diff --git a/emails/translations/account-invite_zh-chs.txt b/emails/translations/account-invite_zh-chs.txt
index 89ea6e62..61bac8b0 100644
--- a/emails/translations/account-invite_zh-chs.txt
+++ b/emails/translations/account-invite_zh-chs.txt
@@ -1,5 +1,5 @@
-[[[SERVERNAME]]] - 帐户邀请
-已在服务器[[[SERVERNAME]]]（[[[SERVERURL]]]/[[[URLARGS1]]]）上为您创建了一个帐户，您现在可以使用用户名“ [[[ACCOUNTNAME]]]”和密码“ [[[PASSWORD]]]”。
+[[[SERVERNAME]]]-帐户邀请
+已在服务器[[[SERVERNAME]]]（[[[SERVERURL]]]/[[[URLARGS1]]]）上为您创建了一个帐户，您现在可以使用用户名“ [[[ACCOUNTNAME]]]”和密码“ [[[PASSWORD] ]]”。
~
最好的祝福，
~[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/account-invite_zh-cht.html b/emails/translations/account-invite_zh-cht.html
index 3b7f71c6..9bbd3294 100644
--- a/emails/translations/account-invite_zh-cht.html
+++ b/emails/translations/account-invite_zh-cht.html
@@ -1,9 +1,9 @@
-
\ No newline at end of file
diff --git a/emails/translations/account-login_de.txt b/emails/translations/account-login_de.txt
index 0f97eb94..0208acd6 100644
--- a/emails/translations/account-login_de.txt
+++ b/emails/translations/account-login_de.txt
@@ -1,4 +1,4 @@
[[[SERVERNAME]]] - Konto-Login
-Ihr Anmelde-Token lautet: [[[TOKEN]]]
+Ihr Login-Token lautet: [[[TOKEN]]]
~
Dieser Token kann nur einmal verwendet werden und ist 5 Minuten gültig.
\ No newline at end of file
diff --git a/emails/translations/account-login_hu.txt b/emails/translations/account-login_hu.txt
deleted file mode 100644
index 0b104a09..00000000
--- a/emails/translations/account-login_hu.txt
+++ /dev/null
@@ -1,4 +0,0 @@
-[[[SERVERNAME]]] - Bejelentkezés a fiókba
-Az Ön bejelentkezési tokenje: [[[TOKEN]]]
-~
-Ez a token csak egyszer használható, és 5 percig érvényes.
\ No newline at end of file
diff --git a/emails/translations/account-login_bs.html b/emails/translations/account-login_n.html
similarity index 55%
rename from emails/translations/account-login_bs.html
rename to emails/translations/account-login_n.html
index 0a65c8e7..a218cade 100644
--- a/emails/translations/account-login_bs.html
+++ b/emails/translations/account-login_n.html
@@ -1,12 +1,12 @@
-
\ No newline at end of file
diff --git a/emails/translations/account-login_n.txt b/emails/translations/account-login_n.txt
new file mode 100644
index 00000000..5cf6151e
--- /dev/null
+++ b/emails/translations/account-login_n.txt
@@ -0,0 +1,4 @@
+[[[SERVERNAME]]] - Account Login
+Your login token is: [[[TOKEN]]]
+~
+This token can only be used once and is valid for 5 minutes.
\ No newline at end of file
diff --git a/emails/translations/account-login_hu.html b/emails/translations/account-login_nn.html
similarity index 53%
rename from emails/translations/account-login_hu.html
rename to emails/translations/account-login_nn.html
index e8c93ae3..a218cade 100644
--- a/emails/translations/account-login_hu.html
+++ b/emails/translations/account-login_nn.html
@@ -1,12 +1,12 @@
-
\ No newline at end of file
diff --git a/emails/translations/account-login_nn.txt b/emails/translations/account-login_nn.txt
new file mode 100644
index 00000000..5cf6151e
--- /dev/null
+++ b/emails/translations/account-login_nn.txt
@@ -0,0 +1,4 @@
+[[[SERVERNAME]]] - Account Login
+Your login token is: [[[TOKEN]]]
+~
+This token can only be used once and is valid for 5 minutes.
\ No newline at end of file
diff --git a/emails/translations/account-login_zh-chs.html b/emails/translations/account-login_zh-chs.html
index 82d896ce..f71018c9 100644
--- a/emails/translations/account-login_zh-chs.html
+++ b/emails/translations/account-login_zh-chs.html
@@ -1,9 +1,9 @@
-
|
- [[[SERVERNAME]]] - 帐户登录
+ [[[SERVERNAME]]]-帐户登录
|
diff --git a/emails/translations/account-login_zh-chs.txt b/emails/translations/account-login_zh-chs.txt
index 2dc58cb4..0f26ce3d 100644
--- a/emails/translations/account-login_zh-chs.txt
+++ b/emails/translations/account-login_zh-chs.txt
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 帐户登录
+[[[SERVERNAME]]]-帐户登录
您的登录保安编码为：[[[TOKEN]]]
~
此保安编码只能使用一次，有效期为5分钟。
\ No newline at end of file
diff --git a/emails/translations/account-login_zh-cht.html b/emails/translations/account-login_zh-cht.html
index 876e41d4..30baa6cb 100644
--- a/emails/translations/account-login_zh-cht.html
+++ b/emails/translations/account-login_zh-cht.html
@@ -1,9 +1,9 @@
-
[[[SERVERNAME]]] - 帳戶登入
+
[[[SERVERNAME]]]-帳戶登入
|
- [[[SERVERNAME]]] - 帳戶登入
+ [[[SERVERNAME]]]-帳戶登入
|
diff --git a/emails/translations/account-login_zh-cht.txt b/emails/translations/account-login_zh-cht.txt
index adeb97dd..18c401c0 100644
--- a/emails/translations/account-login_zh-cht.txt
+++ b/emails/translations/account-login_zh-cht.txt
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 帳戶登入
+[[[SERVERNAME]]]-帳戶登入
你的登入保安編碼為：[[[TOKEN]]]
~
該保安編碼只能使用一次，有效期為5分鐘。
\ No newline at end of file
diff --git a/emails/translations/account-reset_bs.html b/emails/translations/account-reset_bs.html
deleted file mode 100644
index 36138d24..00000000
--- a/emails/translations/account-reset_bs.html
+++ /dev/null
@@ -1,15 +0,0 @@
-
[[[SERVERNAME]]] - Resetiranje računa
-
\ No newline at end of file
diff --git a/emails/translations/account-reset_bs.txt b/emails/translations/account-reset_bs.txt
deleted file mode 100644
index fe99cfa6..00000000
--- a/emails/translations/account-reset_bs.txt
+++ /dev/null
@@ -1,6 +0,0 @@
-[[[SERVERNAME]]] - Resetiranje računa
-Zdravo [[[USERNAME]]], [[[SERVERNAME]]] ([[[SERVERURL]]][[[URLARGS1]]]) traži reset lozinke naloga. Idite na sljedeću vezu da dovršite proces:
-~
-~[[[SERVERURL]]]/checkmail?c=[[[COOKIE]]][[[URLARGS2]]]
-~
-Ako niste vi inicirali ovaj zahtjev, zanemarite ovu poruku.
\ No newline at end of file
diff --git a/emails/translations/account-reset_hu.html b/emails/translations/account-reset_hu.html
deleted file mode 100644
index 4d8247d9..00000000
--- a/emails/translations/account-reset_hu.html
+++ /dev/null
@@ -1,15 +0,0 @@
-
[[[SERVERNAME]]] - Fiók visszaállítás
-
-
-
- |
- [[[SERVERNAME]]] - Megerősítés
- |
-
-
-
Tisztelt [[[USERNAME]]], [[[SERVERNAME]]] fiókhoz tartozó jelszó visszaállítási igényt kapott, kattintson a következő linkre a folyamat befejezéséhez.
-
- Kattintson ide fiókja jelszaváknak visszaállításához.
-
- Ha nem Ön kezdeményezte ezt a kérést, kérjük, hagyja figyelmen kívül ezt a levelet.
-
\ No newline at end of file
diff --git a/emails/translations/account-reset_hu.txt b/emails/translations/account-reset_hu.txt
deleted file mode 100644
index 39f76c76..00000000
--- a/emails/translations/account-reset_hu.txt
+++ /dev/null
@@ -1,6 +0,0 @@
-[[[SERVERNAME]]] - Fiók visszaállítás
-Tisztelt [[[USERNAME]]], [[[SERVERNAME]]] ([[[SERVERURL]]][[[URLARGS1]]]) a fiók jelszavának visszaállítását kéri. A folyamat befejezéséhez lépjen a következő linkre:
-~
-~[[[SERVERURL]]]/checkmail?c=[[[COOKIE]]][[[URLARGS2]]]
-~
-Ha nem Ön kezdeményezte ezt a kérést, kérjük, hagyja figyelmen kívül ezt a levelet.
\ No newline at end of file
diff --git a/emails/translations/account-reset_n.html b/emails/translations/account-reset_n.html
new file mode 100644
index 00000000..414d33f8
--- /dev/null
+++ b/emails/translations/account-reset_n.html
@@ -0,0 +1,15 @@
+
[[[SERVERNAME]]] - Account Reset
+
+
+
+ |
+ [[[SERVERNAME]]] - Verification
+ |
+
+
+
Hi [[[USERNAME]]], [[[SERVERNAME]]] is requesting an account password reset, click on the following link to complete the process.
+
+ Click here to reset your account password.
+
+ If you did not initiate this request, please ignore this mail.
+
\ No newline at end of file
diff --git a/emails/translations/account-reset_n.txt b/emails/translations/account-reset_n.txt
new file mode 100644
index 00000000..44f02b30
--- /dev/null
+++ b/emails/translations/account-reset_n.txt
@@ -0,0 +1,6 @@
+[[[SERVERNAME]]] - Account Reset
+Hi [[[USERNAME]]], [[[SERVERNAME]]] ([[[SERVERURL]]][[[URLARGS1]]]) is requesting an account password reset. Nagivate to the following link to complete the process:
+~
+~[[[SERVERURL]]]/checkmail?c=[[[COOKIE]]][[[URLARGS2]]]
+~
+If you did not initiate this request, please ignore this mail.
\ No newline at end of file
diff --git a/emails/translations/account-reset_nn.html b/emails/translations/account-reset_nn.html
new file mode 100644
index 00000000..414d33f8
--- /dev/null
+++ b/emails/translations/account-reset_nn.html
@@ -0,0 +1,15 @@
+
[[[SERVERNAME]]] - Account Reset
+
+
+
+ |
+ [[[SERVERNAME]]] - Verification
+ |
+
+
+
Hi [[[USERNAME]]], [[[SERVERNAME]]] is requesting an account password reset, click on the following link to complete the process.
+
+ Click here to reset your account password.
+
+ If you did not initiate this request, please ignore this mail.
+
\ No newline at end of file
diff --git a/emails/translations/account-reset_nn.txt b/emails/translations/account-reset_nn.txt
new file mode 100644
index 00000000..44f02b30
--- /dev/null
+++ b/emails/translations/account-reset_nn.txt
@@ -0,0 +1,6 @@
+[[[SERVERNAME]]] - Account Reset
+Hi [[[USERNAME]]], [[[SERVERNAME]]] ([[[SERVERURL]]][[[URLARGS1]]]) is requesting an account password reset. Nagivate to the following link to complete the process:
+~
+~[[[SERVERURL]]]/checkmail?c=[[[COOKIE]]][[[URLARGS2]]]
+~
+If you did not initiate this request, please ignore this mail.
\ No newline at end of file
diff --git a/emails/translations/account-reset_pt-br.html b/emails/translations/account-reset_pt-br.html
index 78408653..c790c845 100644
--- a/emails/translations/account-reset_pt-br.html
+++ b/emails/translations/account-reset_pt-br.html
@@ -7,7 +7,7 @@
-
Olá [[[USERNAME]]], [[[SERVERNAME]]] está solicitando a redefinição da senha da conta, clique no link a seguir para concluir o processo.
+
Olá [[[NOME DE USUÁRIO]]], [[[SERVERNAME]]] está solicitando a redefinição da senha da conta, clique no link a seguir para concluir o processo.
Clique aqui para redefinir a senha da sua conta.
diff --git a/emails/translations/account-reset_pt.html b/emails/translations/account-reset_pt.html
index 78408653..c790c845 100644
--- a/emails/translations/account-reset_pt.html
+++ b/emails/translations/account-reset_pt.html
@@ -7,7 +7,7 @@
-
Olá [[[USERNAME]]], [[[SERVERNAME]]] está solicitando a redefinição da senha da conta, clique no link a seguir para concluir o processo.
+
Olá [[[NOME DE USUÁRIO]]], [[[SERVERNAME]]] está solicitando a redefinição da senha da conta, clique no link a seguir para concluir o processo.
Clique aqui para redefinir a senha da sua conta.
diff --git a/emails/translations/account-reset_zh-chs.html b/emails/translations/account-reset_zh-chs.html
index 824250dd..eb2e88eb 100644
--- a/emails/translations/account-reset_zh-chs.html
+++ b/emails/translations/account-reset_zh-chs.html
@@ -3,7 +3,7 @@
|
- [[[SERVERNAME]]] - 验证
+ [[[SERVERNAME]]]-验证
|
@@ -11,5 +11,5 @@
单击此处重置您的帐户密码。
- 如果您没有发起此请求，请忽略此邮件。
+ 如果您没有发起此请求，请不理此邮件。
\ No newline at end of file
diff --git a/emails/translations/account-reset_zh-chs.txt b/emails/translations/account-reset_zh-chs.txt
index 8f1e1cb9..97e9a2b7 100644
--- a/emails/translations/account-reset_zh-chs.txt
+++ b/emails/translations/account-reset_zh-chs.txt
@@ -3,4 +3,4 @@
~
~[[[SERVERURL]]]/checkmail?c=[[[COOKIE]]][[[URLARGS2]]]
~
-如果您没有发起此请求，请忽略此邮件。
\ No newline at end of file
+如果您没有发起此请求，请不理此邮件。
\ No newline at end of file
diff --git a/emails/translations/account-reset_zh-cht.html b/emails/translations/account-reset_zh-cht.html
index d31e2ad3..7e4aa9fa 100644
--- a/emails/translations/account-reset_zh-cht.html
+++ b/emails/translations/account-reset_zh-cht.html
@@ -3,7 +3,7 @@
|
- [[[SERVERNAME]]] - 驗證
+ [[[SERVERNAME]]]-驗證
|
diff --git a/emails/translations/device-help_bs.html b/emails/translations/device-help_bs.html
deleted file mode 100644
index 3c4ee388..00000000
--- a/emails/translations/device-help_bs.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Zahtjev za pomoć
-
-
-
- |
- [[[SERVERNAME]]] - Zahtjev za pomoć
- |
-
-
-
- uređaj "[[[NAZIV UREĐAJA]]]“ zatražio pomoć.
-
-
- Korisnik: [[[IME POMOĆI]]]
- Zahtjev: [[[UPIT ZA POMOĆ]]]
-
-
- kliknite ovdje za navigaciju do ovog uređaja.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_bs.txt b/emails/translations/device-help_bs.txt
deleted file mode 100644
index d060d62b..00000000
--- a/emails/translations/device-help_bs.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Zahtjev za pomoć uređaja
-Uređaj "[[[DEVICENAME]]]" je zatražio pomoć.
-
-Korisnik: "[[[IME POMOĆI]]]"
-Zahtjev: "[[[UPIT ZA POMOĆ]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_cs.html b/emails/translations/device-help_cs.html
deleted file mode 100644
index ca6f8ed6..00000000
--- a/emails/translations/device-help_cs.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" požádal o pomoc.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- klikněte zde to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_cs.txt b/emails/translations/device-help_cs.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_cs.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_da.html b/emails/translations/device-help_da.html
deleted file mode 100644
index d152a334..00000000
--- a/emails/translations/device-help_da.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- Klik her to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_da.txt b/emails/translations/device-help_da.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_da.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_de.html b/emails/translations/device-help_de.html
deleted file mode 100644
index 7e01917a..00000000
--- a/emails/translations/device-help_de.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Gerät "[[[DEVICENAME]]]" requested help.
-
-
- Benutzer: [[[HELPUSERNAME]]]
- Anforderung: [[[HELPREQUEST]]]
-
-
- hier klicken um zu diesem Gerät zu navigieren.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_de.txt b/emails/translations/device-help_de.txt
deleted file mode 100644
index 849df051..00000000
--- a/emails/translations/device-help_de.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Gerät "[[[DEVICENAME]]]" hat Unterstützung angefordert.
-
-Benutzer: "[[[HELPUSERNAME]]]"
-Anforderung: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_es.html b/emails/translations/device-help_es.html
deleted file mode 100644
index beafbccf..00000000
--- a/emails/translations/device-help_es.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Solicitud de Ayuda
-
-
-
- |
- [[[SERVERNAME]]] - Solicitud de Ayuda
- |
-
-
-
- Dispositivo "[[[DEVICENAME]]]" ha pedido ayuda.
-
-
- Usuario: [[[HELPUSERNAME]]]
- Solicitud: [[[HELPREQUEST]]]
-
-
- haz clic aquí para navegar a este dispositivo.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_es.txt b/emails/translations/device-help_es.txt
deleted file mode 100644
index 3dc02cc3..00000000
--- a/emails/translations/device-help_es.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Solicitud de ayuda con el Dispositivo
-Dispositivo "[[[DEVICENAME]]]" solicito asistencia.
-
-Usuario: "[[[HELPUSERNAME]]]"
-Solicitud: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_fi.html b/emails/translations/device-help_fi.html
deleted file mode 100644
index 1dd46aaf..00000000
--- a/emails/translations/device-help_fi.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- klikkaa tästä to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_fi.txt b/emails/translations/device-help_fi.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_fi.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_fr.html b/emails/translations/device-help_fr.html
deleted file mode 100644
index 745639b3..00000000
--- a/emails/translations/device-help_fr.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Demande d'assistance
-
-
-
- |
- [[[SERVERNAME]]] - Demande d'assistance
- |
-
-
-
- Appareil "[[[DEVICENAME]]]" assistance demandée.
-
-
- Utilisateur : [[[HELPUSERNAME]]]
- Demande : [[[HELPREQUEST]]]
-
-
- cliquez ici pour naviguer vers cet appareil.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_fr.txt b/emails/translations/device-help_fr.txt
deleted file mode 100644
index 8c08fe7a..00000000
--- a/emails/translations/device-help_fr.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Demande d'assistance sur l'appareil
-Une assistance est demandée par l'appareil "[[[DEVICENAME]]]"
-
-Utilistateur : "[[[HELPUSERNAME]]]"
-Demande : "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_hi.html b/emails/translations/device-help_hi.html
deleted file mode 100644
index c5c0a18e..00000000
--- a/emails/translations/device-help_hi.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- यहाँ क्लिक करें to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_hi.txt b/emails/translations/device-help_hi.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_hi.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_hu.html b/emails/translations/device-help_hu.html
deleted file mode 100644
index 75f8cb32..00000000
--- a/emails/translations/device-help_hu.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Segítség kérés
-
-
-
- |
- [[[SERVERNAME]]] - Segítség kérés
- |
-
-
-
- Eszköz "[[[DEVICENAME]]]" segítséget kért.
-
-
- Felhsználó: [[[HELPUSERNAME]]]
- Segítségkérés: [[[HELPREQUEST]]]
-
-
- Kattintson ide az eszközhöz való navigáláshoz.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_hu.txt b/emails/translations/device-help_hu.txt
deleted file mode 100644
index 4dcc6a94..00000000
--- a/emails/translations/device-help_hu.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Segítség kérés
-A "[[[DEVICENAME]]]" eszköz segítséget kért.
-
-Felhasználó: "[[[HELPUSERNAME]]]"
-Segítség kérés: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_it.html b/emails/translations/device-help_it.html
deleted file mode 100644
index 812e9607..00000000
--- a/emails/translations/device-help_it.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- clicca qui to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_it.txt b/emails/translations/device-help_it.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_it.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_ja.html b/emails/translations/device-help_ja.html
deleted file mode 100644
index 42e39cba..00000000
--- a/emails/translations/device-help_ja.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- ここをクリック to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_ja.txt b/emails/translations/device-help_ja.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_ja.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_ko.html b/emails/translations/device-help_ko.html
deleted file mode 100644
index 37356e43..00000000
--- a/emails/translations/device-help_ko.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- 여기를 클릭하십시오. to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_ko.txt b/emails/translations/device-help_ko.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_ko.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_nl.html b/emails/translations/device-help_nl.html
deleted file mode 100644
index 1f0f6596..00000000
--- a/emails/translations/device-help_nl.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Verzoek om hulp
-
-
-
- |
- [[[SERVERNAME]]] - Verzoek om hulp
- |
-
-
-
- Apparaat "[[[DEVICENAME]]]" vraagt om hulp.
-
-
- Gebruiker: [[[HELPUSERNAME]]]
- Verzoek: [[[HELPREQUEST]]]
-
-
- Klik hier naar dit apparaat navigeren.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_nl.txt b/emails/translations/device-help_nl.txt
deleted file mode 100644
index 7a592968..00000000
--- a/emails/translations/device-help_nl.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Een verzoek om het apparaat te helpen
-Apparaat "[[[DEVICENAME]]]" heeft assistentie gevraagd
-
-Gebruiker: "[[[HELPUSERNAME]]]"
-Verzoek: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_pl.html b/emails/translations/device-help_pl.html
deleted file mode 100644
index b94b193d..00000000
--- a/emails/translations/device-help_pl.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Prośba Pomocy
-
-
-
- |
- [[[SERVERNAME]]] - Prośba Pomocy
- |
-
-
-
- Urządzenie "[[[DEVICENAME]]]" prosi o pomoc.
-
-
- Użytkownik: [[[HELPUSERNAME]]]
- Prośba: [[[HELPREQUEST]]]
-
-
- kliknij tutaj by nawigować do tego urządzenia.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_pl.txt b/emails/translations/device-help_pl.txt
deleted file mode 100644
index 1b6b5a97..00000000
--- a/emails/translations/device-help_pl.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Prośba Pomocy Urządzenia
-Urządzenie "[[[DEVICENAME]]]" prosiło o pomoc.
-
-Użytkownik: "[[[HELPUSERNAME]]]"
-Prośba: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_pt-br.html b/emails/translations/device-help_pt-br.html
deleted file mode 100644
index b77b5794..00000000
--- a/emails/translations/device-help_pt-br.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- Clique aqui to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_pt-br.txt b/emails/translations/device-help_pt-br.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_pt-br.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_pt.html b/emails/translations/device-help_pt.html
deleted file mode 100644
index b77b5794..00000000
--- a/emails/translations/device-help_pt.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- Clique aqui to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_pt.txt b/emails/translations/device-help_pt.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_pt.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_ru.html b/emails/translations/device-help_ru.html
deleted file mode 100644
index 19986fa8..00000000
--- a/emails/translations/device-help_ru.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- кликните сюда to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_ru.txt b/emails/translations/device-help_ru.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_ru.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_sv.html b/emails/translations/device-help_sv.html
deleted file mode 100644
index 8423ff37..00000000
--- a/emails/translations/device-help_sv.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- Klicka här to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_sv.txt b/emails/translations/device-help_sv.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_sv.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_tr.html b/emails/translations/device-help_tr.html
deleted file mode 100644
index 2844ba28..00000000
--- a/emails/translations/device-help_tr.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- buraya Tıkla to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_tr.txt b/emails/translations/device-help_tr.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_tr.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_zh-chs.html b/emails/translations/device-help_zh-chs.html
deleted file mode 100644
index 2f13132c..00000000
--- a/emails/translations/device-help_zh-chs.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- 点击这里 to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_zh-chs.txt b/emails/translations/device-help_zh-chs.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_zh-chs.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-help_zh-cht.html b/emails/translations/device-help_zh-cht.html
deleted file mode 100644
index 52d6e990..00000000
--- a/emails/translations/device-help_zh-cht.html
+++ /dev/null
@@ -1,20 +0,0 @@
-
[[[SERVERNAME]]] - "[[[DEVICENAME]]]" Help Request
-
-
-
- |
- [[[SERVERNAME]]] - Help Request
- |
-
-
-
- Device "[[[DEVICENAME]]]" requested help.
-
-
- User: [[[HELPUSERNAME]]]
- Request: [[[HELPREQUEST]]]
-
-
- 點擊這裡 to navigate to this device.
-
-
\ No newline at end of file
diff --git a/emails/translations/device-help_zh-cht.txt b/emails/translations/device-help_zh-cht.txt
deleted file mode 100644
index c2b3c09f..00000000
--- a/emails/translations/device-help_zh-cht.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-[[[SERVERNAME]]] - Device Help Request
-Device "[[[DEVICENAME]]]" requested assistance.
-
-User: "[[[HELPUSERNAME]]]"
-Request: "[[[HELPREQUEST]]]"
-
-[[[SERVERURL]]]?viewmode=10&gotonode=[[[NODEID]]]
\ No newline at end of file
diff --git a/emails/translations/device-notify_bs.html b/emails/translations/device-notify_bs.html
deleted file mode 100644
index c0b6ecd8..00000000
--- a/emails/translations/device-notify_bs.html
+++ /dev/null
@@ -1,36 +0,0 @@
-
[[[SERVERNAME]]] - Obavještenje uređaja
-
-
-
- |
- [[[SERVERNAME]]] - Obavještenje uređaja
- |
-
-
-
-
- Sljedeći uređaji su promijenili stanje veze.
-
-
-
-
- Povezani uređaji:
-
-
-[[[VEZE]]]
-
-
-
-
- Isključeni uređaji:
-
-
-[[[PREKIDI]]]
-
-
-
-
- Da odjavite pretplatu, kliknite ovdje u roku od 1 sata od prijema ove poruke.
-
-
-
\ No newline at end of file
diff --git a/emails/translations/device-notify_bs.txt b/emails/translations/device-notify_bs.txt
deleted file mode 100644
index ff3ba7e9..00000000
--- a/emails/translations/device-notify_bs.txt
+++ /dev/null
@@ -1,22 +0,0 @@
-[[[SERVERNAME]]] - Obavještenje uređaja
-~
-Sljedeći uređaji su promijenili stanje veze.
-~
-~
-~
-Povezani uređaji:
-~
-~[[[CONNECTIONS]]]
-~
-~
-~
-~
-Isključeni uređaji:
-~
-~[[[DISCONNECTIONS]]]
-~
-~
-~
-
-Da odjavite pretplatu, učitajte ovaj link u roku od 1 sata od prijema ove poruke: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
-~
\ No newline at end of file
diff --git a/emails/translations/device-notify_cs.html b/emails/translations/device-notify_cs.html
index 37b8536e..9bebac77 100644
--- a/emails/translations/device-notify_cs.html
+++ b/emails/translations/device-notify_cs.html
@@ -1,9 +1,9 @@
-
[[[SERVERNAME]]] - Oznámení zařízení
+
[[[SERVERNAME]]] – Oznámení zařízení
|
- [[[SERVERNAME]]] - Oznámení zařízení
+ [[[SERVERNAME]]] – Oznámení zařízení
|
diff --git a/emails/translations/device-notify_cs.txt b/emails/translations/device-notify_cs.txt
index fad0096b..29d28676 100644
--- a/emails/translations/device-notify_cs.txt
+++ b/emails/translations/device-notify_cs.txt
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - Oznámení zařízení
+[[[SERVERNAME]]] – Oznámení zařízení
~
Následující zařízení změnila svůj stav připojení.
~
diff --git a/emails/translations/device-notify_hu.txt b/emails/translations/device-notify_hu.txt
deleted file mode 100644
index d025d6a0..00000000
--- a/emails/translations/device-notify_hu.txt
+++ /dev/null
@@ -1,22 +0,0 @@
-[[[SERVERNAME]]] - Eszköz értesítés
-~
-A következő eszközök kapcsolati állapota megváltozott.
-~
-~
-~
-Csatlakozott eszközök:
-~
-~[[[CONNECTIONS]]]
-~
-~
-~
-~
-Lecsatlakozott eszközök:
-~
-~[[[DISCONNECTIONS]]]
-~
-~
-~
-
-A leiratkozáshoz lépjen erre a linkre az üzenet kézhezvételétől számított 1 órán belül: [[[SERVERURL]]][[UNSUBSCRIBELINK]]]
-~
\ No newline at end of file
diff --git a/emails/translations/device-notify_it.html b/emails/translations/device-notify_it.html
index d182ab6f..f9fb3a6c 100644
--- a/emails/translations/device-notify_it.html
+++ b/emails/translations/device-notify_it.html
@@ -25,7 +25,7 @@
Dispositivi disconnessi:
-[[[DISCONNECTIONS]]]
+[[[DISCONNESSIONI]]]
diff --git a/emails/translations/device-notify_ko.html b/emails/translations/device-notify_ko.html
index e397277c..e74be455 100644
--- a/emails/translations/device-notify_ko.html
+++ b/emails/translations/device-notify_ko.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] - 기기 알림
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] - 기기 알림
+ [[[SERVERNAME]]] - Device Notification
|
- 다음 장치의 연결 상태가 변경되었습니다.
+ The following devices have changed their connection state.
- 연결된 장치:
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- 연결 해제된 장치:
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- 구독을 취소하려면 여기를 클릭하십시오. 이 메시지를 받은 후 1시간 이내에
+ To unsubscribe, 여기를 클릭하십시오. within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_ko.txt b/emails/translations/device-notify_ko.txt
index ebcba9b4..ed4a6ac5 100644
--- a/emails/translations/device-notify_ko.txt
+++ b/emails/translations/device-notify_ko.txt
@@ -1,22 +1,22 @@
-[[[SERVERNAME]]] - 기기 알림
+[[[SERVERNAME]]] - Device Notification
~
-다음 장치의 연결 상태가 변경되었습니다.
+The following devices have changed their connection state.
~
~
~
-연결된 장치:
+Connected devices:
~
~[[[CONNECTIONS]]]
~
~
~
~
-연결 해제된 장치:
+Disconnected devices:
~
~[[[DISCONNECTIONS]]]
~
~
~
-구독을 취소하려면 다음 메시지를 받은 후 1시간 이내에 다음 링크를 로드하세요. [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
~
\ No newline at end of file
diff --git a/emails/translations/device-notify_hu.html b/emails/translations/device-notify_nn.html
similarity index 60%
rename from emails/translations/device-notify_hu.html
rename to emails/translations/device-notify_nn.html
index 556ec224..4353cb01 100644
--- a/emails/translations/device-notify_hu.html
+++ b/emails/translations/device-notify_nn.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] - Eszköz értesítés
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] - Eszköz értesítés
+ [[[SERVERNAME]]] - Device Notification
|
- A következő eszközök kapcsolati állapota megváltozott.
+ The following devices have changed their connection state.
- Csatlakozott eszközök:
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- Lecsatlakozott eszközök:
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- A leiratkozáshoz, Kattintson ide az üzenet kézhezvételétől számított 1 órán belül.
+ To unsubscribe, click here within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_nn.txt b/emails/translations/device-notify_nn.txt
new file mode 100644
index 00000000..ed4a6ac5
--- /dev/null
+++ b/emails/translations/device-notify_nn.txt
@@ -0,0 +1,22 @@
+[[[SERVERNAME]]] - Device Notification
+~
+The following devices have changed their connection state.
+~
+~
+~
+Connected devices:
+~
+~[[[CONNECTIONS]]]
+~
+~
+~
+~
+Disconnected devices:
+~
+~[[[DISCONNECTIONS]]]
+~
+~
+~
+
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+~
\ No newline at end of file
diff --git a/emails/translations/device-notify_pt.html b/emails/translations/device-notify_pt.html
index 0e50ce6a..959ad77a 100644
--- a/emails/translations/device-notify_pt.html
+++ b/emails/translations/device-notify_pt.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] - Notificação do dispositivo
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] - Notificação do dispositivo
+ [[[SERVERNAME]]] - Device Notification
|
- Os seguintes dispositivos mudaram seu estado de conexão.
+ The following devices have changed their connection state.
- Dispositivos conectados:
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- Dispositivos desconectados:
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- Para cancelar a inscrição, Clique aqui dentro de 1 hora após receber esta mensagem.
+ To unsubscribe, Clique aqui within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_pt.txt b/emails/translations/device-notify_pt.txt
index 7f7675c6..ed4a6ac5 100644
--- a/emails/translations/device-notify_pt.txt
+++ b/emails/translations/device-notify_pt.txt
@@ -1,22 +1,22 @@
-[[[SERVERNAME]]] - Notificação do dispositivo
+[[[SERVERNAME]]] - Device Notification
~
-Os seguintes dispositivos mudaram seu estado de conexão.
+The following devices have changed their connection state.
