8032-devToTest_2440 #3009
|
@ -33,7 +33,7 @@ module.exports = Self => {
|
||||||
|
|
||||||
const where = Self.userUses(user);
|
const where = Self.userUses(user);
|
||||||
const vnUser = await Self.findOne({
|
const vnUser = await Self.findOne({
|
||||||
fields: ['id', 'name', 'password', 'active', 'email', 'passExpired', 'twoFactorFk'],
|
fields: ['id', 'name', 'password', 'active', 'email', 'passExpired', 'twoFactor'],
|
||||||
where
|
where
|
||||||
}, myOptions);
|
}, myOptions);
|
||||||
|
|
||||||
|
@ -46,7 +46,7 @@ module.exports = Self => {
|
||||||
await Self.sendTwoFactor(ctx, vnUser, myOptions);
|
await Self.sendTwoFactor(ctx, vnUser, myOptions);
|
||||||
await Self.passExpired(vnUser, myOptions);
|
await Self.passExpired(vnUser, myOptions);
|
||||||
|
|
||||||
if (vnUser.twoFactorFk)
|
if (vnUser.twoFactor)
|
||||||
throw new ForbiddenError(null, 'REQUIRES_2FA');
|
throw new ForbiddenError(null, 'REQUIRES_2FA');
|
||||||
}
|
}
|
||||||
return Self.validateLogin(user, password, ctx);
|
return Self.validateLogin(user, password, ctx);
|
||||||
|
@ -58,13 +58,13 @@ module.exports = Self => {
|
||||||
|
|
||||||
if (vnUser.passExpired && vnUser.passExpired.getTime() <= today.getTime()) {
|
if (vnUser.passExpired && vnUser.passExpired.getTime() <= today.getTime()) {
|
||||||
const err = new UserError('Pass expired', 'passExpired');
|
const err = new UserError('Pass expired', 'passExpired');
|
||||||
err.details = {userId: vnUser.id, twoFactorFk: vnUser.twoFactorFk ? true : false};
|
err.details = {userId: vnUser.id, twoFactor: vnUser.twoFactor ? true : false};
|
||||||
throw err;
|
throw err;
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
Self.sendTwoFactor = async(ctx, vnUser, myOptions) => {
|
Self.sendTwoFactor = async(ctx, vnUser, myOptions) => {
|
||||||
if (vnUser.twoFactorFk === 'email') {
|
if (vnUser.twoFactor === 'email') {
|
||||||
const $ = Self.app.models;
|
const $ = Self.app.models;
|
||||||
|
|
||||||
const min = 100000;
|
const min = 100000;
|
||||||
|
|
|
@ -70,7 +70,7 @@ describe('VnUser Sign-in()', () => {
|
||||||
let error;
|
let error;
|
||||||
try {
|
try {
|
||||||
const options = {transaction: tx};
|
const options = {transaction: tx};
|
||||||
await employee.updateAttribute('twoFactorFk', 'email', options);
|
await employee.updateAttribute('twoFactor', 'email', options);
|
||||||
|
|
||||||
await VnUser.signIn(unAuthCtx, 'employee', 'nightmare', options);
|
await VnUser.signIn(unAuthCtx, 'employee', 'nightmare', options);
|
||||||
await tx.rollback();
|
await tx.rollback();
|
||||||
|
|
|
@ -25,8 +25,8 @@ module.exports = Self => {
|
||||||
type: 'string',
|
type: 'string',
|
||||||
description: 'The user lang'
|
description: 'The user lang'
|
||||||
}, {
|
}, {
|
||||||
arg: 'twoFactorFk',
|
arg: 'twoFactor',
|
||||||
type: 'any',
|
type: 'string',
|
||||||
description: 'The user twoFactor'
|
description: 'The user twoFactor'
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
|
@ -36,8 +36,8 @@ module.exports = Self => {
|
||||||
}
|
}
|
||||||
});
|
});
|
||||||
|
|
||||||
Self.updateUser = async(ctx, id, name, nickname, email, lang, twoFactorFk) => {
|
Self.updateUser = async(ctx, id, name, nickname, email, lang, twoFactor) => {
|
||||||
await Self.userSecurity(ctx, id);
|
await Self.userSecurity(ctx, id);
|
||||||
await Self.upsertWithWhere({id}, {name, nickname, email, lang, twoFactorFk});
|
await Self.upsertWithWhere({id}, {name, nickname, email, lang, twoFactor});
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
|
@ -55,7 +55,7 @@ module.exports = Self => {
|
||||||
throw new UserError('Invalid or expired verification code');
|
throw new UserError('Invalid or expired verification code');
|
||||||
|
|
||||||
const user = await Self.findById(authCode.userFk, {
