apinode/lib/app/admin/user/loginOp.js

An API server that can greatly reduce the work needed to implment API services. It can also cooperate with other API node to make it a mesh of services.

/*!
* cnode
* authors: Ben Lue
* Copyright(c) 2015 Conwell Inc.
*/
var  async = require('async'),
	 soar = require('sql-soar'),
	 tokenUtil = require('../../../util/tokenUtil.js'),
	 userUtil = require('../util/userUtil.js');

var  _tsWindow = 60 * 24 * 60 * 60 * 1000;

var  usrExpr = soar.sql('GrpUser')
				   .filter({
					   op: 'and',
					   filters: [
						   {name: 'UGroup_id', op: '='},
						   {name: 'accName', op: '='}
					   ]
				   });
				   
var  qUsrCmd = {op: 'query', expr: usrExpr};

exports.checkArguments = function(rt, cb)  {
	var  inData = rt.inData;
	if (!inData.accName)
        return  this.answerError(rt, 1, cb);

	if (!inData.passwd)
        return  this.answerError(rt, 2, cb);
		
	cb( null, true );
};


exports.run = function(rt, cb)  {
	var  inData = rt.inData,
		 accName = inData.accName;
	
	async.waterfall([
		function getUser(cb)  {
			var  query = {UGroup_id: rt.app.UGroup_id, accName: accName};
			soar.execute( qUsrCmd, query, function(err, usrData) {
				if (err)
					return cb({code: -100, message: 'Internal error.'});
					
				if (usrData)
					cb(null, usrData);
				else
                    this.answerError(rt, 3, cb);
			});
		},
		function  matchPasswd(usrData, cb)  {
			var  salt = usrData.passwd.substring(0, 16),
				 passwd = userUtil.genPassword( inData.passwd, salt );
			
			//console.log('incoming passwd is: ' + inData.passwd);
			//console.log('original password: ' + usrData.passwd);
			//console.log('generated password: ' + passwd);
			if (usrData.passwd === passwd)
				cb( null, usrData);
			else
                this.answerError(rt, 3, cb);
		},
		function issueToken(usrData, cb)  {
			// send the existing token or issue a new token
			var  userID = usrData.GrpUser_id;
				 
			//tokenUtil.findToken(rt.app.CApp_id, userID, rt.remoteAddr, function(err, tknData)  {
			tokenUtil.tokenExist(rt.app.CApp_id, userID, function(err, tknData)  {
				if (err)
					return cb( userUtil.internErr() );
				
				if (tknData)  {
					if (usrData.multiLogin)  {
						var  udata = {
								userID: userID,
								dspName: usrData.dspName
							 },
							 tkn = {
								token: rt.uPro.token.substring(0, 16) + tknData.token,
								validTo: tknData.tknExpire
							 };

						cb(null, udata, tkn);
					}
					else
						userUtil.destroyToken(usrData.GrpUser_id, null, function(err) {
							if (err)
								cb( userUtil.internErr() );
							else
								newToken(usrData, rt, cb);
						});
				}
				else
					newToken(usrData, rt, cb);
			});
		}
	],
	function(err, usrData, tknData) {
		if (err)
			cb(err);
		else  {
			var  result = {
					code: 0,
					message: 'Ok',
					value: usrData,
					token: tknData
				 };
			cb( result );
		}
	});
};


function  newToken(usrData, rt, cb)  {
	var  digest = rt.uPro.token.substring(0, 16),
		 randomNum = tokenUtil.random(),
		 token = digest + randomNum,
		 tknValid = Date.now() + _tsWindow,
		 usrID = usrData.GrpUser_id;
		 
	tokenUtil.recordToken(rt.app.CApp_id, usrID, randomNum, tknValid, rt.remoteAddr, function(err)  {
		if (err)
			return( userUtil.internErr() );
		
		cb(null, {userID: usrID, dspName: usrData.dspName}, {token: token, validTo: tknValid});
	});
};