~
~
~
-Dispositivos conectados:
+Connected devices:
~
~[[[CONNECTIONS]]]
~
~
~
~
-Dispositivos desconectados:
+Disconnected devices:
~
~[[[DISCONNECTIONS]]]
~
~
~
-Para cancelar a inscrição, carregue este link em até 1 hora após receber esta mensagem: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
~
\ No newline at end of file
diff --git a/emails/translations/device-notify_sv.html b/emails/translations/device-notify_sv.html
index a9c457d6..13ef6bfa 100644
--- a/emails/translations/device-notify_sv.html
+++ b/emails/translations/device-notify_sv.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] – enhetsavisering
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] – enhetsavisering
+ [[[SERVERNAME]]] - Device Notification
|
- Följande enheter har ändrat anslutningsstatus.
+ The following devices have changed their connection state.
- Anslutna enheter:
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- Frånkopplade enheter:
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- Att avprenumerera, Klicka här inom 1 timme efter att du fick detta meddelande.
+ To unsubscribe, Klicka här within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_sv.txt b/emails/translations/device-notify_sv.txt
index be164b2b..ed4a6ac5 100644
--- a/emails/translations/device-notify_sv.txt
+++ b/emails/translations/device-notify_sv.txt
@@ -1,22 +1,22 @@
-[[[SERVERNAME]]] – enhetsavisering
+[[[SERVERNAME]]] - Device Notification
~
-Följande enheter har ändrat anslutningsstatus.
+The following devices have changed their connection state.
~
~
~
-Anslutna enheter:
+Connected devices:
~
~[[[CONNECTIONS]]]
~
~
~
~
-Frånkopplade enheter:
+Disconnected devices:
~
~[[[DISCONNECTIONS]]]
~
~
~
-För att avsluta prenumerationen, ladda denna länk inom 1 timme efter att du fått detta meddelande: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
~
\ No newline at end of file
diff --git a/emails/translations/device-notify_zh-chs.html b/emails/translations/device-notify_zh-chs.html
index c24ac8c9..44bbf065 100644
--- a/emails/translations/device-notify_zh-chs.html
+++ b/emails/translations/device-notify_zh-chs.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] - 设备通知
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] - 设备通知
+ [[[SERVERNAME]]] - Device Notification
|
- 以下设备已更改其连接状态。
+ The following devices have changed their connection state.
- 连接的设备：
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- 断开连接的设备：
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- 退订， 点击这里 在收到此消息的 1 小时内。
+ To unsubscribe, 点击这里 within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_zh-chs.txt b/emails/translations/device-notify_zh-chs.txt
index d992e0c0..ed4a6ac5 100644
--- a/emails/translations/device-notify_zh-chs.txt
+++ b/emails/translations/device-notify_zh-chs.txt
@@ -1,22 +1,22 @@
-[[[SERVERNAME]]] - 设备通知
+[[[SERVERNAME]]] - Device Notification
~
-以下设备已更改其连接状态。
+The following devices have changed their connection state.
~
~
~
-连接的设备：
+Connected devices:
~
~[[[CONNECTIONS]]]
~
~
~
~
-断开连接的设备：
+Disconnected devices:
~
~[[[DISCONNECTIONS]]]
~
~
~
-要取消订阅，请在收到此消息后 1 小时内加载此链接：[[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
~
\ No newline at end of file
diff --git a/emails/translations/device-notify_zh-cht.html b/emails/translations/device-notify_zh-cht.html
index 4d0ef07f..6a897da4 100644
--- a/emails/translations/device-notify_zh-cht.html
+++ b/emails/translations/device-notify_zh-cht.html
@@ -1,20 +1,20 @@
-[[[SERVERNAME]]] - 設備通知
+[[[SERVERNAME]]] - Device Notification
|
- [[[SERVERNAME]]] - 設備通知
+ [[[SERVERNAME]]] - Device Notification
|
- 以下設備已更改其連接狀態。
+ The following devices have changed their connection state.
- 連接的設備：
+ Connected devices:
[[[CONNECTIONS]]]
@@ -22,7 +22,7 @@
- 斷開連接的設備：
+ Disconnected devices:
[[[DISCONNECTIONS]]]
@@ -30,7 +30,7 @@
- 退訂， 點擊這裡 在收到此消息的 1 小時內。
+ To unsubscribe, 點擊這裡 within 1 hour of getting this message.
\ No newline at end of file
diff --git a/emails/translations/device-notify_zh-cht.txt b/emails/translations/device-notify_zh-cht.txt
index 22e63c07..ed4a6ac5 100644
--- a/emails/translations/device-notify_zh-cht.txt
+++ b/emails/translations/device-notify_zh-cht.txt
@@ -1,22 +1,22 @@
-[[[SERVERNAME]]] - 設備通知
+[[[SERVERNAME]]] - Device Notification
~
-以下設備已更改其連接狀態。
+The following devices have changed their connection state.
~
~
~
-連接的設備：
+Connected devices:
~
~[[[CONNECTIONS]]]
~
~
~
~
-斷開連接的設備：
+Disconnected devices:
~
~[[[DISCONNECTIONS]]]
~
~
~
-要取消訂閱，請在收到此消息後 1 小時內加載此鏈接：[[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
+To unsubscribe, load this link within 1 hour of getting this message: [[[SERVERURL]]][[[UNSUBSCRIBELINK]]]
~
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_bs.txt b/emails/translations/mesh-invite_bs.txt
deleted file mode 100644
index 6da44ae6..00000000
--- a/emails/translations/mesh-invite_bs.txt
+++ /dev/null
@@ -1,41 +0,0 @@
-[[[SERVERNAME]]] - Pozivnica
-~
-Zdravo [[[NAME]]],
-~
-Korisnik [[[USERNAME]]] na serveru [[[SERVERNAME]]] ([[[SERVERURL]]]/[[[URLARGS1]]]) traži da instalirate softver za pokretanje sesije daljinskog upravljanja.
-~
-~
-Poruka: [[[MSG]]]
-~
-~
-~
-Za Windows, idite na sljedeću vezu da dovršite proces:
-~
-~[[[SERVERURL]]]/meshagents?id=4&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
-~
-~
-~
-Za Apple OSX, idite na sljedeću vezu da dovršite proces:
-~
-~[[[SERVERURL]]]/meshosxagent?id=16&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
-~
-~
-~
-Za Linux, izrežite i zalijepite sljedeće u terminal da biste instalirali agenta:
-~
-~wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] '[[[MESHIDHEX]]]'
-~
-~
-~
-Za MeshCentral Assistant na Windows-u, idite na sljedeću vezu da dovršite proces:
-~
-~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
-~
-~
-~
-Da instalirate softver, idite na [[[SERVERURL]]][[[LINKURL]]][[[URLARGS2]]] i slijedite upute.
-~
-Ako niste vi inicirali ovaj zahtjev, zanemarite ovu poruku.
-~
-Srdačan pozdrav,
-~[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_cs.html b/emails/translations/mesh-invite_cs.html
index a5fcc451..18f6c8c2 100644
--- a/emails/translations/mesh-invite_cs.html
+++ b/emails/translations/mesh-invite_cs.html
@@ -34,7 +34,7 @@
- Kliknutím sem stáhnete MeshCentral Assistant pro Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_cs.txt b/emails/translations/mesh-invite_cs.txt
index 0a7ca244..80c108b2 100644
--- a/emails/translations/mesh-invite_cs.txt
+++ b/emails/translations/mesh-invite_cs.txt
@@ -27,7 +27,7 @@ V případě systému Linux vyjměte a vložte do terminálu a nainstalujte agen
~
~
~
-Pro MeshCentral Assistant v systému Windows přejděte na následující odkaz a dokončete proces:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_da.html b/emails/translations/mesh-invite_da.html
index 0ae90618..832fb738 100644
--- a/emails/translations/mesh-invite_da.html
+++ b/emails/translations/mesh-invite_da.html
@@ -34,7 +34,7 @@
- Klik her for at downloade MeshCentral Assistant til Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_da.txt b/emails/translations/mesh-invite_da.txt
index a06d1ad5..5fb79606 100644
--- a/emails/translations/mesh-invite_da.txt
+++ b/emails/translations/mesh-invite_da.txt
@@ -27,7 +27,7 @@ For Linux skal du klippe og indsætte følgende i en terminal for at installere
~
~
~
-For MeshCentral Assistant på Windows skal du gå til følgende link for at fuldføre processen:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_de.html b/emails/translations/mesh-invite_de.html
index 5a5f2efb..9c37ee5c 100644
--- a/emails/translations/mesh-invite_de.html
+++ b/emails/translations/mesh-invite_de.html
@@ -3,7 +3,7 @@
|
- [[[SERVERNAME]]] - Agent-Installation
+ [[[SERVERNAME]]] - Agenteninstallation
|
@@ -15,7 +15,7 @@
Benutzer [[[USERNAME]]] auf dem Server [[[SERVERNAME]]] fordert Sie auf, Software zu installieren, um eine Fernsteuerungssitzung zu starten.
- Nachricht: [[[MSG]]]
+ Botschaft: [[[MSG]]]
@@ -28,13 +28,13 @@
- Schneiden Sie unter Linux Folgendes aus und fügen Sie es in ein Terminal ein, um den Agent zu installieren:
+ Schneiden Sie unter Linux Folgendes aus und fügen Sie es in ein Terminal ein, um den Agenten zu installieren:
wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] \'[[[MESHIDHEX]]]\'
- Klicken Sie hier, um den MeshCentral-Assistenten für Windows herunterzuladen.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_de.txt b/emails/translations/mesh-invite_de.txt
index 961fcc02..976e83f6 100644
--- a/emails/translations/mesh-invite_de.txt
+++ b/emails/translations/mesh-invite_de.txt
@@ -21,13 +21,13 @@ Nagivieren Sie unter Apple OSX den folgenden Link, um den Vorgang abzuschließen
~
~
~
-Schneiden Sie unter Linux Folgendes aus und fügen Sie es in ein Terminal ein, um den Agent zu installieren:
+Schneiden Sie unter Linux Folgendes aus und fügen Sie es in ein Terminal ein, um den Agenten zu installieren:
~
~wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] '[[[MESHIDHEX]]]'
~
~
~
-Navigieren Sie für MeshCentral Assistant unter Windows zum folgenden Link, um den Vorgang abzuschließen:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_es.html b/emails/translations/mesh-invite_es.html
index cedfc2a6..1f0d2552 100644
--- a/emails/translations/mesh-invite_es.html
+++ b/emails/translations/mesh-invite_es.html
@@ -34,7 +34,7 @@
- Haga clic aquí para descargar el Asistente de MeshCentral para Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_es.txt b/emails/translations/mesh-invite_es.txt
index 44c3db2a..a51d2d10 100644
--- a/emails/translations/mesh-invite_es.txt
+++ b/emails/translations/mesh-invite_es.txt
@@ -27,7 +27,7 @@ Para Linux, copia y pega lo siguiente en la terminal para instalar el agente:
~
~
~
-Para el Asistente de MeshCentral en Windows, navegue hasta el siguiente enlace para completar el proceso:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_fi.html b/emails/translations/mesh-invite_fi.html
index 82cff925..61e81977 100644
--- a/emails/translations/mesh-invite_fi.html
+++ b/emails/translations/mesh-invite_fi.html
@@ -34,7 +34,7 @@
- Napsauta tätä ladataksesi MeshCentral Assistant for Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_fi.txt b/emails/translations/mesh-invite_fi.txt
index 368e01d5..76839b54 100644
--- a/emails/translations/mesh-invite_fi.txt
+++ b/emails/translations/mesh-invite_fi.txt
@@ -27,7 +27,7 @@ Linux: leikkaa ja liitä seuraava päätelaitteeseen agentin asentamiseksi:
~
~
~
-Jos käytät MeshCentral Assistantia Windowsissa, siirry seuraavaan linkkiin prosessin viimeistelemiseksi:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_hi.html b/emails/translations/mesh-invite_hi.html
index 971c04a1..9c1354ce 100644
--- a/emails/translations/mesh-invite_hi.html
+++ b/emails/translations/mesh-invite_hi.html
@@ -34,7 +34,7 @@
- विंडोज के लिए मेशसेंट्रल असिस्टेंट डाउनलोड करने के लिए यहां क्लिक करें।
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_hi.txt b/emails/translations/mesh-invite_hi.txt
index a6138486..5314dc5c 100644
--- a/emails/translations/mesh-invite_hi.txt
+++ b/emails/translations/mesh-invite_hi.txt
@@ -27,7 +27,7 @@ Apple OSX के लिए, इस प्रक्रिया को पूर
~
~
~
-विंडोज़ पर मेशसेंट्रल असिस्टेंट के लिए, प्रक्रिया को पूरा करने के लिए निम्न लिंक पर जाएँ:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_hu.html b/emails/translations/mesh-invite_hu.html
deleted file mode 100644
index 10faaf72..00000000
--- a/emails/translations/mesh-invite_hu.html
+++ /dev/null
@@ -1,47 +0,0 @@
-[[[SERVERNAME]]] - Meghívás
-
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_hu.txt b/emails/translations/mesh-invite_hu.txt
deleted file mode 100644
index 437028be..00000000
--- a/emails/translations/mesh-invite_hu.txt
+++ /dev/null
@@ -1,41 +0,0 @@
-[[[SERVERNAME]]] - Meghívás
-~
-Tisztelt [[[NAME]]],
-~
-A [[[USERNAME]]] felhasználó a [[[SERVERNAME]]] kiszolgálón ([[[[SERVERURL]]]/[[[URLARGS1]]]) a távvezérlési munkamenet indításához szükséges szoftver telepítését kéri.
-~
-~
-Üzenet: [[[MSG]]]
-~
-~
-~
-Windows esetén a folyamat befejezéséhez menjen a következő hivatkozásra:
-~
-~[[[SERVERURL]]]/meshagents?id=4&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
-~
-~
-~
-Apple OSX esetén kattintson az alábbi linkre a folyamat befejezéséhez:
-~
-~[[[SERVERURL]]]/meshosxagent?id=16&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
-~
-~
-~
-Linux esetén az Agent telepítéséhez vágja ki és illessze be egy terminálba a következőt:
-~
-~wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] '[[[MESHIDHEX]]]'
-~
-~
-~
-Windows rendszeren futó MeshCentral Assistant esetén menjen a következő hivatkozásra a folyamat befejezéséhez:
-~
-~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
-~
-~
-~
-A szoftver telepítéséhez kérjük lépjen a [[[SERVERURL]]][[[LINKURL]]][[[URLARGS2]]] oldalra, és kövesse az utasításokat.
-~
-Ha nem Ön kezdeményezte ezt a kérést, kérjük, hagyja figyelmen kívül ezt a levelet.
-~
-Üdvözlettel,
-~[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_it.html b/emails/translations/mesh-invite_it.html
index d2f82d68..b0ab3ca1 100644
--- a/emails/translations/mesh-invite_it.html
+++ b/emails/translations/mesh-invite_it.html
@@ -34,7 +34,7 @@
- Fare clic qui per scaricare MeshCentral Assistant per Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_it.txt b/emails/translations/mesh-invite_it.txt
index 5673519d..9eb5cf76 100644
--- a/emails/translations/mesh-invite_it.txt
+++ b/emails/translations/mesh-invite_it.txt
@@ -27,7 +27,7 @@ Per Linux, taglia e incolla quanto segue in un terminale per installare l'agente
~
~
~
-Per MeshCentral Assistant su Windows, accedere al seguente collegamento per completare il processo:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_ja.html b/emails/translations/mesh-invite_ja.html
index 0cc05dad..ba857840 100644
--- a/emails/translations/mesh-invite_ja.html
+++ b/emails/translations/mesh-invite_ja.html
@@ -34,7 +34,7 @@
- Windows용 MeshCentral Assistant를 다운로드하려면 여기를 클릭하십시오.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_ja.txt b/emails/translations/mesh-invite_ja.txt
index 91db4edb..fe7f5b8b 100644
--- a/emails/translations/mesh-invite_ja.txt
+++ b/emails/translations/mesh-invite_ja.txt
@@ -27,7 +27,7 @@ Linuxの場合は、ターミナルで以下をカットアンドペーストし
~
~
~
-Windows용 MeshCentral Assistant의 경우 다음 링크로 이동하여 프로세스를 완료하십시오.
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_ko.html b/emails/translations/mesh-invite_ko.html
index a9872cc0..0241238e 100644
--- a/emails/translations/mesh-invite_ko.html
+++ b/emails/translations/mesh-invite_ko.html
@@ -34,7 +34,7 @@
- Windows용 MeshCentral Assistant를 다운로드하려면 여기를 클릭하십시오.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_ko.txt b/emails/translations/mesh-invite_ko.txt
index 21dcc913..55b887bf 100644
--- a/emails/translations/mesh-invite_ko.txt
+++ b/emails/translations/mesh-invite_ko.txt
@@ -27,7 +27,7 @@ Linux의 경우, 다음을 잘라내어 터미널에 붙여 넣어 에이전트
~
~
~
-Windows용 MeshCentral Assistant의 경우 다음 링크로 이동하여 프로세스를 완료하십시오.
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_bs.html b/emails/translations/mesh-invite_n.html
similarity index 50%
rename from emails/translations/mesh-invite_bs.html
rename to emails/translations/mesh-invite_n.html
index 470b0056..0058093d 100644
--- a/emails/translations/mesh-invite_bs.html
+++ b/emails/translations/mesh-invite_n.html
@@ -1,47 +1,42 @@
-[[[SERVERNAME]]] - Pozivnica
+[[[SERVERNAME]]] - Invitation
|
- [[[SERVERNAME]]] - Instalacija agenta
+ [[[SERVERNAME]]] - Agent Installation
|
- Zdravo [[[NAME]]],
+ Hello [[[NAME]]],
-
Korisnik [[[USERNAME]]] na serveru [[[SERVERNAME]]] traži od vas da instalirate softver za pokretanje sesije daljinskog upravljanja.
+
User [[[USERNAME]]] on server [[[SERVERNAME]]] is requesting you to install software to start a remote control session.
- Poruka: [[[MSG]]]
+ Message: [[[MSG]]]
- Kliknite ovdje da preuzmete MeshAgent za Windows.
+ Click here to download the MeshAgent for Windows.
- Kliknite ovdje da preuzmete MeshAgent za Apple OSX.
+ Click here to download the MeshAgent for Apple OSX.
- Za Linux, izrežite i zalijepite sljedeće u terminal da biste instalirali agenta:
+ For Linux, cut & paste the following in a terminal to install the agent:
wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] \'[[[MESHIDHEX]]]\'
-
-
- Kliknite ovdje da preuzmete MeshCentral Assistant za Windows.
-
-
- Da biste instalirali softver, kliknite ovdje i slijedite upute.
+ To install the software, click here and follow the instructions.
-
Ako niste vi inicirali ovaj zahtjev, zanemarite ovu poruku.
- Srdačan pozdrav,
[[[USERNAME]]]
+
If you did not initiate this request, please ignore this mail.
+ Best regards,
[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_n.txt b/emails/translations/mesh-invite_n.txt
new file mode 100644
index 00000000..ade301dc
--- /dev/null
+++ b/emails/translations/mesh-invite_n.txt
@@ -0,0 +1,35 @@
+[[[SERVERNAME]]] - Invitation
+~
+Hello [[[NAME]]],
+~
+User [[[USERNAME]]] on server [[[SERVERNAME]]] ([[[SERVERURL]]]/[[[URLARGS1]]]) is requesting you install software to start the remote control session.
+~
+~
+Message: [[[MSG]]]
+~
+~
+~
+For Windows, nagivate to the following link to complete the process:
+~
+~[[[SERVERURL]]]/meshagents?id=4&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
+~
+~
+~
+For Apple OSX, nagivate to the following link to complete the process:
+~
+~[[[SERVERURL]]]/meshosxagent?id=16&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]&installflags=[[[INSTALLFLAGS]]]
+~
+~
+~
+For Linux, cut & paste the following in a terminal to install the agent:
+~
+~wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] '[[[MESHIDHEX]]]'
+~
+~
+~
+To install the software, navigate to [[[SERVERURL]]][[[LINKURL]]][[[URLARGS2]]] and follow the instructions.
+~
+If you did not initiate this request, please ignore this mail.
+~
+Best regards,
+~[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_nn.html b/emails/translations/mesh-invite_nn.html
new file mode 100644
index 00000000..0058093d
--- /dev/null
+++ b/emails/translations/mesh-invite_nn.html
@@ -0,0 +1,42 @@
+[[[SERVERNAME]]] - Invitation
+
+
+
+ |
+ [[[SERVERNAME]]] - Agent Installation
+ |
+
+
+
+
+ Hello [[[NAME]]],
+
+
+
User [[[USERNAME]]] on server [[[SERVERNAME]]] is requesting you to install software to start a remote control session.
+
+
+ Message: [[[MSG]]]
+
+
+
+
+ Click here to download the MeshAgent for Windows.
+
+
+
+ Click here to download the MeshAgent for Apple OSX.
+
+
+
+ For Linux, cut & paste the following in a terminal to install the agent:
+
wget -q "[[[SERVERURL]]]/meshagents?script=1" --no-check-certificate -O ./meshinstall.sh && chmod 755 ./meshinstall.sh && sudo ./meshinstall.sh [[[SERVERURL]]] \'[[[MESHIDHEX]]]\'
+
+
+
+
+ To install the software, click here and follow the instructions.
+
+
+
If you did not initiate this request, please ignore this mail.
+ Best regards,
[[[USERNAME]]]
+
- Clique aqui para baixar o Assistente MeshCentral para Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_pt.txt b/emails/translations/mesh-invite_pt.txt
index bb13866b..72e3a393 100644
--- a/emails/translations/mesh-invite_pt.txt
+++ b/emails/translations/mesh-invite_pt.txt
@@ -27,7 +27,7 @@ Para Linux, recorte e cole o seguinte em um terminal para instalar o agente:
~
~
~
-Para o MeshCentral Assistant no Windows, navegue até o seguinte link para concluir o processo:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_sv.html b/emails/translations/mesh-invite_sv.html
index 22261dd6..264b91f3 100644
--- a/emails/translations/mesh-invite_sv.html
+++ b/emails/translations/mesh-invite_sv.html
@@ -34,7 +34,7 @@
- Klicka här för att ladda ner MeshCentral Assistant för Windows.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_sv.txt b/emails/translations/mesh-invite_sv.txt
index 6e867358..7e2aea3d 100644
--- a/emails/translations/mesh-invite_sv.txt
+++ b/emails/translations/mesh-invite_sv.txt
@@ -2,7 +2,7 @@
~
Hej [[[NAME]]]
~
-Användaren [[[USERNAME]]] på servern [[[SERVERNAME]]] ([[[SERVERURL]]/[[[URLARGS1]]) ber dig installera programvara för att starta fjärrkontrollsessionen.
+Användaren [[[USERNAME]]] på servern [[[SERVERNAME]]] ([[[SERVERURL]] / [[[URLARGS1]]) ber dig installera programvara för att starta fjärrkontrollsessionen.
~
~
Meddelande: [[[[MSG]]]
@@ -27,7 +27,7 @@ För Linux, klipp och klistra in följande i en terminal för att installera age
~
~
~
-För MeshCentral Assistant på Windows, gå till följande länk för att slutföra processen:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_tr.html b/emails/translations/mesh-invite_tr.html
index 26cc077b..6dbd7c7f 100644
--- a/emails/translations/mesh-invite_tr.html
+++ b/emails/translations/mesh-invite_tr.html
@@ -34,7 +34,7 @@
- Windows için MeshCentral Assistant'ı indirmek için buraya tıklayın.
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_tr.txt b/emails/translations/mesh-invite_tr.txt
index 42e818a8..138bebf5 100644
--- a/emails/translations/mesh-invite_tr.txt
+++ b/emails/translations/mesh-invite_tr.txt
@@ -27,7 +27,7 @@ Linux için, aracıyı yüklemek için aşağıdakileri kesip bir terminale yap
~
~
~
-Windows'ta MeshCentral Assistant için işlemi tamamlamak üzere aşağıdaki bağlantıya gidin:
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/mesh-invite_zh-chs.html b/emails/translations/mesh-invite_zh-chs.html
index 39b649d5..9c69b50a 100644
--- a/emails/translations/mesh-invite_zh-chs.html
+++ b/emails/translations/mesh-invite_zh-chs.html
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 邀请
+[[[SERVERNAME]]]-邀请
@@ -34,7 +34,7 @@
- 单击此处下载适用于 Windows 的 MeshCentral 助手。
+ Click here to download the MeshCentral Assistant for Windows.
@@ -42,6 +42,6 @@
要安装软件， 点击这里 并按照说明进行操作。
- 如果您没有发起此请求，请忽略此邮件。
+ 如果您没有发起此请求，请不理此邮件。
最好的祝福，
[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_zh-chs.txt b/emails/translations/mesh-invite_zh-chs.txt
index f4140b66..42be8cbd 100644
--- a/emails/translations/mesh-invite_zh-chs.txt
+++ b/emails/translations/mesh-invite_zh-chs.txt
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 邀请
+[[[SERVERNAME]]]-邀请
~
您好[[[NAME]]]，
~
@@ -27,7 +27,7 @@
~
~
~
-对于 Windows 上的 MeshCentral Assistant，导航到以下链接以完成该过程：
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
@@ -35,7 +35,7 @@
~
要安装软件，请导航至[[[SERVERURL]]][[[LINKURL]]][[[URLARGS2]]]，然后按照说明进行操作。
~
-如果您没有发起此请求，请忽略此邮件。
+如果您没有发起此请求，请不理此邮件。
~
最好的祝福，
~[[[USERNAME]]]
\ No newline at end of file
diff --git a/emails/translations/mesh-invite_zh-cht.html b/emails/translations/mesh-invite_zh-cht.html
index 7274fba6..96828ff9 100644
--- a/emails/translations/mesh-invite_zh-cht.html
+++ b/emails/translations/mesh-invite_zh-cht.html
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 邀請
+[[[SERVERNAME]]]-邀請
@@ -34,7 +34,7 @@
- 單擊此處下載適用於 Windows 的 MeshCentral 助手。
+ Click here to download the MeshCentral Assistant for Windows.
diff --git a/emails/translations/mesh-invite_zh-cht.txt b/emails/translations/mesh-invite_zh-cht.txt
index 52bab9a1..382ecdc6 100644
--- a/emails/translations/mesh-invite_zh-cht.txt
+++ b/emails/translations/mesh-invite_zh-cht.txt
@@ -1,4 +1,4 @@
-[[[SERVERNAME]]] - 邀請
+[[[SERVERNAME]]]-邀請
~
你好[[[NAME]]]，
~
@@ -27,7 +27,7 @@
~
~
~
-對於 Windows 上的 MeshCentral Assistant，導航到以下鏈接以完成該過程：
+For MeshCentral Assistant on Windows, nagivate to the following link to complete the process:
~
~[[[SERVERURL]]]/meshagents?id=10006&meshid=[[[MESHIDHEX]]]&tag=mailto:[[[EMAIL]]]
~
diff --git a/emails/translations/sms-messages_bs.txt b/emails/translations/sms-messages_bs.txt
deleted file mode 100644
index 768b0043..00000000
--- a/emails/translations/sms-messages_bs.txt
+++ /dev/null
@@ -1,2 +0,0 @@
-[[0]] verifikacioni kod je: [[1]]
-[[0]] pristupni token je: [[1]]
diff --git a/emails/translations/sms-messages_hi.txt b/emails/translations/sms-messages_hi.txt
index 81e0954b..3c933cf3 100644
--- a/emails/translations/sms-messages_hi.txt
+++ b/emails/translations/sms-messages_hi.txt
@@ -1,2 +1,2 @@
-[[0]] सत्यापन कोड है: [[1]]
+[[०]] सत्यापन कोड है: [[१]]
[[0]] अभिगमन टोकन है: [[१]]
diff --git a/emails/translations/sms-messages_hu.txt b/emails/translations/sms-messages_hu.txt
deleted file mode 100644
index 07b75b61..00000000
--- a/emails/translations/sms-messages_hu.txt
+++ /dev/null
@@ -1,2 +0,0 @@
-[[0]] ellenőrző kód: [[1]]
-[[0]] hozzáférés token: [[1]]
diff --git a/emails/translations/sms-messages_n.txt b/emails/translations/sms-messages_n.txt
new file mode 100644
index 00000000..cffc6c48
--- /dev/null
+++ b/emails/translations/sms-messages_n.txt
@@ -0,0 +1,2 @@
+[[0]] verification code is: [[1]]
+[[0]] access token is: [[1]]
diff --git a/emails/translations/sms-messages_nn.txt b/emails/translations/sms-messages_nn.txt
new file mode 100644
index 00000000..cffc6c48
--- /dev/null
+++ b/emails/translations/sms-messages_nn.txt
@@ -0,0 +1,2 @@
+[[0]] verification code is: [[1]]
+[[0]] access token is: [[1]]
diff --git a/emails/translations/sms-messages_zh-chs.txt b/emails/translations/sms-messages_zh-chs.txt
index 9d2e320e..92e65ab8 100644
--- a/emails/translations/sms-messages_zh-chs.txt
+++ b/emails/translations/sms-messages_zh-chs.txt
@@ -1,2 +1,2 @@
[[0]]验证码是：[[1]]
-[[0]]访问令牌是：[[1]]
+[[0]]访问保安编码是：[[1]]
diff --git a/firebase.js b/firebase.js
index 124acfa0..d20a9541 100644
--- a/firebase.js
+++ b/firebase.js
@@ -1,6 +1,7 @@
/**
* @description MeshCentral Firebase communication module
* @author Ylian Saint-Hilaire
+* @copyright Intel Corporation 2018-2022
* @license Apache-2.0
* @version v0.0.1
*/
@@ -13,31 +14,27 @@
/*jshint esversion: 6 */
"use strict";
-// Initialize the Firebase Admin SDK
-module.exports.CreateFirebase = function (parent, serviceAccount) {
-
- // Import the Firebase Admin SDK
- const admin = require('firebase-admin');
-
- const obj = {};
+// Construct the Firebase object
+module.exports.CreateFirebase = function (parent, senderid, serverkey) {
+ var obj = {};
obj.messageId = 0;
obj.relays = {};
obj.stats = {
- mode: 'Real',
+ mode: "Real",
sent: 0,
sendError: 0,
received: 0,
receivedNoRoute: 0,
receivedBadArgs: 0
- };
-
- const tokenToNodeMap = {}; // Token --> { nid: nodeid, mid: meshid }
-
- // Initialize Firebase Admin with server key and project ID
- if (!admin.apps.length) {
- admin.initializeApp({ credential: admin.credential.cert(serviceAccount) });
}
-
+
+ const Sender = require('node-xcs').Sender;
+ const Message = require('node-xcs').Message;
+ const Notification = require('node-xcs').Notification;
+ const xcs = new Sender(senderid, serverkey);
+
+ var tokenToNodeMap = {} // Token --> { nid: nodeid, mid: meshid }
+
// Setup logging
if (parent.config.firebase && (parent.config.firebase.log === true)) {
obj.logpath = parent.path.join(parent.datapath, 'firebase.txt');
@@ -45,108 +42,155 @@ module.exports.CreateFirebase = function (parent, serviceAccount) {
} else {
obj.log = function () { }
}
-
- // Function to send notifications
+
+ // Messages received from client (excluding receipts)
+ xcs.on('message', function (messageId, from, data, category) {
+ const jsonData = JSON.stringify(data);
+ obj.log('Firebase-Message: ' + jsonData);
+ parent.debug('email', 'Firebase-Message: ' + jsonData);
+
+ if (typeof data.r == 'string') {
+ // Lookup push relay server
+ parent.debug('email', 'Firebase-RelayRoute: ' + data.r);
+ const wsrelay = obj.relays[data.r];
+ if (wsrelay != null) {
+ delete data.r;
+ try { wsrelay.send(JSON.stringify({ from: from, data: data, category: category })); } catch (ex) { }
+ }
+ } else {
+ // Lookup node information from the cache
+ var ninfo = tokenToNodeMap[from];
+ if (ninfo == null) { obj.stats.receivedNoRoute++; return; }
+
+ if ((data != null) && (data.con != null) && (data.s != null)) { // Console command
+ obj.stats.received++;
+ parent.webserver.routeAgentCommand({ action: 'msg', type: 'console', value: data.con, sessionid: data.s }, ninfo.did, ninfo.nid, ninfo.mid);
+ } else {
+ obj.stats.receivedBadArgs++;
+ }
+ }
+ });
+
+ // Only fired for messages where options.delivery_receipt_requested = true
+ /*
+ xcs.on('receipt', function (messageId, from, data, category) { console.log('Firebase-Receipt', messageId, from, data, category); });
+ xcs.on('connected', function () { console.log('Connected'); });
+ xcs.on('disconnected', function () { console.log('disconnected'); });
+ xcs.on('online', function () { console.log('online'); });
+ xcs.on('error', function (e) { console.log('error', e); });
+ xcs.on('message-error', function (e) { console.log('message-error', e); });
+ */
+
+ xcs.start();
+
+ obj.log('CreateFirebase-Setup');
+ parent.debug('email', 'CreateFirebase-Setup');
+
+ // EXAMPLE
+ //var payload = { notification: { title: command.title, body: command.msg }, data: { url: obj.msgurl } };
+ //var options = { priority: 'High', timeToLive: 5 * 60 }; // TTL: 5 minutes, priority 'Normal' or 'High'
+
obj.sendToDevice = function (node, payload, options, func) {
- if (typeof node === 'string') {
- parent.db.Get(node, function (err, docs) {
- if (!err && docs && docs.length === 1) {
- obj.sendToDeviceEx(docs[0], payload, options, func);
- } else {
- func(0, 'error');
- }
- });
+ if (typeof node == 'string') {
+ parent.db.Get(node, function (err, docs) { if ((err == null) && (docs != null) && (docs.length == 1)) { obj.sendToDeviceEx(docs[0], payload, options, func); } else { func(0, 'error'); } })
} else {
obj.sendToDeviceEx(node, payload, options, func);
}
- };
-
+ }
+
// Send an outbound push notification
obj.sendToDeviceEx = function (node, payload, options, func) {
- if (!node || typeof node.pmt !== 'string') {
- func(0, 'error');
- return;
- }
-
+ parent.debug('email', 'Firebase-sendToDevice');
+ if ((node == null) || (typeof node.pmt != 'string')) return;
obj.log('sendToDevice, node:' + node._id + ', payload: ' + JSON.stringify(payload) + ', options: ' + JSON.stringify(options));
-
+
// Fill in our lookup table
- if (node._id) {
- tokenToNodeMap[node.pmt] = {
- nid: node._id,
- mid: node.meshid,
- did: node.domain
- };
+ if (node._id != null) { tokenToNodeMap[node.pmt] = { nid: node._id, mid: node.meshid, did: node.domain } }
+
+ // Built the on-screen notification
+ var notification = null;
+ if (payload.notification) {
+ var notification = new Notification('ic_message')
+ .title(payload.notification.title)
+ .body(payload.notification.body)
+ .build();
}
-
- const message = {
- token: node.pmt,
- notification: payload.notification,
- data: payload.data,
- android: {
- priority: options.priority || 'high',
- ttl: options.timeToLive ? options.timeToLive * 1000 : undefined
- }
- };
-
- admin.messaging().send(message).then(function (response) {
- obj.stats.sent++;
- obj.log('Success');
- func(response);
- }).catch(function (error) {
- obj.stats.sendError++;
- obj.log('Fail: ' + error);
- func(0, error);
- });
- };
-
+
+ // Build the message
+ var message = new Message('msg_' + (++obj.messageId));
+ if (options.priority) { message.priority(options.priority); }
+ if (payload.data) { for (var i in payload.data) { message.addData(i, payload.data[i]); } }
+ if ((payload.data == null) || (payload.data.shash == null)) { message.addData('shash', parent.webserver.agentCertificateHashBase64); } // Add the server agent hash, new Android agents will reject notifications that don't have this.