|
const user = await Self.findById(authCode.userFk, {
|
||||||
fields: ['name', 'twoFactorFk']
|
fields: ['name', 'twoFactor']
|
||||||
}, myOptions);
|
}, myOptions);
|
||||||
|
|
||||||
if (user.name.toLowerCase() !== username.toLowerCase())
|
if (user.name.toLowerCase() !== username.toLowerCase())
|
||||||
|
|
|
@ -58,6 +58,9 @@
|
||||||
},
|
},
|
||||||
"passExpired": {
|
"passExpired": {
|
||||||
"type": "date"
|
"type": "date"
|
||||||
|
},
|
||||||
|
"twoFactor": {
|
||||||
|
"type": "string"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"relations": {
|
"relations": {
|
||||||
|
@ -86,11 +89,6 @@
|
||||||
"type": "hasOne",
|
"type": "hasOne",
|
||||||
"model": "UserConfig",
|
"model": "UserConfig",
|
||||||
"foreignKey": "userFk"
|
"foreignKey": "userFk"
|
||||||
},
|
|
||||||
"twoFactor": {
|
|
||||||
"type": "belongsTo",
|
|
||||||
"model": "TwoFactorType",
|
|
||||||
"foreignKey": "twoFactorFk"
|
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"acls": [
|
"acls": [
|
||||||
|
@ -168,7 +166,7 @@
|
||||||
"realm",
|
"realm",
|
||||||
"email",
|
"email",
|
||||||
"emailVerified",
|
"emailVerified",
|
||||||
"twoFactorFk"
|
"twoFactor"
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
@ -7,10 +7,10 @@ BEGIN
|
||||||
UPDATE vn.department_recalc SET isChanged = TRUE;
|
UPDATE vn.department_recalc SET isChanged = TRUE;
|
||||||
END IF;
|
END IF;
|
||||||
|
|
||||||
IF !(OLD.twoFactorFk <=> NEW.twoFactorFk) THEN
|
IF !(OLD.twoFactor <=> NEW.twoFactor) THEN
|
||||||
UPDATE account.user u
|
UPDATE account.user u
|
||||||
JOIN vn.workerDepartment wd ON wd.workerFk = u.id
|
JOIN vn.workerDepartment wd ON wd.workerFk = u.id
|
||||||
SET u.twoFactorFk = NEW.twoFactorFk
|
SET u.twoFactor = NEW.twoFactor
|
||||||
WHERE wd.departmentFk = NEW.id;
|
WHERE wd.departmentFk = NEW.id;
|
||||||
END IF;
|
END IF;
|
||||||
END$$
|
END$$
|
||||||
|
|
|
@ -4,23 +4,23 @@ CREATE OR REPLACE TABLE account.twoFactorType (
|
||||||
PRIMARY KEY (`code`)
|
PRIMARY KEY (`code`)
|
||||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb3 COLLATE=utf8mb3_unicode_ci;
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb3 COLLATE=utf8mb3_unicode_ci;
|
||||||
|
|
||||||
ALTER TABLE account.user ADD twoFactorFk varchar(20) NULL;
|
ALTER TABLE account.user ADD twoFactor varchar(20) NULL;
|
||||||
ALTER TABLE account.user ADD CONSTRAINT user_twoFactor_fk FOREIGN KEY (twoFactorFk) REFERENCES account.twoFactorType(code) ON DELETE CASCADE ON UPDATE CASCADE;
|
ALTER TABLE account.user ADD CONSTRAINT user_twoFactor_fk FOREIGN KEY (twoFactor) REFERENCES account.twoFactorType(code) ON DELETE CASCADE ON UPDATE CASCADE;
|
||||||
|
|
||||||
ALTER TABLE vn.department ADD twoFactorFk varchar(20) NULL;
|
ALTER TABLE vn.department ADD twoFactor varchar(20) NULL;
|
||||||
ALTER TABLE vn.department ADD CONSTRAINT department_twoFactor_fk FOREIGN KEY (twoFactorFk) REFERENCES account.twoFactorType(code) ON DELETE CASCADE ON UPDATE CASCADE;
|
ALTER TABLE vn.department ADD CONSTRAINT department_twoFactor_fk FOREIGN KEY (twoFactor) REFERENCES account.twoFactorType(code) ON DELETE CASCADE ON UPDATE CASCADE;
|
||||||
|
|
||||||
INSERT INTO account.twoFactorType (code, description)
|
INSERT INTO account.twoFactorType (code, description)
|
||||||
VALUES('email', 'Envia un código por email');
|
VALUES('email', 'Envia un código por email');
|
||||||
|
|
||||||
UPDATE account.`user` u
|
UPDATE account.`user` u
|
||||||
JOIN account.`user` u2 ON u.id = u2.id
|
JOIN account.`user` u2 ON u.id = u2.id
|
||||||
SET u.twoFactorFk = u.twoFactor
|
SET u.twoFactor = u.twoFactor
|
||||||
WHERE u2.twoFactor IS NOT NULL;
|
WHERE u2.twoFactor IS NOT NULL;
|
||||||
|
|
||||||
UPDATE vn.`department` d
|
UPDATE vn.`department` d
|
||||||
