@resolveio/server-lib 1.0.0-rc1 → 1.0.0-rc10

package/http/auth.js

@@ -1 +1,472 @@
-"use strict";var __awaiter=this&&this.__awaiter||function(i,o,a,u){return new(a||(a=Promise))(function(e,r){function n(e){try{t(u.next(e))}catch(e){r(e)}}function s(e){try{t(u.throw(e))}catch(e){r(e)}}function t(r){r.done?e(r.value):new a(function(e){e(r.value)}).then(n,s)}t((u=u.apply(i,o||[])).next())})},__generator=this&&this.__generator||function(n,s){var t,i,o,e,a={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return e={next:r(0),throw:r(1),return:r(2)},"function"==typeof Symbol&&(e[Symbol.iterator]=function(){return this}),e;function r(r){return function(e){return function(r){if(t)throw new TypeError("Generator is already executing.");for(;a;)try{if(t=1,i&&(o=2&r[0]?i.return:r[0]?i.throw||((o=i.return)&&o.call(i),0):i.next)&&!(o=o.call(i,r[1])).done)return o;switch(i=0,o&&(r=[2&r[0],o.value]),r[0]){case 0:case 1:o=r;break;case 4:return a.label++,{value:r[1],done:!1};case 5:a.label++,i=r[1],r=[0];continue;case 7:r=a.ops.pop(),a.trys.pop();continue;default:if(!(o=0<(o=a.trys).length&&o[o.length-1])&&(6===r[0]||2===r[0])){a=0;continue}if(3===r[0]&&(!o||r[1]>o[0]&&r[1]<o[3])){a.label=r[1];break}if(6===r[0]&&a.label<o[1]){a.label=o[1],o=r;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(r);break}o[2]&&a.ops.pop(),a.trys.pop();continue}r=s.call(n,a)}catch(e){r=[6,e],i=0}finally{t=o=0}if(5&r[0])throw r[1];return{value:r[0]?r[1]:void 0,done:!0}}([r,e])}}};Object.defineProperty(exports,"__esModule",{value:!0});var user_collection_1=require("../collections/user.collection"),jwt=require("jsonwebtoken"),handlebars=require("handlebars"),method_manager_1=require("../managers/method.manager");function setupAuthRoutes(e,o){var r=this;e.post("/login",function(n,i){return __awaiter(r,void 0,void 0,function(){var t,r;return __generator(this,function(e){switch(e.label){case 0:return n.headers.origin===o.ROOT_URL||n.headers.origin===o.SEC_ROOT_URL?[3,1]:(i.send(JSON.stringify({error:!0,result:"Invalid header"})),[3,5]);case 1:return[4,user_collection_1.Users.findOne({username:n.body.username}).exec()];case 2:return(t=e.sent())?[3,4]:[4,user_collection_1.Users.findOne({email:n.body.username}).exec()];case 3:t=e.sent(),e.label=4;case 4:r=t?t.username:n.body.username,user_collection_1.Users.authenticate()(r,n.body.password,function(e,s,r){if(r)if("TooManyAttemptsError"===r.name){i.send(JSON.stringify({error:!0,result:r.message+".  A password reset link has been sent to your email, please reset your password."})),t.services.forgot_password=jwt.sign({id_user:t._id},o.JWT_SECRET);var n={userToChangePassword:t.fullname,userWhoResetPassword:"DCS System",url:o.ROOT_URL+"/forgot-password/"+t.services.forgot_password+"/"};user_collection_1.Users.updateOne({_id:t._id},{$set:{services:t.services}}).exec(function(e,r){method_manager_1.default.readFile("email-templates/forgot-password.html").then(function(e){var r=handlebars.compile(e);handlebars.registerHelper("equals",function(e,r){return e===r}),method_manager_1.default.sendEmail(t.email,"ResolveIO (DCS) - Forgot Password","",r(n))},function(e){return console.log(e)})})}else i.send(JSON.stringify({error:!0,result:r.message}));else s&&s.active&&s.resetAttempts(function(e,r,n){i.send(JSON.stringify({error:!1,result:{token:jwt.sign({id_user:s._id},o.JWT_SECRET,{expiresIn:7776e6})}}))})}),e.label=5;case 5:return[2]}})})}),e.post("/accessToken",function(r,t){return __awaiter(this,void 0,void 0,function(){return __generator(this,function(e){return r.headers.origin!