+ if (notification) { message.notification(notification) }
+ message.build();
+
+ // Send the message
+ function callback(result) {
+ if (result.getError() == null) { obj.stats.sent++; obj.log('Success'); } else { obj.stats.sendError++; obj.log('Fail'); }
+ callback.func(result.getMessageId(), result.getError(), result.getErrorDescription())
+ }
+ callback.func = func;
+ parent.debug('email', 'Firebase-sending');
+ xcs.sendNoRetry(message, node.pmt, callback);
+ }
+
// Setup a two way relay
obj.setupRelay = function (ws) {
+ // Select and set a relay identifier
ws.relayId = getRandomPassword();
- while (obj.relays[ws.relayId]) { ws.relayId = getRandomPassword(); }
+ while (obj.relays[ws.relayId] != null) { ws.relayId = getRandomPassword(); }
obj.relays[ws.relayId] = ws;
+ // On message, parse it
ws.on('message', function (msg) {
parent.debug('email', 'FBWS-Data(' + this.relayId + '): ' + msg);
- if (typeof msg === 'string') {
+ if (typeof msg == 'string') {
obj.log('Relay: ' + msg);
-
- let data;
- try { data = JSON.parse(msg); } catch (ex) { return; }
- if (typeof data !== 'object') return;
- if (!parent.common.validateObjectForMongo(data, 4096)) return;
- if (typeof data.pmt !== 'string' || typeof data.payload !== 'object') return;
-
- data.payload.data = data.payload.data || {};
- data.payload.data.r = ws.relayId;
-
- obj.sendToDevice({ pmt: data.pmt }, data.payload, data.options, function (id, err) {
- if (!err) {
- try { ws.send(JSON.stringify({ sent: true })); } catch (ex) { }
+
+ // Parse the incoming push request
+ var data = null;
+ try { data = JSON.parse(msg) } catch (ex) { return; }
+ if (typeof data != 'object') return;
+ if (parent.common.validateObjectForMongo(data, 4096) == false) return; // Perform sanity checking on this object.
+ if (typeof data.pmt != 'string') return;
+ if (typeof data.payload != 'object') return;
+ if (typeof data.payload.notification == 'object') {
+ if (typeof data.payload.notification.title != 'string') return;
+ if (typeof data.payload.notification.body != 'string') return;
+ }
+ if (typeof data.options != 'object') return;
+ if ((data.options.priority != 'Normal') && (data.options.priority != 'High')) return;
+ if ((typeof data.options.timeToLive != 'number') || (data.options.timeToLive < 1)) return;
+ if (typeof data.payload.data != 'object') { data.payload.data = {}; }
+ data.payload.data.r = ws.relayId; // Set the relay id.
+
+ // Send the push notification
+ obj.sendToDevice({ pmt: data.pmt }, data.payload, data.options, function (id, err, errdesc) {
+ if (err == null) {
+ try { wsrelay.send(JSON.stringify({ sent: true })); } catch (ex) { }
} else {
- try { ws.send(JSON.stringify({ sent: false })); } catch (ex) { }
+ try { wsrelay.send(JSON.stringify({ sent: false })); } catch (ex) { }
}
});
}
});
-
+
// If error, close the relay
ws.on('error', function (err) {
parent.debug('email', 'FBWS-Error(' + this.relayId + '): ' + err);
delete obj.relays[this.relayId];
});
-
+
// Close the relay
ws.on('close', function () {
parent.debug('email', 'FBWS-Close(' + this.relayId + ')');
delete obj.relays[this.relayId];
});
- };
-
- function getRandomPassword() {
- return Buffer.from(parent.crypto.randomBytes(9), 'binary').toString('base64').replace(/\//g, '@');
+
}
-
+
+ function getRandomPassword() { return Buffer.from(parent.crypto.randomBytes(9), 'binary').toString('base64').split('/').join('@'); }
+
return obj;
};
@@ -168,7 +212,7 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
const querystring = require('querystring');
const relayUrl = require('url').parse(url);
parent.debug('email', 'CreateFirebaseRelay-Setup');
-
+
// Setup logging
if (parent.config.firebaserelay && (parent.config.firebaserelay.log === true)) {
obj.logpath = parent.path.join(parent.datapath, 'firebaserelay.txt');
@@ -176,7 +220,7 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
} else {
obj.log = function () { }
}
-
+
obj.log('Starting relay to: ' + relayUrl.href);
if (relayUrl.protocol == 'wss:') {
// Setup two-way push notification channel
@@ -208,7 +252,7 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
parent.debug('email', 'FBWS-Disconnected');
obj.wsclient = null;
obj.wsopen = false;
-
+
// Compute the backoff timer
if (obj.reconnectTimer == null) {
if ((obj.lastConnect != null) && ((Date.now() - obj.lastConnect) > 10000)) { obj.backoffTimer = 0; }
@@ -219,12 +263,12 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
}
});
}
-
+
function processMessage(messageId, from, data, category) {
// Lookup node information from the cache
var ninfo = obj.tokenToNodeMap[from];
if (ninfo == null) { obj.stats.receivedNoRoute++; return; }
-
+
if ((data != null) && (data.con != null) && (data.s != null)) { // Console command
obj.stats.received++;
parent.webserver.routeAgentCommand({ action: 'msg', type: 'console', value: data.con, sessionid: data.s }, ninfo.did, ninfo.nid, ninfo.mid);
@@ -232,7 +276,7 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
obj.stats.receivedBadArgs++;
}
}
-
+
obj.sendToDevice = function (node, payload, options, func) {
if (typeof node == 'string') {
parent.db.Get(node, function (err, docs) { if ((err == null) && (docs != null) && (docs.length == 1)) { obj.sendToDeviceEx(docs[0], payload, options, func); } else { func(0, 'error'); } })
@@ -240,19 +284,19 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
obj.sendToDeviceEx(node, payload, options, func);
}
}
-
+
obj.sendToDeviceEx = function (node, payload, options, func) {
parent.debug('email', 'Firebase-sendToDevice-webSocket');
if ((node == null) || (typeof node.pmt != 'string')) { func(0, 'error'); return; }
obj.log('sendToDevice, node:' + node._id + ', payload: ' + JSON.stringify(payload) + ', options: ' + JSON.stringify(options));
-
+
// Fill in our lookup table
if (node._id != null) { obj.tokenToNodeMap[node.pmt] = { nid: node._id, mid: node.meshid, did: node.domain } }
-
+
// Fill in the server agent cert hash
if (payload.data == null) { payload.data = {}; }
if (payload.data.shash == null) { payload.data.shash = parent.webserver.agentCertificateHashBase64; } // Add the server agent hash, new Android agents will reject notifications that don't have this.
-
+
// If the web socket is open, send now
if (obj.wsopen == true) {
try { obj.wsclient.send(JSON.stringify({ pmt: node.pmt, payload: payload, options: options })); } catch (ex) { func(0, 'error'); obj.stats.sendError++; return; }
@@ -270,7 +314,7 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
} else if (relayUrl.protocol == 'https:') {
// Send an outbound push notification using an HTTPS POST
obj.pushOnly = true;
-
+
obj.sendToDevice = function (node, payload, options, func) {
if (typeof node == 'string') {
parent.db.Get(node, function (err, docs) { if ((err == null) && (docs != null) && (docs.length == 1)) { obj.sendToDeviceEx(docs[0], payload, options, func); } else { func(0, 'error'); } })
@@ -278,18 +322,18 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
obj.sendToDeviceEx(node, payload, options, func);
}
}
-
+
obj.sendToDeviceEx = function (node, payload, options, func) {
parent.debug('email', 'Firebase-sendToDevice-httpPost');
if ((node == null) || (typeof node.pmt != 'string')) return;
-
+
// Fill in the server agent cert hash
if (payload.data == null) { payload.data = {}; }
if (payload.data.shash == null) { payload.data.shash = parent.webserver.agentCertificateHashBase64; } // Add the server agent hash, new Android agents will reject notifications that don't have this.
-
+
obj.log('sendToDevice, node:' + node._id + ', payload: ' + JSON.stringify(payload) + ', options: ' + JSON.stringify(options));
const querydata = querystring.stringify({ 'msg': JSON.stringify({ pmt: node.pmt, payload: payload, options: options }) });
-
+
// Send the message to the relay
const httpOptions = {
hostname: relayUrl.hostname,
@@ -313,6 +357,6 @@ module.exports.CreateFirebaseRelay = function (parent, url, key) {
req.end();
}
}
-
+
return obj;
};
\ No newline at end of file
diff --git a/interceptor.js b/interceptor.js
index c6e4a878..7585620e 100644
--- a/interceptor.js
+++ b/interceptor.js
@@ -395,7 +395,7 @@ module.exports.CreateRedirInterceptor = function (args) {
if (obj.amt.digestRealm) {
// Replace this authentication digest with a server created one
// We have everything we need to authenticate
- var nc = '0'+ (10000000 + obj.ws.authCNonceCount).toString().substring(1);// set NC at least 8 bytes
+ var nc = obj.ws.authCNonceCount;
obj.ws.authCNonceCount++;
var digest = obj.ComputeDigesthash(obj.args.user, obj.args.pass, obj.amt.digestRealm, 'POST', authurl, obj.amt.digestQOP, obj.amt.digestNonce, nc, obj.ws.authCNonce);
diff --git a/letsencrypt.js b/letsencrypt.js
index c1823ba4..c83cf102 100644
--- a/letsencrypt.js
+++ b/letsencrypt.js
@@ -28,8 +28,6 @@ module.exports.CreateLetsEncrypt = function (parent) {
obj.challenges = {};
obj.runAsProduction = false;
obj.redirWebServerHooked = false;
- obj.zerossl = false;
- obj.csr = null;
obj.configErr = null;
obj.configOk = false;
obj.pendingRequest = false;
@@ -59,7 +57,6 @@ module.exports.CreateLetsEncrypt = function (parent) {
// Get the current certificate
obj.getCertificate = function(certs, func) {
obj.runAsProduction = (obj.parent.config.letsencrypt.production === true);
- obj.zerossl = ((typeof obj.parent.config.letsencrypt.zerossl == 'object') ? obj.parent.config.letsencrypt.zerossl : false);
obj.log("Getting certs from local store (" + (obj.runAsProduction ? "Production" : "Staging") + ")");
if (certs.CommonName.indexOf('.') == -1) { obj.configErr = "Add \"cert\" value to settings in config.json before using Let's Encrypt."; parent.addServerWarning(obj.configErr); obj.log("WARNING: " + obj.configErr); func(certs); return; }
if (obj.parent.config.letsencrypt == null) { obj.configErr = "No Let's Encrypt configuration"; parent.addServerWarning(obj.configErr); obj.log("WARNING: " + obj.configErr); func(certs); return; }
@@ -167,36 +164,26 @@ module.exports.CreateLetsEncrypt = function (parent) {
obj.log("Generating private key...");
acme.forge.createPrivateKey().then(function (accountKey) {
+ // TODO: ZeroSSL
+ // https://acme.zerossl.com/v2/DV90
+
// Create the ACME client
obj.log("Setting up ACME client...");
- if (obj.zerossl) {
- if (obj.zerossl.kid == "") { obj.log("EAB KID hasn't been set, invalid configuration."); return; }
- if (obj.zerossl.hmackey == "") { obj.log("EAB HMAC KEY hasn't been set, invalid configuration."); return; }
- obj.client = new acme.Client({
- directoryUrl: acme.directory.zerossl.production,
- accountKey: accountKey,
- externalAccountBinding: {
- kid: obj.zerossl.kid,
- hmacKey: obj.zerossl.hmackey
- }
- });
- } else {
- obj.client = new acme.Client({
- directoryUrl: obj.runAsProduction ? acme.directory.letsencrypt.production : acme.directory.letsencrypt.staging,
- accountKey: accountKey
- });
- }
+ obj.client = new acme.Client({
+ directoryUrl: obj.runAsProduction ? acme.directory.letsencrypt.production : acme.directory.letsencrypt.staging,
+ accountKey: accountKey
+ });
// Create Certificate Request (CSR)
obj.log("Creating certificate request...");
var certRequest = { commonName: obj.leDomains[0] };
if (obj.leDomains.length > 1) { certRequest.altNames = obj.leDomains; }
acme.forge.createCsr(certRequest).then(function (r) {
- obj.csr = r[1];
+ var csr = r[1];
obj.tempPrivateKey = r[0];
- if(obj.zerossl) { obj.log("Requesting certificate from ZeroSSL..."); } else { obj.log("Requesting certificate from Let's Encrypt..."); }
+ obj.log("Requesting certificate from Let's Encrypt...");
obj.client.auto({
- csr: obj.csr,
+ csr,
email: obj.parent.config.letsencrypt.email,
termsOfServiceAgreed: true,
skipChallengeVerification: (obj.parent.config.letsencrypt.skipchallengeverification === true),
diff --git a/mcrec.js b/mcrec.js
index 43966b88..565062a9 100644
--- a/mcrec.js
+++ b/mcrec.js
@@ -13,15 +13,27 @@ var worker = null;
const NodeJSVer = Number(process.version.match(/^v(\d+\.\d+)/)[1]);
var directRun = (require.main === module);
function log() { if (directRun) { console.log(...arguments); } /*else { if (worker != null) { worker.parentPort.postMessage({ msg: arguments[0] }); } } */ }
-function log2() { if (directRun) { console.log(...arguments); } else { process.send(...arguments); } /*else { if (worker != null) { worker.parentPort.postMessage({ msg: arguments[0] }); } } */ }
if (directRun && (NodeJSVer >= 12)) { const xworker = require('worker_threads'); try { if (xworker.isMainThread == false) { worker = xworker; } } catch (ex) { log(ex); } }
+function start() { startEx(process.argv); }
+if (directRun) { setup(); }
+
+function setup() { InstallModules(['image-size'], start); }
+function start() { startEx(process.argv); }
+function startEx(argv) {
+ if (argv.length > 2) { indexFile(argv[2]); } else {
+ log("MeshCentral Session Recodings Processor");
+ log("This tool will index a .mcrec file so that the player can seek thru the file.");
+ log("");
+ log(" Usage: node mcrec [file]");
+ }
+}
function indexFile(infile) {
var state = { recFileName: null, recFile: null, recFileSize: 0, recFilePtr: 0 };
- if (fs.existsSync(infile) == false) { log2("Missing file: " + infile); return; }
+ if (fs.existsSync(infile) == false) { log("Missing file: " + infile); return; }
state.recFileName = infile;
state.recFileSize = fs.statSync(infile).size;
- if (state.recFileSize < 32) { log2("Invalid file size: " + infile); return; }
+ if (state.recFileSize < 32) { log("Invalid file: " + infile); return; }
log("Processing file: " + infile + ", " + state.recFileSize + " bytes.");
state.recFile = fs.openSync(infile, 'r+');
state.indexTime = 10; // Interval between indexes in seconds
@@ -31,8 +43,8 @@ function indexFile(infile) {
state.height = 0;
state.basePtr = null;
readLastBlock(state, function (state, result, time, extras) {
- if (result == false) { log2("Invalid file: " + infile); return; }
- if (extras != null) { log2("File already indexed: " + infile); return; }
+ if (result == false) { log("Invalid file: " + infile); return; }
+ if (extras != null) { log("File already indexed: " + infile); return; }
state.lastTimeStamp = time;
readNextBlock(state, processBlock);
});
@@ -56,7 +68,7 @@ function processBlock(state, block, err) {
// Error reading the next block, exit now.
fs.close(state.recFile, function () {
for (var i in state) { delete state[i]; } // Clear the state.
- log2("Error.");
+ log("Error.");
});
return;
}
@@ -65,7 +77,7 @@ function processBlock(state, block, err) {
writeIndex(state, function () {
fs.close(state.recFile, function () {
for (var i in state) { delete state[i]; } // Clear the state.
- log2("Done.");
+ log("Done.");
});
});
return;
@@ -84,8 +96,8 @@ function processBlock(state, block, err) {
if (block.type == 1) {
// Metadata
state.metadata = JSON.parse(block.data.toString());
- if (state.metadata.indexInterval != null) { log2("This file is already indexed."); return; }
- if (state.metadata.protocol != 2) { log2("Only remote desktop sessions can currently be indexed."); return; }
+ if (state.metadata.indexInterval != null) { log("This file is already indexed."); return; }
+ if (state.metadata.protocol != 2) { log("Only remote desktop sessions can currently be indexed."); return; }
state.metadataFlags = block.flags;
state.metadataTime = block.time;
state.recFileProtocol = state.metadata.protocol;
@@ -304,7 +316,7 @@ function InstallModule(modulename, func, tag1, tag2) {
if ((__dirname.endsWith('/node_modules/meshcentral')) || (__dirname.endsWith('\\node_modules\\meshcentral')) || (__dirname.endsWith('/node_modules/meshcentral/')) || (__dirname.endsWith('\\node_modules\\meshcentral\\'))) { parentpath = require('path').join(__dirname, '../..'); }
// Looks like we need to keep a global reference to the child process object for this to work correctly.
- InstallModuleChildProcess = child_process.exec('npm install --no-optional --save ' + modulename, { maxBuffer: 512000, timeout: 300000, cwd: parentpath }, function (error, stdout, stderr) {
+ InstallModuleChildProcess = child_process.exec('npm install --no-optional --save ' + modulename, { maxBuffer: 512000, timeout: 120000, cwd: parentpath }, function (error, stdout, stderr) {
InstallModuleChildProcess = null;
if ((error != null) && (error != '')) {
log('ERROR: Unable to install required module "' + modulename + '". May not have access to npm, or npm may not have suffisent rights to load the new module. Try "npm install ' + modulename + '" to manualy install this module.\r\n');
@@ -317,18 +329,6 @@ function InstallModule(modulename, func, tag1, tag2) {
});
}
-function setup() { InstallModules(['image-size'], start); }
-function start() { startEx(process.argv); }
-function startEx(argv) {
- if (argv.length > 2) { indexFile(argv[2]); } else {
- log("MeshCentral Session Recordings Processor");
- log("This tool will index a .mcrec file so that the player can seek thru the file.");
- log("");
- log(" Usage: node mcrec [file]");
- }
-}
-if (directRun) { setup(); }
-
// Export table
module.exports.startEx = startEx;
module.exports.indexFile = indexFile;
\ No newline at end of file
diff --git a/meshaccelerator.js b/meshaccelerator.js
index 5e663383..c492f92b 100644
--- a/meshaccelerator.js
+++ b/meshaccelerator.js
@@ -32,20 +32,7 @@ module.exports.processMessage = function(message) {
const sign = crypto.createSign('SHA384');
sign.end(Buffer.from(message.data, 'binary'));
process.send(sign.sign(message.key).toString('binary'));
- } catch (ex) {
- // If this exception happens, try again.
- if (ex.code == 'ERR_OSSL_DSO_COULD_NOT_LOAD_THE_SHARED_LIBRARY') {
- try {
- const sign = crypto.createSign('SHA384');
- sign.end(Buffer.from(message.data, 'binary'));
- process.send(sign.sign(message.key).toString('binary'));
- } catch (ex) {
- process.send(null);
- }
- } else {
- process.send(null);
- }
- }
+ } catch (e) { process.send(null); }
break;
}
case 'setState': {
diff --git a/meshagent.js b/meshagent.js
index 7169b9ff..f4fa5419 100644
--- a/meshagent.js
+++ b/meshagent.js
@@ -58,15 +58,15 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
dataAccounting();
if ((arg == 1) || (arg == null)) { try { ws.close(); if (obj.nodeid != null) { parent.parent.debug('agent', 'Soft disconnect ' + obj.nodeid + ' (' + obj.remoteaddrport + ')'); } } catch (e) { console.log(e); } } // Soft close, close the websocket
- if (arg == 2) {
- try {
+ if (arg == 2) {
+ try {
if (ws._socket._parent != null)
ws._socket._parent.end();
else
ws._socket.end();
-
- if (obj.nodeid != null) {
- parent.parent.debug('agent', 'Hard disconnect ' + obj.nodeid + ' (' + obj.remoteaddrport + ')');
+
+ if (obj.nodeid != null) {
+ parent.parent.debug('agent', 'Hard disconnect ' + obj.nodeid + ' (' + obj.remoteaddrport + ')');
}
} catch (e) { console.log(e); }
}
@@ -616,7 +616,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
}
if ((mesh == null) && (typeof domain.orphanagentuser == 'string')) {
- const adminUser = parent.users['user/' + domain.id + '/' + domain.orphanagentuser];
+ const adminUser = parent.users['user/' + domain.id + '/' + domain.orphanagentuser.toLowerCase()];
if ((adminUser != null) && (adminUser.siteadmin == 0xFFFFFFFF)) {
// Mesh name is hex instead of base64
const meshname = obj.meshid.substring(0, 18);
@@ -1058,7 +1058,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
db.Get('iploc_' + obj.remoteaddr, function (err, iplocs) {
if ((iplocs != null) && (iplocs.length == 1)) {
// We have a location in the database for this remote IP
- const iploc = iplocs[0], x = {};
+ const iploc = nodes[0], x = {};
if ((iploc != null) && (iploc.ip != null) && (iploc.loc != null)) {
x.publicip = iploc.ip;
x.iploc = iploc.loc + ',' + (Math.floor((new Date(iploc.date)) / 1000));
@@ -1067,10 +1067,10 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
} else {
// Check if we need to ask for the IP location
var doIpLocation = 0;
- if (obj.iploc == null) {
+ if (device.iploc == null) {
doIpLocation = 1;
} else {
- const loc = obj.iploc.split(',');
+ const loc = device.iploc.split(',');
if (loc.length < 3) {
doIpLocation = 2;
} else {
@@ -1363,16 +1363,6 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
}
if ((typeof command.sessionid == 'string') && (command.sessionid.length < 500)) { event.sessionid = command.sessionid; }
parent.parent.DispatchEvent(targets, obj, event);
-
- // If this is a help request, see if we need to email notify anyone
- if (event.msgid == 98) {
- // Get the node and change it if needed
- db.Get(obj.dbNodeKey, function (err, nodes) { // TODO: THIS IS A BIG RACE CONDITION HERE, WE NEED TO FIX THAT. If this call is made twice at the same time on the same device, data will be missed.
- if ((nodes == null) || (nodes.length != 1)) { delete obj.deviceChanging; return; }
- const device = nodes[0];
- if (typeof device.name == 'string') { parent.parent.NotifyUserOfDeviceHelpRequest(domain, device.meshid, device._id, device.name, command.msgArgs[0], command.msgArgs[1]); }
- });
- }
}
break;
}
@@ -1748,9 +1738,8 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
try { obj.send(JSON.stringify({ action: 'amtconfig', user: '**MeshAgentApfTunnel**', pass: cookie })); } catch (ex) { }
break;
}
- case 'script-task': {
- // These command are for running regular batch jobs on the remote device
- if (parent.parent.taskManager != null) { parent.parent.taskManager.agentAction(command, obj); }
+ case 'scriptTask': {
+ // TODO
break;
}
default: {
@@ -1775,7 +1764,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
if (inviteCookie == null) return;
// Create the server url
- var serverName = parent.getWebServerName(domain, req);
+ var serverName = parent.getWebServerName(domain);
var httpsPort = ((args.aliasport == null) ? args.port : args.aliasport); // Use HTTPS alias port is specified
var xdomain = (domain.dns == null) ? domain.id : '';
if (xdomain != '') xdomain += '/';
@@ -1842,7 +1831,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
// Event device share removal
if (removedExact != null) {
// Send out an event that we removed a device share
- var targets = parent.CreateNodeDispatchTargets(obj.dbMeshKey, obj.dbNodeKey, ['server-shareremove']);
+ var targets = parent.CreateNodeDispatchTargets(obj.dbMeshKey, obj.dbNodeKey, []);
var event = { etype: 'node', nodeid: obj.dbNodeKey, action: 'removedDeviceShare', msg: 'Removed Device Share', msgid: 102, msgArgs: ['Agent'], domain: domain.id, publicid: publicid };
parent.parent.DispatchEvent(targets, obj, event);
}
@@ -1920,14 +1909,6 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
if (!device.wsc) { device.wsc = {}; }
if (JSON.stringify(device.wsc) != JSON.stringify(command.wsc)) { /*changes.push('Windows Security Center status');*/ device.wsc = command.wsc; change = 1; log = 1; }
}
- if (command.defender != null) { // Defender For Windows Server
- if (!device.defender) { device.defender = {}; }
- if (JSON.stringify(device.defender) != JSON.stringify(command.defender)) { /*changes.push('Defender status');*/ device.defender = command.defender; change = 1; log = 1; }
- }
- if (command.lastbootuptime != null) { // Last Boot Up Time
- if (!device.lastbootuptime) { device.lastbootuptime = ""; }
- if (device.lastbootuptime != command.lastbootuptime) { /*changes.push('Last Boot Up Time');*/ device.lastbootuptime = command.lastbootuptime; change = 1; log = 1; }
- }
// Push Messaging Token
if ((command.pmt != null) && (typeof command.pmt == 'string') && (device.pmt != command.pmt)) {
@@ -1936,18 +1917,14 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
change = 1; // Don't save this change as an event to the db, so no log=1.
parent.removePmtFromAllOtherNodes(device); // We need to make sure to remove this push messaging token from any other device on this server, all domains included.
}
-
+
if ((command.users != null) && (Array.isArray(command.users)) && (device.users != command.users)) { device.users = command.users; change = 1; } // Don't save this to the db.
- if ((command.lusers != null) && (Array.isArray(command.lusers)) && (device.lusers != command.lusers)) { device.lusers = command.lusers; change = 1; } // Don't save this to the db.
if ((mesh.mtype == 2) && (!args.wanonly)) {
// In WAN mode, the hostname of a computer is not important. Don't log hostname changes.
if (device.host != obj.remoteaddr) { device.host = obj.remoteaddr; change = 1; changes.push('host'); }
// TODO: Check that the agent has an interface that is the same as the one we got this websocket connection on. Only set if we have a match.
}
- // Remove old volumes and BitLocker data, this is part of sysinfo.
- delete device.volumes;
-
// If there are changes, event the new device
if (change == 1) {
// Do some clean up if needed, these values should not be in the database.
diff --git a/meshcentral-config-schema.json b/meshcentral-config-schema.json
index 91cec3b8..46060972 100644
--- a/meshcentral-config-schema.json
+++ b/meshcentral-config-schema.json
@@ -3,183 +3,56 @@
"$schema": "http://json-schema.org/draft-04/schema#",
"description": "MeshCentral configuration file schema",
"type": "object",
- "required": [
- "settings",
- "domains"
- ],
"properties": {
"settings": {
"type": "object",
"properties": {
- "cert": {
- "type": "string",
- "description": "Set this to the primary DNS name of this MeshCentral server."
- },
- "keepCerts": {
- "type": "boolean",
- "default": false,
- "description": "Force MeshCentral to use the HTTPS and MPS certificates even if the name does not match the expected DNS value."
- },
- "mongoDb": {
- "type": "string",
- "default": null
- },
- "mongoDbName": {
- "type": "string"
- },
- "mongoDbChangeStream": {
- "type": "boolean",
- "default": false
- },
- "mongoDbBulkOperations": {
- "type": "boolean",
- "default": false
- },
+ "cert": { "type": "string", "description": "Set this to the primary DNS name of this MeshCentral server." },
+ "mongoDb": { "type": "string", "default": null },
+ "mongoDbName": { "type": "string" },
+ "mongoDbChangeStream": { "type": "boolean", "default": false },
+ "mongoDbBulkOperations": { "type": "boolean", "default": false },
"mariaDB": {
"type": "object",
"description": "Add this section to connect MeshCentral to a MariaDB database instance.",
"properties": {
- "host": {
- "type": "string",
- "description": "MariaDB hostname"
- },
- "user": {
- "type": "string",
- "description": "MariaDB username"
- },
- "port": {
- "type": "number",
- "description": "MariaDB port number"
- },
- "password": {
- "type": "string",
- "description": "MariaDB password"
- },
- "connectionLimit": {
- "type": "number",
- "description": "MariaDB connection limit"
- },
- "database": {
- "type": "string",
- "default": "meshcentral",
- "description": "Name of MariaDB database used"
- },
- "awsrds": {
- "type": "boolean",
- "default": false,
- "description": "Set true to resolve LOCK TABLE permissions on AWS RDS."
