aloux-iam 0.0.20 → 0.0.21

package/lib/auth.js

@@ -1,91 +1,91 @@
-const jwt = require('jsonwebtoken')
-const User = require('./models/User')
-const Permission = require('./models/Permission')
-
-const getAccess = (user, resource) => {
-    for(let i in user._functions){
-        for(let j in user._functions[i]._permissions){
-            if(user._functions[i]._permissions[j].status === 'Activo'){
-                const permissionBack = user._functions[i]._permissions[j].method + ' ' + user._functions[i]._permissions[j].endpoint
-                if(permissionBack === resource.method + ' ' + resource.endpoint){
-                    return true
-                }
-            }
-        }
-    }
-    return false
-}
-
-const auth = async(req, res, next) => {
-
-    try {
-        
-        let token = req.cookies.token || req.header('Authorization')
-
-        if (!token) {
-            throw {
-                code: 401,
-                title: 'Error de autenticación',
-                detail: 'Endpoint requiere token',
-                suggestion: 'Vuelve a iniciar sesion',
-                error: new Error()
-              }
-        }
-
-        token = token.replace('Bearer ', '')
-
-        const data = jwt.verify(token, process.env.AUTH_SECRET)
-        const user = await User.findOne({ _id: data._id, 'tokens.token': token, status: 'Activo' }, {"tokens":0,pwd:0}).populate({ path: "_functions", populate: [{ path: "_permissions"}] }).lean()
-        
-        if (!user) {
-            throw {
-                code: 401,
-                title: 'Error de autenticación',
-                detail: 'No se encontró el usuario',
-                suggestion: 'Vuelve a iniciar sesion',
-                error: new Error()
-              }
-        }
-
-        const resource = await Permission.findOne({ method: req.originalMethod, endpoint: req.route.path }).lean()
-        if(!resource){
-            throw {
-                code: 403,
-                title: 'Error de recurso',
-                detail: 'No se encontro  dado de alta el privilegio del endpoint: [' + req.route.path + ']',
-                suggestion: 'Contacta con el administrador',
-                error: new Error()
-              }
-        }
-
-        if(!resource.default){
-            const access = getAccess(user, resource)
-            if (!access) {
-                throw {
-                    code: 403,
-                    title: 'Error de permisos',
-                    detail: 'No cuentas con permisos para el recurso [' + resource.api +'] que: ' + (resource ? resource.description : 'Recurso indefinido' ),
-                    suggestion: 'Contacta con el administrador',
-                    error: new Error()
-                  }
-            }
-        }
-
-        req.user = user
-        req.token = token
-        next()
-    } catch (error) {
-        let obj = error
-        if(!error.code){
-            obj = {
-                code: 401,
-                title: 'Error de autenticación',
-                detail: error.message,
-                suggestion: 'Vuelve a iniciar sesion'
-            }
-        }
-        res.status(obj.code).send(obj)
-    }
-}
-
+const jwt = require('jsonwebtoken')
+const User = require('./models/User')
+const Permission = require('./models/Permission')
+
+const getAccess = (user, resource) => {
+    for(let i in user._functions){
+        for(let j in user._functions[i]._permissions){
+            if(user._functions[i]._permissions[j].status === 'Activo'){
+                const permissionBack = user._functions[i]._permissions[j].method + ' ' + user._functions[i]._permissions[j].endpoint
+                if(permissionBack === resource.method + ' ' + resource.endpoint){
+                    return true
+                }
+            }
+        }
+    }
+    return false
+}
+
+const auth = async(req, res, next) => {
+
+    try {
+        
+        let token = req.cookies.token || req.header('Authorization')
+
+        if (!token) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'Endpoint requiere token',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        token = token.replace('Bearer ', '')
+
+        const data = jwt.verify(token, process.env.AUTH_SECRET)
+        const user = await User.findOne({ _id: data._id, 'tokens.token': token, status: 'Activo' }, {"tokens":0,pwd:0}).populate({ path: "_functions", populate: [{ path: "_permissions"}] }).lean()
+        
+        if (!user) {
+            throw {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: 'No se encontró el usuario',
+                suggestion: 'Vuelve a iniciar sesion',
+                error: new Error()
+              }
+        }
+
+        const resource = await Permission.findOne({ method: req.originalMethod, endpoint: req.route.path }).lean()
+        if(!resource){
+            throw {
+                code: 403,
+                title: 'Error de recurso',
+                detail: 'No se encontro  dado de alta el privilegio del endpoint: [' + req.route.path + ']',
+                suggestion: 'Contacta con el administrador',
+                error: new Error()
+              }
+        }
+
+        if(!resource.default){
+            const access = getAccess(user, resource)
+            if (!access) {
+                throw {
+                    code: 403,
+                    title: 'Error de permisos',
+                    detail: 'No cuentas con permisos para el recurso [' + resource.api +'] que: ' + (resource ? resource.description : 'Recurso indefinido' ),
+                    suggestion: 'Contacta con el administrador',
+                    error: new Error()
+                  }
+            }
+        }
+
+        req.user = user
+        req.token = token
+        next()
+    } catch (error) {
+        let obj = error
+        if(!error.code){
+            obj = {
+                code: 401,
+                title: 'Error de autenticación',
+                detail: error.message,
+                suggestion: 'Vuelve a iniciar sesion'
+            }
+        }
+        res.status(obj.code).send(obj)
+    }
+}
+
 module.exports = auth