==o.ROOT_URL&&r.headers.origin!==o.SEC_ROOT_URL&&r.headers.origin!==o.RESOLVEIO_URL&&r.headers.origin!==o.RESOLVEIO_SECONDARY_URL?t.send(JSON.stringify({error:!0,result:"Invalid header"})):"http://localhost:4200"!==o.ROOT_URL?jwt.verify(r.body.refreshToken,o.JWT_SECRET,function(e,r){e?t.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findById(r.id_user).exec().then(function(s){s?s.active?s.resetAttempts(function(e,r,n){s.save(),t.send(JSON.stringify({error:!1,result:{token:jwt.sign({id_user:s._id},o.JWT_SECRET,{expiresIn:2592e5}),user:s}}))}):t.send(JSON.stringify({error:!0,result:"Account is Disabled"})):t.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){t.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))})}):jwt.verify(r.body.refreshToken,o.JWT_SECRET,function(e,r){e?t.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findById(r.id_user).exec().then(function(s){s?s.active?s.resetAttempts(function(e,r,n){s.save(),t.send(JSON.stringify({error:!1,result:{token:jwt.sign({id_user:s._id},o.JWT_SECRET,{expiresIn:2592e5}),user:s}}))}):t.send(JSON.stringify({error:!0,result:"Account is Disabled"})):t.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){t.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))})}),[2]})})}),e.post("/userWithEnrollmentToken",function(n,s){n.headers.origin!==o.ROOT_URL&&n.headers.origin!==o.SEC_ROOT_URL&&n.headers.origin!==o.RESOLVEIO_URL&&n.headers.origin!==o.RESOLVEIO_SECONDARY_URL?s.send(JSON.stringify({error:!0,result:"Invalid header"})):jwt.verify(n.body.enrollmentToken,o.JWT_SECRET,function(e,r){e?s.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findOne({$and:[{_id:r.id_user},{"services.enrollment":n.body.enrollmentToken}]}).select("_id __v username active").exec().then(function(e){e?e.active?s.send(JSON.stringify({error:!1,result:{user:e}})):s.send(JSON.stringify({error:!0,result:"Account is Disabled"})):s.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){s.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))})})}),e.post("/setUserWithEnrollmentToken",function(s,t){var e=this;s.headers.origin!==o.ROOT_URL&&s.headers.origin!==o.SEC_ROOT_URL&&s.headers.origin!==o.RESOLVEIO_URL&&s.headers.origin!==o.RESOLVEIO_SECONDARY_URL?t.send(JSON.stringify({error:!0,result:"Invalid header"})):jwt.verify(s.body.enrollmentToken,o.JWT_SECRET,function(r,n){return __awaiter(e,void 0,void 0,function(){return __generator(this,function(e){return r?t.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findOne({$and:[{_id:n.id_user},{"services.enrollment":s.body.enrollmentToken}]}).exec().then(function(n){n?n.active?n.setPassword(s.body.password,function(e,r){r?(n.services.enrollment="",n.save(),t.send(JSON.stringify({error:!1,result:!0}))):t.send(JSON.stringify({error:!0,result:e}))}):t.send(JSON.stringify({error:!0,result:"Account is Disabled"})):t.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){t.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))}),[2]})})})}),e.post("/userWithForgotPasswordToken",function(n,s){n.headers.origin!==o.ROOT_URL&&n.headers.origin!==o.SEC_ROOT_URL&&n.headers.origin!==o.RESOLVEIO_URL&&n.headers.origin!==o.RESOLVEIO_SECONDARY_URL?s.send(JSON.stringify({error:!0,result:"Invalid header"})):jwt.verify(n.body.forgotPasswordToken,o.JWT_SECRET,function(e,r){e?s.