- },
- "ssl": {
+ "host": { "type": "string", "description": "MariaDB hostname" },
+ "user": { "type": "string", "description": "MariaDB username" },
+ "port": { "type": "number", "description": "MariaDB port number" },
+ "password": { "type": "string", "description": "MariaDB password" },
+ "connectionLimit": { "type": "number", "description": "MariaDB connection limit" },
+ "database": { "type": "string", "default": "meshcentral", "description": "Name of MariaDB database used" },
+ "awsrds": { "type": "boolean", "default": false, "description": "Set true to resolve LOCK TABLE permissions on AWS RDS." },
+ "ssl": {
"type": "object",
"description": "SSL Options. Set to true (boolean) for default options.",
"properties": {
- "caCertPath": {
- "type": "string",
- "description": "Absolute path to the CA certificate. Required for self-signed certificates"
- },
- "clientCertPath": {
- "type": "string",
- "description": "Absolute path to the client certificate. Required for two-way SSL Authentication"
- },
- "clientKeyPath": {
- "type": "string",
- "description": "Absolute path to the client key. Required for two-way SSL Authentication"
- },
- "dontCheckServerIdentity": {
- "type": "boolean",
- "description": "Set true to not check the server hostname during verification"
- }
+ "caCertPath": { "type": "string", "description": "Absolute path to the CA certificate. Required for self-signed certificates" },
+ "clientCertPath": { "type": "string", "description": "Absolute path to the client certificate. Required for two-way SSL Authentication" },
+ "clientKeyPath": { "type": "string", "description": "Absolute path to the client key. Required for two-way SSL Authentication" },
+ "dontCheckServerIdentity": { "type": "boolean", "description": "Set true to not check the server hostname during verification" }
}
}
}
},
- "sqlite3": {
- "type": [ "boolean", "string", "object" ],
- "default": false,
- "description": "Set boolean true to use SQLite3 as a local MeshCentral database with default db filename 'meshcentral' or enter a string for a different db filename. Extension .sqlite is appended",
- "properties":{
- "name": {
- "type": "string",
- "default": "meshcentral",
- "description": "Database filename. '.sqlite' is appended"
- },
- "journalMode": {
- "type": "string",
- "default": "delete",
- "description": "DELETE, TRUNCATE, PERSIST, MEMORY, WAL. NONE not allowed. See: https://www.sqlite.org/pragma.html#pragma_journal_mode"
- },
- "journalSize": {
- "type": "integer",
- "default": 4096000,
- "description": "Maximum size of the journal file in bytes. Can grow larger if needed, but will shrink to this size. -1 is unlimited growth. See: https://www.sqlite.org/pragma.html#pragma_journal_size_limit"
- },
- "autoVacuum": {
- "type": "string",
- "default": "incremental",
- "description": "none, full, incremental. Removes unused pages and shrinks databasefile during maintenance. See: https://www.sqlite.org/pragma.html#pragma_auto_vacuum"
- },
- "incrementalVacuum": {
- "type": "integer",
- "default": 100,
- "description": "Maximum amount of pages to free during maintenance. Default page size is 4k, so default frees up to 400k from the databasefile. See: https://www.sqlite.org/pragma.html#pragma_incremental_vacuum"
- },
- "startupVacuum": {
- "type": "boolean",
- "default": false,
- "description": "Do a full VACUUM at startup. Shrinks the db file and optimizes it. This can take some time with a large database and can temporarily take up to double the database size on disk. See: https://www.sqlite.org/lang_vacuum.html"
- }
- }
- },
"mySQL": {
"type": "object",
"description": "Add this section to connect MeshCentral to a MySQL database instance.",
"properties": {
- "host": {
- "type": "string",
- "description": "MySQL hostname"
- },
- "port": {
- "type": "number",
- "description": "MySQL port number"
- },
- "user": {
- "type": "string",
- "description": "MySQL username"
- },
- "password": {
- "type": "string",
- "description": "MySQL password"
- },
- "database": {
- "type": "string",
- "default": "meshcentral",
- "description": "Name of MySQL database used"
- },
- "awsrds": {
- "type": "boolean",
- "default": false,
- "description": "Set true to resolve LOCK TABLE permissions on AWS RDS."
- },
+ "host": { "type": "string", "description": "MySQL hostname" },
+ "port": { "type": "number", "description": "MySQL port number" },
+ "user": { "type": "string", "description": "MySQL username" },
+ "password": { "type": "string", "description": "MySQL password" },
+ "database": { "type": "string", "default": "meshcentral", "description": "Name of MySQL database used" },
+ "awsrds": { "type": "boolean", "default": false, "description": "Set true to resolve LOCK TABLE permissions on AWS RDS." },
"ssl": {
"type": "object",
"description": "SSL Options. Set to true (boolean) for default options.",
"properties": {
- "caCertPath": {
- "type": "string",
- "description": "Absolute path to the CA certificate. Required for self-signed certificates"
- },
- "clientCertPath": {
- "type": "string",
- "description": "Absolute path to the client certificate. Required for two-way SSL Authentication"
- },
- "clientKeyPath": {
- "type": "string",
- "description": "Absolute path to the client key. Required for two-way SSL Authentication"
- },
- "dontCheckServerIdentity": {
- "type": "boolean",
- "description": "Set true to not check the server hostname during verification"
- }
+ "caCertPath": { "type": "string", "description": "Absolute path to the CA certificate. Required for self-signed certificates" },
+ "clientCertPath": { "type": "string", "description": "Absolute path to the client certificate. Required for two-way SSL Authentication" },
+ "clientKeyPath": { "type": "string", "description": "Absolute path to the client key. Required for two-way SSL Authentication" },
+ "dontCheckServerIdentity": { "type": "boolean", "description": "Set true to not check the server hostname during verification" }
}
}
}
@@ -188,755 +61,146 @@
"type": "object",
"description": "Add this section to connect MeshCentral to a PostgreSQL database instance.",
"properties": {
- "host": {
- "type": "string",
- "description": "PostgreSQL hostname"
- },
- "user": {
- "type": "string",
- "description": "PostgreSQL username"
- },
- "port": {
- "type": "number",
- "description": "PostgreSQL port number"
- },
- "password": {
- "type": "string",
- "description": "PostgreSQL password"
- },
- "database": {
- "type": "string",
- "default": "meshcentral",
- "description": "Name of PostgreSQL database used"
- }
+ "host": { "type": "string", "description": "PostgreSQL hostname" },
+ "user": { "type": "string", "description": "PostgreSQL username" },
+ "port": { "type": "number", "description": "PostgreSQL port number" },
+ "password": { "type": "string", "description": "PostgreSQL password" },
+ "database": { "type": "string", "default": "meshcentral", "description": "Name of PostgreSQL database used" }
}
},
- "acebase": {
- "type": "object",
- "description": "Add this section to enable AceBase database support, this is a local database system much like NeDB.",
- "properties": {
- "sponsor": {
- "type": "boolean",
- "default": false,
- "description": "Set true to remove the AceBase banner on startup."
- }
- }
- },
- "WANonly": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, only MeshCentral WAN features are enabled and agents will connect to the server using a well known DNS name."
- },
- "LANonly": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, only MeshCentral LAN features are enabled and agents will find the server using multicast LAN packets."
- },
- "maintenanceMode": {
- "type": "boolean",
- "default": false,
- "description": "When enabled the server is in maintenance mode, only administrators can login. Use the maintenance command in server console to change."
- },
- "certificatePrivateKeyPassword": {
- "type": "array",
- "default": null,
- "description": "List of passwords used to decrypt PKCK#8 .key files that are in the meshcentral-data folder."
- },
- "sessionTime": {
- "type": "integer",
- "default": 60,
- "description": "Duration of a session cookie in minutes. Changing this affects how often the session needs to be automatically refreshed."
- },
- "sessionKey": {
- "type": "string",
- "default": null,
- "description": "Password used to encrypt the MeshCentral web session cookies. If null, a random one is generated each time the server starts."
- },
- "sessionSameSite": {
- "type": "string",
- "default": "lax",
- "enum": [
- "strict",
- "lax",
- "none"
- ]
- },
- "dbEncryptKey": {
- "type": "string",
- "default": null,
- "description": "This value is only valid when used with NeDB, sets the database encryption and decryption key."
- },
- "dbRecordsEncryptKey": {
- "type": "string",
- "default": null,
- "description": "With any database, encrypt and decrypt sensitive information within records using this secret key."
- },
- "dbRecordsDecryptKey": {
- "type": "string",
- "default": null,
- "description": "With any database, decrypt sensitive information within records using this secret key, don't use a key to encrypt records."
- },
+ "WANonly": { "type": "boolean", "default": false, "description": "When enabled, only MeshCentral WAN features are enabled and agents will connect to the server using a well known DNS name." },
+ "LANonly": { "type": "boolean", "default": false, "description": "When enabled, only MeshCentral LAN features are enabled and agents will find the server using multicast LAN packets." },
+ "maintenanceMode": { "type": "boolean", "default": false, "description": "When enabled the server is in maintenance mode, only administrators can login. Use the maintenance command in server console to change." },
+ "certificatePrivateKeyPassword": { "type": "array", "default": null, "description": "List of passwords used to decrypt PKCK#8 .key files that are in the meshcentral-data folder." },
+ "sessionTime": { "type": "integer", "default": 60, "description": "Duration of a session cookie in minutes. Changing this affects how often the session needs to be automatically refreshed." },
+ "sessionKey": { "type": "string", "default": null, "description": "Password used to encrypt the MeshCentral web session cookies. If null, a random one is generated each time the server starts." },
+ "sessionSameSite": { "type": "string", "default": "lax", "enum": ["strict", "lax", "none"] },
+ "dbEncryptKey": { "type": "string" },
+ "dbRecordsEncryptKey": { "type": "string", "default": null },
+ "dbRecordsDecryptKey": { "type": "string", "default": null },
"dbExpire": {
"type": "object",
"properties": {
- "events": {
- "type": "integer",
- "default": 1728000,
- "description": "Amount of time in seconds that events are kept in the database."
- },
- "powerevents": {
- "type": "integer",
- "default": 864000,
- "description": "Amount of time in seconds that device power events are kept in the database."
- },
- "statsevents": {
- "type": "integer",
- "default": 2592000,
- "description": "Amount of time in seconds that server statistics are kept in the database."
- }
+ "events": { "type": "integer", "default": 1728000, "description": "Amount of time in seconds that events are kept in the database." },
+ "powerevents": { "type": "integer", "default": 864000, "description": "Amount of time in seconds that device power events are kept in the database." },
+ "statsevents": { "type": "integer", "default": 2592000, "description": "Amount of time in seconds that server statistics are kept in the database." }
}
},
- "port": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "default": 443,
- "description": "Ths port of the main HTTPS server."
- },
- "portBind": {
- "type": "string",
- "description": "When set, bind the HTTPS main port to a specific network address."
- },
- "aliasPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "default": null,
- "description": "The actual main port as seen externally on the Internet, this setting is often used when a reverse-proxy is used."
- },
- "redirPort": {
- "type": "integer",
- "minimum": 0,
- "maximum": 65535,
- "default": 80,
- "description": "This is a HTTP web server port that mostly redirects users to the HTTPS port but does provide some other services, 0 will turn this port off."
- },
- "redirPortBind": {
- "type": "string",
- "description": "When set, bind the HTTP redirection port to a specific network address."
- },
- "redirAliasPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "description": "The actual redirection port as seen externally on the Internet, this setting is often used when a reverse-proxy is used."
- },
- "relayPort": {
- "type": "integer",
- "minimum": 0,
- "maximum": 65535,
- "default": 0,
- "description": "When set, a web relay web server is bound to this port and will allow user access to remote web sites."
- },
- "relayAliasPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "default": null,
- "description": "The actual relay port as seen externally on the Internet, this setting is often used when a reverse-proxy is used."
- },
- "relayDNS": {
- "type": "string",
- "default": null,
- "description": "When set, relayPort value is ignored. Set this to a DNS name the points to this server. When the server is accessed using the DNS name, the main web server port is used as a web relay port."
- },
- "agentPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "description": "When set, enabled a new HTTPS server port that only accepts agent connections."
- },
- "agentPortBind": {
- "type": "string",
- "description": "When set, binds the agent port to a specific network interface."
- },
- "agentAliasPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "description": "When set, indicates the actual publicly visible agent-only port. If not set, the AgentPort value is used."
- },
- "agentAliasDNS": {
- "type": "string",
- "format": "hostname",
- "description": "When set, specified the DNS name used by agents to connect to the agent-only port."
- },
- "agentPortTls": {
- "type": "boolean",
- "default": true,
- "description": "Indicates if the agent-only port must perform TLS, this should be set to false if TLS is performed in front of this server."
- },
- "agentLogDump": {
- "type": "boolean",
- "default": false,
- "description": "Automatically downloads all agent error logs into meshcentral-data/agenterrorlogs.txt."
- },
- "agentCoreDump": {
- "type": "boolean",
- "default": false,
- "description": "Automatically activates and transfers any agent crash dump files to the server in meshcentral-data/coredumps."
- },
- "agentCoreDumpUsers": {
- "type": "array",
- "description": "List of non-administrator users that have access to mesh agent crash dumps."
- },
- "agentSignLock": {
- "type": "boolean",
- "default": false,
- "description": "When code signing an agent using authenticode, lock the agent to only allow connection to this server. (This is in testing, the default value will change to true in the future)."
- },
- "agentTimeStampServer": {
- "type": [
- "boolean",
- "string"
- ],
- "default": "http://timestamp.comodoca.com/authenticode",
- "description": "The time stamping server to use when code signing Windows executables. When set to false, the executables are not time stamped."
- },
- "agentTimeStampProxy": {
- "type": [
- "boolean",
- "string"
- ],
- "description": "The HTTP proxy to use when contacting the time stamping server, if false, no proxy is used. By default, the npmproxy value is used."
- },
- "lockAgentDownload": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, MeshCentral will block all downloads of MeshAgent including install scripts, if the user is not logged in"
- },
- "ignoreAgentHashCheck": {
- "type": [
- "boolean",
- "string"
- ],
- "default": false,
- "description": "When true, the agent no longer checked the TLS certificate of the server. This should be used for debugging only. You can also set this to a comma separated list of IP addresses to ignore, for example: \"192.168.2.100,192.168.1.0/24\"."
- },
- "exactPorts": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, MeshCentral will only grab the required TCP listening ports or fail. It will not try to use the next available port of it's busy."
- },
- "allowLoginToken": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, MeshCentral will allow login tokens to be used in the URL as a replacement for user login. This is useful along with \"allowFraming\" option to embed MeshCentral features into another website"
- },
- "StrictTransportSecurity": {
- "type": [
- "boolean",
- "string"
- ],
- "default": null,
- "description": "Controls the Strict-Transport-Security header, default is 1 year. Set to false to remove, true to force enable, or string to set a custom value. If set to null, MeshCentral will enable if a trusted certificate is set."
- },
- "allowFraming": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, the MeshCentral web site can be embedded within another website's iframe."
- },
- "cookieIpCheck": {
- "type": [
- "string",
- "boolean"
- ],
- "default": "lax",
- "enum": [
- "strict",
- "lax",
- "none"
- ]
- },
- "cookieEncoding": {
- "type": "string",
- "enum": [
- "hex",
- "base64"
- ],
- "default": "base64",
- "description": "Encoding format of cookies in the HTTP headers, this is typically Base64 but some reverse proxies will require HEX."
- },
- "webRTC": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, allows use of WebRTC to allow direct network traffic between the agent and browser."
- },
- "nice404": {
- "type": "boolean",
- "default": true,
- "description": "By default, a nice looking 404 error page is displayed when needed. Set this to false to disable it."
- },
- "selfUpdate": {
- "type": [
- "string",
- "boolean"
- ],
- "default": false,
- "description": "When set to true, the server will check for a new version and attempt to self-update automatically a bit after midnight local time every day. If set to a specific version such as \"1.1.21\" the server will immediately update to the specified version on startup if it's not already at this version."
- },
- "cleanNpmCacheOnUpdate": {
- "type": "boolean",
- "default": false,
- "description": "When true, run \"npm cache clean --force\" to reclaim disk space."
- },
- "browserPing": {
- "type": "integer",
- "minimum": 1,
- "description": "When specified, sends data to the browser at x seconds interval and expects a response from the browser."
- },
- "browserPong": {
- "type": "integer",
- "minimum": 1,
- "description": "When specified, sends data to the browser at x seconds interval."
- },
- "agentsInRam": {
- "type": "boolean",
- "default": false,
- "description": "Loads all agent binaries in RAM for faster agent updates."
- },
- "agentPing": {
- "type": "integer",
- "minimum": 1,
- "description": "When specified, sends data to the agent at x seconds interval and expects a response from the agent."
- },
- "agentPong": {
- "type": "integer",
- "minimum": 1,
- "description": "When specified, sends data to the agent at x seconds interval."
- },
- "amtManager": {
- "type": "boolean",
- "default": true,
- "description": "When enabled, MeshCentral will automatically monitor and manage Intel AMT devices."
- },
- "agentIdleTimeout": {
- "type": "integer",
- "minimum": 1,
- "default": 150,
- "description": "How much time in seconds with no traffic from an agent before dropping the agent connection."
- },
- "webPageLengthRandomization": {
- "type": "boolean",
- "default": true,
- "description": "Adds a random length string to generated web pages to mitigate a BREACH attack."
- },
- "compression": {
- "type": "boolean",
- "default": true,
- "description": "Enables GZIP compression for web requests."
- },
- "wsCompression": {
- "type": "boolean",
- "default": false,
- "description": "Enables server-side, websocket per-message deflate compression."
- },
- "agentWsCompression": {
- "type": "boolean",
- "default": true,
- "description": "Enables agent-side, websocket per-message deflate compression. wscompression must also be true for this to work."
- },
- "noAgentUpdate": {
- "type": "integer",
- "default": 0,
- "description": "Set to 1 to present the server from updating any agent."
- },
- "agentUpdateSystem": {
- "type": "integer",
- "default": 1,
- "description": "When set to 2, all agents that need to be updated will use the meshcore.js update system. With the default value of 1, the native update system is used."
- },
- "temporaryAgentUpdate": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to not allow temporary agents to be updated."
- },
- "amtScanner": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable Intel AMT scanning on the local network, this is already disabled in WAN mode."
- },
- "meshScanner": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable agent multicast scanning on the local network, this is already disabled in WAN mode."
- },
- "meshErrorLogPath": {
- "type": "string"
- },
- "npmPath": {
- "type": "string"
- },
- "npmProxy": {
- "type": "string",
- "format": "uri"
- },
- "allowHighQualityDesktop": {
- "type": "boolean",
- "default": true,
- "description": "When false, users will only be able to set remote desktop image quality to 60%, this can reduce server bandwidth usage."
- },
+ "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
+ "portBind": { "type": "string", "description": "When set, bind the HTTPS main port to a specific network address." },
+ "aliasPort": { "type": "integer", "minimum": 1, "maximum": 65535 },
+ "redirPort": { "type": "integer", "minimum": 1, "maximum": 65535 },
+ "redirPortBind": { "type": "string", "description": "When set, bind the HTTP redirection port to a specific network address." },
+ "redirAliasPort": { "type": "integer", "minimum": 1, "maximum": 65535 },
+ "agentPort": { "type": "integer", "minimum": 1, "maximum": 65535, "description": "When set, enabled a new HTTPS server port that only accepts agent connections." },
+ "agentPortBind": { "type": "string", "description": "When set, binds the agent port to a specific network interface." },
+ "agentAliasPort": { "type": "integer", "minimum": 1, "maximum": 65535, "description": "When set, indicates the actual publically visible agent-only port. If not set, the AgentPort value is used." },
+ "agentAliasDNS": { "type": "string", "format": "hostname", "description": "When set, specified the DNS name used by agents to connect to the agent-only port." },
+ "agentPortTls": { "type": "boolean", "default": true, "description": "Indicates if the agent-only port must perform TLS, this should be set to false if TLS is performed in front of this server." },
+ "agentLogDump": { "type": "boolean", "default": false, "description": "Automatically downloads all agent error logs into meshcentral-data/agenterrorlogs.txt." },
+ "agentCoreDump": { "type": "boolean", "default": false, "description": "Automatically activates and transfers any agent crash dump files to the server in meshcentral-data/coredumps." },
+ "agentCoreDumpUsers": { "type": "array", "description": "List of non-administrator users that have access to mesh agent crash dumps." },
+ "agentSignLock": { "type": "boolean", "default": false, "description": "When code signing an agent using authenticode, lock the agent to only allow connection to this server. (This is in testing, the default value will change to true in the future)." },
+ "agentTimeStampServer": { "type": [ "boolean", "string" ], "default": "http://timestamp.comodoca.com/authenticode", "description": "The time stamping server to use when code signing Windows executables. When set to false, the executables are not time stamped." },
+ "agentTimeStampProxy": { "type": [ "boolean", "string" ], "description": "The HTTP proxy to use when contacting the time stamping server, if false, no proxy is used. By default, the npmproxy value is used." },
+ "ignoreAgentHashCheck": { "type": [ "boolean", "string" ], "default": false, "description": "When true, the agent no longer checked the TLS certificate of the server. This should be used for debugging only. You can also set this to a comma seperated list of IP addresses to ignore, for example: \"192.168.2.100,192.168.1.0/24\"." },
+ "exactPorts": { "type": "boolean", "default": false, "description": "When set to true, MeshCentral will only grab the required TCP listening ports or fail. It will not try to use the next available port of it's busy." },
+ "allowLoginToken": { "type": "boolean", "default": false },
+ "StrictTransportSecurity": { "type": ["boolean", "string"], "default": null, "description": "Controls the Strict-Transport-Security header, default is 1 year. Set to false to remove, true to force enable, or string to set a custom value. If set to null, MeshCentral will enable if a trusted certificate is set." },
+ "allowFraming": { "type": "boolean", "default": false, "description": "When enabled, the MeshCentral web site can be embedded within another website's iframe." },
+ "cookieIpCheck": { "type": [ "string", "boolean" ], "default": "lax", "enum": ["strict", "lax", "none"] },
+ "cookieEncoding": { "type": "string", "enum": [ "hex", "base64" ], "default": "base64", "description": "Encoding format of cookies in the HTTP headers, this is typically Base64 but some reverse proxies will require HEX." },
+ "webRTC": { "type": "boolean", "default": false, "description": "When enabled, allows use of WebRTC to allow direct network traffic between the agent and browser." },
+ "nice404": { "type": "boolean", "default": true, "description": "By default, a nice looking 404 error page is displayed when needed. Set this to false to disable it." },
+ "selfUpdate": { "type": "boolean", "default": false, "description": "When true, this server will attempt to self-update everyday after midnight." },
+ "cleanNpmCacheOnUpdate": { "type": "boolean", "default": false, "description": "When true, run \"npm cache clean --force\" to reclame disk space." },
+ "browserPing": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the browser at x seconds interval and expects a response from the browser." },
+ "browserPong": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the browser at x seconds interval." },
+ "agentsInRam": { "type": "boolean", "default": false, "description": "Loads all agent binaries in RAM for faster agent updates." },
+ "agentPing": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the agent at x seconds interval and expects a response from the agent." },
+ "agentPong": { "type": "integer", "minimum": 1, "description": "When specified, sends data to the agent at x seconds interval." },
+ "amtManager": { "type": "boolean", "default": true, "description": "When enabled, MeshCentral will automatically monitor and manage Intel AMT devices." },
+ "orphanAgentUser": { "type": "string", "default": null, "description": "If an agent attempts to connect to a unknown device group, automatically create a new device group and grant access to the specified user. Example: admin" },
+ "agentIdleTimeout": { "type": "integer", "minimum": 1, "default": 150 ,"description": "How much time in seconds with no traffic from an agent before dropping the agent connection." },
+ "webPageLengthRandomization": { "type": "boolean", "default": true, "description": "Adds a random length string to generated web pages to mitigate a BREACH attack." },
+ "compression": { "type": "boolean", "default": true, "description": "Enables GZIP compression for web requests." },
+ "wsCompression": { "type": "boolean", "default": false, "description": "Enables server-side, websocket per-message deflate compression." },
+ "agentWsCompression": { "type": "boolean", "default": true, "description": "Enables agent-side, websocket per-message deflate compression. wscompression must also be true for this to work." },
+ "noAgentUpdate": { "type": "integer", "default": 0, "description": "Set to 1 to present the server from updating any agent." },
+ "agentUpdateSystem": { "type": "integer", "default": 1, "description": "When set to 2, all agents that need to be updated will use the meshcore.js update system. With the default value of 1, the native update system is used." },
+ "temporaryAgentUpdate": { "type": "boolean", "default": true, "description": "Set to false to not allow temporary agents to be updated." },
+ "amtScanner": { "type": "boolean", "default": true, "description": "Set to false to disable Intel AMT scanning on the local network, this is already disabled in WAN mode." },
+ "meshScanner": { "type": "boolean", "default": true, "description": "Set to false to disable agent multicast scanning on the local network, this is already disabled in WAN mode." },
+ "meshErrorLogPath": { "type": "string" },
+ "npmPath": { "type": "string" },
+ "npmProxy": { "type": "string", "format": "uri" },
+ "allowHighQualityDesktop": { "type": "boolean", "default": true, "description": "When false, users will only be able to set remote desktop image quality to 60%, this can reduce server bandwidth usage." },
"webPush": {
"type": "object",
"description": "When set with a valid email address, enables the MeshCentral web push notification feature. Allows administrators to send browser notifications to users even if they are not looking at the MeshCentral web site.",
+ "additionalProperties": false,
"properties": {
- "email": {
- "type": "string",
- "description": "Server administrator email given to the FireFox and Chrome push notification services."
- }
+ "email": { "type": "string", "description": "Server administrator email given to the FireFox and Chrome push notification services." }
},
- "required": [
- "email"
- ]
- },
- "RunOnServerStarted": {
- "type": "boolean",
- "default": null,
- "description": "Execute this when the server startup is completed. The first parameter will be the server version."
- },
- "RunOnServerUpdated": {
- "type": "boolean",
- "default": null,
- "description": "Execute this when the server has been updated. The first parameter will be the server version."
- },
- "RunOnServerError": {
- "type": "boolean",
- "default": null,
- "description": "Execute this when the server has to restart due to an error. The first parameter will be the server version."
- },
- "publicPushNotifications": {
- "type": "boolean",
- "default": false,
- "description": "When true, this server uses MeshCentral.com a push notification relay for Android notifications. Push notifications work even if the Android app is not open."
- },
- "desktopMultiplex": {
- "type": "boolean",
- "default": false,
- "description": "When true, enabled a server modules that efficiently splits a remote desktop stream to multiple browsers. Also allows slow browsers to not slow down the session for fast ones, this comes at the cost of extra server memory and processing for all remote desktop sessions."
- },
- "ipBlockedUserRedirect": {
- "type": "string",
- "default": null,
- "description": "If set, a user from a banned IP address will be redirected to this URL."
- },
- "userAllowedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, only users from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:userAllowedIP.txt\""
- },
- "userBlockedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, users from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:userBlockedIP.txt\""
- },
- "agentAllowedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, only agents from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:agentAllowedIP.txt\""
- },
- "agentBlockedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, agents from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:agentBlockedIP.txt\""
- },
- "authLog": {
- "type": "string",
- "default": null,
- "description": "File path and name of the authentication log to be created. This log can be parsed by Fail2ban."
- },
- "InterUserMessaging": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- },
- "description": "Users in this list are allowed to send and receive inter-user messages. This can be used to implement bots or other software where MeshCentral is used as data transport. See \"interuser\" websocket command in the code."
- },
- "manageAllDeviceGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- },
- "description": "Users in this list are allowed to see and manage all device groups within their domain."
- },
- "manageCrossDomain": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- },
- "description": "Users in this list are allowed to manage all users in all domains."
+ "required": [ "email" ]
},
+ "RunOnServerStarted": { "type": "boolean", "default": null, "description": "Execute this when the server startup is completed. The first parameter will be the server version." },
+ "RunOnServerUpdated": { "type": "boolean", "default": null, "description": "Execute this when the server has been updated. The first parameter will be the server version." },
+ "RunOnServerError": { "type": "boolean", "default": null, "description": "Execute this when the server has to restart due to an error. The first parameter will be the server version." },
+ "publicPushNotifications": { "type": "boolean", "default": false, "description": "When true, this server uses MeshCentral.com a push notification relay for Android notifications. Push notifications work even if the Android app is not open." },
+ "desktopMultiplex": { "type": "boolean", "default": false, "description": "When true, enabled a server modules that efficiently splits a remote desktop stream to multiple browsers. Also allows slow browsers to not slow down the session for fast ones, this comes at the cost of extra server memory and processing for all remote desktop sessions." },
+ "ipBlockedUserRedirect" : { "type": "string", "default": null, "description": "If set, a user from a banned IP address will be redirected to this URL." },
+ "userAllowedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, only users from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "userBlockedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, users from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "agentAllowedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, only agents from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "agentBlockedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, agents from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "authLog": { "type": "string", "default": null, "description": "File path and name of the authentication log to be created. This log can be parsed by Fail2ban." },
+ "InterUserMessaging": { "type": "array", "uniqueItems": true, "items": { "type": "string" }, "description": "Users in this list are allowed to send and receive inter-user messages. This can be used to implement bots or other software where MeshCentral is used as data transport. See \"interuser\" websocket command in the code." },
+ "manageAllDeviceGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" }, "description": "Users in this list are allowed to see and manage all device groups within their domain." },
+ "manageCrossDomain": { "type": "array", "uniqueItems": true, "items": { "type": "string" }, "description": "Users in this list are allowed to manage all users in all domains." },
"localDiscovery": {
"type": "object",
"description": "When this server is in LAN mode, you may discover this server using a multicast discovery tool. When discovery happens, the name and info fields are sent back to the discovery tool.",
+ "additionalProperties": false,
"properties": {
- "name": {
- "type": "string"
- },
- "info": {
- "type": "string"
- },
- "key": {
- "type": "string",
- "description": "When set, encrypts all LAN discovery traffic to agents and tools using this key. This is only useful in LAN/Hybrid mode when agents and tools user multicast to find the server."
- }
+ "name": { "type": "string" },
+ "info": { "type": "string" },
+ "key": { "type": "string", "description": "When set, encrypts all LAN discovery traffic to agents and tools using this key. This is only useful in LAN/Hybrid mode when agents and tools user multicast to find the server." }
},
- "required": [
- "name",
- "info"
- ]
- },
- "tlsOffload": {
- "type": [
- "boolean",
- "string"
- ],
- "default": false,
- "description": "When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example: \"127.0.0.1,192.168.1.100\"."
- },
- "useNodeDefaultTLSCiphers": {
- "type": "boolean",
- "default": false,
- "description": "When true, get the default TLS ciphers from the node process, rather than using the recommended suites set up by meshcentral"
- },
- "tlsCiphers": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "Allows user to override the TLS ciphers used by meshcentral by default. If a string, should be a ':' separated list of ciphers to accept. If an array, should be an array of strings representing the ciphers to accept."
- },
- "trustedProxy": {
- "type": "string",
- "default": null,
- "description": "Trust forwarded headers from these IPs or domains. Providing the magic string \"CloudFlare\" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example: \"127.0.0.1,proxy.example.com,CloudFlare\"."
- },
- "mpsPort": {
- "type": "integer",
- "minimum": 0,
- "maximum": 65535,
- "default": 4433,
- "description": "The Management Presence Server (MPS), this is the server that received Intel AMT Client Initiated Remote Access (CIRA) connections."
- },
- "mpsPortBind": {
- "type": "string",
- "default": null
- },
- "mpsAliasPort": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "default": null
- },
- "mpsAliasHost": {
- "type": "string",
- "default": null
- },
- "mpsTlsOffload": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, indicate that TLS is being performed by a device in front of MeshCentral."
- },
- "mpsHighSecurity": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, the MPS server will only accept TLS 1.2 and 1.3 connections. Older Intel AMT devices will not be able to connect."
- },
- "prometheus": {
- "type": [
- "boolean",
- "number"
- ],
- "default": false,
- "description": "When set to true, a prometheus metrics endpoint will be available \"0.0.0.0:9464/metrics\". If you specify a number instead, the prometheus metrics will listen on this port instead of the default 9464."
- },
- "no2FactorAuth": {
- "type": "boolean",
- "default": false
- },
- "debug": {
- "type": "string",
- "default": null,
- "description": "You can set this value in the format 'web,agent,relay', where each value is separated by a comma. Each specified value will output logs to the MeshCentral console. Setting it to '*' will output all logs."
- },
- "log": {
- "type": "string",
- "default": null,
- "description": "You can set this value in the format 'web,agent,relay', where each value is separated by a comma. Each specified value will output logs to a file named 'log.txt' located inside the 'meshcentral-data' folder. Setting it to '*' will output all logs."