package/lib/config/utils.js

@@ -1,14 +1,14 @@
-const self = module.exports
-
-self.responseError = async (res, error) => {
-    let obj = error
-    if(!error.code){
-        obj = {
-            code: 400,
-            title: 'Error',
-            detail: error.message,
-            suggestion: 'Revisar el detalle'
-        }
-    }
-    res.status(obj.code).send(obj)
+const self = module.exports
+
+self.responseError = async (res, error) => {
+    let obj = error
+    if(!error.code){
+        obj = {
+            code: 400,
+            title: 'Error',
+            detail: error.message,
+            suggestion: 'Revisar el detalle'
+        }
+    }
+    res.status(obj.code).send(obj)
 }

package/lib/controllers/auth.js

@@ -1,148 +1,148 @@
-const Auth = require('../services/auth')
-const utils = require('../config/utils')
-
-const self = module.exports
-
-self.email = async (req, res) => {
-    try {
-        const response = await Auth.searchEmail(req.body.email)
-        res.status(200).send({ email: response })
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.login = async (req, res) => {
-    try {
-        const response = await Auth.login(req.body, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.logout = async (req, res) => {
-    try {
-        await Auth.logout(req, res)
-        res.status(200).send()
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.logoutAll = async (req, res) => {
-    try {
-        await Auth.logoutAll(req.body)
-        res.status(200).send()
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.me = async (req, res) => {
-    try {
-        const response = await Auth.me(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.resetPass = async (req, res) => {
-    try {
-        const response = await Auth.resetPass(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.updateAny = async (req, res) => {
-    try {
-        const response = await Auth.updateAny(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.recoverpassword = async (req, res) => {
-    try {
-        await Auth.recoverpassword(req, res)
-        res.status(200).send()
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.verifyCode = async (req, res) => {
-    try {
-        await Auth.verifyCode(req, res)
-        res.status(200).send()
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.resetPassword = async (req, res) => {
-    try {
-        const response = await Auth.resetPassword(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.sendVerifyMailAccount = async (req, res) => {
-    try {
-        await Auth.sendVerifyMailAccountJob(req, true)
-        res.status(200).send()
-    }catch(error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.verifyMailTokenAccount = async (req, res) => {
-    try {
-        const response = await Auth.verifyMailTokenAccount(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.updatePicture = async (req, res) => {
-    try {
-        const response = await Auth.updatePicture(req, res)
-        res.status(202).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.verifyPhone = async (req, res) => {
-    try {
-        await Auth.verifyPhone(req, res)
-        res.status(200).send()
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.validatePhone = async (req, res) => {
-    try {
-        const response = await Auth.validatePhone(req, res)
-        res.status(200).send(response)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
-}
-
-self.createCustomer = async (req, res) => {
-    try {
-        let token = await Auth.createCustomer(req, res)
-        res.status(201).send(token)
-    } catch (error) {
-        await utils.responseError(res,error)
-    }
+const Auth = require('../services/auth')
+const utils = require('../config/utils')
+
+const self = module.exports
+
+self.email = async (req, res) => {
+    try {
+        const response = await Auth.searchEmail(req.body.email)
+        res.status(200).send({ email: response })
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.login = async (req, res) => {
+    try {
+        const response = await Auth.login(req.body, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.logout = async (req, res) => {
+    try {
+        await Auth.logout(req, res)
+        res.status(200).send()
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.logoutAll = async (req, res) => {
+    try {
+        await Auth.logoutAll(req.body)
+        res.status(200).send()
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.me = async (req, res) => {
+    try {
+        const response = await Auth.me(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.resetPass = async (req, res) => {
+    try {
+        const response = await Auth.resetPass(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.updateAny = async (req, res) => {
+    try {
+        const response = await Auth.updateAny(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.recoverpassword = async (req, res) => {
+    try {
+        await Auth.recoverpassword(req, res)
+        res.status(200).send()
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.verifyCode = async (req, res) => {
+    try {
+        await Auth.verifyCode(req, res)
+        res.status(200).send()
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.resetPassword = async (req, res) => {
+    try {
+        const response = await Auth.resetPassword(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.sendVerifyMailAccount = async (req, res) => {
+    try {
+        await Auth.sendVerifyMailAccountJob(req, true)
+        res.status(200).send()
+    }catch(error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.verifyMailTokenAccount = async (req, res) => {
+    try {
+        const response = await Auth.verifyMailTokenAccount(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.updatePicture = async (req, res) => {
+    try {
+        const response = await Auth.updatePicture(req, res)
+        res.status(202).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.verifyPhone = async (req, res) => {
+    try {
+        await Auth.verifyPhone(req, res)
+        res.status(200).send()
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.validatePhone = async (req, res) => {
+    try {
+        const response = await Auth.validatePhone(req, res)
+        res.status(200).send(response)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
+}
+
+self.createCustomer = async (req, res) => {
+    try {
+        let token = await Auth.createCustomer(req, res)
+        res.status(201).send(token)
+    } catch (error) {
+        await utils.responseError(res,error)
+    }
 }