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findOne({$and:[{_id:r.id_user},{"services.forgot_password":n.body.forgotPasswordToken}]}).select("_id __v username active").exec().then(function(e){e?e.active?s.send(JSON.stringify({error:!1,result:{user:e}})):s.send(JSON.stringify({error:!0,result:"Account is Disabled"})):s.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){s.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))})})}),e.post("/setUserWithForgotPasswordToken",function(t,i){var e=this;t.headers.origin!==o.ROOT_URL&&t.headers.origin!==o.SEC_ROOT_URL&&t.headers.origin!==o.RESOLVEIO_URL&&t.headers.origin!==o.RESOLVEIO_SECONDARY_URL?i.send(JSON.stringify({error:!0,result:"Invalid header"})):jwt.verify(t.body.forgotPasswordToken,o.JWT_SECRET,function(r,n){return __awaiter(e,void 0,void 0,function(){return __generator(this,function(e){return r?i.send(JSON.stringify({error:!0,result:"Invalid Token"})):user_collection_1.Users.findOne({$and:[{_id:n.id_user},{"services.forgot_password":t.body.forgotPasswordToken}]}).exec().then(function(s){s?s.active?s.setPassword(t.body.password,function(e,r){r?(s.services.forgot_password="",s.resetAttempts(function(e,r,n){s.save()}),i.send(JSON.stringify({error:!1,result:!0}))):i.send(JSON.stringify({error:!0,result:e}))}):i.send(JSON.stringify({error:!0,result:"Account is Disabled"})):i.send(JSON.stringify({error:!0,result:"Invalid User"}))},function(e){i.send(JSON.stringify({error:!0,result:"Invalid Mongoose Get User"}))}),[2]})})})})}exports.setupAuthRoutes=setupAuthRoutes;
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var user_collection_1 = require("../collections/user.collection");
+var jwt = require("jsonwebtoken");
+var handlebars = require("handlebars");
+var __1 = require("..");
+function setupAuthRoutes(mainServer, app, serverConfig) {
+    var _this = this;
+    // Login via HTTP, return refresh token if authenticated
+    app.post('/login', function (request, response) { return __awaiter(_this, void 0, void 0, function () {
+        var user_1, username;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    if (!(request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'])) return [3 /*break*/, 1];
+                    response.send(JSON.stringify({
+                        error: true,
+                        result: 'Invalid header'
+                    }));
+                    return [3 /*break*/, 5];
+                case 1: return [4 /*yield*/, user_collection_1.Users.findOne({ username: request.body.username }).exec()];
+                case 2:
+                    user_1 = _a.sent();
+                    if (!!user_1) return [3 /*break*/, 4];
+                    return [4 /*yield*/, user_collection_1.Users.findOne({ email: request.body.username }).exec()];
+                case 3:
+                    user_1 = _a.sent();
+                    _a.label = 4;
+                case 4:
+                    username = user_1 ? user_1.username : request.body.username;
+                    user_collection_1.Users.authenticate()(username, request.body.password, function (err, res, error) {
+                        if (error) {
+                            if (error.name === 'TooManyAttemptsError') {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: error.message + '.  A password reset link has been sent to your email, please reset your password.'
