utils.js ➔ ... ➔ ??? - Code Metrics - Inspection of "Abe users core" - AdFabConnect/abejs - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Pull Request — master (#40)

unknown

created 2016-11-25 15:10 UTC

utils.js ➔ ... ➔ ??? A

↳ Parent: utils.js ➔ isUserAllowedOnRoute

Complexity

Conditions	2
Paths	2

Size

Total Lines

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

Metric	Value
cc	2
nc	2
dl	0
loc	6
rs	9.4285
c	1
b	0
f	0
nop	1

import redis from 'redis'
import Limiter from 'ratelimiter'
import owasp from 'owasp-password-strength-test'
import bcrypt from 'bcrypt-nodejs'
import Cookies from 'cookies'
import jwt from 'jwt-simple'

import {
  User
  ,config
  ,coreUtils
} from '../../cli'

export function checkSameEmail(data) {
  var emailAlreadyUsed = false
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (user.email === data.email && parseInt(user.id) !== parseInt(data.id)) {
      emailAlreadyUsed = true
    }
  }

  if (emailAlreadyUsed === true) {
    return {
      success:0,
      message: 'Email adress already exist'
    }
  }else {
    return {
      success:1
    }
  }
}

export function getRole(data) {
  var roles = config.users.roles
  Array.prototype.forEach.call(roles, (role) => {
    if(role.name === data.role) {
      data.role = role
    }
  })

  return data
}

export function commonPassword(data) {
  var owaspConfig = config.users.owasp
  owasp.config(owaspConfig)
  var sameAsUser = (typeof owaspConfig.sameAsUser !== 'undefined' && owaspConfig.sameAsUser !== null) ? owaspConfig.sameAsUser : true
  var mostCommon = (typeof owaspConfig.mostCommon !== 'undefined' && owaspConfig.mostCommon !== null) ? owaspConfig.mostCommon : true
  var mostCommonPassword = config.users.mostCommonPassword
  owasp.tests.required.push(function(password) {
    if (mostCommon && coreUtils.array.contains(mostCommonPassword, password.toLowerCase())) {
function isBig(a) {
    if (a > 5000) {
        return "yes";
    }
}

console.log(isBig(5001)); //returns yes
console.log(isBig(42)); //returns undefined
      return 'the password used is too common.'
    }
  })

  var currentUserName = data.username
  owasp.tests.required.push(function(password) {
    var username = currentUserName
    var shouldTest = sameAsUser

    if(shouldTest) {
function isBig(a) {
    if (a > 5000) {
        return "yes";
    }
}

console.log(isBig(5001)); //returns yes
console.log(isBig(42)); //returns undefined
      if (password.toLowerCase() === username.toLowerCase()) {
        return 'username and password must be different.'
      }
      if (password.toLowerCase() === username.toLowerCase().split('').reverse().join('')) {
function isBig(a) {
    if (a > 5000) {
        return "yes";
    }
}

console.log(isBig(5001)); //returns yes
console.log(isBig(42)); //returns undefined
        return 'username and password must be different, not just inverted.'
      }
    }
  })

  var res = owasp.test(data.password)

  if(typeof res.errors !== 'undefined' && res.errors !== null
      && res.errors.length > 0) {
    var message = ''
    Array.prototype.forEach.call(res.errors, (error) => {
      message += error + '<br />'
    })
    return {
      success:0,
      message: message
    }
  }else {
    return {
      success:1
    }
  }
}

export function encryptPassword(numb, password) {
  var salt = bcrypt.genSaltSync(numb)
  return bcrypt.hashSync(password, salt)
}

export function getUserRoutes(workflow) {
  var routes = config.users.routes
  var userRoles = []
  Array.prototype.forEach.call(Object.keys(routes), (role) => {
    if(role === workflow) {
      userRoles = routes[role]
    }
  })

  return userRoles
}


export function findSync(id) {
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (parseInt(user.id) === parseInt(id)) {
      return user
    }
  }
  return null
}

