free-be-account 0.0.14 → 0.0.15

package/index.js

@@ -51,12 +51,13 @@ const __getServiceList = async (res, filter = { Enabled: true }) => {
                     filter ? {} : {
                         Scope: filter ? undefined: doc.Scope.map(sc => {
                             const dso = res.app.getContainerContent('DataScope').find(ds => ds.Name === sc.Name);
-                            return {
-                                Label: dso ? dso.Label : '',
+                            return dso ? {
+                                Label: dso.Label || '',
                                 Field: `${sc.Name}`,
-                                Type: 'Select',
-                                Options: dso ? dso.Options : []
-                            }
+                                Type: dso.Component || 'Select',
+                                Options: dso.Options || [],
+                                Multiple: dso.Multiple || false,
+                            } : {};
                         })
                     })
                 }
@@ -366,6 +367,7 @@ module.exports = (app) => ({
             Description: { type: 'String' },
             Index: { type: 'Number', required: true },
             IsVirtual: { type: 'Boolean', default: false },
+            Profile: { type: 'Object', default: {} },
 
             Permission: { type: 'Object', default: {} },
         },
@@ -895,9 +897,43 @@ module.exports = (app) => ({
                                 // Password: password,
                                 Enabled: true,
                                 Deleted: false,
-                            }).then((user) => {
+                            }).then(async (user) => {
                                 if (!user) { 
-                                    return done(null, false); 
+                                    // auto create new user
+                                    if (m.config.autoCreateNewUser) {
+                                        const valid_phone = (d) => {
+                                            return /^(0|86|17951)?(13[0-9]|14[0-9]|15[0-9]|16[0-9]|17[0-9]|18[0-9]|19[0-9])[0-9]{8}$/.test(d);
+                                        };
+                                        const valid_email = (d) => {
+                                            // eslint-disable-next-line no-useless-escape
+                                            return /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(d);
+                                        }
+
+                                        const userPhoneEmail = {};
+                                        if (valid_phone(username)) {
+                                            userPhoneEmail.PhoneNumber = username;
+                                        } else if (valid_email(username)) {
+                                            userPhoneEmail['Profile'] = {
+                                                Email: username
+                                            };
+                                        }
+                                        
+                                        const permission = Object.assign({}, m.config.accountDefaultPermissions);
+                                        clearPermission(permission);
+                                        const newU = await app.models['account'].create({
+                                            Saved: true,
+                                            UserName: username,
+                                            Password: '',
+                                            Status: m.config.accountRequireAudit ? AccountAuditStatus.Auditing : AccountAuditStatus.Passed,
+                                            Permission: permission,
+                                            
+                                            // set phone number or email
+                                            ...userPhoneEmail,
+                                        });
+                                        return done(null, newU);
+                                    } else {
+                                        return done(null, false); 
+                                    }
                                 }
 
                                 const pwdVerified = verifyPassword(password, user.Password, m.config.pwdEncryptMethod || 'md5');
@@ -985,12 +1021,19 @@ module.exports = (app) => ({
                         await res.endWithErr(400, 401);
                     }
                     else {
+                        res.clearCookie('token');
                         await res.endWithErr(401);
                     }
 
                     return;
                 }
 
+                // update token in cookies
+                const token = req.cookies.token;
+                if (token) {
+                    res.cookie('token', token, { maxAge: app.config['cookieTimeout'] });
+                }
+                
                 return next();
             });
 
@@ -1127,17 +1170,17 @@ module.exports = (app) => ({
                             { 'Profile.Email': phone },
                         ]});
     
-                        if (req.body.exists && existsCount <= 0) {
+                        if (req.body.exists === true && existsCount <= 0) {
                             res.makeError(409, 'User not exists!', m);
                             return next('route');
                         }
-                        if (!req.body.exists && existsCount > 0) {
+                        if (req.body.exists === false && existsCount > 0) {
                             res.makeError(410, 'User aleady exists!', m);
                             return next('route');
                         }
                     }
 
-                    const result = await m.sms.sendRandom(phone, undefined, true, req.body.smsTemp || 'register');
+                    const result = await m.sms.sendRandom(phone, m.config.smsFormat || undefined, true, req.body.smsTemp || 'register');
 
                     if (!result) {
                         res.makeError(500, 'Failed to send sms!', m);
@@ -1280,8 +1323,13 @@ module.exports = (app) => ({
                     }
 
                     // only create with specified fields
+                    if (m.config.recoverNoSamePwd && verifyPassword(password, req.user.Password, m.config.pwdEncryptMethod || 'md5')) {
+                        res.makeError(406, 'New password cannot be the same as the old one!', m);
+                        return next('route');
+                    }
+
                     res.locals.body = {
-                        Password: encryptPwd(password, m.config.pwdEncryptMethod || 'md5')
+                        Password: encryptPwd(password, m.config.pwdEncryptMethod || 'md5'),
                     }
 
                     res.locals.filter = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "free-be-account",
-  "version": "0.0.14",
+  "version": "0.0.15",
   "main": "index.js",
   "license": "UNLICENSED",
   "repository": {

package/routers/org/route.js

@@ -9,7 +9,8 @@ router.get('/',
             'Name',
             'Index',
             'IsVirtual',
-            'Permission'
+            'Permission',
+            'Profile',
         ];
         res.locals.filter = {
             Parent: req.query.Parent || {

package/routers/uc/info/route.js

@@ -29,6 +29,8 @@ router.get('/', (req, res, next) => {
         Status: user.Status,
 
