')],'resetPasswordExpires':{'$gt':Date['now']()}}})['then'](function(_0x42a928){if(!_0x42a928){throw new Error('Password\x20reset\x20token\x20is\x20invalid\x20or\x20has\x20expired.');}return db['Setting'][_0x1606('0x36')]({'attributes':['id','securePassword',_0x1606('0x4a'),_0x1606('0x4b')]})['then'](function(_0x3c07f6){if(_0x3c07f6[_0x1606('0x4c')])authService[_0x1606('0x4d')](_0x24af68[_0x1606('0x31')]['password']);if(!_0x3c07f6['enforcePasswordHistory']||!_0x42a928[_0x1606('0x4e')])return _0x42a928;authService['validatePasswordHistory'](_0x24af68[_0x1606('0x31')]['password'],_0x42a928[_0x1606('0x4e')],_0x3c07f6[_0x1606('0x4b')]);return _0x42a928;})[_0x1606('0xc')](function(){_0x42a928[_0x1606('0xe')]=_0x24af68[_0x1606('0x31')][_0x1606('0xe')];_0x42a928[_0x1606('0x3b')]=null;_0x42a928[_0x1606('0x3c')]=null;return _0x42a928['save']();});})[_0x1606('0xc')](function(){_0x312566[_0x1606('0x2a')](0xc8)['send']({'message':_0x1606('0x4f')});})['catch'](function(_0x2bfaef){return handleError(_0x312566,0x1f4,_0x2bfaef);});};passport['use']('local-login',new LocalStrategy({'usernameField':'name','passwordField':_0x1606('0xe')},function(_0x544a90,_0xacf04,_0x14ec1d){return localAuthenticate(db[_0x1606('0x37')],_0x544a90,_0xacf04,_0x14ec1d);}));