export function find(id, done) {
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (parseInt(user.id) === parseInt(id)) {
      return done(null, user)
    }
  }
  return done(null, null)
}

export function findByUsername(username, done) {
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (user.username === username) {
      return done(null, user)
    }
  }
  return done(null, null)
}

export function findByEmail(email, done) {
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (user.email === email) {
      return done(null, user)
    }
  }
  return done(null, null)
}

export function findByResetPasswordToken(resetPasswordToken, done) {
  var bdd = User.manager.instance.get()
  for (var i = 0, len = bdd.length; i < len; i++) {
    var user = bdd[i]
    if (user.resetPasswordToken === resetPasswordToken) {
      return done(null, user)
    }
  }
  return done(null, null)
}

export function isValid(user, password) {
  if(user.actif === 1) {
    if(bcrypt.compareSync(password, user.password)) {
      return true
    }
  }
  return false
}

export function decodeUser(req, res) {
  var decoded = {}
  var token = User.utils.getTokenFromCookies(req, res)
  if(typeof token !== 'undefined' && token !== null && token !== '') {
    try {
      var secret = config.users.secret
      decoded = jwt.decode(token, secret)
    } catch (err) {}

  }

  return decoded
}

export function getTokenFromCookies(req, res) {
  var cookies = new Cookies(req, res, {
    secure: config.cookie.secure
  })
  return cookies.get('x-access-token')
}

export function isAbeRestrictedUrl(currentRoute) {
  if( currentRoute.indexOf('/abe/users/forgot') > -1
    || currentRoute.indexOf('/abe/users/login') > -1
    || currentRoute.indexOf('/abe/users/reset') > -1
    || !/^\/abe/.test(currentRoute)) {
    return false
  }

  return true
}

export function isUserAllowedOnRoute(workflow, currentRoute) {
  if( currentRoute.indexOf('/abe/users/forgot') > -1 || currentRoute.indexOf('/abe/users/login') > -1 || !/^\/abe/.test(currentRoute)) {
    return true
  }

  var isAllowed = false

  if (currentRoute.indexOf('abe/') === -1) {
    isAllowed = true
  }

  if (workflow != null) {
    var routes = config.users.routes
    if(typeof routes[workflow] !== 'undefined' && routes[workflow] !== null) {
      Array.prototype.forEach.call(routes[workflow], (route) => {
        var reg = new RegExp(route)
        if(reg.test(currentRoute)) {
          isAllowed = true
        }
      })
    }
  }
  
  return isAllowed
}

export function getAll() {
  return User.manager.instance.get()
}

export function getUserWorkflow(status, role) {

  var flows = []

  function addFlow (flow, type, action) {
    type = (type != null) ? type : flow
    return {
      status: flow,
      url: `/abe/save/${type}/${action}`
    }
  }

  if (config.users.enable) {
    var before = null
    var found = false
    Array.prototype.forEach.call(config.users.workflow, (flow) => {
      if (found) {
        flows.push(addFlow(flow, flow, "submit"))
        found = false
      }
      if (status == flow) {
        found = true
        if (before != null) {
          if (flow == "publish") {
            flows.push(addFlow("edit", "draft", "submit"))
          }else {
            flows.push(addFlow("reject", before, "reject"))
          }
        }
        flows.push(addFlow(flow, flow, "edit"))
      }
      before = flow
    })
  }else {
    flows = [addFlow("draft", "draft", "submit"), addFlow("publish", "publish", "submit")]
  }
  return flows
}

export function loginLimitTry(username) {
  var p = new Promise((resolve) => {
    var isNexted = false
    try {
      var limiterConfig = config.users.limiter

      var client = redis.createClient()
      client.on('error', function() {
        if (!isNexted) {
          isNexted = true
          resolve()
        }
      })

      var limit = new Limiter({
        id: username,
        db: client,
        duration: limiterConfig.duration,
        max: limiterConfig.max
      })

