joola.io.engine/routes/auth.js

/**
 *  joola.io
 *
 *  Copyright Joola Smart Solutions, Ltd. <info@joo.la>
 *
 *  Licensed under GNU General Public License 3.0 or later.
 *  Some rights reserved. See LICENSE, AUTHORS.
 *
 *  @license GPL-3.0+ <http://spdx.org/licenses/GPL-3.0+>
 */

var
  auth = require('../lib/auth/manager'),
  router = require('./index'),
  utils = require('../lib/shared/utils');

exports.login = {
  name: "login",
  description: "Login to Joola Analytics",
  inputs: {
    "required": ["username", "password"],
    "optional": ["redirect"]
  },
  blockedConnectionTypes: [],

  outputExample: {},
  permission: ['access_system'],
  run: function (req, res) {
    var response = {};
    response.auth = false;
    var user = auth.login(req.params.username, req.params.password);
    if (user)
      response.auth = true;

    return router.responseSuccess(response, req, res);
  }
};

exports.loginSSO = {
  name: "loginSSO",
  description: "SSO Login to Joola Analytics",
  inputs: {
    "required": ["authToken", "username"],
    "optional": [ "password"]
  },
  blockedConnectionTypes: [],

  outputExample: {},
  permission: ['access_system'],
  run: function (req, res) {
    var response = {};
    response.auth = false;

    //TODO: Chceck correct remoteIP prop name
    auth.login(req.params.authToken, req.remoteIP, req.params.username, req.params.password, function (user, token) {
      if (user) {
        response.auth = true;
        response.user = utils.cleanObject(user);
        response['joola-token'] = token;

        router.responseSuccess(response, req, res);
      }
      else {
        connection.error = 'Failed to authenticate request.';
        connection.rawConnection.responseHttpCode = 401;
        router.responseError(new router.AuthErrorTemplate('Failed to authenticate request'), req, res);
      }
    });
  }
};

exports.loginNeeded = {
  name: "loginNeeded",
  description: "Does the instance of Joola Analytics require login.",
  inputs: {
    "required": [],
    "optional": []
  },
  blockedConnectionTypes: [],

  outputExample: {},
  permission: ['access_system'],
  run: function (req, res) {
    var response = {};
    response.needed = joola.config.auth.store != 'none';

    console.log('test');

    router.responseSuccess(response, req, res);
  }
};

exports.getUser = {
  name: "auth.getUser",
  description: "Get the current user assosciated with the session/connection.",
  inputs: {
    "required": [],
    "optional": []
  },
  blockedConnectionTypes: [],
  outputExample: {},
  permission: ['access_system'],
  run: function (req, res) {
    var response = {};
    response.user = null;
    var user = req.user;
    if (user)
      response.user = utils.cleanObject(user);

    router.responseSuccess(response, req, res);
  }
};

exports.logout = {
  name: "logout",
  description: "Logout from Joola Analytics",
  inputs: {
    "required": [],
    "optional": []
  },
  blockedConnectionTypes: [],
  outputExample: {},
  permission: ['access_system'],
  run: function (req, res) {
    /*auth.logout(connection, function () {

     });*/

    router.responseSuccess(null, req, res);
  }
};

exports.checkLogin = {
  name: "checkLogin",
  description: "Check if the session is authenticated.",
  inputs: {
    required: [],
    optional: []
  },
  blockedConnectionTypes: [],
  permission: ['access_system'],
  outputExample: {},
  run: function (req, res) {
    var response = {};
    response.authenticated = false;
    auth.checkLoggedIn(connection, function (session, success) {
      if (success) {
        response.authenticated = true;
        response.session = session;
      }
      router.responseSuccess(response, req, res);
    });
  }
};

exports.checkToken = {
  name: "auth/checkToken",
  description: "Check if the token is valid.",
  inputs: {
    required: ['token'],
    optional: []
  },
  blockedConnectionTypes: [],
  permission: ['access_system'],
  outputExample: {},
  run: function (req, res) {
    var response = {};
    response.authenticated = false;
    auth.checkTokenExist(req.params.token, function (token) {
      if (token) {
        response.authenticated = true;
      }
      router.responseSuccess(response, req, res);
    });
  }
};