- },
- "syslog": {
- "type": "string",
- "default": null
- },
- "syslogauth": {
- "type": "string",
- "default": null
- },
- "syslogjson": {
- "type": "string",
- "default": null
- },
- "syslogtcp": {
- "type": "string",
- "default": null,
- "description": "Send syslog events over the network (RFC3164) to a target hostname:port. For example: localhost:514"
+ "required": [ "name", "info" ]
},
+ "tlsOffload": { "type": [ "boolean", "string" ], "default": false, "description": "When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example: \"127.0.0.1,192.168.1.100\"." },
+ "trustedProxy": { "type": "string", "default": null, "description": "Trust forwarded headers from these IPs or domains. Providing the magic string \"CloudFlare\" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example: \"127.0.0.1,proxy.example.com,CloudFlare\"." },
+ "mpsPort": { "type": "integer", "minimum": 0, "maximum": 65535, "default": 4433, "description": "The Management Presence Server (MPS), this is the server that received Intel AMT Client Initiated Remote Access (CIRA) connections." },
+ "mpsPortBind": { "type": "string", "default": null },
+ "mpsAliasPort": { "type": "integer", "minimum": 1, "maximum": 65535, "default": null },
+ "mpsAliasHost": { "type": "string", "default": null },
+ "mpsTlsOffload": { "type": "boolean", "default": false, "description": "When set to true, indicate that TLS is being performed by a device in front of MeshCentral." },
+ "mpsHighSecurity": { "type": "boolean", "default": false, "description": "When set to true, the MPS server will only accept TLS 1.2 and 1.3 connections. Older Intel AMT devices will not be able to connect." },
+ "no2FactorAuth": { "type": "boolean", "default": false },
+ "log": { "type": "string", "default": null },
+ "syslog": { "type": "string", "default": null },
+ "syslogauth": { "type": "string", "default": null },
+ "syslogjson": { "type": "string", "default": null },
+ "syslogtcp": { "type": "string", "default": null, "description": "Send syslog events over the network (RFC3164) to a target hostname:port. For example: localhost:514" },
"webrtcConfig": {
"type": "object",
- "description": "The STUN/TURN servers used for WebRTC, if not specified the Google and Cloudflare STUN servers are used when the server is not in LAN mode.",
+ "additionalProperties": false,
+ "description": "The STUN servers used for WebRTC, if not specified the Google and Mozilla servers and used when the server is not in LAN mode.",
"properties": {
- "iceServers": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "object",
- "properties": {
- "urls": {
- "type": "string",
- "description": "STUN/TURN URLs, examples are stun:stun3.l.google.com:19302 or turn:openrelay.metered.ca:443"
- }
- },
- "required": [
- "urls"
- ]
- }
- }
+ "iceServers": { "type": "array", "uniqueItems": true, "items": { "type": "object", "additionalProperties": false, "properties": { "urls": { "type": "string" } }, "required": [ "urls" ] } }
},
- "required": [
- "iceServers"
- ]
- },
- "crowdsec": {
- "type": "object",
- "description": "Enabled the MeshCentral built-in Crowdsec bouncer. This section is passed directly to the bouncer, all of the settings are documented at https://www.npmjs.com/package/@crowdsec/express-bouncer",
- "properties": {
- "url": {
- "type": "string",
- "description": "The URL of your LAPI instance. Ex: http://localhost:8080"
- },
- "apiKey": {
- "type": "string",
- "description": "The bouncer key (generated via cscli)."
- },
- "fallbackRemediation": {
- "type": "string",
- "default": "ban",
- "enum": [
- "bypass",
- "captcha",
- "ban"
- ],
- "description": "Action to perform if the CrowdSec agent can't be contacted."
- }
- },
- "required": [
- "url",
- "apiKey"
- ]
+ "required": [ "iceServers" ]
},
"autoBackup": {
- "type": [
- "boolean",
- "object"
- ],
- "description": "Enabled by default or if set to true. Disabled if set to false. An object can be provided with additional properties to set autobackup options.",
+ "type": "object",
"properties": {
- "mongoDumpPath": {
- "type": "string",
- "default": "mongodump",
- "description": "The file path of where \"mongodump\" is located. Default is \"mongodump\""
- },
- "mysqlDumpPath": {
- "type": "string",
- "default": "mysqldump",
- "description": "The file path of where \"mysqldump\" is located. Default is \"mysqldump\""
- },
- "pgDumpPath": {
- "type": "string",
- "default": "pg_dump",
- "description": "The file path of where \"pg_dump\" is located. Default is \"pg_dump\""
- },
- "backupIntervalHours": {
- "type": "integer",
- "default": 24,
- "description": "How often should the autobackup run in hours from the second meshcentral starts up? Default is every 24 hours"
- },
- "backupHour": {
- "type": "integer",
- "default": 0,
- "description": "At which hour the autobackup should run. This forces a daily backup, overrules a custom 'backupIntervalHours'."
- },
- "keepLastDaysBackup": {
- "type": "integer",
- "default": 10,
- "description": "How many days of backups should the autobackup keep? Default is 10 Days worth"
- },
- "zipCompression" : {
- "type": "integer",
- "default": "5",
- "description": "Set the zip compression level, 1=fast/less small file to 9=slow/smallest file."
- },
- "zipPassword": {
- "type": "string",
- "default": "",
- "minLength": 1,
- "description": "When specified, the ZIP backups will be password protected with the zipPassword and the password cannot be a blank value"
- },
- "backupPath": {
- "type": "string",
- "default": "meshcentral-backups",
- "description": "The file path where backup files are kept. The default is \"meshcentral-backups\" which sits next to \"meshcentral-data\"."
- },
- "backupName": {
- "type": "string",
- "default": "meshcentral-autobackup-",
- "description": "The filename of the backupfile. The default is \"meshcentral-autobackup-\", the filename is appended with the time of backup."
- },
- "backupWebFolders": {
- "type": "boolean",
- "default": false,
- "description": "Add views, public and emails directories if overridden"
- },
- "backupOtherFolders": {
- "type": "boolean",
- "default": false,
- "description": "Also add files and recordings folder to the backup"
- },
- "backupIgnoreFilesGlob": {
- "type": "array",
- "default": [],
- "description": "Glob for ignoring files in the data directory. For example [\"**/*.log\"] !! If a string instead of an array is passed, it will be split by ',' so *{.txt,.log} won't work in that case !! Don't do string..."
- },
- "backupSkipFoldersGlob":{
- "type": "array",
- "default": [],
- "description": "Glob for ignoring directories in the data directory. For example [\"**/signedagents\"]"
- },
+ "mongoDumpPath": { "type": "string" },
+ "mysqlDumpPath": { "type": "string"},
+ "backupIntervalHours": { "type": "integer" },
+ "keepLastDaysBackup": { "type": "integer" },
+ "zipPassword": { "type": "string" },
+ "backupPath": { "type": "string" },
"googleDrive": {
"type": "object",
"description": "Enabled automated upload of the server backups to a Google Drive account, once enabled you need to go in \"My Server\" tab as administrator to associate the account.",
@@ -980,125 +244,36 @@
"description": "The maximum number of files to keep in the WebDAV folder, older files will be removed if needed."
}
}
- },
- "s3": {
- "type": "object",
- "description": "Enabled automated upload of the server backups to an S3 server.",
- "required": [
- "accessKey",
- "secretKey",
- "bucketName"
- ],
- "properties": {
- "endpoint": {
- "type": "string",
- "default": "s3.amazonaws.com",
- "description": "S3 Endpoint address e.g. myS3.myserver.com"
- },
- "accessKey": {
- "type": "string",
- "description": "S3 accessKey, Required"
- },
- "secretKey": {
- "type": "string",
- "description": "S3 secretKey, Required"
- },
- "port": {
- "type": "integer",
- "default": 443,
- "description": "S3 Endpoint port number, Default is 443"
- },
- "ssl": {
- "type": "boolean",
- "default": true,
- "description": "If \"true\", the S3 Endpoint will use \"https\", else it will use \"http\", Default is true"
- },
- "bucketName": {
- "type": "string",
- "description": "S3 Bucket Name, Required"
- },
- "folderName": {
- "type": "string",
- "default": "MeshCentral-Backups",
- "description": "The name of the folder to create in the S3 Bucket. Defaults to \"MeshCentral-Backups\"."
- },
- "maxFiles": {
- "type": "integer",
- "default": 0,
- "description": "The maximum number of files to keep in the S3 folder, older files will be removed if needed. Default is 0 which is keep everything."
- }
- }
}
}
},
- "rootCertCommonName": {
- "type": "string",
- "default": "MeshCentralRoot-XXXXXX",
- "description": "The common name of the MeshCentral server root certificate. By default it's 'MeshCentralRoot-' followed by the first 6 HEX digits of the public key fingerprint. For this setting to take effect, all generated certificates need to be deleted and reset. Existing agents will not be able to connect anymore."
- },
- "redirects": {
- "type": "object"
- },
+ "redirects": { "type": "object" },
"maxInvalidLogin": {
"type": "object",
+ "additionalProperties": false,
"description": "This section described a policy for how many times an IP address is allowed to attempt to login incorrectly. By default it's 10 times in 10 minutes, but this can be changed here.",
"properties": {
- "exclude": {
- "type": "string",
- "default": null,
- "description": "Ranges of IP addresses that are not subject to invalid login limitations. For example: 192.168.1.0/24,172.16.0.1"
- },
- "time": {
- "type": "integer",
- "default": 10,
- "description": "Time in minutes over which the a maximum number of invalid login attempts is allowed from an IP address."
- },
- "count": {
- "type": "integer",
- "default": 10,
- "description": "Maximum number of invalid login attempts from an IP address in the time period."
- },
- "coolofftime": {
- "type": "integer",
- "default": null,
- "description": "Additional time in minute that login attempts will be denied once the invalid login limit is reached."
- }
+ "exclude": { "type": "string", "default": null, "description": "Ranges of IP addresses that are not subject to invalid login limitations. For example: 192.168.1.0/24,172.16.0.1"},
+ "time": { "type": "integer", "default": 10, "description": "Time in minutes over which the a maximum number of invalid login attempts is allowed from an IP address." },
+ "count": { "type": "integer", "default": 10, "description": "Maximum number of invalid login attempts from an IP address in the time period." },
+ "coolofftime": { "type": "integer", "default": null, "description": "Additional time in minute that login attempts will be denied once the invalid login limit is reached." }
}
},
"maxInvalid2fa": {
"type": "object",
+ "additionalProperties": false,
"description": "This section described a policy for how many times an IP address is allowed to attempt to perform two-factor authentication (2FA) incorrectly. By default it's 10 times in 10 minutes, but this can be changed here.",
"properties": {
- "exclude": {
- "type": "string",
- "default": null,
- "description": "Ranges of IP addresses that are not subject to invalid 2FA limitations. For example: 192.168.1.0/24,172.16.0.1"
- },
- "time": {
- "type": "integer",
- "default": 10,
- "description": "Time in minutes over which the a maximum number of invalid 2FA attempts is allowed from an IP address."
- },
- "count": {
- "type": "integer",
- "default": 10,
- "description": "Maximum number of invalid 2FA attempts from an IP address in the time period."
- },
- "coolofftime": {
- "type": "integer",
- "default": null,
- "description": "Additional time in minute that 2FA attempts will be denied once the invalid 2FA limit is reached."
- }
+ "exclude": { "type": "string", "default": null, "description": "Ranges of IP addresses that are not subject to invalid 2FA limitations. For example: 192.168.1.0/24,172.16.0.1"},
+ "time": { "type": "integer", "default": 10, "description": "Time in minutes over which the a maximum number of invalid 2FA attempts is allowed from an IP address." },
+ "count": { "type": "integer", "default": 10, "description": "Maximum number of invalid 2FA attempts from an IP address in the time period." },
+ "coolofftime": { "type": "integer", "default": null, "description": "Additional time in minute that 2FA attempts will be denied once the invalid 2FA limit is reached." }
}
},
"amtProvisioningServer": {
"type": "object",
- "required": [
- "deviceGroup",
- "newMebxPassword",
- "trustedFqdn",
- "ip"
- ],
+ "additionalProperties": false,
+ "required": [ "deviceGroup", "newMebxPassword", "trustedFqdn", "ip" ],
"description": "When present, this section will enable the Intel AMT provisioning server on the local network. This is used for Intel AMT bare-metal ACM activation.",
"properties": {
"port": {
@@ -1126,344 +301,62 @@
},
"plugins": {
"type": "object",
- "properties": {
- "enabled": {
- "type": "boolean"
- }
- },
- "required": [
- "enabled"
- ]
- },
- "watchdog": {
- "type": "object",
- "required": [
- "interval",
- "timeout"
- ],
- "description": "This is used to monitor if NodeJS is servicing IO correctly or getting held up a lot. You MUST specify \"interval\" and \"timeout\".",
- "properties": {
- "interval": {
- "type": "number",
- "description": " This will check every X ms"
- },
- "timeout": {
- "type": "number",
- "description": " If the timer is more than X ms late, it will warn to console AND mesherrors.txt"
- }
- }
+ "properties": { "enabled": { "type": "boolean" } },
+ "required": [ "enabled" ]
}
}
},
- "domaindefaults": {
- "$ref": "#/properties/domains/additionalProperties"
- },
+ "domaindefaults": { "$ref": "#/properties/domains/items" },
"domains": {
"type": "object",
- "additionalProperties": {
+ "items": {
"type": "object",
"properties": {
- "dns": {
- "type": "string",
- "default": null,
- "description": "The DNS name used to access this domain instead of accessing it via a subfolder"
- },
- "siteStyle": {
- "type": "integer",
- "default": 2,
- "description": "Valid numbers are 1 and 2, changes the style of the login page and some secondary pages."
- },
- "showModernUIToggle": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, the user will be able to toggle between the modern and classic UI."
- },
- "title": {
- "type": "string",
- "default": "MeshCentral",
- "description": "The title of this web site. All web pages will have this title."
- },
- "title2": {
- "type": "string",
- "default": null,
- "description": "Secondary title text that is placed on the upper right on the title on many web pages."
- },
- "titlePicture": {
- "type": "string",
- "default": null,
- "description": "Web site .png logo file that is 450x66 in size placed in meshcentral-data that is used on the top of many pages."
- },
- "loginPicture": {
- "type": "string",
- "default": null,
- "description": "Web site .png logo file placed in meshcentral-data that used on the login page when sitestyle is 2."
- },
- "pwaLogo": {
- "type": "string",
- "default": null,
- "description": "Web site .png logo file that is 512x512 in size placed in meshcentral-data that is used for PWA installs on iOS and Android."
- },
- "rootRedirect": {
- "type": "string",
- "default": null,
- "description": "Redirects HTTP root requests to this URL. When in use, direct users to /login to see the normal login page."
- },
- "mobileSite": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, this setting will disable the mobile site."
- },
- "orphanAgentUser": {
- "type": "string",
- "default": null,
- "description": "If an agent attempts to connect to a unknown device group, automatically create a new device group and grant access to the specified user. Example: admin"
- },
- "maxDeviceView": {
- "type": "integer",
- "default": null,
- "description": "The maximum number of devices a user can see on the devices page at the same time. By default all devices will show, but this may need to be limited on servers with large number of devices."
- },
- "unknownUserRootRedirect": {
- "type": "string",
- "default": null,
- "description": "Redirects HTTP root requests to this URL only where user is not already logged in. When in use, direct users to /login to see the normal login page."
- },
- "nightMode": {
- "type": "integer",
- "default": 0,
- "description": "0 = User selects day/night mode, 1 = Always night mode, 2 = Always day mode"
- },
- "scrollToTop": {
- "type": "boolean",
- "default": false,
- "description": "If true, a Scroll To Top button in the devices tab."
- },
- "userQuota": {
- "type": "integer"
- },
- "meshQuota": {
- "type": "integer"
- },
- "loginKey": {
- "type": [
- "string",
- "array"
- ],
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Requires that users add the value ?key=xxx in the URL in order to see the web site."
- },
- "agentKey": {
- "type": [
- "string",
- "array"
- ],
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Requires that agents add the value ?key=xxx in the URL in order to connect. This is not automatic and needs to be manually added in the meshagent.msh file."
- },
- "ipkvm": {
- "type": "boolean",
- "default": false,
- "description": "Set to true to enable IP KVM device support in this domain."
- },
- "minify": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, the server will send reduced sized web pages."
- },
- "newAccounts": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, allow new user accounts to be created from the login page."
- },
- "newAccountsPass": {
- "type": "string",
- "default": null,
- "description": "When set this password will be required in order to create a new account from the login screen."
- },
- "newAccountsCaptcha": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, users will get a CAPTCHA when creating a new account from the login screen."
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "userNameIsEmail": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, the username of each account is also the email address of the account."
- },
- "newAccountEmailDomains": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "newAccountsRights": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "allowedOrigin": {
- "type": [
- "array",
- "boolean"
- ],
- "default": false,
- "uniqueItems": true,
- "description": "A list of allowed hostnames for HTTP request origin header. If false, a default list is created, if true, all hostnames are allowed.",
- "items": {
- "type": "string"
- }
- },
- "welcomeText": {
- "type": "string",
- "description": "Text that will be shown on the login screen."
- },
- "welcomePicture": {
- "type": "string",
- "description": "Name of the PNG or JPEG file that will be shown on the login screen. Put this file in the meshcentral-data folder and place the file name here."
- },
- "welcomePictureFullScreen": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, the welcomePicture will show as a fullscreen background on the login screen."
- },
- "meshMessengerTitle": {
- "type": "string",
- "default": "MeshMessenger",
- "description": "Text that will be displayed on the top of the messenger window when no username or device name is displayed."
- },
- "meshMessengerPicture": {
- "type": "string",
- "default": null,
- "description": "Name of a .png image file that is placed in meshcentral-data that is displayed on the top of the messenger web page. When null, the default image is displayed."
- },
- "hide": {
- "type": "integer",
- "default": 0,
- "description": "Sum of: 1 = Hide header, 2 = Hide tab, 4 = Hide footer, 8 = Hide title, 16 = Hide left bar, 32 = Hide back buttons"
- },
- "footer": {
- "type": "string",
- "default": null,
- "description": "This is a HTML string displayed at the bottom of the web page when a user is logged in."
- },
- "loginfooter": {
- "type": "string",
- "default": null,
- "description": "This is a HTML string displayed at the bottom of the web page when a user is not logged in."
- },
- "allowSavingDeviceCredentials": {
- "type": "boolean",
- "default": true,
- "description": "Allow users to save SSH, RDP, VNC device credentials in the server."
- },
- "trustedCert": {
- "type": "boolean",
- "default": "This value is normally auto-detected, when set to true, MeshCentral assumes that the TLS certificate comes from a trusted CA and will ensure download tools perform certificate checking."
- },
+ "siteStyle": { "type": "integer", "default": 2, "description": "Valid numbers are 1 and 2, changes the style of the login page and some secondary pages." },
+ "title": { "type": "string", "default": "MeshCentral", "description": "The title of this web site. All web pages will have this title." },
+ "title2": { "type": "string", "default": null, "description": "Secondary title text that is placed on the upper right on the title on many web pages." },
+ "titlePicture": { "type": "string", "default": null, "description": "Web site .png logo file that is 450x66 in size placed in meshcentral-data that is used on the top of many pages." },
+ "loginPicture": { "type": "string", "default": null, "description": "Web site .png logo file placed in meshcentral-data that used on the login page when sitestyle is 2." },
+ "rootRedirect": { "type": "string", "default": null, "description": "Redirects HTTP root requests to this URL. When in use, direct users to /login to see the normal login page." },
+ "mobileSite": { "type": "boolean", "default": true, "description": "When set to false, this setting will disable the mobile site." },
+ "unknownUserRootRedirect": { "type": "string", "default": null, "description": "Redirects HTTP root requests to this URL only where user is not already logged in. When in use, direct users to /login to see the normal login page." },
+ "nightMode": { "type": "integer", "default": 0, "description": "0 = User selects day/night mode, 1 = Always night mode, 2 = Always day mode" },
+ "userQuota": { "type": "integer" },
+ "meshQuota": { "type": "integer" },
+ "loginKey": { "type": [ "string", "array" ], "items": { "type": "string" }, "default": null, "description": "Requires that users add the value ?key=xxx in the URL in order to see the web site." },
+ "agentKey": { "type": [ "string", "array" ], "items": { "type": "string" }, "default": null, "description": "Requires that agents add the value ?key=xxx in the URL in order to connect. This is not automatic and needs to be manually added in the meshagent.msh file." },
+ "ipkvm": { "type": "boolean", "default": false, "description": "Set to true to enable IP KVM device support in this domain." },
+ "minify": { "type": "boolean", "default": false, "description": "When enabled, the server will send reduced sided web pages." },
+ "newAccounts": { "type": "boolean", "default": false, "description": "When set to true, allow new user accounts to be created from the login page." },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "userNameIsEmail": { "type": "boolean", "default": false, "description": "When enabled, the username of each account is also the email address of the account." },
+ "newAccountEmailDomains": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "newAccountsRights": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "welcomeText": { "type": "string", "description": "Text that will be shown on the login screen." },
+ "welcomePicture": { "type": "string", "description": "Name of the PNG or JPEG file that will be shown on the login screen. Put this file in the meshcentral-data folder and place the file name here." },
+ "welcomePictureFullScreen": { "type": "boolean", "default": false, "description": "When enabled, the welcomePicture will show as a fullscreen background on the login screen." },
+ "meshMessengerTitle": { "type": "string", "default": "MeshMessenger", "description": "Text that will be displayed on the top of the messenger window when no username or device name is displayed." },
+ "meshMessengerPicture": { "type": "string", "default": null, "description": "Name of a .png image file that is placed in meshcentral-data that is displayed on the top of the messenger web page. When null, the default image is displayed." },
+ "hide": { "type": "integer", "default": 0, "description": "Sum of: 1 = Hide header, 2 = Hide tab, 4 = Hide footer, 8 = Hide title, 16 = Hide left bar, 32 = Hide back buttons" },
+ "footer": { "type": "string", "default": null, "description": "This is a HTML string displayed at the bottom of the web page when a user is logged in." },
+ "loginfooter": { "type": "string", "default": null, "description": "This is a HTML string displayed at the bottom of the web page when a user is not logged in." },
+ "allowSavingDeviceCredentials": { "type": "boolean", "default": true, "description": "Allow users to save SSH, RDP, VNC device credentials on the server that can be used by any other user." },
"guestDeviceSharing": {
- "type": [
- "boolean",
- "object"
- ],
+ "type": [ "boolean", "object" ],
"default": true,
"description": "When set to false, the desktop/terminal sharing link feature is not available.",
"properties": {
- "maxSessionTime": {
- "type": "number",
- "description": "When set, limits the maximum length of a guest session, in minutes."
- }
+ "maxSessionTime": { "type": "number", "description": "When set, limits the maximum length of a guest session, in minutes." }
}
},
- "autoRemoveInactiveDevices": {
- "type": "integer",
- "default": 0,
- "minimum": 0,
- "maximum": 2000,
- "description": "Number of days a device can be inactive before it's removed. 0 disables this feature. Device group setting will override this value."
- },
- "deviceSearchBarServerAndClientName": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, the devices search box will match on both the server name and client name of a device."
- },
- "deviceSearchBarGroupName": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, the devices search box will match on group name too."
- },
+ "autoRemoveInactiveDevices": { "type": "integer", "default": 0, "minimum": 0, "maximum": 2000, "description": "Number of days a device can be inactive before it's removed. 0 disables this feature. Device group setting will override this value." },
+ "deviceSearchBarServerAndClientName": { "type": "boolean", "default": false, "description": "When set to true, the devices search box will match on both the server name and client name of a device." },
"agentSelfGuestSharing": {
- "type": [
- "boolean",
- "object"
- ],
+ "type": [ "boolean", "object" ],
"default": false,
- "description": "When set to true, MeshCentral Assistant can create it's own guest sharing links.",
+ "description": "When set to true, MeshCentral Asssitant can create it's own guest sharing links.",
"properties": {
- "expire": {
- "type": "number",
- "description": "When set, limits the self-created guest sharing link to this number of minutes."
- }
- }
- },
- "PreconfiguredScripts": {
- "type": "array",
- "default": null,
- "description": "When set, your can try click the run button to run on of these scripts on the remote device.",
- "items": {
- "type": "object",
- "required": [
- "name",
- "type"
- ],
- "properties": {
- "name": {
- "description": "Name of the script.",
- "type": "string"
- },
- "type": {
- "description": "The type of script.",
- "type": "string",
- "enum": [
- "bat",
- "ps1",
- "sh",
- "agent"
- ]
- },
- "runas": {
- "description": "How to run this script, does not apply to agent scripts.",
- "type": "string",
- "enum": [
- "agent",
- "userfirst",
- "user"
- ]
- },
- "cmd": {
- "description": "The command or \\r\\n separated commands to run, if set do not use the file key.",
- "type": "string"
- },
- "file": {
- "description": "The script file path and name, if set do not use the cmd key. This file path starts in meshcentral-data.",
- "type": "string"
- }
- }
+ "expire": { "type": "number", "description": "When set, limits the self-created guest sharing link to this number of minutes." }
}
},
"preConfiguredRemoteInput": {
@@ -1472,10 +365,7 @@
"description": "When set, you can right click on the input button in the desktop tab and instantly remotely type one of these pre-configured strings.",
"items": {
"type": "object",
- "required": [
- "name",
- "value"
- ],
+ "required": [ "name", "value" ],
"properties": {
"name": {
"description": "Name of the text string.",
@@ -1488,838 +378,262 @@
}
}
},
- "altMessenging": {
- "type": "array",
- "items": {
- "type": "object",
- "properties": {
- "name": {
- "type": "string",
- "description": "Name of the alternative messaging service, for example: \"Jitsi\" "
- },
- "url": {
- "type": "string",
- "description": "URL to the alternative messaging services, for example: \"https://meet.jit.si/myserver-{0}\", for a device {0}, {1}, {2}, {3} is the device id. For a user, {0} is the userid, {1} is full userid with dashes, {2} is real name with no spaces, {3} is real name with dash instead of spaces."
- },
- "localurl": {
- "type": "string",
- "description": "If specified, this is the URL that is used on the administrator side, for example: \"https://meet.jit.si/myserver-{0}\", for a device {0}, {1}, {2}, {3} is the device id. For a user, {0} is the userid, {1} is full userid with dashes, {2} is real name with no spaces, {3} is real name with dash instead of spaces."
- },
- "type": {
- "type": "string",
- "enum": [
- null,
- "user",
- "device"
- ],
- "default": null,
- "description": "Indicate if this button should be shown in the user or device type. If omitted, it will be displayed in both."
- }
- },
- "required": [
- "name",
- "url"
- ]
- }
- },
- "deviceMeshRouterLinks": {
+ "altMessenging": {
"type": "object",
"properties": {
- "rdp": {
- "type": "boolean",
- "default": true,
- "description": "Display a RDP link in the device tab when supported."
- },
- "ssh": {
- "type": "boolean",
- "default": true,
- "description": "Display a SSH link in the device tab when supported."
- },
- "scp": {
- "type": "boolean",
- "default": true,
- "description": "Display a SCP link in the device tab when supported."
- },
- "extralinks": {
- "type": "array",
- "items": {
- "type": "object",
- "required": [
- "name",
- "protocol",
- "port"
- ],
- "properties": {
- "name": {
- "description": "Name of the link to be displayed on the web site.",
- "type": "string"
- },
- "protocol": {
- "description": "Protocol. Valid values are: custom,http,https,rdp,ssh,scp,mcrdesktop,mcrfiles.",
- "type": "string"
- },
- "port": {
- "description": "The port on the remote device.",
- "default": 0,
- "minimum": 0,
- "maximum": 65535,
- "type": "integer"
- },
- "ip": {
- "description": "Target IP address. If not specified, the target of the connection is the remote device running the MeshAgent.",
- "type": "string"
- },
- "localport": {
- "description": "The local port MeshCentral Router would bind to. By default, a random available port is used.",
- "default": 0,
- "minimum": 0,
- "maximum": 65535,
- "type": "integer"
- },
- "filter": {
- "description": "Array of node// or mesh// or tag: strings. When set, the link will only show up for the specified devices, device groups or device tag.",
- "type": "array",
- "items": {
- "type": "string"
- }
- }
+ "name": { "type": "string", "description": "Name of the alternative messaging service, for example: \"Jitsi\" " },
+ "url": { "type": "string", "description": "URL to the alternative messaging services, for example: \"https://meet.jit.si/myserver-{0}\"" },
+ "localurl": { "type": "string", "description": "If specified, this is the URL that is used on the administrator side, for example: \"https://meet.jit.si/myserver-{0}\"" }
+ },
+ "required": [ "name", "url" ]
+ },
+ "deviceMeshRouterLinks": {
+ "rdp": { "type": "boolean", "default": true, "description": "Display a RDP link in the device tab when supported." },
+ "ssh": { "type": "boolean", "default": true, "description": "Display a SSH link in the device tab when supported." },
+ "scp": { "type": "boolean", "default": true, "description": "Display a SCP link in the device tab when supported." },
+ "extralinks": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "additionalProperties": false,
+ "required": [ "name", "protocol", "port" ],
+ "properties": {
+ "name": {
+ "description": "Name of the link to be displayed on the web site.",
+ "type": "string"
+ },
+ "protocol": {
+ "description": "Protocol. Valid values are: custom,http,https,rdp,ssh,scp,mcrdesktop,mcrfiles.",
+ "type": "string"
+ },
+ "port": {
+ "description": "The port on the remote device.",
+ "default": 0,
+ "minimum": 0,
+ "maximum": 65535,
+ "type": "integer"
+ },
+ "ip": {
+ "description": "Target IP address. If not specified, the target of the connection is the remote device running the MeshAgent.",
+ "type": "string"
+ },
+ "localport": {
+ "description": "The local port MeshCentral Router would bind to. By default, a random available port is used.",
+ "default": 0,
+ "minimum": 0,
+ "maximum": 65535,
+ "type": "integer"
+ },
+ "filter": {
+ "description": "Array of node// or mesh// or tag: strings. When set, the link will only show up for the specified devices, device groups or device tag.",
+ "type": "array",
+ "items": { "type": "string" }
}
}
}
}
},
- "assistantTypeAgentInvite": {
- "type": "integer",
- "default": 0,
- "description": "0 = System Tray, Connect on user request, 1 = System Tray, Always Connected, 2 = Application, Connect on user request, 3 = Application, Always connected, 4 = System Tray, Monitor Only"
- },
"certUrl": {
"type": "string",
"format": "uri",
- "description": "https url when to get the TLS certificate that MeshAgent's will see when connecting to this server. This setting is used when a reverse proxy like NGINX is used in front of MeshCentral. You can set this to file:// but it must be followed by the full path to the certificate file."
+ "description": "https url when to get the TLS certificate that MeshAgent's will see when connecting to this server. This setting is used when a reverse proxy like NGINX is used in front of MeshCentral."
},
"myServer": {
- "type": [
- "object",
- "boolean"
- ],
+ "type": [ "object", "boolean" ],
+ "additionalProperties": false,
"properties": {
- "Backup": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to backup the server from the My Server tab. This option can only enabled when the NeDB database is in use. For other databases, this option disabled and the setting is ignored."
- },
- "Restore": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to restore the server from the My Server tab. This option can only enabled when the NeDB database is in use. For other databases, this option disabled and the setting is ignored."
- },
- "Upgrade": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to update the server from the My Server tab."
- },
- "ErrorLog": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to see the server crash log the server from the My Server tab."
- },
- "Console": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to access the server console from the My Server tab."
- },
- "Trace": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators to access the server trace tab from from the My Server tab."
- },
- "Config": {
- "type": "boolean",
- "default": true,
- "description": "Allows administrators remotely view server configuration on the My Server tab."
- }
+ "Backup": { "type": "boolean", "default": true, "description": "Allows administrators to backup the server from the My Server tab." },
+ "Restore": { "type": "boolean", "default": true, "description": "Allows administrators to restore the server from the My Server tab." },
+ "Upgrade": { "type": "boolean", "default": true, "description": "Allows administrators to update the server from the My Server tab." },
+ "ErrorLog": { "type": "boolean", "default": true, "description": "Allows administrators to see the server crash log the server from the My Server tab." },
+ "Console": { "type": "boolean", "default": true, "description": "Allows administrators to access the server console from the My Server tab." },
+ "Trace": { "type": "boolean", "default": true, "description": "Allows administrators to access the server trace tab from from the My Server tab." }
}
},
"passwordRequirements": {
"type": "object",
"properties": {
- "min": {
- "type": "integer",
- "description": "Minimum number of characters allowed for the account password."
- },
- "max": {
- "type": "integer",
- "description": "Maximum number of characters allowed for the account password."
- },
- "upper": {
- "type": "integer",
- "description": "Minimum number of upper case characters required in the password."
- },
- "lower": {
- "type": "integer",
- "description": "Minimum number of lower case characters required in the password."
- },
- "numeric": {
- "type": "integer",
- "description": "Minimum number of numeric characters required in the password."
- },
- "nonalpha": {
- "type": "integer",
- "description": "Minimum number of non-alpha-numeric characters required in the password."
- },
- "reset": {
- "type": "integer",
- "description": "Number of days after which the user is required to change the account password."
- },
- "email2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable email 2FA."
- },
- "sms2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable SMS 2FA."
- },
- "duo2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable Duo 2FA."
- },
- "push2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable push notification 2FA."
- },
- "otp2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable one-time-password 2FA."
- },
- "msg2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable user messaging 2FA."
- },
- "backupcode2factor": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable 2FA backup codes."
- },
- "single2factorWarning": {
- "type": "boolean",
- "default": true,
- "description": "Set to false to disable single 2FA warning."
- },
- "lock2factor": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, prevents any changes to 2FA."
- },
- "force2factor": {
- "type": "boolean",
- "default": false,
- "description": "Requires that all accounts setup 2FA."
- },
- "skip2factor": {
- "type": "string",
- "description": "IP addresses where 2FA login is skipped, for example: 127.0.0.1,192.168.2.0/24"
- },
- "oldPasswordBan": {
- "type": "integer",
- "description": "Number of old passwords the server should remember and not allow the user to switch back to."