      limit.get(function(err, limit) {
        if (err) {
          resolve()
        }else {
          resolve(limit)
        }
      })
    }catch(e) {
      resolve()
    }
  })

  return p
}

1			import redis from 'redis'
2			import Limiter from 'ratelimiter'
3			import owasp from 'owasp-password-strength-test'
4			import bcrypt from 'bcrypt-nodejs'
5			import Cookies from 'cookies'
6			import jwt from 'jwt-simple'
7
8			import {
9			User
10			,config
11			,coreUtils
12			} from '../../cli'
13
14			export function checkSameEmail(data) {
15			var emailAlreadyUsed = false
16			var bdd = User.manager.instance.get()
17			for (var i = 0, len = bdd.length; i < len; i++) {
18			var user = bdd[i]
19			if (user.email === data.email && parseInt(user.id) !== parseInt(data.id)) {
20			emailAlreadyUsed = true
21			}
22			}
23
24			if (emailAlreadyUsed === true) {
25			return {
26			success:0,
27			message: 'Email adress already exist'
28			}
29			}else {
30			return {
31			success:1
32			}
33			}
34			}
35
36			export function getRole(data) {
37			var roles = config.users.roles
38			Array.prototype.forEach.call(roles, (role) => {
39			if(role.name === data.role) {
40			data.role = role
41			}
42			})
43
44			return data
45			}
46
47			export function commonPassword(data) {
48			var owaspConfig = config.users.owasp
49			owasp.config(owaspConfig)
50			var sameAsUser = (typeof owaspConfig.sameAsUser !== 'undefined' && owaspConfig.sameAsUser !== null) ? owaspConfig.sameAsUser : true
51			var mostCommon = (typeof owaspConfig.mostCommon !== 'undefined' && owaspConfig.mostCommon !== null) ? owaspConfig.mostCommon : true
52			var mostCommonPassword = config.users.mostCommonPassword
53			owasp.tests.required.push(function(password) {
54			if (mostCommon && coreUtils.array.contains(mostCommonPassword, password.toLowerCase())) {
			0 ignored issues – show Complexity Best Practice introduced 2016-11-24 15:22 UTC by Report Bug Copy Issue Report There is no return statement if `mostCommon && coreUtils....password.toLowerCase())` is `false`. Are you sure this is correct? If so, consider adding `return;` explicitly. This check looks for functions where a `return` statement is found in some execution paths, but not in all. Consider this little piece of code function isBig(a) { if (a > 5000) { return "yes"; } } console.log(isBig(5001)); //returns yes console.log(isBig(42)); //returns undefined The function `isBig` will only return a specific value when its parameter is bigger than 5000. In any other case, it will implicitly return `undefined`. This behaviour may not be what you had intended. In any case, you can add a `return undefined` to the other execution path to make the return value explicit. Loading history...
55			return 'the password used is too common.'
56			}
57			})
58
59			var currentUserName = data.username
60			owasp.tests.required.push(function(password) {
61			var username = currentUserName
62			var shouldTest = sameAsUser
63
64			if(shouldTest) {
			0 ignored issues – show Complexity Best Practice introduced 2016-11-24 15:22 UTC by Report Bug Copy Issue Report There is no return statement if `shouldTest` is `false`. Are you sure this is correct? If so, consider adding `return;` explicitly. This check looks for functions where a `return` statement is found in some execution paths, but not in all. Consider this little piece of code function isBig(a) { if (a > 5000) { return "yes"; } } console.log(isBig(5001)); //returns yes console.log(isBig(42)); //returns undefined The function `isBig` will only return a specific value when its parameter is bigger than 5000. In any other case, it will implicitly return `undefined`. This behaviour may not be what you had intended. In any case, you can add a `return undefined` to the other execution path to make the return value explicit. Loading history...
65			if (password.toLowerCase() === username.toLowerCase()) {