JOIN vn.`department` d2 ON d.id = d2.id
|
JOIN vn.`department` d2 ON d.id = d2.id
|
||||||
SET d.twoFactorFk = d.twoFactor
|
SET d.twoFactor = d.twoFactor
|
||||||
WHERE d2.twoFactor IS NOT NULL;
|
WHERE d2.twoFactor IS NOT NULL;
|
||||||
|
|
||||||
ALTER TABLE account.user CHANGE twoFactor twoFactor__ enum('email') CHARACTER SET utf8mb3 COLLATE utf8mb3_unicode_ci DEFAULT NULL NULL COMMENT 'Deprecated 2024-09-09';
|
ALTER TABLE account.user CHANGE twoFactor twoFactor__ enum('email') CHARACTER SET utf8mb3 COLLATE utf8mb3_unicode_ci DEFAULT NULL NULL COMMENT 'Deprecated 2024-09-09';
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
autocomplete="false">
|
autocomplete="false">
|
||||||
</vn-textfield>
|
</vn-textfield>
|
||||||
<vn-textfield
|
<vn-textfield
|
||||||
ng-if="$ctrl.$state.params.twoFactorFk == 'true'"
|
ng-if="$ctrl.$state.params.twoFactor == 'true'"
|
||||||
label="Verification code"
|
label="Verification code"
|
||||||
ng-model="$ctrl.code"
|
ng-model="$ctrl.code"
|
||||||
vn-name="code"
|
vn-name="code"
|
||||||
|
|
|
@ -37,13 +37,13 @@ module.exports = Self => {
|
||||||
Object.assign(myOptions, options);
|
Object.assign(myOptions, options);
|
||||||
|
|
||||||
const {VnUser} = Self.app.models;
|
const {VnUser} = Self.app.models;
|
||||||
const user = await VnUser.findById(userId, {fields: ['name', 'twoFactorFk']}, myOptions);
|
const user = await VnUser.findById(userId, {fields: ['name', 'twoFactor']}, myOptions);
|
||||||
await user.hasPassword(oldPassword);
|
await user.hasPassword(oldPassword);
|
||||||
|
|
||||||
if (oldPassword == newPassword)
|
if (oldPassword == newPassword)
|
||||||
throw new UserError(`You can not use the same password`);
|
throw new UserError(`You can not use the same password`);
|
||||||
|
|
||||||
if (user.twoFactorFk)
|
if (user.twoFactor)
|
||||||
await VnUser.validateCode(user.name, code, myOptions);
|
await VnUser.validateCode(user.name, code, myOptions);
|
||||||
|
|
||||||
await VnUser.changePassword(userId, oldPassword, newPassword, myOptions);
|
await VnUser.changePassword(userId, oldPassword, newPassword, myOptions);
|
||||||
|
|
|
@ -75,7 +75,7 @@ describe('account changePassword()', () => {
|
||||||
await models.VnUser.updateAll(
|
await models.VnUser.updateAll(
|
||||||
{id: 70},
|
{id: 70},
|
||||||
{
|
{
|
||||||
twoFactorFk: 'email',
|
twoFactor: 'email',
|
||||||
passExpired: yesterday
|
passExpired: yesterday
|
||||||
}
|
}
|
||||||
, options);
|
, options);
|
||||||
|
|
|
@ -50,9 +50,6 @@
|
||||||
"SipConfig": {
|
"SipConfig": {
|
||||||
"dataSource": "vn"
|
"dataSource": "vn"
|
||||||
},
|
},
|
||||||
"TwoFactorType": {
|
|
||||||
"dataSource": "vn"
|
|
||||||
},
|
|
||||||
"UserLog": {
|
"UserLog": {
|
||||||
"dataSource": "vn"
|
"dataSource": "vn"
|
||||||
},
|
},
|
||||||
|
|
|
@ -1,26 +0,0 @@
|
||||||
{
|
|
||||||
"name": "TwoFactorType",
|
|
||||||
"base": "VnModel",
|
|
||||||
"options": {
|
|
||||||
"mysql": {
|
|
||||||
"table": "account.twoFactorType"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"properties": {
|
|
||||||
"code": {
|
|
||||||
"type": "string",
|
|
||||||
"id": true
|
|
||||||
},
|
|
||||||
"description": {
|
|
||||||
"type": "string"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"acls": [
|
|
||||||
{
|
|
||||||
"accessType": "READ",
|
|
||||||
"principalType": "ROLE",
|
|
||||||
"principalId": "$everyone",
|
|
||||||
"permission": "ALLOW"
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
|
@ -38,7 +38,6 @@ fixtures:
|
||||||
- userPassword
|
- userPassword
|
||||||
- accountConfig
|
- accountConfig
|
||||||
- mailConfig
|
- mailConfig
|
||||||
- twoFactorType
|
|
||||||
salix:
|
salix:
|
||||||
- ACL
|
- ACL
|
||||||
- fieldAcl
|
- fieldAcl
|
||||||
|
|
Loading…
Reference in New Issue