+                                }));
+                                user_1.services.forgot_password = jwt.sign({ id_user: user_1._id }, serverConfig['JWT_SECRET']);
+                                var emailData_1 = {
+                                    userToChangePassword: user_1.fullname,
+                                    userWhoResetPassword: __1.ResolveIOServer.getClientName() + ' System',
+                                    url: serverConfig['ROOT_URL'] + '/forgot-password/' + user_1.services.forgot_password + '/'
+                                };
+                                user_collection_1.Users.updateOne({ _id: user_1._id }, { $set: { services: user_1.services } }).exec(function (errUp, resUp) {
+                                    mainServer.getMethodManager().readFile('email-templates/forgot-password.html').then(function (html) {
+                                        var template = handlebars.compile(html);
+                                        handlebars.registerHelper('equals', function (a, b) {
+                                            return a === b;
+                                        });
+                                        mainServer.getMethodManager().sendEmail(user_1.email, 'ResolveIO (' + __1.ResolveIOServer.getClientName() + ') - Forgot Password', '', template(emailData_1));
+                                    }, function (errEmail) { return console.log(errEmail); });
+                                });
+                            }
+                            else {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: error.message
+                                }));
+                            }
+                        }
+                        else {
+                            if (res && res.active) {
+                                res.resetAttempts(function (errAt, resAt, errorAt) {
+                                    response.send(JSON.stringify({
+                                        error: false,
+                                        result: {
+                                            token: jwt.sign({ id_user: res._id }, serverConfig['JWT_SECRET'], {
+                                                expiresIn: 90 * 24 * 60 * 60 * 1000 // 90 days
+                                            })
+                                        }
+                                    }));
+                                });
+                            }
+                        }
+                    });
+                    _a.label = 5;
+                case 5: return [2 /*return*/];
+            }
+        });
+    }); });
+    app.post('/accessToken', function (request, response) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                if (request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_SECONDARY_URL']) {
+                    response.send(JSON.stringify({
+                        error: true,
+                        result: 'Invalid header'
+                    }));
+                }
+                else {
+                    if (serverConfig['ROOT_URL'] !== 'http://localhost:4200') {
+                        jwt.verify(request.body.refreshToken, serverConfig['JWT_SECRET'], function (err, decoded) {
+                            if (err) {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Invalid Token'
+                                }));
+                            }
+                            else {
+                                user_collection_1.Users.findById(decoded['id_user']).exec().then(function (user) {
+                                    if (user) {
+                                        if (user.active) {
+                                            user.resetAttempts(function (errAt, resAt, errorAt) {
+                                                user.save();
+                                                response.send(JSON.stringify({
+                                                    error: false,
+                                                    result: {
+                                                        token: jwt.sign({ id_user: user._id }, serverConfig['JWT_SECRET'], {
+                                                            expiresIn: 3 * 24 * 60 * 60 * 1000 // 3 days
+                                                        }),
+                                                        user: user
+                                                    }
+                                                }));
+                                            });
+                                        }
+                                        else {
+                                            response.send(JSON.stringify({
+                                                error: true,
+                                                result: 'Account is Disabled'
+                                            }));
+                                        }
+                                    }
+                                    else {
+                                        response.send(JSON.stringify({
+                                            error: true,
+                                            result: 'Invalid User'
+                                        }));
+                                    }
+                                }, function (error) {
+                                    response.send(JSON.stringify({
+                                        error: true,
+                                        result: 'Invalid Mongoose Get User'