66			return 'username and password must be different.'
67			}
68			if (password.toLowerCase() === username.toLowerCase().split('').reverse().join('')) {
			0 ignored issues – show Complexity Best Practice introduced 2016-11-24 15:22 UTC by Report Bug Copy Issue Report There is no return statement if `password.toLowerCase() =...("").reverse().join("")` is `false`. Are you sure this is correct? If so, consider adding `return;` explicitly. This check looks for functions where a `return` statement is found in some execution paths, but not in all. Consider this little piece of code function isBig(a) { if (a > 5000) { return "yes"; } } console.log(isBig(5001)); //returns yes console.log(isBig(42)); //returns undefined The function `isBig` will only return a specific value when its parameter is bigger than 5000. In any other case, it will implicitly return `undefined`. This behaviour may not be what you had intended. In any case, you can add a `return undefined` to the other execution path to make the return value explicit. Loading history...
69			return 'username and password must be different, not just inverted.'
70			}
71			}
72			})
73
74			var res = owasp.test(data.password)
75
76			if(typeof res.errors !== 'undefined' && res.errors !== null
77			&& res.errors.length > 0) {
78			var message = ''
79			Array.prototype.forEach.call(res.errors, (error) => {
80			message += error + '<br />'
81			})
82			return {
83			success:0,
84			message: message
85			}
86			}else {
87			return {
88			success:1
89			}
90			}
91			}
92
93			export function encryptPassword(numb, password) {
94			var salt = bcrypt.genSaltSync(numb)
95			return bcrypt.hashSync(password, salt)
96			}
97
98			export function getUserRoutes(workflow) {
99			var routes = config.users.routes
100			var userRoles = []
101			Array.prototype.forEach.call(Object.keys(routes), (role) => {
102			if(role === workflow) {
103			userRoles = routes[role]
104			}
105			})
106
107			return userRoles
108			}
109
110
111			export function findSync(id) {
112			var bdd = User.manager.instance.get()
113			for (var i = 0, len = bdd.length; i < len; i++) {
114			var user = bdd[i]
115			if (parseInt(user.id) === parseInt(id)) {
116			return user
117			}
118			}
119			return null
120			}
121
122			export function find(id, done) {
123			var bdd = User.manager.instance.get()
124			for (var i = 0, len = bdd.length; i < len; i++) {
125			var user = bdd[i]
126			if (parseInt(user.id) === parseInt(id)) {
127			return done(null, user)
128			}
129			}
130			return done(null, null)
131			}
132
133			export function findByUsername(username, done) {
134			var bdd = User.manager.instance.get()
135			for (var i = 0, len = bdd.length; i < len; i++) {
136			var user = bdd[i]
137			if (user.username === username) {
138			return done(null, user)
139			}
140			}
141			return done(null, null)
142			}
143
144			export function findByEmail(email, done) {
145			var bdd = User.manager.instance.get()
146			for (var i = 0, len = bdd.length; i < len; i++) {
147			var user = bdd[i]
148			if (user.email === email) {
149			return done(null, user)
150			}
151			}
152			return done(null, null)
153			}
154
155			export function findByResetPasswordToken(resetPasswordToken, done) {
156			var bdd = User.manager.instance.get()
157			for (var i = 0, len = bdd.length; i < len; i++) {
158			var user = bdd[i]
159			if (user.resetPasswordToken === resetPasswordToken) {
160			return done(null, user)
161			}
162			}
163			return done(null, null)
164			}
165
166			export function isValid(user, password) {
167			if(user.actif === 1) {
168			if(bcrypt.compareSync(password, user.password)) {
169			return true
170			}
171			}
172			return false
173			}
174
175			export function decodeUser(req, res) {
176			var decoded = {}
177			var token = User.utils.getTokenFromCookies(req, res)
178			if(typeof token !== 'undefined' && token !== null && token !== '') {