- },
- "banCommonPasswords": {
- "type": "boolean",
- "default": false,
- "description": "Uses WildLeek to block use of the 10000 most commonly used passwords."
- },
- "loginTokens": {
- "type": [
- "boolean",
- "array"
- ],
- "default": true,
- "description": "Allows users to create alternative username/passwords for their account. Set to false to disallow all users, or set to a userid array to only allow some users."
- },
- "twoFactorTimeout": {
- "type": "integer",
- "default": 300,
- "description": "Maximum about of time to wait for a 2FA token on the login page in seconds."
- },
- "autofido2fa": {
- "type": "boolean",
- "default": false,
- "description": "If true and user account has FIDO key setup, 2FA login screen will automatically request FIDO 2FA."
- },
- "maxfidokeys": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of FIDO/YubikeyOTP hardware 2FA keys that can be setup in a user account."
- },
- "allowaccountreset": {
- "type": "boolean",
- "default": true,
- "description": "If set to false, the account reset option on the login screen will not be available to users."
- }
+ "min": { "type": "integer", "description": "Minimum number of characters allowed for the account password." },
+ "max": { "type": "integer", "description": "Maximum number of characters allowed for the account password." },
+ "upper": { "type": "integer", "description": "Minimum number of upper case characters required in the password." },
+ "lower": { "type": "integer", "description": "Minimum number of lower case characters required in the password." },
+ "numeric": { "type": "integer", "description": "Minimum number of numeric characters required in the password." },
+ "nonalpha": { "type": "integer", "description": "Minimum number of non-alpha-numeric characters required in the password." },
+ "reset": { "type": "integer", "description": "Number of days after which the user is required to change the account password." },
+ "email2factor": { "type": "boolean", "default": true, "description": "Set to false to disable email 2FA." },
+ "sms2factor": { "type": "boolean", "default": true, "description": "Set to false to disable SMS 2FA." },
+ "push2factor": { "type": "boolean", "default": true, "description": "Set to false to disable push notification 2FA." },
+ "otp2factor": { "type": "boolean", "default": true, "description": "Set to false to disable one-time-password 2FA." },
+ "backupcode2factor": { "type": "boolean", "default": true, "description": "Set to false to disable 2FA backup codes." },
+ "single2factorWarning": { "type": "boolean", "default": true, "description": "Set to false to disable single 2FA warning." },
+ "lock2factor": { "type": "boolean", "default": false, "description": "When set to true, prevents any changes to 2FA." },
+ "force2factor": { "type": "boolean", "default": false, "description": "Requires that all accounts setup 2FA." },
+ "skip2factor": { "type": "string", "description": "IP addresses where 2FA login is skipped, for example: 127.0.0.1,192.168.2.0/24" },
+ "oldPasswordBan": { "type": "integer", "description": "Number of old passwords the server should remember and not allow the user to switch back to." },
+ "banCommonPasswords": { "type": "boolean", "default": false, "description": "Uses WildLeek to block use of the 10000 most commonly used passwords." },
+ "loginTokens": { "type": [ "boolean", "array" ], "default": true, "description": "Allows users to create alternative username/passwords for their account. Set to false to disallow all users, or set to a userid array to only all some users." },
+ "twoFactorTimeout": { "type": "integer", "default": 300, "description": "Maximum about of time the to wait for a 2FA token on the login page in seconds." },
+ "autofido2fa": { "type": "boolean", "default": false, "description": "If true and user account has FIDO key setup, 2FA login screen will automatically request FIDO 2FA." },
+ "maxfidokeys": { "type": "integer", "default": null, "description": "Maximum number of FIDO/YubikeyOTP hardware 2FA keys that can be setup in a user account." },
+ "allowaccountreset": { "type": "boolean", "default": true, "description": "If set to false, the account reset option on the login screen will not be available to users." }
}
},
- "twoFactorCookieDurationDays": {
- "type": "integer",
- "default": 30,
- "description": "Number of days that a user is allowed to remember this device for when completing 2FA. Set this to 0 to remove this option."
- },
- "auth": {
- "type": "string",
- "default": null,
- "enum": [
- null,
- "sspi",
- "ldap"
- ],
- "description": "Type of user authentication to use, this can be SSPI on Windows or LDAP. If not set, username/password is used."
- },
- "ldapUserKey": {
- "type": "string",
- "default": null,
- "description": "The LDAP value to use as a user's unique account identifier. Use \"ldapUserKey\" or \"ldapUserBinaryKey\"."
- },
- "ldapUserBinaryKey": {
- "type": "string",
- "default": "objectSid",
- "description": "The LDAP value to use as a user's unique account identifier, when specified in this field, the values will be HEX converted."
- },
- "ldapUserName": {
- "type": "string",
- "default": "displayName",
- "description": "The LDAP value to use for the user name, you can also compose the name by setting this value to, for example: \"{{{givenName}}} {{{sn}}}\""
- },
- "ldapUserEmail": {
- "type": "string",
- "default": "mail",
- "description": "The LDAP value to use for the user's email address."
- },
- "ldapUserRealName": {
- "type": "string",
- "default": "name",
- "description": "The LDAP value to use for the user's real name, you can also compose the name by setting this value to, for example: \"{{{givenName}}} {{{sn}}}\""
- },
- "ldapUserPhoneNumber": {
- "type": "string",
- "default": "telephoneNumber",
- "description": "The LDAP value to use for the user's phone number."
- },
- "ldapUserImage": {
- "type": "string",
- "default": "thumbnailPhoto",
- "description": "The LDAP value to use for the user's image."
- },
- "ldapSaveUserToFile": {
- "type": "string",
- "default": null,
- "description": "When set to a filename, for example c:\\temp\\ldapusers.txt, MeshCentral will save the LDAP user object to this file each time a user logs in. This is used for debugging LDAP issues."
- },
- "ldapUserGroups": {
- "type": "string",
- "default": "memberOf",
- "description": "The LDAP value to use for the user's group memberships."
- },
- "ldapSyncWithUserGroups": {
- "type": [
- "boolean",
- "object"
- ],
- "default": false,
- "description": "When set to true or set to an object, MeshCentral will synchronize LDAP user memberships to MeshCentral user groups.",
- "properties": {
- "filter": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set to a string or array of strings, only LDAP membership groups that includes one of the strings will be synchronized with MeshCentral user groups."
- }
- }
- },
- "ldapSiteAdminGroups": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set to a list of LDAP groups, users that are part of one of these groups will be set a site administrator, otherwise site administrator rights will be removed."
- },
- "ldapUserRequiredGroupMembership": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "A list of LDAP groups. Users must be part of at least one of these groups to allow login. If null, all users are allowed to login."
- },
- "ldapOptions": {
- "type": "object",
- "description": "LDAP options passed to ldapauth-fork"
- },
- "hidePowerTimeline": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, this will hide the power timeline in the web ui"
- },
- "showNotesPanel": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, this will show the notes panel in the device view"
- },
- "userSessionsSort": {
- "type": "string",
- "default": "SessionId",
- "description": "Arrange the Connect sessions offered when multiple Terminal Sessions are present by 'SessionId', 'StationName' or 'Username' with 'SessionId' as the default sorting criteria."
- },
- "agentInviteCodes": {
- "type": "boolean",
- "default": false,
- "description": "Enabled a feature where you can set one or more invitation codes in a device group. You can then give a invitation link to users who can use it to download the agent."
- },
- "agentNoProxy": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, all newly installed MeshAgents will be instructed to no use a HTTP/HTTPS proxy even if one is configured on the remote system"
- },
+ "twoFactorCookieDurationDays": { "type": "integer", "default": 30, "description": "Number of days that a user is allowed to remember this device for when completing 2FA. Set this to 0 to remove this option." },
+ "auth": { "type": "string", "default": null, "enum": [null, "sspi", "ldap"], "description": "Type of user authentication to use, this can be SSPI on Windows or LDAP. If not set, username/password is used." },
+ "ldapUserKey": { "type": "string" },
+ "ldapUserName": { "type": "string" },
+ "ldapUserEmail": { "type": "string" },
+ "ldapUserRealName": { "type": "string" },
+ "ldapUserPhoneNumber": { "type": "string" },
+ "ldapOptions": { "type": "object", "description": "LDAP options passed to ldapauth-fork" },
+ "agentInviteCodes": { "type": "boolean", "default": false, "description": "Enabled a feature where you can set one or more invitation codes in a device group. You can then give a invitation link to users who can use it to download the agent." },
+ "agentNoProxy": { "type": "boolean", "default": false, "description": "When enabled, all newly installed MeshAgents will be instructed to no use a HTTP/HTTPS proxy even if one is configured on the remote system" },
"agentTag": {
"type": "object",
"description": "This section is used to indicate if parts of the meshagent.tag file should be used to set server-side device properties.",
+ "additionalProperties": false,
"properties": {
- "ServerName": {
- "type": "integer",
- "default": 0,
- "description": "Action taken if one of the lines in meshagent.tag contains ~ServerName:name. 0=Ignore, 1=Set."
- },
- "ServerDesc": {
- "type": "integer",
- "default": 0,
- "description": "Action taken if one of the lines in meshagent.tag contains ~ServerDesc:desc. 0=Ignore, 1=Set, 2=SetIfEmpty."
- },
- "ServerTags": {
- "type": "integer",
- "default": 0,
- "description": "Action taken if one of the lines in meshagent.tag contains ~ServerTags:tag1,tag2,tag3. 0=Ignore, 1=Set, 2=SetIfEmpty, 3=Append."
- }
+ "ServerName": { "type": "integer", "default": 0, "description": "Action taken if one of the lines in meshagent.tag contains ~ServerName:name. 0=Ignore, 1=Set." },
+ "ServerDesc": { "type": "integer", "default": 0, "description": "Action taken if one of the lines in meshagent.tag contains ~ServerDesc:desc. 0=Ignore, 1=Set, 2=SetIfEmpty." },
+ "ServerTags": { "type": "integer", "default": 0, "description": "Action taken if one of the lines in meshagent.tag contains ~ServerTags:tag1,tag2,tag3. 0=Ignore, 1=Set, 2=SetIfEmpty, 3=Append." }
}
},
- "lockAgentDownload": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, MeshCentral will block all downloads of MeshAgent including install scripts, if the user is not logged in"
- },
- "geoLocation": {
- "type": "boolean",
- "default": false,
- "description": "Enables the geo-location feature and device location map in the user interface, this feature is not being worked on."
- },
- "ipLocation": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, the remote agents will submit there approximate location to MeshCentral, Use in combination with \"geoLocation\"."
- },
- "novnc": {
- "type": "boolean",
- "default": true,
- "description": "When enabled, activates the built-in web-based VNC client."
- },
- "mstsc": {
- "type": "boolean",
- "default": true,
- "description": "When enabled, activates the built-in web-based RDP client."
- },
- "ssh": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, activates the built-in web-based SSH client."
- },
- "webEmailsPath": {
- "type": "string",
- "description": "Path where to find custom email templates for this domain."
- },
- "customUI": {
- "type": "object"
- },
+ "geoLocation": { "type": "boolean", "default": false, "description": "Enables the geo-location feature and device location map in the user interface, this feature is not being worked on." },
+ "novnc": { "type": "boolean", "default": true, "description": "When enabled, activates the built-in web-based VNC client." },
+ "mstsc": { "type": "boolean", "default": false, "description": "When enabled, activates the built-in web-based RDP client." },
+ "ssh": { "type": "boolean", "default": false, "description": "When enabled, activates the built-in web-based SSH client." },
+ "webEmailsPath": { "type": "string", "description": "Path where to find custom email templates for this domain." },
+ "customUI": { "type": "object" },
"consentMessages": {
"type": "object",
"description": "This section is used to customize user consent prompts, these show up when asking if a remote session is allowed or not.",
+ "additionalProperties": false,
"properties": {
- "Title": {
- "type": "string"
- },
- "Desktop": {
- "type": "string"
- },
- "Terminal": {
- "type": "string"
- },
- "Files": {
- "type": "string"
- },
- "consentTimeout": {
- "type": "integer",
- "default": 30,
- "description": "How long in seconds to show the user consent dialog box."
- },
- "autoAcceptOnTimeout": {
- "type": "boolean",
- "default": false,
- "description": "If true, user consent is accepted after the timeout."
- },
- "autoAcceptIfNoUser": {
- "type": "boolean",
- "default": false,
- "description": "If true, user consent is accepted if no user is logged in."
- },
- "oldStyle": {
- "type": "boolean",
- "default": false,
- "description": "If true, user consent will be shown in an old style prompt box rather than the new style consent-box."
- }
+ "Title": { "type": "string" },
+ "Desktop": { "type": "string" },
+ "Terminal": { "type": "string" },
+ "Files": { "type": "string" },
+ "consentTimeout": { "type": "integer", "default": 30, "description": "How long in seconds to show the user consent dialog box." },
+ "autoAcceptOnTimeout": { "type": "boolean", "default": false, "description": "If true, user consent is accepted after the timeout." }
}
},
"notificationMessages": {
"type": "object",
+ "additionalProperties": false,
"description": "This section is user to customize user notifications when a remote desktop, terminal or file session is connected to a remote system.",
"properties": {
- "Title": {
- "type": "string"
- },
- "Desktop": {
- "type": "string"
- },
- "Terminal": {
- "type": "string"
- },
- "Files": {
- "type": "string"
- }
+ "Title": { "type": "string" },
+ "Desktop": { "type": "string" },
+ "Terminal": { "type": "string" },
+ "Files": { "type": "string" }
}
},
"agentCustomization": {
"type": "object",
+ "additionalProperties": false,
"description": "Use this section to customize the agent branding.",
"properties": {
- "displayName": {
- "type": "string",
- "default": "MeshCentral Agent",
- "description": "The name of the agent as displayed to the user."
- },
- "description": {
- "type": "string",
- "default": "Mesh Agent background service",
- "description": "The description of the agent as displayed to the user."
- },
- "companyName": {
- "type": "string",
- "default": "Mesh Agent",
- "description": "This will be used as the path to install the agent, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's."
- },
- "serviceName": {
- "type": "string",
- "default": "Mesh Agent",
- "description": "The name of the background service, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's but should be set to an all lower case, no space string."
- },
- "installText": {
- "type": "string",
- "default": null,
- "description": "Text string to show in the agent installation dialog box."
- },
- "image": {
- "type": "string",
- "default": null,
- "description": "The filename of a image file in .png format located in meshcentral-data to display in the MeshCentral Agent installation dialog, image should be square and from 64x64 to 200x200."
- },
- "fileName": {
- "type": "string",
- "default": "meshagent",
- "description": "The agent filename."
- },
- "foregroundColor": {
- "type": "string",
- "default": null,
- "description": "Foreground text color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF."
- },
- "backgroundColor": {
- "type": "string",
- "default": null,
- "description": "Background color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF."
- }
+ "displayName": { "type": "string", "default": "MeshCentral Agent", "description": "The name of the agent as displayed to the user." },
+ "description": { "type": "string", "default": "Mesh Agent background service", "description": "The description of the agent as displayed to the user." },
+ "companyName": { "type": "string", "default": "Mesh Agent", "description": "This will be used as the path to install the agent, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's." },
+ "serviceName": { "type": "string", "default": "Mesh Agent", "description": "The name of the background service, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's but should be set to an all lower case, no space string." },
+ "installText": { "type": "string", "default": null, "description": "Text string to show in the agent installation dialog box." },
+ "image": { "type": "string", "default": null, "description": "The filename of a image file in .png format located in meshcentral-data to display in the MeshCentral Agent installation dialog, image should be square and from 64x64 to 200x200." },
+ "fileName": { "type": "string", "default": "meshagent", "description": "The agent filename." },
+ "foregroundColor": { "type": "string", "default": null, "description": "Foreground text color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF." },
+ "backgroundColor": { "type": "string", "default": null, "description": "Background color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF." }
}
},
"agentFileInfo": {
"type": "object",
+ "additionalProperties": false,
"description": "Use this section to set resource metadata of the Windows agents prior to signing. In Windows, you can right-click and select properties to view these values.",
"properties": {
- "icon": {
- "type": "string",
- "description": "Sets the agent icon, this is the name of a .ico file with the file placed in the meshcentral-data folder."
- },
- "fileDescription": {
- "type": "string",
- "description": "Executable file description."
- },
- "fileVersion": {
- "type": "string",
- "description": "Executable file version, in the form of 'n.n.n.n', for example: '1.2.3.4'."
- },
- "internalName": {
- "type": "string",
- "description": "Executable internal name."
- },
- "legalCopyright": {
- "type": "string",
- "description": "Executable legal copyright."
- },
- "originalFilename": {
- "type": "string",
- "description": "Executable original file name."
- },
- "productName": {
- "type": "string",
- "description": "Executable product name."
- },
- "productVersion": {
- "type": "string",
- "description": "Executable product version. Any string format will work, but a alphabetic character is required for this value to show correctly in the Windows property box. For example: 'v1.2.3.4' will work, but '1.2.3.4' will not."
- }
+ "fileDescription": { "type": "string", "description": "Executable file description." },
+ "fileVersion": { "type": "string", "description": "Executable file version, generally in the form of 1.2.3.4." },
+ "internalName": { "type": "string", "description": "Executable internal name." },
+ "legalCopyright": { "type": "string", "description": "Executable legal copyright." },
+ "originalFilename": { "type": "string", "description": "Executable original file name." },
+ "productName": { "type": "string", "description": "Executable product name." },
+ "productVersion": { "type": "string", "description": "Executable product version, generally in the form of 1.2.3.4." }
}
},
"assistantCustomization": {
"type": "object",
+ "additionalProperties": false,
"description": "Use this section to customize the MeshCentral Assistant.",
"properties": {
- "title": {
- "type": "string",
- "default": "MeshCentral Assistant",
- "description": "Name to show as MeshCentral Assistant dialog title."
- },
- "image": {
- "type": "string",
- "default": null,
- "description": "The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Assistant, image should be square and from 64x64 to 128x128."
- },
- "fileName": {
- "type": "string",
- "default": "meshagent",
- "description": "The MeshCentral Assistant filename."
- }
+ "title": { "type": "string", "default": "MeshCentral Assistant", "description": "Name to show as MeshCentral Assistant dialog title." },
+ "image": { "type": "string", "default": null, "description": "The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Assistant, image should be square and from 64x64 to 128x128." },
+ "fileName": { "type": "string", "default": "meshagent", "description": "The MeshCentral Assistant filename." }
}
},
"androidCustomization": {
"type": "object",
+ "additionalProperties": false,
"description": "Use this section to customize the MeshCentral Agent for Android.",
"properties": {
- "title": {
- "type": "string",
- "default": "MeshCentral Agent",
- "description": "Displayed on top of the MeshCentral Agent for Android."
- },
- "subtitle": {
- "type": "string",
- "default": null,
- "description": "Subtitle displayed until the title on the toolbar."
- },
- "image": {
- "type": "string",
- "default": null,
- "description": "The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Agent for Android, image should be square and from 64x64 to 128x128."
- }
+ "title": { "type": "string", "default": "MeshCentral Agent", "description": "Displayed on top of the MeshCentral Agent for Android." },
+ "subtitle": { "type": "string", "default": null, "description": "Subtitle displayed until the title on the toolbar." },
+ "image": { "type": "string", "default": null, "description": "The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Agent for Android, image should be square and from 64x64 to 128x128." }
}
},
- "ipBlockedUserRedirect": {
- "type": "string",
- "default": null,
- "description": "If set, a user from a banned IP address will be redirected to this URL."
- },
- "userRequiredHttpHeader": {
- "type": "object",
- "default": null,
- "description": "When set, requires that a browser request have set HTTP header to allow user login. Example: \"{ \"Sec-Fetch-Dest\": \"iframe\" }\""
- },
- "userAllowedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, only users from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:userAllowedIP.txt\""
- },
- "userBlockedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, users from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:userBlockedIP.txt\""
- },
- "agentAllowedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, only agents from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:agentAllowedIP.txt\""
- },
- "agentBlockedIP": {
- "type": [
- "string",
- "array"
- ],
- "default": null,
- "description": "When set, agents from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\" \"file:agentBlockedIP.txt\""
- },
- "userSessionIdleTimeout": {
- "type": "integer",
- "default": null,
- "description": "When set, idle users will be disconnected after a set amounts of minutes."
- },
- "logoutOnIdleSessionTimeout": {
- "type": "boolean",
- "default": true,
- "description": "Determines whether MeshCentral should logout after the session idle timeout elapsed or should just disconnect remote desktop, terminal and files."
- },
+ "ipBlockedUserRedirect" : { "type": "string", "default": null, "description": "If set, a user from a banned IP address will be redirected to this URL." },
+ "userRequiredHttpHeader": { "type": "object", "default": null, "description": "When set, requires that a browser request have set HTTP header to allow user login. Example: \"{ \"Sec-Fetch-Dest\": \"iframe\" }\"" },
+ "userAllowedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, only users from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "userBlockedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, users from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "agentAllowedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, only agents from allowed IP address ranges can connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "agentBlockedIP": { "type": [ "string", "array" ], "default": null, "description": "When set, agents from these denied IP address ranges will not be able to connect to the server. Example: \"192.168.2.100,192.168.1.0/24\"" },
+ "userSessionIdleTimeout": { "type": "integer", "default": null, "description": "When set, idle users will be disconnected after a set amounts of minutes." },
"userConsentFlags": {
"type": "object",
+ "additionalProperties": false,
"description": "Use this section to require user consent for this domain.",
"properties": {
- "desktopnotify": {
- "type": "boolean",
- "default": false,
- "description": "Enable desktop notification for this domain."
- },
- "terminalnotify": {
- "type": "boolean",
- "default": false,
- "description": "Enable terminal notification for this domain."
- },
- "filenotify": {
- "type": "boolean",
- "default": false,
- "description": "Enable files notification for this domain."
- },
- "desktopprompt": {
- "type": "boolean",
- "default": false,
- "description": "Enable desktop prompt for this domain."
- },
- "terminalprompt": {
- "type": "boolean",
- "default": false,
- "description": "Enable terminal user prompt for this domain."
- },
- "fileprompt": {
- "type": "boolean",
- "default": false,
- "description": "Enable files prompt for this domain."
- },
- "desktopprivacybar": {
- "type": "boolean",
- "default": false,
- "description": "Enable remote desktop privacy bar for this domain."
- }
+ "desktopnotify": { "type": "boolean", "default": false, "description": "Enable desktop notification for this domain." },
+ "terminalnotify": { "type": "boolean", "default": false, "description": "Enable terminal notification for this domain." },
+ "filenotify": { "type": "boolean", "default": false, "description": "Enable files notification for this domain." },
+ "desktopprompt": { "type": "boolean", "default": false, "description": "Enable desktop prompt for this domain." },
+ "terminalprompt": { "type": "boolean", "default": false, "description": "Enable terminal user prompt for this domain." },
+ "fileprompt": { "type": "boolean", "default": false, "description": "Enable files prompt for this domain." },
+ "desktopprivacybar": { "type": "boolean", "default": false, "description": "Enable remote desktop privacy bar for this domain." }
}
},
- "urlSwitching": {
- "type": "boolean",
- "default": true,
- "description": "When users navigate thru the web interface, the URL on top will change to point to the current screen. This allows a user to refresh or bookmark the URL and come back to the correct screen. Setting false here will disable this feature."
- },
- "desktopPrivacyBarText": {
- "type": "string",
- "description": "This is the text that will be shown in the remote desktop privacy bar. You can use {0} to display the account realname or {1} to display the account identifier in the string."
- },
+ "urlSwitching": { "type": "boolean", "default": true, "description": "When users navigate thru the web interface, the URL on top will change to point to the current screen. This allows a user to refresh or bookmark the URL and come back to the correct screen. Setting false here will disable this feature." },
+ "desktopPrivacyBarText": { "type": "string", "description": "This is the text that will be shown in the remote desktop privacy bar. You can use {0} to display the account realname or {1} to display the account identifier in the string." },
"limits": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "MaxDevices": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of devices in this domain."
- },
- "MaxUserAccounts": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of devices in this domain."
- },
- "MaxUserSessions": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of user sessions that can connect to this server for this domain."
- },
- "MaxAgentSessions": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of agents that can connect to this server for this domain."
- },
- "MaxSingleUserSessions": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of sessions a single user can have. Each time a user opens a new browser tab or opens a new browser on a different computer, a new user session is created."
- }
- }
- },
- "files": {
- "type": "object",
- "description": "Values that affect the files feature",
- "properties": {
- "sftpConnect": {
- "type": "boolean",
- "default": true,
- "description": "When false, removes the 'SFTP Connect' button from the files tab unless this is the only possible option."
- }
+ "MaxDevices": { "type": "integer", "default": null, "description": "Maximum number of devices in this domain." },
+ "MaxUserAccounts": { "type": "integer", "default": null, "description": "Maximum number of devices in this domain." },
+ "MaxUserSessions": { "type": "integer", "default": null, "description": "Maximum number of user sessions that can connect to this server for this domain." },
+ "MaxAgentSessions": { "type": "integer", "default": null, "description": "Maximum number of agents that can connect to this server for this domain." },
+ "MaxSingleUserSessions": { "type": "integer", "default": null, "description": "Maximum number of sessions a single user can have. Each time a user opens a new browser tab or opens a new browser on a different computer, a new user session is created." }
}
},
"terminal": {
"type": "object",
"description": "Values that affect the terminal feature",
"properties": {
- "sshConnect": {
- "type": "boolean",
- "default": true,
- "description": "When false, removes the 'SSH Connect' button from the terminal tab unless this is the only possible option."
- },
"linuxShell": {
"type": "string",
- "enum": [
- "any",
- "root",
- "user",
- "login"
- ],
+ "enum": [ "any", "root", "user", "login" ],
"default": "any",
- "description": "Indicates the default linux terminal thats used when the user clicks the terminal connect button and disables the right mouse button on the terminal connect button when this is set."
+ "description": "Indicate what terminal options are available when the user clicks the right mouse button on the terminal connect button."
},
"launchCommand": {
"type": "object",
"description": "Indicate what string the agent must write to the shell after starting a terminal session",
- "linux": {
- "type": "string",
- "default": " alias ls=\\'ls --color=auto\\';clear\\n",
- "description": "String to write after opening a Linux terminal."
- },
- "darwin": {
- "type": "string",
- "default": null,
- "description": "String to write after opening a macOS terminal."
- },
- "freebsd": {
- "type": "string",
- "default": null,
- "description": "String to write after opening a FreeBSD terminal."
- }
+ "linux": { "type": "string", "default": " alias ls=\\'ls --color=auto\\';clear\\n", "description": "String to write after opening a Linux terminal." },
+ "darwin": { "type": "string", "default": null, "description": "String to write after opening a macOS terminal." },
+ "freebsd": { "type": "string", "default": null, "description": "String to write after opening a FreeBSD terminal." }
}
}
},
"desktop": {
"type": "object",
- "description": "Values that affect the desktop feature",
+ "description": "Values that affect the remote desktop feature",
"properties": {
"viewonly": {
"type": "boolean",
@@ -2332,32 +646,22 @@
"description": "List of local network Intel AMT scanning options offered in the user interface. For example [\"LabNetwork 192.168.15.0/23\", \"SalesNetwork 192.168.8.0/24\"].",
"type": "array",
"default": null,
- "items": {
- "type": "string"
- }
+ "items": { "type": "string" }
},
"amtManager": {
"type": "object",
+ "additionalProperties": false,
"description": "Information passed to the AMT manager module that impacts all Intel AMT device managed within this domain.",
"properties": {
- "TlsConnections": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, MeshCentral will NOT use TLS to connect to Intel AMT, this is not recommended."
- },
- "TlsAcmActivation": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, MeshCentral will attempt a TLS ACM activation on Intel AMT v14+"
- },
+ "TlsConnections": { "type": "boolean", "default": true, "description": "When set to false, MeshCentral will use TLS to connect to Intel AMT, this is not recommanded." },
+ "TlsAcmActivation": { "type": "boolean", "default": false, "description": "When set to false, MeshCentral will not attempt a TLS ACM activation on Intel AMT v14+" },
"AdminAccounts": {
"description": "List of username and passwords to try when connecting to Intel AMT.",
"type": "array",
"items": {
"type": "object",
- "required": [
- "pass"
- ],
+ "additionalProperties": false,
+ "required": [ "pass" ],
"properties": {
"user": {
"description": "Intel AMT administrator username.",
@@ -2408,9 +712,8 @@
"type": "array",
"items": {
"type": "object",
- "required": [
- "ssid"
- ],
+ "additionalProperties": false,
+ "required": [ "ssid" ],
"properties": {
"name": {
"description": "WIFI profile name, if not specified the SSID is used.",
@@ -2423,23 +726,13 @@
"authentication": {
"description": "WIFI authentication.",
"type": "string",
- "enum": [
- "wpa-psk",
- "wpa2-psk",
- "wpa-8021x",
- "wpa2-802.1x",
- "wpa3-sae-802.1x",
- "wpa3-owe-802.1x"
- ],
+ "enum": [ "wpa-psk", "wpa2-psk", "wpa-8021x", "wpa2-802.1x", "wpa3-sae-802.1x", "wpa3-owe-802.1x" ],
"default": "wpa2-psk"
},
"encryption": {
"description": "WIFI encryption.",
"type": "string",
- "enum": [
- "ccmp-aes",
- "tkip-rc4"
- ],
+ "enum": [ "ccmp-aes", "tkip-rc4" ],
"default": "ccmp-aes"
},
"password": {
@@ -2452,54 +745,19 @@
"description": "802.1x settings for this WIFI profile. Only required if the WIFI authentication type has 802.1x",
"default": null,
"type": "object",
- "required": [
- "authenticationProtocol"
- ],
+ "additionalProperties": false,
+ "required": [ "authenticationProtocol" ],
"properties": {
"authenticationProtocol": {
"description": "Identifies the authentication protocol used to authenticate the access requestor to the AAA server.",
- "type": [
- "integer",
- "string"
- ],
- "enum": [
- "EAP-TLS",
- "EAP-TTLS/MSCHAPv2",
- "PEAPv0/EAP-MSCHAPv2",
- "PEAPv1/EAP-GTC",
- "EAP-FAST/MSCHAPv2",
- "EAP-FAST/GTC",
- "EAP-MD5",
- "EAP-PSK",
- "EAP-SIM",
- "EAP-AKA",
- "EAP-FAST/TLS",
- 0,
- 1,
- 2,
- 3,
- 4,
- 5,
- 6,
- 7,
- 8,
- 9,
- 10
- ]
+ "type": [ "integer", "string" ],
+ "enum": [ "EAP-TLS", "EAP-TTLS/MSCHAPv2", "PEAPv0/EAP-MSCHAPv2", "PEAPv1/EAP-GTC", "EAP-FAST/MSCHAPv2", "EAP-FAST/GTC", "EAP-MD5", "EAP-PSK", "EAP-SIM", "EAP-AKA", "EAP-FAST/TLS", 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ]
},
"serverCertificateNameComparison": {
- "type": [
- "integer",
- "string"
- ],
+ "type": [ "integer", "string" ],
"default": "FullName",
"description": "Determines the comparison algorithm used between the ServerCertificateName value and the subject name field of the certificate presented by the AAA server.",
- "enum": [
- "FullName",
- "DomainSuffix",
- 2,
- 3
- ]
+ "enum": [ "FullName", "DomainSuffix", 2, 3 ]
},
"serverCertificateName": {
"type": "string",
@@ -2561,57 +819,19 @@
"802.1x": {
"description": "802.1x settings for the Intel AMT Wired interface. If set to false, any existing 802.1x wired profile will be removed from Intel AMT.",
"default": null,
- "type": [
- "object",
- "boolean"
- ],
- "required": [
- "authenticationProtocol"
- ],
+ "type": [ "object", "boolean" ],
+ "additionalProperties": false,
+ "required": [ "authenticationProtocol" ],
"properties": {
"authenticationProtocol": {
"description": "Identifies the authentication protocol used to authenticate the access requestor to the AAA server.",
- "type": [
- "integer",
- "string"
- ],
- "enum": [
- "EAP-TLS",
- "EAP-TTLS/MSCHAPv2",
- "PEAPv0/EAP-MSCHAPv2",
- "PEAPv1/EAP-GTC",
- "EAP-FAST/MSCHAPv2",
- "EAP-FAST/GTC",
- "EAP-MD5",
- "EAP-PSK",
- "EAP-SIM",
- "EAP-AKA",
- "EAP-FAST/TLS",
- 0,
- 1,
- 2,
- 3,
- 4,
- 5,
- 6,
- 7,
- 8,
- 9,
- 10
- ]
+ "type": [ "integer", "string" ],
+ "enum": [ "EAP-TLS", "EAP-TTLS/MSCHAPv2", "PEAPv0/EAP-MSCHAPv2", "PEAPv1/EAP-GTC", "EAP-FAST/MSCHAPv2", "EAP-FAST/GTC", "EAP-MD5", "EAP-PSK", "EAP-SIM", "EAP-AKA", "EAP-FAST/TLS", 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ]
},
"serverCertificateNameComparison": {
- "type": [
- "integer",
- "string"
- ],
+ "type": [ "integer", "string" ],
"description": "Determines the comparison algorithm used between the ServerCertificateName value and the subject name field of the certificate presented by the AAA server.",
- "enum": [
- "FullName",
- "DomainSuffix",
- 2,
- 3
- ]
+ "enum": [ "FullName", "DomainSuffix", 2, 3 ]
},
"serverCertificateName": {
"type": "string",
@@ -2667,234 +887,86 @@
}
}
}
- },
- "required": [
- "certs"
- ]
+ }
},
"amtAcmActivation": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "log": {
- "type": "string"
- },
- "strictCommonName": {
- "type": "boolean",
- "default": false,
- "description": "When set to true, the certificate common name needs to match exactly the Intel AMT trusted FQDN or DHCP Option 15. If false, some flexibility may be given to the matching."