package/lib/controllers/functions.js

@@ -1,87 +1,87 @@
-const Functions = require('../models/Functions')
-const user          = require('./user')
-const self = module.exports
-
-self.create = async (req, res) => {
-    try {
-        const functions = new Functions(req.body)
-        functions.createdAt = (new Date()).getTime()
-        functions.status = 'Activo'
-        await functions.save()
-        res.status(201).send(functions)
-    } catch (error) {
-        console.log(error)
-        res.status(400).send({error:error.message})
-    }
-}
-
-self.update = async (req, resp) => {
-    try {
-        await (new Functions(req.body)).validate()
-        const count = await Functions.findOne({_id:req.params.FUNCTION_ID}).countDocuments()
-        if(!count)
-            throw new Error('Upss! No se encontró el registro')
-            req.body.lastUpdate = (new Date()).getTime()
-        const result = await Functions.updateOne({_id:req.params.FUNCTION_ID}, req.body)
-        resp.status(200).send(req.body)
-    } catch (error) {
-        resp.status(400).send({error:error.message})
-    }
-}
-self.status = async (req, resp) => {
-    try {
-        const _id = req.params.FUNCTION_ID
-        const functions = await Functions.findOne({ _id })
-        if(!functions)
-            throw new Error('Upss! No se encontró el Elemento')
-            functions.status = req.body.status
-            functions.lastUpdate = (new Date()).getTime()
-        const result = await functions.save()
-        resp.status(200).send(result)
-    } catch (error) {
-        resp.status(400).send({error:error.message})
-    }
-}
-self.retrieve = async(req, res) => {    
-    try {
-        const response = await Functions.find({}).sort({ createdAt:-1 })
-        res.status(200).send(response)
-    } catch (error) {
-        res.status(400).send(error)
-    }
-}
-
-self.get  =  async(req, res) => {    
-    try {
-        const _id = req.params.FUNCTION_ID
-        const functions = await Functions.findOne({ _id }).populate([{ path: "_permissions" },{ path: "_menus" }]).lean()
-        if(!functions)
-        res.status(404).send()
-        res.status(200).send(functions)
-    } catch (error) {
-        res.status(400).send(error)
-    }
-}
-
-self.delete  =  async(req, res) => {    
-    try {
-
-        const _id = req.params.FUNCTION_ID
-        const response = await Functions.deleteOne({ _id })
-        if(!response.deletedCount)
-            res.status(404).send({ error : "El registro no existe"})
-        else
-            res.status(200).send({})
-    } catch (error) {
-        res.status(400).send({error:error.message})
-    }
-}
-
-self.count = async(req, res) => {    
-    try {
-        let result = await Functions.find({}).countDocuments()
-        res.status(200).send({ count: result })
-    } catch (error) {
-        res.status(400).send({error:error.message})