179			try {
180			var secret = config.users.secret
181			decoded = jwt.decode(token, secret)
182			} catch (err) {}
			0 ignored issues – show Coding Style Comprehensibility Best Practice introduced 2016-11-24 15:22 UTC by Report Bug Copy Issue Report Empty catch clauses should be used with caution; consider adding a comment why this is needed. Loading history...
183			}
184
185			return decoded
186			}
187
188			export function getTokenFromCookies(req, res) {
189			var cookies = new Cookies(req, res, {
190			secure: config.cookie.secure
191			})
192			return cookies.get('x-access-token')
193			}
194
195			export function isAbeRestrictedUrl(currentRoute) {
196			if( currentRoute.indexOf('/abe/users/forgot') > -1
197			\|\| currentRoute.indexOf('/abe/users/login') > -1
198			\|\| currentRoute.indexOf('/abe/users/reset') > -1
199			\|\| !/^\/abe/.test(currentRoute)) {
200			return false
201			}
202
203			return true
204			}
205
206			export function isUserAllowedOnRoute(workflow, currentRoute) {
207			if( currentRoute.indexOf('/abe/users/forgot') > -1 \|\| currentRoute.indexOf('/abe/users/login') > -1 \|\| !/^\/abe/.test(currentRoute)) {
208			return true
209			}
210
211			var isAllowed = false
212
213			if (currentRoute.indexOf('abe/') === -1) {
214			isAllowed = true
215			}
216
217			if (workflow != null) {
218			var routes = config.users.routes
219			if(typeof routes[workflow] !== 'undefined' && routes[workflow] !== null) {
220			Array.prototype.forEach.call(routes[workflow], (route) => {
221			var reg = new RegExp(route)
222			if(reg.test(currentRoute)) {
223			isAllowed = true
224			}
225			})
226			}
227			}
228
229			return isAllowed
230			}
231
232			export function getAll() {
233			return User.manager.instance.get()
234			}
235
236			export function getUserWorkflow(status, role) {
			0 ignored issues – show Unused Code introduced 2016-11-25 14:21 UTC by Report Bug Copy Issue Report The parameter `role` is not used and could be removed. This check looks for parameters in functions that are not used in the function body and are not followed by other parameters which are used inside the function. Loading history...
237			var flows = []
238
239			function addFlow (flow, type, action) {
240			type = (type != null) ? type : flow
241			return {
242			status: flow,
243			url: `/abe/save/${type}/${action}`
244			}
245			}
246
247			if (config.users.enable) {
248			var before = null
249			var found = false
250			Array.prototype.forEach.call(config.users.workflow, (flow) => {
251			if (found) {
252			flows.push(addFlow(flow, flow, "submit"))
253			found = false
254			}
255			if (status == flow) {
256			found = true
257			if (before != null) {
258			if (flow == "publish") {
259			flows.push(addFlow("edit", "draft", "submit"))
260			}else {
261			flows.push(addFlow("reject", before, "reject"))
262			}
263			}
264			flows.push(addFlow(flow, flow, "edit"))
265			}
266			before = flow
267			})
268			}else {
269			flows = [addFlow("draft", "draft", "submit"), addFlow("publish", "publish", "submit")]
270			}
271			return flows
272			}
273
274			export function loginLimitTry(username) {
275			var p = new Promise((resolve) => {
276			var isNexted = false
277			try {
278			var limiterConfig = config.users.limiter
279
280			var client = redis.createClient()
281			client.on('error', function() {
282			if (!isNexted) {
283			isNexted = true
284			resolve()
285			}
286			})
287
288			var limit = new Limiter({
289			id: username,
290			db: client,
291			duration: limiterConfig.duration,
292			max: limiterConfig.max
293			})
294
295			limit.get(function(err, limit) {
296			if (err) {
297			resolve()
298			}else {
299			resolve(limit)
300			}
301			})
302			}catch(e) {
303			resolve()
304			}
305			})
306
307			return p
308			}

AdFabConnect / abejs

Pull Request — master (#40)

utils.js ➔ ... ➔ ??? A

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like