- },
+ "log": { "type": "string" },
"certs": {
"type": "object",
"additionalProperties": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "certfiles": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "keyfile": {
- "type": "string"
- }
+ "certfiles": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "keyfile": { "type": "string" }
},
- "required": [
- "certfiles",
- "keyfile"
- ]
+ "required": [ "certfiles", "keyfile" ]
}
}
},
- "required": [
- "certs"
- ]
+ "required": [ "certs" ]
},
"redirects": {
"type": "object",
- "additionalProperties": {
- "type": "string"
- },
+ "additionalProperties": { "type": "string" },
"description": "This is used to create HTTP redirections. For example setting \"redirects\": { \"example\":\"https://example.com\" } will make it so that anyone accessing /example on the server will get redirected to the specified URL."
},
- "duo2factor": {
- "type": "object",
- "properties": {
- "integrationkey": {
- "type": "string",
- "default": "",
- "description": "Integration key from Duo"
- },
- "secretkey": {
- "type": "string",
- "default": "",
- "description": "Secret key from Duo"
- },
- "apihostname": {
- "type": "string",
- "default": "",
- "description": "API Hostname from Duo"
- }
- }
- },
"yubikey": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "id": {
- "type": "string"
- },
- "secret": {
- "type": "string"
- },
- "proxy": {
- "type": "string",
- "format": "uri"
- }
+ "id": { "type": "string" },
+ "secret": { "type": "string" },
+ "proxy": { "type": "string", "format": "uri" }
},
- "required": [
- "id",
- "secret"
- ]
- },
- "httpHeaders": {
- "type": "object",
- "additionalProperties": {
- "type": "string"
- }
- },
- "agentConfig": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Key and values to add to the MeshAgent .msh file"
- },
- "assistantConfig": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Key and values to add to the MeshCentral Assistant .msh file"
- },
- "clipboardGet": {
- "type": "boolean",
- "default": true,
- "description": "When false, users can't set the clipboard of a remove device."
- },
- "clipboardSet": {
- "type": "boolean",
- "default": true,
- "description": "When false, users can't get the clipboard of a remove device."
- },
- "localSessionRecording": {
- "type": "boolean",
- "default": true,
- "description": "When false, removes the local recording feature on remote desktop."
+ "required": [ "id", "secret" ]
},
+ "httpHeaders": { "type": "object", "additionalProperties": { "type": "string" } },
+ "agentConfig": { "type": "array", "uniqueItems": true, "items": { "type": "string" }, "default": null, "description": "Key and values to add to the MeshAgent .msh file" },
+ "assistantConfig": { "type": "array", "uniqueItems": true, "items": { "type": "string" }, "default": null, "description": "Key and values to add to the MeshCentral Assistant .msh file" },
+ "clipboardGet": { "type": "boolean", "default": true, "description": "When false, users can't set the clipboard of a remove device." },
+ "clipboardSet": { "type": "boolean", "default": true, "description": "When false, users can't get the clipboard of a remove device." },
+ "localSessionRecording": { "type": "boolean", "default": true, "description": "When false, removes the local recording feature on remote desktop." },
"sessionRecording": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "onlySelectedUsers": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, only device users with the session recording feature turned on will be recorded. When false, all users are recorded."
- },
- "onlySelectedUserGroups": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, only device user groups with the session recording feature turned on will be recorded. When false, all users are recorded."
- },
- "onlySelectedDeviceGroups": {
- "type": "boolean",
- "default": false,
- "description": "When enabled, only device groups with the session recording feature turned on will be recorded. When false, all devices are recorded."
- },
- "filepath": {
- "type": "string",
- "default": "meshcentral-recordings",
- "description": "The file path where recording files are kept. The default is \"meshcentral-recordings\" which sits next to \"meshcentral-data\"."
- },
- "index": {
- "type": "boolean",
- "default": false,
- "description": "If true, automatically index remote desktop recordings so that the plays can skip to any place in the file."
- },
- "maxRecordings": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of recording files to keep."
- },
- "maxRecordingDays": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of days to keep a recording."
- },
- "maxRecordingSizeMegabytes": {
- "type": "integer",
- "default": null,
- "description": "Maximum number of recordings in megabytes. Once exceed, remove the oldest recordings."
- },
- "protocols": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "integer"
- },
- "description": "This is an array: 1 = Terminal, 2 = Desktop, 5 = Files, 100 = Intel AMT WSMAN, 101 = Intel AMT Redirection, 200 = Messenger"
- }
+ "onlySelectedUsers": { "type": "boolean", "default": false, "description": "When enabled, only device users with the session recording feature turned on will be recorded. When false, all users are recorded." },
+ "onlySelectedUserGroups": { "type": "boolean", "default": false, "description": "When enabled, only device user groups with the session recording feature turned on will be recorded. When false, all users are recorded." },
+ "onlySelectedDeviceGroups": { "type": "boolean", "default": false, "description": "When enabled, only device groups with the session recording feature turned on will be recorded. When false, all devices are recorded." },
+ "filepath": { "type": "string", "description": "The file path where recording files are kept." },
+ "index": { "type": "boolean", "default": false, "description": "If true, automatically index remote desktop recordings so that the plays can skip to any place in the file." },
+ "maxRecordings": { "type": "integer", "default": null, "description": "Maximum number of recording files to keep." },
+ "maxRecordingDays": { "type": "integer", "default": null, "description": "Maximum number of days to keep a recording." },
+ "maxRecordingSizeMegabytes": { "type": "integer", "default": null, "description": "Maximum number of recordings in megabytes. Once exceed, remove the oldest recordings." },
+ "protocols": { "type": "array", "uniqueItems": true, "items": { "type": "integer" }, "description": "This is an array: 1 = Terminal, 2 = Desktop, 5 = Files, 100 = Intel AMT WSMAN, 101 = Intel AMT Redirection, 200 = Messenger" }
},
- "required": [
- "protocols"
- ]
- },
- "showPasswordLogin": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, hides the username and password prompt on login screen."
+ "required": [ "protocols" ]
},
+ "showPasswordLogin": { "type": "boolean", "default": true, "description": "When set to false, hides the username and password prompt on login screen." },
"sendgrid": {
- "title": "SendGrid.com Email server",
+ "title" : "SendGrid.com Email server",
"description": "Connects MeshCentral to the SendGrid email server, allows MeshCentral to send email messages for 2FA or user notification.",
"type": "object",
"properties": {
- "from": {
- "type": "string",
- "format": "email",
- "description": "Email address used in the messages from field."
- },
- "apikey": {
- "type": "string",
- "description": "The SendGrid API key."
- },
- "verifyemail": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, the email format and DNS MX record are not checked."
- },
- "emailDelaySeconds": {
- "type": "integer",
- "default": 300,
- "description": "Time to wait before sending a device connection/disconnection notification email. If many events occur, they will be merged into a single email."
- }
+ "from": { "type": "string", "format": "email", "description": "Email address used in the messages from field." },
+ "apikey": { "type": "string", "description": "The SendGrid API key." },
+ "verifyemail": { "type": "boolean", "default": true, "description": "When set to false, the email format and DNS MX record are not checked." }
},
- "required": [
- "from",
- "apikey"
- ]
+ "required": [ "from", "apikey" ]
},
"smtp": {
- "title": "SMTP email server",
+ "title" : "SMTP email server",
"description": "Connects MeshCentral to a SMTP email server, allows MeshCentral to send email messages for 2FA or user notification.",
"type": "object",
"properties": {
"name": {
"type": "string",
"format": "hostname",
- "description": "Optional hostname of the client, this defaults to the hostname of the machine. This is useful for SMTP relays. This can also be set to \"console\" for console output debugging."
+ "description": "Optional hostname of the client, this defaults to the hostname of the machine. This is useful for SMTP relays."
},
"host": {
"type": "string",
@@ -2905,1257 +977,251 @@
"type": "integer",
"minimum": 1,
"maximum": 65535,
- "default": 587,
- "description": "SMTP server port number. This defaults to 587 if \"tls\" is false or 465 if \"tls\" is true)"
+ "description": "SMTP server port number."
},
"from": {
"type": "string",
"format": "email",
"description": "Email address used in the messages from field."
},
- "user": {
- "type": "string",
- "description": "SMTP username."
- },
- "pass": {
- "type": "string",
- "description": "SMTP password."
- },
- "tls": {
- "type": "boolean",
- "default": false,
- "description": "Set SMTP to use TLS on connections, the default is false"
- },
+ "tls": { "type": "boolean" },
"auth": {
"type": "object",
- "description": "This is used for OAuth2 authentication",
"properties": {
- "clientId": {
- "type": "string"
- },
- "clientSecret": {
- "type": "string"
- },
- "refreshToken": {
- "type": "string"
- },
- "type": {
- "type": "string",
- "default": "login",
- "description": "Setting this indicates the authetication type, 'login' as default or 'oauth2'"
- }
+ "clientId": { "type": "string" },
+ "clientSecret": { "type": "string" },
+ "refreshTfoken": { "type": "string" }
},
- "required": [
- "clientId",
- "clientSecret",
- "refreshToken"
- ]
- },
- "tlscertcheck": {
- "type": "boolean"
- },
- "tlsstrict": {
- "type": "boolean"
+ "required": [ "clientId", "clientSecret", "refreshToken" ]
},
+ "tlscertcheck": { "type": "boolean" },
+ "tlsstrict": { "type": "boolean" },
"verifyemail": {
"type": "boolean",
"default": true,
"description": "When set to false, the email format and DNS MX record are not checked."
- },
- "emailDelaySeconds": {
- "type": "integer",
- "default": 300,
- "description": "Time to wait before sending a device connection/disconnection notification email. If many events occur, they will be merged into a single email."
}
},
- "required": [
- "host",
- "port",
- "from",
- "tls"
- ]
+ "required": [ "from" ]
},
"sendmail": {
- "title": "Send email using the sendmail command",
+ "title" : "Send email using the sendmail command",
"description": "Makes MeshCentral send emails using the Unix sendmail command. Allows MeshCentral to send email messages for 2FA or user notification.",
"type": "object",
"properties": {
- "newline": {
- "type": "string",
- "default": "unix",
- "description": "Possible values are unix or windows"
- },
- "path": {
- "type": "string",
- "default": "sendmail",
- "description": "Path to the sendmail command"
- },
- "args": {
- "type": "array",
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Array or arguments to pass to sendmail"
- },
- "emailDelaySeconds": {
- "type": "integer",
- "default": 300,
- "description": "Time to wait before sending a device connection/disconnection notification email. If many events occur, they will be merged into a single email."
- }
+ "newline": { "type": "string", "default": "unix", "description": "Possible values are unix or windows" },
+ "path": { "type": "string", "default": "sendmail", "description": "Path to the sendmail command" },
+ "args": { "type": "array", "items": { "type": "string" }, "default": null, "description": "Array or arguments to pass to sendmail" }
}
},
"authStrategies": {
"type": "object",
+ "additionalProperties": false,
"properties": {
"twitter": {
"type": "object",
+ "additionalProperties": false,
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "clientid": {
- "type": "string"
- },
- "clientsecret": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "clientid",
- "clientsecret"
- ]
+ "required": [ "clientid", "clientsecret" ]
},
"google": {
"type": "object",
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "clientid": {
- "type": "string"
- },
- "clientsecret": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "clientid",
- "clientsecret"
- ]
+ "required": [ "clientid", "clientsecret" ]
},
"github": {
"type": "object",
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "clientid": {
- "type": "string"
- },
- "clientsecret": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "clientid",
- "clientsecret"
- ]
+ "required": [ "clientid", "clientsecret" ]
+ },
+ "reddit": {
+ "type": "object",
+ "properties": {
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
+ },
+ "required": [ "clientid", "clientsecret" ]
},
"azure": {
"type": "object",
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "clientid": {
- "type": "string"
- },
- "clientsecret": {
- "type": "string"
- },
- "tenantid": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "tenantid": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "clientid",
- "clientsecret",
- "tenantid"
- ]
+ "required": [ "clientid", "clientsecret", "tenantid" ]
},
"jumpcloud": {
"type": "object",
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "entityid": {
- "type": "string"
- },
- "idpurl": {
- "type": "string",
- "format": "uri"
- },
- "cert": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "entityid": { "type": "string" },
+ "idpurl": { "type": "string", "format": "uri" },
+ "cert": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "entityid",
- "idpurl",
- "cert"
- ]
+ "required": [ "entityid", "idpurl", "cert" ]
},
"saml": {
"type": "object",
"properties": {
- "callbackurl": {
- "type": "string",
- "format": "uri"
- },
- "disableRequestedAuthnContext": {
- "type": "boolean"
- },
- "newAccounts": {
- "type": "boolean",
- "default": false
- },
- "newAccountsUserGroups": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "newAccountsRights": {
- "type": "array",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "entityid": {
- "type": "string"
- },
- "idpurl": {
- "type": "string",
- "format": "uri"
- },
- "cert": {
- "type": "string"
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Then set, the user will be redirected to this URL when hitting the logout link."
- }
+ "callbackurl": { "type": "string", "format": "uri" },
+ "disableRequestedAuthnContext": { "type": "boolean" },
+ "newAccounts": { "type": "boolean", "default": false },
+ "newAccountsUserGroups": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "newAccountsRights": { "type": "array", "uniqueItems": true, "items": { "type": "string" } },
+ "entityid": { "type": "string" },
+ "idpurl": { "type": "string", "format": "uri" },
+ "cert": { "type": "string" },
+ "logouturl": {"type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link."}
},
- "required": [
- "entityid",
- "idpurl",
- "cert"
- ]
+ "required": [ "entityid", "idpurl", "cert" ]
},
"oidc": {
"type": "object",
- "description": "Enables the use of OpenID Connect SSO",
- "anyOf": [
- {
- "required": [
- "client"
- ]
- },
- {
- "required": [
- "client",
- "custom"
- ]
- },
- {
- "required": [
- "client",
- "issuer"
- ]
- },
- {
- "required": [
- "clientid",
- "clientsecret",
- "issuer"
- ]
- }
- ],
"properties": {
- "newAccounts": {
- "type": "boolean",
- "description": "Enable the creation of new accounts based upon Idp Authorization",
- "default": true
- },
- "newAccountsUserGroups": {
- "type": [
- "string",
- "array"
- ],
- "description": "Add all new users to these static MeshCentral user groups. Use this if the new groups section does not work with your preset.",
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "newAccountsRights": {
- "type": [
- "array",
- "string"
- ],
- "uniqueItems": true,
- "items": {
- "type": "string"
- }
- },
- "clientid": {
- "type": "string",
- "depreciated": true,
- "description": "REPLACED WITH 'client.client_id'"
- },
- "clientsecret": {
- "type": "string",
- "description": "REPLACED WITH 'client.client_secret'"
- },
- "authorizationURL": {
- "type": "string",
- "format": "uri",
- "depreciated": true,
- "description": "REPLACED WITH 'issuer.authorization_endpoint'"
- },
- "tokenURL": {
- "type": "string",
- "format": "uri",
- "depreciated": true,
- "description": "REPLACED WITH 'issuer.token_endpoint': If set, this will be used as the token URL."
- },
- "userInfoURL": {
- "type": "string",
- "format": "uri",
- "depreciated": true,
- "description": "REPLACED WITH 'issuer.userinfo_endpoint': If set, this will be used as the user info URL."
- },
- "scope": {
- "type": [
- "string",
- "array"
- ],
- "depreciated": true,
- "description": "REPLACED WITH 'custom.scope': A list of scopes to request from the issuer."
- },
- "callbackURL": {
- "type": "string",
- "format": "uri",
- "depreciated": true,
- "description": "REPLACED WITH 'client.redirect_uri': The URI your IdP sends you back to after successful authorization. This must match what is listed with your IdP."
- },
- "logouturl": {
- "type": "string",
- "format": "uri",
- "description": "Overrides defaults ( [issuer.end_session_endpoint]?post_logout_redirect_uri=[post_logout_redirect_uri] OR [issuer.end_session_endpoint] )"
- },
- "client": {
- "type": "object",
- "description": "OIDC Client Options",
- "properties": {
- "client_id": {
- "type": "string",
- "description": "REQUIRED: The client ID provided by your Identity Provider (IdP)"
- },
- "client_secret": {
- "type": "string",
- "description": "REQUIRED: The client secret provided by your Identity Provider (IdP)"
- },
- "id_token_signed_response_alg": {
- "type": "string",
- "default": "RS256",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "id_token_encrypted_response_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "id_token_encrypted_response_enc": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "userinfo_signed_response_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "userinfo_encrypted_response_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "userinfo_encrypted_response_enc": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "redirect_uri": {
- "type": "string",
- "format": "uri",
- "description": "URI your IdP sends you after successful authorization. This must match what is listed with your IdP. (Default is https://[currentHost][currentPath]/auth-oidc-callback)"
- },
- "response_types": {
- "type": [
- "string",
- "array"
- ],
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details",
- "default": [
- "code"
- ]
- },
- "post_logout_redirect_uri": {
- "type": "string",
- "format": "uri",
- "description": "URI for your IdP to send you after logging out of IdP via MeshCentral. (Default is https:[currentHost][currentPath]/login)"
- },
- "default_max_age": {
- "type": "number",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "require_auth_time": {
- "type": "boolean",
- "default": false,
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "request_object_signing_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "request_object_encryption_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "request_object_encryption_enc": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "token_endpoint_auth_method": {
- "type": "string",
- "default": "client_secret_basic",
- "enum": [
- "none",
- "client_secret_basic",
- "client_secret_post",
- "client_secret_jwt",
- "private_key_jwt"
- ],
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "introspection_endpoint_auth_method": {
- "type": "string",
- "default": "client_secret_basic",
- "enum": [
- "none",
- "client_secret_basic",
- "client_secret_post",
- "client_secret_jwt",
- "private_key_jwt"
- ],
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "revocation_endpoint_auth_method": {
- "type": "string",
- "default": "client_secret_basic",
- "enum": [
- "none",
- "client_secret_basic",
- "client_secret_post",
- "client_secret_jwt",
- "private_key_jwt"
- ],
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "token_endpoint_auth_signing_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "introspection_endpoint_auth_signing_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "revocation_endpoint_auth_signing_alg": {
- "type": "string",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- },
- "tls_client_certificate_bound_access_tokens": {
- "type": "boolean",
- "description": "ADVANCED CONFIG: Check node-openid-client on GitHub for details"
- }
- },
- "required": [
- "client_id",
- "client_secret"
- ]
- },
- "issuer": {
- "type": [
- "string",
- "object"
- ],
- "format": "uri",
- "description": "Issuer options. Requires issuer URI (issuer.issuer) to discover missing information unless using preset",
- "properties": {
- "issuer": {
- "type": "string",
- "format": "uri",
- "description": "URI of the issuer."
- },
- "authorization_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "token_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "jwks_uri": {
- "type": "string",
- "format": "uri"
- },
- "userinfo_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "revocation_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "introspection_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "end_session_endpoint": {
- "type": "string",
- "format": "uri",
- "description": "URI to direct users to when logging out of MeshCentral. (Attempts to autodetect, defaults to '[issuer.issuer]/logout')"
- },
- "registration_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "token_endpoint_auth_methods_supported": {
- "type": "string"
- },
- "token_endpoint_auth_signing_alg_values_supported": {
- "type": "string"
- },
- "introspection_endpoint_auth_methods_supported": {
- "type": "string"
- },
- "introspection_endpoint_auth_signing_alg_values_supported": {
- "type": "string"
- },
- "revocation_endpoint_auth_methods_supported": {
- "type": "string"
- },
- "revocation_endpoint_auth_signing_alg_values_supported": {
- "type": "string"
- },
- "request_object_signing_alg_values_supported": {
- "type": "string"
- },
- "mtls_endpoint_aliases": {
- "type": "object",
- "properties": {
- "token_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "userinfo_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "revocation_endpoint": {
- "type": "string",
- "format": "uri"
- },
- "introspection_endpoint": {
- "type": "string",
- "format": "uri"
- }
- }
- }
- }
- },
- "custom": {
- "type": "object",
- "properties": {
- "scope": {
- "type": [
- "string",
- "array"
- ],
- "description": "A list of scopes to request from the issuer.",
- "default": "openid profile email",
- "examples": [
- "openid",
- [
- "openid",
- "profile"
- ],
- "openid profile email",
- "openid profile email groups"
- ]
- },
- "claims": {
- "type": "object",
- "properties": {
- "email": {
- "type": "string"
- },
- "name": {
- "type": "string"
- },
- "uuid": {
- "type": "string"
- }
- }
- },
- "preset": {
- "type": "string",
- "enum": [
- "azure",
- "google"
- ]
- },
- "tenant_id": {
- "type": "string",
- "description": "REQUIRED FOR AZURE PRESET: Tenantid for Azure"
- },
- "customer_id": {
- "type": "string",
- "description": "REQUIRED IF USING GROUPS: Customer ID from Google Workspace Admin Console (https://admin.google.com/ac/accountsettings/profile)"
- }
- }
- },
- "groups": {
- "type": "object",
- "properties": {
- "recursive": {
- "type": "boolean",
- "default": false,
- "description": "When true, the group memberships will be scanned recursively."
- },
- "required": {
- "type": [
- "array"
- ],
- "description": "Access is only granted to users who are a member of at least one of the listed required groups."
- },
- "siteadmin": {
- "type": [
- "array"
- ],
- "description": "Full site admin priviledges will be granted to users who are a member of at least one of the listed admin groups."
- },
- "revokeAdmin": {
- "type": "boolean",
- "description": "If true, admin privileges will be revoked from users who are NOT a member of at least one of the listed admin groups."
- },
- "sync": {
- "type": [
- "boolean",
- "object"
- ],
- "default": false,
- "description": "If true, all groups found during user login are mirrored into MeshCentral user groups.",
- "properties": {
- "filter": {
- "type": [
- "array"
- ],
- "description": "Only groups listed here are mirrored into MeshCentral user groups."
- }
- }
- },
- "scope": {
- "type": "string",
- "default": "groups",
- "description": "Custom scope to use."
- },
- "claim": {
- "type": "string",
- "default": "groups",
- "description": "Custom claim to use."
- }
- }
- }
- }
+ "authorizationURL": { "type": "string", "format": "uri", "description": "If set, this will be used as the authorization URL. (If set tokenURL and userInfoURL need set also)" },
+ "callbackURL": { "type": "string", "format": "uri", "description": "Required, this is the URL that your SSO provider sends auth approval to." },
+ "clientid": { "type": "string" },
+ "clientsecret": { "type": "string" },
+ "issuer": { "type": "string", "format": "uri", "description": "Full URL of SSO portal" },
+ "tokenURL": { "type": "string", "format": "uri", "description": "If set, this will be used as the token URL. (If set authorizationURL and userInfoURL need set also)" },
+ "userInfoURL": { "type": "string", "format": "uri", "description": "If set, this will be used as the user info URL. (If set authorizationURL and tokenURL need set also)" },
+ "logouturl": { "type": "string", "format": "uri", "description": "Then set, the user will be redirected to this URL when hitting the logout link." },
+ "newAccounts": { "type": "boolean", "default": true }
+ },
+ "required": [ "issuer", "clientid", "clientsecret", "callbackURL" ]
}
}
- },
- "showLanguageSelect": {
- "type": "string",
- "default": null,
- "description": "Show Language Selector on Login Page, \"top\" inside Login Box or \"bottom\" at Bottom of Page",
- "enum": [
- null,
- "top",
- "bottom"
- ]
}
}
}
},
"letsEncrypt": {
- "title": "Built-in Let's Encrypt support",
+ "title" : "Built-in Let's Encrypt support",
"description": "If your server has a proper DNS name and it public facing on the Internet with a public facing HTTP server on port 80, you can get a free TLS certificate.",
"type": "object",
+ "additionalProperties": false,
"properties": {
- "email": {
- "type": "string",
- "format": "email",
- "description": "Email address of the administrator of this server. Make sure this is a valid email address otherwise the certificate request will fail."
- },
- "names": {
- "type": "string"
- },
- "skipChallengeVerification": {
- "type": "boolean",
- "default": false,
- "description": "By default, MeshCentral will perform a self-test to make sure HTTP port 80 can respond correctly before making a request to Let's Encrypt. In some cases, this self-test can't work and must be skipped."
- },
- "production": {
- "type": "boolean",
- "default": false,
- "description": "By default a test certificate will be obtained from Let's Encrypt. Setting \"zerossl\", will ignore this setting. Always start by getting a test certificate and make sure that works before setting this to true and obtaining a production certificate. Making too many bad requests for a production certificate will get you banned for a long period of time."
- },
- "nochecks": {
- "type": "boolean",
- "default": false,
- "description": "If you choose \"true\", MeshCentral won't verify if \"email\" is valid, has a valid MX record, AND if \"names\" doesn't contain a wildcard, can be resolved by DNS A/AAAA record."
- },
- "zerossl": {
- "type": "object",
- "description": "If this object is set, we will use ZeroSSL for SSL creation instead of Let's Encrypt",
- "required": [
- "kid",
- "hmacKey"
- ],
- "properties": {
- "kid": {
- "type": "string",
- "description": "EAB KID",
- "default": ""
- },
- "hmackey": {
- "type": "string",
- "description": "EAB HMAC KEY",
- "default": ""
- }
- }
- }
+ "email": { "type": "string", "format": "email", "description": "Email address of the administrator of this server. Make sure this is a valid email address otherwise the certificate request will fail." },
+ "names": { "type": "string" },
+ "skipChallengeVerification": { "type": "boolean", "default": false, "description": "By default, MeshCentral will perform a self-test to make sure HTTP port 80 can respond correctly before making a request to Let's Encrypt. In some cases, this self-test can't work and must be skipped." },
+ "production": { "type": "boolean", "default": false, "description": "By default a test certificate will be obtained from Let's Encrypt. Always start by getting a test certificate and make sure that works before setting this to true and obtaining a production certificaite. Making too many bad requests for a production certificate will get you banned for a long period of time." }
},
- "required": [
- "email",
- "names"
- ]
+ "required": [ "email", "names" ]
},
"peers": {
- "title": "Server peering",
+ "title" : "Server peering",
"description": "Setup peer server for load-balancing between many servers.",
"type": "object",
"minProperties": 1,
- "propertyNames": {
- "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
- },
+ "propertyNames": { "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+ "additionalProperties": false,
"properties": {
- "serverId": {
- "type": "string"
- },
+ "serverId": { "type": "string" },
"servers": {
"type": "object",
"additionalProperties": {
"type": "object",
- "properties": {
- "url": {
- "type": "string",
- "format": "uri"
- }
- },
- "required": [
- "url"
- ]
+ "properties": { "url": { "type": "string", "format": "uri" } },
+ "required": [ "url" ]
}
}
},
- "required": [
- "serverId",
- "servers"
- ]
+ "required": [ "serverId", "servers" ]
},
"sendgrid": {
- "title": "SendGrid.com Email server",
+ "title" : "SendGrid.com Email server",
"description": "Connects MeshCentral to the SendGrid email server, allows MeshCentral to send email messages for 2FA or user notification.",
"type": "object",
"properties": {
- "from": {
- "type": "string",
- "format": "email",
- "description": "Email address used in the messages from field."
- },
- "apikey": {
- "type": "string",
- "description": "The SendGrid API key."
- },
- "verifyemail": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, the email format and DNS MX record are not checked."
- }
+ "from": { "type": "string", "format": "email", "description": "Email address used in the messages from field." },
+ "apikey": { "type": "string", "description": "The SendGrid API key." },
+ "verifyemail": { "type": "boolean", "default": true, "description": "When set to false, the email format and DNS MX record are not checked." }
},
- "required": [
- "from",
- "apikey"
- ]
+ "required": [ "from", "apikey" ]
},
"smtp": {
- "title": "SMTP email server",
+ "title" : "SMTP email server",
"description": "Connects MeshCentral to a SMTP email server, allows MeshCentral to send email messages for 2FA or user notification.",
"type": "object",
"properties": {
- "name": {
- "type": "string",
- "format": "hostname",
- "description": "Optional hostname of the client, this defaults to the hostname of the machine. This is useful for SMTP relays. This can also be set to \"console\" for console output debugging."
- },
- "host": {
- "type": "string",
- "format": "hostname",
- "description": "Hostname of the SMTP server."
- },
- "port": {
- "type": "integer",
- "minimum": 1,
- "maximum": 65535,
- "default": 587,
- "description": "SMTP server port number. This defaults to 587 if \"tls\" is false or 465 if \"tls\" is true)"
- },
- "from": {
- "type": "string",
- "format": "email",
- "description": "Email address used in the messages from field."
- },
- "user": {
- "type": "string",
- "description": "SMTP username."
- },
- "pass": {
- "type": "string",
- "description": "SMTP password."
- },
- "tls": {
- "type": "boolean",
- "default": false,
- "description": "Set SMTP to use TLS on connections, the default is false"
- },
- "auth": {
- "type": "object",
- "description": "This is used for OAuth2 authentication",
- "properties": {
- "clientId": {
- "type": "string"
- },
- "clientSecret": {
- "type": "string"
- },
- "refreshToken": {
- "type": "string"
- },
- "type": {
- "type": "string",
- "default": "login",
- "description": "Setting this indicates the authetication type, 'login' as default or 'oauth2'"
- }
- },
- "required": [
- "clientId",
- "clientSecret",
- "refreshToken"
- ]
- },
- "tlscertcheck": {
- "type": "boolean"
- },
- "tlsstrict": {
- "type": "boolean"
- },
- "verifyemail": {
- "type": "boolean",
- "default": true,
- "description": "When set to false, the email format and DNS MX record are not checked."
- },
- "emailDelaySeconds": {
- "type": "integer",
- "default": 300,
- "description": "Time to wait before sending a device connection/disconnection notification email. If many events occur, they will be merged into a single email."
- }
+ "host": { "type": "string", "format": "hostname" },
+ "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
+ "from": { "type": "string", "format": "email", "description": "Email address used in the messages from field." },
+ "tls": { "type": "boolean" },
+ "tlscertcheck": { "type": "boolean" },
+ "tlsstrict": { "type": "boolean" },
+ "verifyemail": { "type": "boolean", "default": true, "description": "When set to false, the email format and DNS MX record are not checked." }
},
- "required": [
- "host",
- "port",
- "from",
- "tls"
- ]
- },
- "sendmail": {
- "title": "Send email using the sendmail command",
- "description": "Makes MeshCentral send emails using the Unix sendmail command. Allows MeshCentral to send email messages for 2FA or user notification.",
- "type": "object",
- "properties": {
- "newline": {
- "type": "string",
- "default": "unix",
- "description": "Possible values are unix or windows"
- },
- "path": {
- "type": "string",
- "default": "sendmail",
- "description": "Path to the sendmail command"
- },
- "args": {
- "type": "array",
- "items": {
- "type": "string"
- },
- "default": null,
- "description": "Array or arguments to pass to sendmail"
- },
- "emailDelaySeconds": {
- "type": "integer",
- "default": 300,
- "description": "Time to wait before sending a device connection/disconnection notification email. If many events occur, they will be merged into a single email."