         StepsDefinition,
+
+        ar: router.mdl.config.accountRequireAudit,
     });
 
     return next();
@@ -61,7 +63,15 @@ router.post('/edit', async (req, res, next) => {
     res.app.modules.account.utils.clearPermission(p);
 
     // TODO: should not use mongoose directly
-    await res.app.models['account'].update({ id: req.user.id }, { $unset: { Status: 0 }, $set: { Permission: p } });
+    const setObj = {
+        $set: { Permission: p }
+    };
+
+    if (router.mdl.config.accountRequireAudit) {
+        Object.assign(setObj, { $unset: { Status: 0 } });
+    }
+
+    await res.app.models['account'].update({ id: req.user.id }, setObj);
 
     res.addData({});
 
@@ -79,14 +89,16 @@ router.post('/submit',
             res.locals.body.Profile = {...user.Profile, ...req.body.Profile};
         }
 
-        res.locals.body.Status = res.app.modules.account.AccountAuditStatus.Auditing;
+        if (router.mdl.config.accountRequireAudit) {
+            res.locals.body.Status = router.mdl.AccountAuditStatus.Auditing;
+        }
 
         // set to default permission 
-        const p = res.app.modules.account.config.accountDefaultPermissions;
+        const p = router.mdl.config.accountDefaultPermissions;
         res.app.modules.account.utils.clearPermission(p);
         res.locals.body.Permission = p;
 
-        res.locals.filters = { id: req.user.id };
+        res.locals.filter = { id: req.user.id };
         res.locals.fields = [
             'Profile',
             'Status',

package/routers/uc/phone/route.js

@@ -63,7 +63,7 @@ router.put('/',
             res.locals.body.UserName = res.locals.body.PhoneNumber;
         }
 
-        res.locals.filters = { id: req.user.id };
+        res.locals.filter = { id: req.user.id };
         res.locals.fields = [
             'PhoneNumber',
             'Password',

package/routers/uc/pwd/route.js

@@ -34,7 +34,7 @@ router.put('/',
         res.locals.body = {};
         res.locals.body.Password = res.app.modules.account.utils.encryptPwd(password, res.app.modules.account.config.pwdEncryptMethod || 'md5');
 
-        res.locals.filters = { id: req.user.id };
+        res.locals.filter = { id: req.user.id };
         res.locals.fields = [
             'password',
         ];

package/sms/index.js

@@ -129,7 +129,13 @@ module.exports = (app) => ({
             t = `${t}_mail`;
         }
 
-        const keys = (global && global.sms && global.sms[t]) || app.modules.account.config.sms.keys[t] || app.modules.account.config.sms.keys;
+        let keys = app.modules.account.config.sms.keys[t] || app.modules.account.config.sms.keys;
+
+        if (!keys.platform) {
+            keys = (global && global.sms && global.sms[t]);
+        }
+        
+        // const keys = (global && global.sms && global.sms[t]) || app.modules.account.config.sms.keys[t] || app.modules.account.config.sms.keys;
         
         if (keys.platform) {
             // should not send too frequent!

package/utils.js

@@ -60,7 +60,7 @@ function clearPermission(perm) {
     return clearP(perm);
 }
 
-function verifyPassword(pwd, storedPwd, method = 'md5') {
+function verifyPassword(pwd, storedPwd = '', method = 'md5') {
     let verified = false;
     let methods = [];
 
@@ -77,7 +77,7 @@ function verifyPassword(pwd, storedPwd, method = 'md5') {
                 verified = verified || (crypto.MD5(pwd) === storedPwd);
                 break;
             case 'sha1':
-                verified = verified || (crypto.sha1(pwd, storedPwd.substr(0, EncryptOptions.saltLength), EncryptOptions.sha1Iteration).toString() === storedPwd.substr(EncryptOptions.saltLength));
+                verified = verified || (crypto.sha1(pwd, storedPwd.substring(0, EncryptOptions.saltLength), EncryptOptions.sha1Iteration).toString() === storedPwd.substr(EncryptOptions.saltLength));
                 break;
             case 'bcrypt':
                 verified = verified || crypto.bcryptVerify(pwd, storedPwd);
@@ -132,6 +132,12 @@ async function saveServiceList (app, clean=false) {
         for (let i = 0; i < Object.keys(perm).length; i += 1) {
             const p = Object.keys(perm)[i];
 
+            // in case the developer didn't provide title and description information
+            perm[p] = perm[p] || {
+                title: p,
+                description: p,
+            };
+
             // TODO: notify user if they are creating permission with these names
             if (['title', 'description', 'scope', 'label'].indexOf(p.toLowerCase()) >= 0) continue;