-    }
+const Functions = require('../models/Functions')
+const user          = require('./user')
+const self = module.exports
+
+self.create = async (req, res) => {
+    try {
+        const functions = new Functions(req.body)
+        functions.createdAt = (new Date()).getTime()
+        functions.status = 'Activo'
+        await functions.save()
+        res.status(201).send(functions)
+    } catch (error) {
+        console.log(error)
+        res.status(400).send({error:error.message})
+    }
+}
+
+self.update = async (req, resp) => {
+    try {
+        await (new Functions(req.body)).validate()
+        const count = await Functions.findOne({_id:req.params.FUNCTION_ID}).countDocuments()
+        if(!count)
+            throw new Error('Upss! No se encontró el registro')
+            req.body.lastUpdate = (new Date()).getTime()
+        const result = await Functions.updateOne({_id:req.params.FUNCTION_ID}, req.body)
+        resp.status(200).send(req.body)
+    } catch (error) {
+        resp.status(400).send({error:error.message})
+    }
+}
+self.status = async (req, resp) => {
+    try {
+        const _id = req.params.FUNCTION_ID
+        const functions = await Functions.findOne({ _id })
+        if(!functions)
+            throw new Error('Upss! No se encontró el Elemento')
+            functions.status = req.body.status
+            functions.lastUpdate = (new Date()).getTime()
+        const result = await functions.save()
+        resp.status(200).send(result)
+    } catch (error) {
+        resp.status(400).send({error:error.message})
+    }
+}
+self.retrieve = async(req, res) => {    
+    try {
+        const response = await Functions.find({}).sort({ createdAt:-1 })
+        res.status(200).send(response)
+    } catch (error) {
+        res.status(400).send(error)
+    }
+}
+
+self.get  =  async(req, res) => {    
+    try {
+        const _id = req.params.FUNCTION_ID
+        const functions = await Functions.findOne({ _id }).populate([{ path: "_permissions" },{ path: "_menus" }]).lean()
+        if(!functions)
+        res.status(404).send()
+        res.status(200).send(functions)
+    } catch (error) {
+        res.status(400).send(error)
+    }
+}
+
+self.delete  =  async(req, res) => {    
+    try {
+
+        const _id = req.params.FUNCTION_ID
+        const response = await Functions.deleteOne({ _id })
+        if(!response.deletedCount)
+            res.status(404).send({ error : "El registro no existe"})
+        else
+            res.status(200).send({})
+    } catch (error) {
+        res.status(400).send({error:error.message})
+    }
+}
+
+self.count = async(req, res) => {    
+    try {
+        let result = await Functions.find({}).countDocuments()
+        res.status(200).send({ count: result })
+    } catch (error) {
+        res.status(400).send({error:error.message})
+    }
 }