+                                    }));
+                                });
+                            }
+                        });
+                    }
+                    else {
+                        jwt.verify(request.body.refreshToken, serverConfig['JWT_SECRET'], function (err, decoded) {
+                            if (err) {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Invalid Token'
+                                }));
+                            }
+                            else {
+                                user_collection_1.Users.findById(decoded['id_user']).exec().then(function (user) {
+                                    if (user) {
+                                        if (user.active) {
+                                            user.resetAttempts(function (errAt, resAt, errorAt) {
+                                                user.save();
+                                                response.send(JSON.stringify({
+                                                    error: false,
+                                                    result: {
+                                                        token: jwt.sign({ id_user: user._id }, serverConfig['JWT_SECRET'], {
+                                                            expiresIn: 3 * 24 * 60 * 60 * 1000 // 3 days
+                                                        }),
+                                                        user: user
+                                                    }
+                                                }));
+                                            });
+                                        }
+                                        else {
+                                            response.send(JSON.stringify({
+                                                error: true,
+                                                result: 'Account is Disabled'
+                                            }));
+                                        }
+                                    }
+                                    else {
+                                        response.send(JSON.stringify({
+                                            error: true,
+                                            result: 'Invalid User'
+                                        }));
+                                    }
+                                }, function (error) {
+                                    response.send(JSON.stringify({
+                                        error: true,
+                                        result: 'Invalid Mongoose Get User'
+                                    }));
+                                });
+                            }
+                        });
+                    }
+                }
+                return [2 /*return*/];
+            });
+        });
+    });
+    app.post('/userWithEnrollmentToken', function (request, response) {
+        if (request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_SECONDARY_URL']) {
+            response.send(JSON.stringify({
+                error: true,
+                result: 'Invalid header'
+            }));
+        }
+        else {
+            jwt.verify(request.body.enrollmentToken, serverConfig['JWT_SECRET'], function (err, decoded) {
+                if (err) {
+                    response.send(JSON.stringify({
+                        error: true,
+                        result: 'Invalid Token'
+                    }));
+                }
+                else {
+                    user_collection_1.Users.findOne({
+                        $and: [
+                            { _id: decoded['id_user'] },
+                            { 'services.enrollment': request.body.enrollmentToken }
+                        ]
+                    }).select('_id __v username active').exec().then(function (user) {
+                        if (user) {
+                            if (user.active) {
+                                response.send(JSON.stringify({
+                                    error: false,
+                                    result: {
+                                        user: user
+                                    }
+                                }));
+                            }
+                            else {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Account is Disabled'
+                                }));
+                            }
+                        }
+                        else {
+                            response.send(JSON.stringify({
+                                error: true,
+                                result: 'Invalid User'
+                            }));
+                        }
+                    }, function (error) {
+                        response.send(JSON.stringify({
+                            error: true,
+                            result: 'Invalid Mongoose Get User'
+                        }));
+                    });
+                }
+            });
+        }
+    });
+    app.post('/setUserWithEnrollmentToken', function (request, response) {
+        var _this = this;
+        if (request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_SECONDARY_URL']) {
+            response.send(JSON.stringify({
+                error: true,
+                result: 'Invalid header'
+            }));
+        }
+        else {
+            jwt.verify(request.body.enrollmentToken, serverConfig['JWT_SECRET'], function (err, decoded) { return __awaiter(_this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    if (err) {
+                        response.send(JSON.stringify({
+                            error: true,
+                            result: 'Invalid Token'
+                        }));
+                    }
+                    else {
+                        user_collection_1.Users.findOne({
+                            $and: [
+                                { _id: decoded['id_user'] },
+                                { 'services.enrollment': request.body.enrollmentToken }
+                            ]
+                        }).exec().then(function (user) {
+                            if (user) {
+                                if (user.active) {
+                                    user.setPassword(request.body.password, function (errSet, resSet) {
+                                        if (resSet) {
+                                            user.services.enrollment = '';
+                                            user.save();
+                                            response.send(JSON.stringify({
+                                                error: false,
+                                                result: true
+                                            }));
+                                        }
+                                        else {
+                                            response.send(JSON.stringify({
+                                                error: true,
+                                                result: errSet
+                                            }));
+                                        }
+                                    });
+                                }
+                                else {
+                                    response.send(JSON.stringify({
+                                        error: true,
+                                        result: 'Account is Disabled'
+                                    }));
+                                }
+                            }
+                            else {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Invalid User'
+                                }));
+                            }
+                        }, function (error) {
+                            response.send(JSON.stringify({
+                                error: true,
+                                result: 'Invalid Mongoose Get User'
+                            }));
+                        });
+                    }
+                    return [2 /*return*/];
+                });
+            }); });
+        }
+    });
+    app.post('/userWithForgotPasswordToken', function (request, response) {
+        if (request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_SECONDARY_URL']) {
+            response.send(JSON.stringify({
+                error: true,
+                result: 'Invalid header'
+            }));
+        }
+        else {
+            jwt.verify(request.body.forgotPasswordToken, serverConfig['JWT_SECRET'], function (err, decoded) {
+                if (err) {
+                    response.send(JSON.stringify({
+                        error: true,
+                        result: 'Invalid Token'
+                    }));
+                }
+                else {
+                    user_collection_1.Users.findOne({
+                        $and: [
+                            { _id: decoded['id_user'] },
+                            { 'services.forgot_password': request.body.forgotPasswordToken }
+                        ]
+                    }).select('_id __v username active').exec().then(function (user) {
+                        if (user) {
+                            if (user.active) {
+                                response.send(JSON.stringify({
+                                    error: false,
+                                    result: {
+                                        user: user
+                                    }
+                                }));
+                            }
+                            else {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Account is Disabled'
+                                }));
+                            }
+                        }
+                        else {
+                            response.send(JSON.stringify({
+                                error: true,
+                                result: 'Invalid User'
+                            }));
+                        }
+                    }, function (error) {
+                        response.send(JSON.stringify({
+                            error: true,
+                            result: 'Invalid Mongoose Get User'
+                        }));
+                    });
+                }
+            });
+        }
+    });
+    app.post('/setUserWithForgotPasswordToken', function (request, response) {
+        var _this = this;
+        if (request.headers.origin !== serverConfig['ROOT_URL'] && request.headers.origin !== serverConfig['SEC_ROOT_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_URL'] && request.headers.origin !== serverConfig['RESOLVEIO_SECONDARY_URL']) {
+            response.send(JSON.stringify({
+                error: true,
+                result: 'Invalid header'
+            }));
+        }
+        else {
+            jwt.verify(request.body.forgotPasswordToken, serverConfig['JWT_SECRET'], function (err, decoded) { return __awaiter(_this, void 0, void 0, function () {
+                return __generator(this, function (_a) {
+                    if (err) {
+                        response.send(JSON.stringify({
+                            error: true,
+                            result: 'Invalid Token'
+                        }));
+                    }
+                    else {
+                        user_collection_1.Users.findOne({
+                            $and: [
+                                { _id: decoded['id_user'] },
+                                { 'services.forgot_password': request.body.forgotPasswordToken }
+                            ]
+                        }).exec().then(function (user) {
+                            if (user) {
+                                if (user.active) {
+                                    user.setPassword(request.body.password, function (errSet, resSet) {
+                                        if (resSet) {
+                                            user.services.forgot_password = '';
+                                            user.resetAttempts(function (errAt, resAtt, errorAtt) {
+                                                user.save();
+                                            });
+                                            response.send(JSON.stringify({
+                                                error: false,
+                                                result: true
+                                            }));
+                                        }
+                                        else {
+                                            response.send(JSON.stringify({
+                                                error: true,
+                                                result: errSet
+                                            }));
+                                        }
+                                    });
+                                }
+                                else {
+                                    response.send(JSON.stringify({
+                                        error: true,
+                                        result: 'Account is Disabled'
+                                    }));
+                                }
+                            }
+                            else {
+                                response.send(JSON.stringify({
+                                    error: true,
+                                    result: 'Invalid User'
+                                }));
+                            }
+                        }, function (error) {
+                            response.send(JSON.stringify({
+                                error: true,
+                                result: 'Invalid Mongoose Get User'
+                            }));
+                        });
+                    }
+                    return [2 /*return*/];
+                });
+            }); });
+        }
+    });
+}
+exports.setupAuthRoutes = setupAuthRoutes;

package/http/health.d.ts

@@ -0,0 +1,2 @@
+export declare function setupHealthRoutes(app: any, serverConfig: any): void;
+//# sourceMappingURL=health.d.ts.map

package/http/health.js

@@ -1 +1,8 @@
-"use strict";function setupHealthRoutes(e,t){e.get("/health",function(e,t){t.sendStatus(200)})}Object.defineProperty(exports,"__esModule",{value:!0}),exports.setupHealthRoutes=setupHealthRoutes;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+function setupHealthRoutes(app, serverConfig) {
+    app.get('/health', function (request, response) {
+        response.sendStatus(200);
+    });
+}
+exports.setupHealthRoutes = setupHealthRoutes;

package/index.d.ts

@@ -0,0 +1,14 @@
+export declare class ResolveIOServer {
+    private static _serverConfig;
+    private static _mainDB;
+    private static _supportDB;
+    private static _mainServer;
+    private static _client;
+    constructor(serverConfig: any, client: string);
+    connectAndRun(serverConfig: any): Promise<void>;
+    static getClientName(): string;
+    static getMainServer(): any;
+    static getMainDB(): any;
+    static getSupportDB(): any;
+}
+//# sourceMappingURL=index.d.ts.map

package/index.js

@@ -1 +1,120 @@
-"use strict";var __awaiter=this&&this.__awaiter||function(i,u,s,a){return new(s||(s=Promise))(function(e,t){function n(e){try{o(a.next(e))}catch(e){t(e)}}function r(e){try{o(a.throw(e))}catch(e){t(e)}}function o(t){t.done?e(t.value):new s(function(e){e(t.value)}).then(n,r)}o((a=a.apply(i,u||[])).next())})},__generator=this&&this.__generator||function(n,r){var o,i,u,e,s={label:0,sent:function(){if(1&u[0])throw u[1];return u[1]},trys:[],ops:[]};return e={next:t(0),throw:t(1),return:t(2)},"function"==typeof Symbol&&(e[Symbol.iterator]=function(){return this}),e;function t(t){return function(e){return function(t){if(o)throw new TypeError("Generator is already executing.");for(;s;)try{if(o=1,i&&(u=2&t[0]?i.return:t[0]?i.throw||((u=i.return)&&u.call(i),0):i.next)&&!(u=u.call(i,t[1])).done)return u;switch(i=0,u&&(t=[2&t[0],u.value]),t[0]){case 0:case 1:u=t;break;case 4:return s.label++,{value:t[1],done:!1};case 5:s.label++,i=t[1],t=[0];continue;case 7:t=s.ops.pop(),s.trys.pop();continue;default:if(!(u=0<(u=s.trys).length&&u[u.length-1])&&(6===t[0]||2===t[0])){s=0;continue}if(3===t[0]&&(!u||t[1]>u[0]&&t[1]<u[3])){s.label=t[1];break}if(6===t[0]&&s.label<u[1]){s.label=u[1],u=t;break}if(u&&s.label<u[2]){s.label=u[2],s.ops.push(t);break}u[2]&&s.ops.pop(),s.trys.pop();continue}t=r.call(n,s)}catch(e){t=[6,e],i=0}finally{o=u=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}([t,e])}}},_this=this;Object.defineProperty(exports,"__esModule",{value:!0});var _mainDB,_supportDB,mongoose=require("mongoose"),serverConfig=require("./settings.json");function getMainDB(){return _mainDB}function getSupportDB(){return _supportDB}exports.getMainDB=getMainDB,exports.getSupportDB=getSupportDB,"http://localhost:4200"!==serverConfig.ROOT_URL?mongoose.createConnection(serverConfig.RESOLVEIO_SUPPORT_MONGO_URL,{useNewUrlParser:!0}).then(function(t){return __awaiter(_this,void 0,void 0,function(){var n=this;return __generator(this,function(e){return _supportDB=t,mongoose.createConnection(serverConfig.MONGO_URL,{useNewUrlParser:!0}).then(function(t){return __awaiter(n,void 0,void 0,function(){return __generator(this,function(e){switch(e.label){case 0:return _mainDB=t,[4,Promise.resolve().then(function(){return require("./server-app")})];case 1:return e.sent().default.init(),[2]}})})},function(e){process.exit()}),[2]})})},function(e){process.exit()}):(_supportDB=null,mongoose.createConnection(serverConfig.MONGO_URL,{useNewUrlParser:!0}).then(function(t){return __awaiter(_this,void 0,void 0,function(){return __generator(this,function(e){switch(e.label){case 0:return _mainDB=t,[4,Promise.resolve().then(function(){return require("./server-app")})];case 1:return e.sent().default.init(),[2]}})})},function(e){process.exit()}));
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var mongoose = require("mongoose");
+// import { ResolveIOMainServer } from './server-app';
+// let serverConfig = require('./settings.json');
+var ResolveIOServer = /** @class */ (function () {
+    function ResolveIOServer(serverConfig, client) {
+        ResolveIOServer._serverConfig = serverConfig;
+        ResolveIOServer._client = client;
+    }
+    ResolveIOServer.prototype.connectAndRun = function (serverConfig) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator(this, function (_a) {
+                if (serverConfig['ROOT_URL'] !== 'http://localhost:4200') {
+                    mongoose.createConnection(serverConfig['RESOLVEIO_SUPPORT_MONGO_URL'], { useNewUrlParser: true }).then(function (db) { return __awaiter(_this, void 0, void 0, function () {
+                        var _this = this;
+                        return __generator(this, function (_a) {
+                            ResolveIOServer._supportDB = db;
+                            mongoose.createConnection(serverConfig['MONGO_URL'], { useNewUrlParser: true }).then(function (dbMain) { return __awaiter(_this, void 0, void 0, function () {
+                                var serverApp;
+                                return __generator(this, function (_a) {
+                                    switch (_a.label) {
+                                        case 0:
+                                            ResolveIOServer._mainDB = dbMain;
+                                            return [4 /*yield*/, Promise.resolve().then(function () { return require('./server-app'); })];
+                                        case 1:
+                                            serverApp = (_a.sent()).default;
+                                            ResolveIOServer._mainServer = new serverApp(this, ResolveIOServer._serverConfig);
+                                            return [2 /*return*/];
+                                    }
+                                });
+                            }); }, function (err) {
+                                process.exit();
+                            });
+                            return [2 /*return*/];
+                        });
+                    }); }, function (err) {
+                        process.exit();
+                    });
+                }
+                else {
+                    ResolveIOServer._supportDB = null;
+                    mongoose.createConnection(serverConfig['MONGO_URL'], { useNewUrlParser: true }).then(function (dbMain) { return __awaiter(_this, void 0, void 0, function () {
+                        var serverApp;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    ResolveIOServer._mainDB = dbMain;
+                                    return [4 /*yield*/, Promise.resolve().then(function () { return require('./server-app'); })];
+                                case 1:
+                                    serverApp = (_a.sent()).default;
+                                    ResolveIOServer._mainServer = new serverApp(this, ResolveIOServer._serverConfig);
+                                    return [2 /*return*/];
+                            }
+                        });
+                    }); }, function (err) {
+                        process.exit();
+                    });
+                }
+                return [2 /*return*/];
+            });
+        });
+    };
+    ResolveIOServer.getClientName = function () {
+        return this._client;
+    };
+    ResolveIOServer.getMainServer = function () {
+        return ResolveIOServer._mainServer;
+    };
+    ResolveIOServer.getMainDB = function () {
+        return ResolveIOServer._mainDB;
+    };
+    ResolveIOServer.getSupportDB = function () {
+        return ResolveIOServer._supportDB;
+    };
+    ResolveIOServer._serverConfig = null;
+    ResolveIOServer._mainDB = null;
+    ResolveIOServer._supportDB = null;
+    ResolveIOServer._mainServer = null;
+    ResolveIOServer._client = '';
+    return ResolveIOServer;
+}());
+exports.ResolveIOServer = ResolveIOServer;
+// export * from './server-app';