- }
- }
+ "required": [ "host", "port", "from", "tls" ]
},
"sms": {
- "title": "SMS provider",
+ "title" : "SMS provider",
"description": "Connects MeshCentral to a SMS text messaging provider, allows MeshCentral to send SMS messages for 2FA or user notification.",
"oneOf": [
{
- "type": "object",
+ "type": "object",
"properties": {
- "provider": {
- "type": "string",
- "enum": [
- "twilio"
- ]
- },
- "sid": {
- "type": "string"
- },
- "auth": {
- "type": "string"
- },
- "from": {
- "type": "string"
- }
+ "provider": { "type": "string", "enum": [ "twilio" ] },
+ "sid": { "type": "string" },
+ "auth": { "type": "string" },
+ "from": { "type": "string" }
},
- "required": [
- "provider",
- "sid",
- "auth",
- "from"
- ]
+ "required": [ "provider", "sid", "auth", "from" ]
},
{
- "type": "object",
+ "type": "object",
"properties": {
- "provider": {
- "type": "string",
- "enum": [
- "plivo"
- ]
- },
- "id": {
- "type": "string"
- },
- "token": {
- "type": "string"
- },
- "from": {
- "type": "string"
- }
+ "provider": { "type": "string", "enum": [ "plivo" ] },
+ "id": { "type": "string" },
+ "token": { "type": "string" },
+ "from": { "type": "string" }
},
- "required": [
- "provider",
- "id",
- "token",
- "from"
- ]
+ "required": [ "provider", "id", "token", "from" ]
},
{
- "type": "object",
+ "type": "object",
"properties": {
- "provider": {
- "type": "string",
- "enum": [
- "telnyx"
- ]
- },
- "apikey": {
- "type": "string"
- },
- "from": {
- "type": "string"
- }
+ "provider": { "type": "string", "enum": [ "telnyx" ] },
+ "apikey": { "type": "string" },
+ "from": { "type": "string" }
},
- "required": [
- "provider",
- "apikey",
- "from"
- ]
- },
- {
- "type": "object",
- "properties": {
- "provider": {
- "type": "string",
- "enum": [
- "url"
- ]
- },
- "url": {
- "type": "string",
- "description": "A http or https URL with {{phone}} and {{message}} in the string. These will be replaced with the URL encoded target phone number and message."
- }
- },
- "required": [
- "url"
- ]
+ "required": [ "provider", "apikey", "from" ]
}
]
- },
- "messaging": {
- "title": "Messaging server",
- "description": "This section allow MeshCentral to send messages over user messaging networks like Telegram",
- "type": "object",
- "properties": {
- "telegram": {
- "type": "object",
- "description": "Configure Telegram messaging system",
- "properties": {
- "apiid": {
- "type": "number"
- },
- "apihash": {
- "type": "string"
- },
- "session": {
- "type": "string"
- },
- "useWSS": {
- "type": "boolean",
- "description": "Whether to try to connect over Wss (or 443 port) or not"
- },
- "connectionRetries": {
- "type": "number",
- "description": "How many times the reconnection should retry, either on the initial connection or when Telegram disconnects us. May be set to a negative value for infinite retries, but this is not recommended. Defaults to 5"
- }
- }
- },
- "discord": {
- "type": "object",
- "description": "Configure Discord messaging system",
- "properties": {
- "serverurl": {
- "type": "string",
- "format": "uri",
- "description": "An optional HTTP link to the discord server the user must join to get notifications."
- },
- "token": {
- "type": "string",
- "description": "A Discord bot token that MeshCentral will use to login to Discord."
- }
- },
- "required": [
- "token"
- ]
- },
- "xmpp": {
- "type": "object",
- "description": "Configure XMPP messaging system",
- "properties": {
- "service": {
- "type": "string",
- "description": "Host name of the XMPP server."
- },
- "credentials": {
- "type": "object",
- "description": "Login credentials for the XMPP server.",
- "properties": {
- "username": {
- "type": "string"
- },
- "password": {
- "type": "string"
- }
- }
- }
- },
- "required": [
- "credentials"
- ]
- },
- "callmebot": {
- "type": "boolean",
- "default": false,
- "description": "Enabled CallMeBot integration support."
- },
- "slack": {
- "type": "boolean",
- "default": false,
- "description": "Enabled Slack integration support."
- },
- "pushover": {
- "type": "object",
- "description": "Configure Pushover messaging system",
- "properties": {
- "token": {
- "type": "string",
- "description": "A Pushover application token that MeshCentral will use to login."
- }
- },
- "required": [
- "token"
- ]
- },
- "ntfy": {
- "type": [
- "boolean",
- "object"
- ],
- "default": false,
- "properties": {
- "host": {
- "type": "string",
- "description": "Host name of the ntfy server."
- },
- "userurl": {
- "type": "string",
- "description": "A URL given to users to help them setup this service."
- },
- "authorization": {
- "type": "string",
- "description": "Authorization Header to include in the request"
- }
- },
- "description": "Enabled ntfy.sh integration support."
- },
- "zulip": {
- "type": "object",
- "properties": {
- "site": {
- "type": "string",
- "format": "uri",
- "default": "https://api.zulip.com",
- "description": "URL to the Zulip server"
- },
- "email": {
- "type": "string",
- "description": "Bot email address to login as."
- },
- "api_key": {
- "type": "string",
- "description": "Bot api key."
- }
- },
- "description": "Enabled Zulip integration support."
- }
- }
}
- }
+ },
+ "required": [ "settings", "domains" ]
}
diff --git a/meshcentral.js b/meshcentral.js
index a792dda5..3d5a0590 100644
--- a/meshcentral.js
+++ b/meshcentral.js
@@ -22,20 +22,18 @@ if (process.argv[2] == '--launch') { try { require('appmetrics-dash').monitor({
function CreateMeshCentralServer(config, args) {
const obj = {};
obj.db = null;
- obj.webserver = null; // HTTPS main web server, typically on port 443
- obj.redirserver = null; // HTTP relay web server, typically on port 80
- obj.mpsserver = null; // Intel AMT CIRA server, typically on port 4433
- obj.mqttbroker = null; // MQTT server, not is not often used
- obj.swarmserver = null; // Swarm server, this is used only to update older MeshCentral v1 agents
- obj.smsserver = null; // SMS server, used to send user SMS messages
- obj.msgserver = null; // Messaging server, used to sent used messages
+ obj.webserver = null;
+ obj.redirserver = null;
+ obj.mpsserver = null;
+ obj.mqttbroker = null;
+ obj.swarmserver = null;
+ obj.smsserver = null;
obj.amtEventHandler = null;
obj.pluginHandler = null;
obj.amtScanner = null;
- obj.amtManager = null; // Intel AMT manager, used to oversee all Intel AMT devices, activate them and sync policies
+ obj.amtManager = null;
obj.meshScanner = null;
- obj.taskManager = null;
- obj.letsencrypt = null; // Let's encrypt server, used to get and renew TLS certificates
+ obj.letsencrypt = null;
obj.eventsDispatch = {};
obj.fs = require('fs');
obj.path = require('path');
@@ -86,7 +84,7 @@ function CreateMeshCentralServer(config, args) {
obj.parentpath = obj.path.join(__dirname, '../..');
obj.datapath = obj.path.join(__dirname, '../../meshcentral-data');
obj.filespath = obj.path.join(__dirname, '../../meshcentral-files');
- obj.backuppath = obj.path.join(__dirname, '../../meshcentral-backups');
+ obj.backuppath = obj.path.join(__dirname, '../../meshcentral-backup');
obj.recordpath = obj.path.join(__dirname, '../../meshcentral-recordings');
obj.webViewsPath = obj.path.join(__dirname, 'views');
obj.webPublicPath = obj.path.join(__dirname, 'public');
@@ -139,23 +137,9 @@ function CreateMeshCentralServer(config, args) {
try { require('./pass').hash('test', function () { }, 0); } catch (ex) { console.log('Old version of node, must upgrade.'); return; } // TODO: Not sure if this test works or not.
// Check for invalid arguments
- const validArguments = ['_', 'user', 'port', 'aliasport', 'mpsport', 'mpsaliasport', 'redirport', 'rediraliasport', 'cert', 'mpscert', 'deletedomain', 'deletedefaultdomain', 'showall', 'showusers', 'showitem', 'listuserids', 'showusergroups', 'shownodes', 'showallmeshes', 'showmeshes', 'showevents', 'showsmbios', 'showpower', 'clearpower', 'showiplocations', 'help', 'exactports', 'xinstall', 'xuninstall', 'install', 'uninstall', 'start', 'stop', 'restart', 'debug', 'filespath', 'datapath', 'noagentupdate', 'launch', 'noserverbackup', 'mongodb', 'mongodbcol', 'wanonly', 'lanonly', 'nousers', 'mpspass', 'ciralocalfqdn', 'dbexport', 'dbexportmin', 'dbimport', 'dbmerge', 'dbfix', 'dbencryptkey', 'selfupdate', 'tlsoffload', 'usenodedefaulttlsciphers', 'tlsciphers', 'userallowedip', 'userblockedip', 'swarmallowedip', 'agentallowedip', 'agentblockedip', 'fastcert', 'swarmport', 'logintoken', 'logintokenkey', 'logintokengen', 'mailtokengen', 'admin', 'unadmin', 'sessionkey', 'sessiontime', 'minify', 'minifycore', 'dblistconfigfiles', 'dbshowconfigfile', 'dbpushconfigfiles', 'oldencrypt', 'dbpullconfigfiles', 'dbdeleteconfigfiles', 'vaultpushconfigfiles', 'vaultpullconfigfiles', 'vaultdeleteconfigfiles', 'configkey', 'loadconfigfromdb', 'npmpath', 'serverid', 'recordencryptionrecode', 'vault', 'token', 'unsealkey', 'name', 'log', 'dbstats', 'translate', 'createaccount', 'setuptelegram', 'resetaccount', 'pass', 'removesubdomain', 'adminaccount', 'domain', 'email', 'configfile', 'maintenancemode', 'nedbtodb', 'removetestagents', 'agentupdatetest', 'hashpassword', 'hashpass', 'indexmcrec', 'mpsdebug', 'dumpcores', 'dev', 'mysql', 'mariadb', 'trustedproxy'];
+ const validArguments = ['_', 'user', 'port', 'aliasport', 'mpsport', 'mpsaliasport', 'redirport', 'rediraliasport', 'cert', 'mpscert', 'deletedomain', 'deletedefaultdomain', 'showall', 'showusers', 'showitem', 'listuserids', 'showusergroups', 'shownodes', 'showallmeshes', 'showmeshes', 'showevents', 'showsmbios', 'showpower', 'clearpower', 'showiplocations', 'help', 'exactports', 'xinstall', 'xuninstall', 'install', 'uninstall', 'start', 'stop', 'restart', 'debug', 'filespath', 'datapath', 'noagentupdate', 'launch', 'noserverbackup', 'mongodb', 'mongodbcol', 'wanonly', 'lanonly', 'nousers', 'mpspass', 'ciralocalfqdn', 'dbexport', 'dbexportmin', 'dbimport', 'dbmerge', 'dbfix', 'dbencryptkey', 'selfupdate', 'tlsoffload', 'userallowedip', 'userblockedip', 'swarmallowedip', 'agentallowedip', 'agentblockedip', 'fastcert', 'swarmport', 'logintoken', 'logintokenkey', 'logintokengen', 'mailtokengen', 'admin', 'unadmin', 'sessionkey', 'sessiontime', 'minify', 'minifycore', 'dblistconfigfiles', 'dbshowconfigfile', 'dbpushconfigfiles', 'dbpullconfigfiles', 'dbdeleteconfigfiles', 'vaultpushconfigfiles', 'vaultpullconfigfiles', 'vaultdeleteconfigfiles', 'configkey', 'loadconfigfromdb', 'npmpath', 'serverid', 'recordencryptionrecode', 'vault', 'token', 'unsealkey', 'name', 'log', 'dbstats', 'translate', 'createaccount', 'resetaccount', 'pass', 'removesubdomain', 'adminaccount', 'domain', 'email', 'configfile', 'maintenancemode', 'nedbtodb', 'removetestagents', 'agentupdatetest', 'hashpassword', 'hashpass', 'indexmcrec', 'mpsdebug', 'dumpcores'];
for (var arg in obj.args) { obj.args[arg.toLocaleLowerCase()] = obj.args[arg]; if (validArguments.indexOf(arg.toLocaleLowerCase()) == -1) { console.log('Invalid argument "' + arg + '", use --help.'); return; } }
- const ENVVAR_PREFIX = "meshcentral_"
- let envArgs = []
- for (let [envvar, envval] of Object.entries(process.env)) {
- if (envvar.toLocaleLowerCase().startsWith(ENVVAR_PREFIX)) {
- let argname = envvar.slice(ENVVAR_PREFIX.length).toLocaleLowerCase()
- if (!!argname && !(validArguments.indexOf(argname) == -1)) {
- envArgs = envArgs.concat([`--${argname}`, envval])
- }
- }
- }
- envArgs = require('minimist')(envArgs)
- obj.args = Object.assign(envArgs, obj.args)
if (obj.args.mongodb == true) { console.log('Must specify: --mongodb [connectionstring] \r\nSee https://docs.mongodb.com/manual/reference/connection-string/ for MongoDB connection string.'); return; }
- if (obj.args.mysql == true) { console.log('Must specify: --mysql [connectionstring] \r\nExample mysql://user:password@127.0.0.1:3306/database'); return; }
- if (obj.args.mariadb == true) { console.log('Must specify: --mariadb [connectionstring] \r\nExample mariadb://user:password@127.0.0.1:3306/database'); return; }
for (i in obj.config.settings) { obj.args[i] = obj.config.settings[i]; } // Place all settings into arguments, arguments have already been placed into settings so arguments take precedence.
if ((obj.args.help == true) || (obj.args['?'] == true)) {
@@ -188,14 +172,14 @@ function CreateMeshCentralServer(config, args) {
// Fix a NeDB database
if (obj.args.dbfix) {
- var lines = null, badJsonCount = 0, fieldNames = [], fixedDb = [];
+ var lines = null, badJsonCount = 0, feildNames = [], fixedDb = [];
try { lines = obj.fs.readFileSync(obj.getConfigFilePath(obj.args.dbfix), { encoding: 'utf8' }).split('\n'); } catch (ex) { console.log('Invalid file: ' + obj.args.dbfix + ': ' + ex); process.exit(); }
for (var i = 0; i < lines.length; i++) {
var x = null;
try { x = JSON.parse(lines[i]); } catch (ex) { badJsonCount++; }
- if (x != null) { fixedDb.push(lines[i]); for (var j in x) { if (fieldNames.indexOf(j) == -1) { fieldNames.push(j); } } }
+ if (x != null) { fixedDb.push(lines[i]); for (var j in x) { if (feildNames.indexOf(j) == -1) { feildNames.push(j); } } }
}
- console.log('Lines: ' + lines.length + ', badJSON: ' + badJsonCount + ', Feilds: ' + fieldNames);
+ console.log('Lines: ' + lines.length + ', badJSON: ' + badJsonCount + ', Feilds: ' + feildNames);
obj.fs.writeFileSync(obj.getConfigFilePath(obj.args.dbfix) + '-fixed', fixedDb.join('\n'), { encoding: 'utf8' });
return;
}
@@ -209,9 +193,6 @@ function CreateMeshCentralServer(config, args) {
// Dump to mesh cores
if (obj.args.dumpcores) { obj.updateMeshCore(function () { console.log('Done.'); }, true); return; }
- // Setup Telegram
- if (obj.args.setuptelegram) { require('./meshmessaging.js').SetupTelegram(obj); return; }
-
// Perform web site translations into different languages
if (obj.args.translate) {
// Check NodeJS version
@@ -220,7 +201,7 @@ function CreateMeshCentralServer(config, args) {
// Check if translate.json is in the "meshcentral-data" folder, if so use that and translate default pages.
var translationFile = null, customTranslation = false;
- if (require('fs').existsSync(obj.path.join(obj.datapath, 'translate.json'))) { translationFile = obj.path.join(obj.datapath, 'translate.json'); console.log("Using translate.json in meshcentral-data."); customTranslation = true; }
+ if (require('fs').existsSync(obj.path.join(obj.datapath, 'translate.json'))) { translationFile = obj.path.join(obj.datapath, 'translate.json'); console.log("Using translate.json in meshentral-data."); customTranslation = true; }
if (translationFile == null) { if (require('fs').existsSync(obj.path.join(__dirname, 'translate', 'translate.json'))) { translationFile = obj.path.join(__dirname, 'translate', 'translate.json'); console.log("Using default translate.json."); } }
if (translationFile == null) { console.log("Unable to find translate.json."); process.exit(); return; }
@@ -234,12 +215,6 @@ function CreateMeshCentralServer(config, args) {
translateEngine.startEx(['', '', 'translateall', translationFile]);
translateEngine.startEx(['', '', 'extractall', translationFile]);
didSomething = true;
- } else {
- // Translate all of the default files
- translateEngine.startEx(['', '', 'minifyall']);
- translateEngine.startEx(['', '', 'translateall']);
- translateEngine.startEx(['', '', 'extractall']);
- didSomething = true;
}
// Check if "meshcentral-web" exists, if so, translate all pages in that folder.
@@ -255,34 +230,11 @@ function CreateMeshCentralServer(config, args) {
files = obj.fs.readdirSync(obj.webViewsOverridePath);
for (var i in files) {
var file = obj.path.join(obj.webViewsOverridePath, files[i]);
- if (file.endsWith('.handlebars') && !file.endsWith('-min.handlebars')) {
+ if (file.endsWith('.handlebars') || file.endsWith('-min.handlebars')) {
translateEngine.startEx(['', '', 'translate', '*', translationFile, file, '--subdir:translations']);
}
}
}
-
- // Check domains and see if "meshcentral-web-DOMAIN" exists, if so, translate all pages in that folder
- for (i in obj.config.domains) {
- if (i == "") continue;
- var path = obj.path.join(obj.datapath, '..', 'meshcentral-web-' + i, 'views');
- if (require('fs').existsSync(path)) {
- didSomething = true;
- var files = obj.fs.readdirSync(path);
- for (var a in files) {
- var file = obj.path.join(path, files[a]);
- if (file.endsWith('.handlebars') && !file.endsWith('-min.handlebars')) {
- translateEngine.startEx(['', '', 'minify', file]);
- }
- }
- files = obj.fs.readdirSync(path);
- for (var a in files) {
- var file = obj.path.join(path, files[a]);
- if (file.endsWith('.handlebars') && !file.endsWith('-min.handlebars')) {
- translateEngine.startEx(['', '', 'translate', '*', translationFile, file, '--subdir:translations']);
- }
- }
- }
- }
/*
if (obj.webPublicOverridePath != null) {
didSomething = true;
@@ -297,7 +249,6 @@ function CreateMeshCentralServer(config, args) {
*/
if (didSomething == false) { console.log("Nothing to do."); }
- console.log('Finished Translating.')
process.exit();
return;
}
@@ -330,7 +281,7 @@ function CreateMeshCentralServer(config, args) {
require('child_process').exec('which node', {}, function (error, stdout, stderr) {
if ((error != null) || (stdout.indexOf('\n') == -1)) { console.log('ERROR: Unable to get node location: ' + error); process.exit(); return; }
const nodePath = stdout.substring(0, stdout.indexOf('\n'));
- const config = '[Unit]\nDescription=MeshCentral Server\nWants=network-online.target\nAfter=network-online.target\n\n[Service]\nType=simple\nLimitNOFILE=1000000\nExecStart=' + nodePath + ' ' + __dirname + '/meshcentral\nWorkingDirectory=' + userinfo.homedir + '\nEnvironment=NODE_ENV=production\nUser=' + userinfo.username + '\nGroup=' + userinfo.username + '\nRestart=always\n# Restart service after 10 seconds if node service crashes\nRestartSec=10\n# Set port permissions capability\nAmbientCapabilities=cap_net_bind_service\n\n[Install]\nWantedBy=multi-user.target\n';
+ const config = '[Unit]\nDescription=MeshCentral Server\n\n[Service]\nType=simple\nLimitNOFILE=1000000\nExecStart=' + nodePath + ' ' + __dirname + '/meshcentral\nWorkingDirectory=' + userinfo.homedir + '\nEnvironment=NODE_ENV=production\nUser=' + userinfo.username + '\nGroup=' + userinfo.username + '\nRestart=always\n# Restart service after 10 seconds if node service crashes\nRestartSec=10\n# Set port permissions capability\nAmbientCapabilities=cap_net_bind_service\n\n[Install]\nWantedBy=multi-user.target\n';
require('child_process').exec('echo \"' + config + '\" | sudo tee ' + systemdConf, {}, function (error, stdout, stderr) {
if ((error != null) && (error != '')) { console.log('ERROR: Unable to write config file: ' + error); process.exit(); return; }
console.log('Enabling service...');
@@ -394,92 +345,6 @@ function CreateMeshCentralServer(config, args) {
return;
}
}
-
- // FreeBSD background service handling, MUST USE SPAWN FOR SERVICE COMMANDS!
- if (obj.platform == 'freebsd') {
- if (obj.args.install == true) {
- // Install MeshCentral in rc.d
- console.log('Installing MeshCentral as background Service...');
- var systemdConf = "/usr/local/etc/rc.d/meshcentral";
- const userinfo = require('os').userInfo();
- console.log('Writing config file...');
- require('child_process').exec('which node', {}, function (error, stdout, stderr) {
- if ((error != null) || (stdout.indexOf('\n') == -1)) { console.log('ERROR: Unable to get node location: ' + error); process.exit(); return; }
- const nodePath = stdout.substring(0, stdout.indexOf('\n'));
- const config = '#!/bin/sh\n# MeshCentral FreeBSD Service Script\n# PROVIDE: meshcentral\n# REQUIRE: NETWORKING\n# KEYWORD: shutdown\n. /etc/rc.subr\nname=meshcentral\nuser=' + userinfo.username + '\nrcvar=meshcentral_enable\n: \\${meshcentral_enable:=\\"NO\\"}\n: \\${meshcentral_args:=\\"\\"}\npidfile=/var/run/meshcentral/meshcentral.pid\ncommand=\\"/usr/sbin/daemon\\"\nmeshcentral_chdir=\\"' + obj.parentpath + '\\"\ncommand_args=\\"-r -u \\${user} -P \\${pidfile} -S -T meshcentral -m 3 ' + nodePath + ' ' + __dirname + ' \\${meshcentral_args}\\"\nload_rc_config \\$name\nrun_rc_command \\"\\$1\\"\n';
- require('child_process').exec('echo \"' + config + '\" | tee ' + systemdConf + ' && chmod +x ' + systemdConf, {}, function (error, stdout, stderr) {
- if ((error != null) && (error != '')) { console.log('ERROR: Unable to write config file: ' + error); process.exit(); return; }
- console.log('Enabling service...');
- require('child_process').exec('sysrc meshcentral_enable="YES"', {}, function (error, stdout, stderr) {
- if ((error != null) && (error != '')) { console.log('ERROR: Unable to enable MeshCentral as a service: ' + error); process.exit(); return; }
- if (stdout.length > 0) { console.log(stdout); }
- console.log('Starting service...');
- const service = require('child_process').spawn('service', ['meshcentral', 'start']);
- service.stdout.on('data', function (data) { console.log(data.toString()); });
- service.stderr.on('data', function (data) { console.log(data.toString()); });
- service.on('exit', function (code) {
- console.log((code === 0) ? 'Done.' : 'ERROR: Unable to start MeshCentral as a service');
- process.exit(); // Must exit otherwise we just hang
- });
- });
- });
- });
- return;
- } else if (obj.args.uninstall == true) {
- // Uninstall MeshCentral in rc.d
- console.log('Uninstalling MeshCentral background service...');
- var systemdConf = "/usr/local/etc/rc.d/meshcentral";
- console.log('Stopping service...');
- const service = require('child_process').spawn('service', ['meshcentral', 'stop']);
- service.stdout.on('data', function (data) { console.log(data.toString()); });
- service.stderr.on('data', function (data) { console.log(data.toString()); });
- service.on('exit', function (code) {
- if (code !== 0) { console.log('ERROR: Unable to stop MeshCentral as a service'); }
- console.log('Disabling service...');
- require('child_process').exec('sysrc -x meshcentral_enable', {}, function (err, stdout, stderr) {
- if ((err != null) && (err != '')) { console.log('ERROR: Unable to disable MeshCentral as a service: ' + err); }
- if (stdout.length > 0) { console.log(stdout); }
- console.log('Removing config file...');
- require('child_process').exec('rm ' + systemdConf, {}, function (err, stdout, stderr) {
- if ((err != null) && (err != '')) { console.log('ERROR: Unable to delete MeshCentral config file: ' + err); }
- console.log('Done.');
- process.exit(); // Must exit otherwise we just hang
- });
- });
- });
- return;
- } else if (obj.args.start == true) {
- // Start MeshCentral in rc.d
- const service = require('child_process').spawn('service', ['meshcentral', 'start']);
- service.stdout.on('data', function (data) { console.log(data.toString()); });
- service.stderr.on('data', function (data) { console.log(data.toString()); });
- service.on('exit', function (code) {
- console.log((code === 0) ? 'Done.' : 'ERROR: Unable to start MeshCentral as a service: ' + error);
- process.exit(); // Must exit otherwise we just hang
- });
- return;
- } else if (obj.args.stop == true) {
- // Stop MeshCentral in rc.d
- const service = require('child_process').spawn('service', ['meshcentral', 'stop']);
- service.stdout.on('data', function (data) { console.log(data.toString()); });
- service.stderr.on('data', function (data) { console.log(data.toString()); });
- service.on('exit', function (code) {
- console.log((code === 0) ? 'Done.' : 'ERROR: Unable to stop MeshCentral as a service: ' + error);
- process.exit(); // Must exit otherwise we just hang
- });
- return;
- } else if (obj.args.restart == true) {
- // Restart MeshCentral in rc.d
- const service = require('child_process').spawn('service', ['meshcentral', 'restart']);
- service.stdout.on('data', function (data) { console.log(data.toString()); });
- service.stderr.on('data', function (data) { console.log(data.toString()); });
- service.on('exit', function (code) {
- console.log((code === 0) ? 'Done.' : 'ERROR: Unable to restart MeshCentral as a service: ' + error);
- process.exit(); // Must exit otherwise we just hang
- });
- return;
- }
- }
// Index a recorded file
if (obj.args.indexmcrec != null) {
@@ -504,7 +369,7 @@ function CreateMeshCentralServer(config, args) {
// Check if we need to install, start, stop, remove ourself as a background service
if (((obj.args.xinstall == true) || (obj.args.xuninstall == true) || (obj.args.start == true) || (obj.args.stop == true) || (obj.args.restart == true))) {
var env = [], xenv = ['user', 'port', 'aliasport', 'mpsport', 'mpsaliasport', 'redirport', 'exactport', 'rediraliasport', 'debug'];
- for (i in xenv) { if (obj.args[xenv[i]] != null) { env.push({ name: 'mesh' + xenv[i], value: obj.args[xenv[i]] }); } } // Set some args as service environment variables.
+ for (i in xenv) { if (obj.args[xenv[i]] != null) { env.push({ name: 'mesh' + xenv[i], value: obj.args[xenv[i]] }); } } // Set some args as service environement variables.
var serviceFilePath = null;
if (obj.fs.existsSync(obj.path.join(servicepath, 'winservice.js'))) { serviceFilePath = obj.path.join(servicepath, 'winservice.js'); }
@@ -583,11 +448,7 @@ function CreateMeshCentralServer(config, args) {
// Launch MeshCentral as a child server and monitor it.
obj.launchChildServer = function (startArgs) {
const child_process = require('child_process');
- const isInspectorAttached = (()=> { try { return require('node:inspector').url() !== undefined; } catch (_) { return false; } }).call();
- const logFromChildProcess = isInspectorAttached ? () => {} : console.log.bind(console);
try { if (process.traceDeprecation === true) { startArgs.unshift('--trace-deprecation'); } } catch (ex) { }
- try { if (process.traceProcessWarnings === true) { startArgs.unshift('--trace-warnings'); } } catch (ex) { }
- if (startArgs[0] != "--disable-proto=delete") startArgs.unshift("--disable-proto=delete")
childProcess = child_process.execFile(process.argv[0], startArgs, { maxBuffer: Infinity, cwd: obj.parentpath }, function (error, stdout, stderr) {
if (childProcess.xrestart == 1) {
setTimeout(function () { obj.launchChildServer(startArgs); }, 500); // This is an expected restart.
@@ -604,10 +465,9 @@ function CreateMeshCentralServer(config, args) {
const npmproxy = ((typeof obj.args.npmproxy == 'string') ? (' --proxy ' + obj.args.npmproxy) : '');
const env = Object.assign({}, process.env); // Shallow clone
if (typeof obj.args.npmproxy == 'string') { env['HTTP_PROXY'] = env['HTTPS_PROXY'] = env['http_proxy'] = env['https_proxy'] = obj.args.npmproxy; }
- // always use --save-exact - https://stackoverflow.com/a/64507176/1210734
- const xxprocess = child_process.exec(npmpath + ' install --save-exact --no-audit meshcentral' + version + npmproxy, { maxBuffer: Infinity, cwd: obj.parentpath, env: env }, function (error, stdout, stderr) {
+ const xxprocess = child_process.exec(npmpath + ' install meshcentral' + version + npmproxy, { maxBuffer: Infinity, cwd: obj.parentpath, env: env }, function (error, stdout, stderr) {
if ((error != null) && (error != '')) { console.log('Update failed: ' + error); }
- });
+ });
xxprocess.data = '';
xxprocess.stdout.on('data', function (data) { xxprocess.data += data; });
xxprocess.stderr.on('data', function (data) { xxprocess.data += data; });
@@ -659,12 +519,12 @@ function CreateMeshCentralServer(config, args) {
else if (data.indexOf('Starting self upgrade to: ') >= 0) { obj.args.specificupdate = data.substring(26).split('\r')[0].split('\n')[0]; childProcess.xrestart = 3; }
var datastr = data;
while (datastr.endsWith('\r') || datastr.endsWith('\n')) { datastr = datastr.substring(0, datastr.length - 1); }
- logFromChildProcess(datastr);
+ console.log(datastr);
});
childProcess.stderr.on('data', function (data) {
var datastr = data;
while (datastr.endsWith('\r') || datastr.endsWith('\n')) { datastr = datastr.substring(0, datastr.length - 1); }
- logFromChildProcess('ERR: ' + datastr);
+ console.log('ERR: ' + datastr);
if (data.startsWith('le.challenges[tls-sni-01].loopback')) { return; } // Ignore this error output from GreenLock
if (data[data.length - 1] == '\n') { data = data.substring(0, data.length - 1); }
obj.logError(data);
@@ -751,7 +611,7 @@ function CreateMeshCentralServer(config, args) {
obj.performServerUpdate = function (version) {
if (obj.serverSelfWriteAllowed != true) return false;
if ((version == null) || (version == '') || (typeof version != 'string')) { console.log('Starting self upgrade...'); } else { console.log('Starting self upgrade to: ' + version); }
- process.exit(200);
+ process.exit(200);
return true;
};
@@ -781,7 +641,7 @@ function CreateMeshCentralServer(config, args) {
// Get new instance of the client
const vault = require("node-vault")({ endpoint: obj.args.vault.endpoint, token: obj.args.vault.token });
vault.unseal({ key: obj.args.vault.unsealkey })
- .then(function () {
+ .then(function() {
if (obj.args.vaultdeleteconfigfiles) {
vault.delete('secret/data/' + obj.args.vault.name)
.then(function (r) { console.log('Done.'); process.exit(); })
@@ -838,7 +698,7 @@ function CreateMeshCentralServer(config, args) {
obj.args = args = config2.settings;
// Lower case all keys in the config file
- obj.common.objKeysToLower(config2, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders', 'telegram/proxy']);
+ obj.common.objKeysToLower(config2, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders']);
// Grad some of the values from the original config.json file if present.
if ((config.settings.vault != null) && (config2.settings != null)) { config2.settings.vault = config.settings.vault; }
@@ -878,6 +738,7 @@ function CreateMeshCentralServer(config, args) {
obj.syslogjson.log(obj.syslogjson.LOG_INFO, "MeshCentral v" + getCurrentVersion() + " Server Start");
}
if (typeof config.settings.syslogauth == 'string') {
+ obj.authlog = true;
obj.syslogauth = require('modern-syslog');
console.log('Starting ' + config.settings.syslogauth + ' auth syslog.');
obj.syslogauth.init(config.settings.syslogauth, obj.syslogauth.LOG_PID | obj.syslogauth.LOG_ODELAY, obj.syslogauth.LOG_LOCAL0);
@@ -896,8 +757,8 @@ function CreateMeshCentralServer(config, args) {
obj.syslogtcp.log("MeshCentral v" + getCurrentVersion() + " Server Start", obj.syslogtcp.LOG_INFO);
}
- // Check top level configuration for any unrecognized values
- if (config) { for (var i in config) { if ((typeof i == 'string') && (i.length > 0) && (i[0] != '_') && (['settings', 'domaindefaults', 'domains', 'configfiles', 'smtp', 'letsencrypt', 'peers', 'sms', 'messaging', 'sendgrid', 'sendmail', 'firebase', 'firebaserelay', '$schema'].indexOf(i) == -1)) { addServerWarning('Unrecognized configuration option \"' + i + '\".', 3, [i]); } } }
+ // Check top level configuration for any unreconized values
+ if (config) { for (var i in config) { if ((typeof i == 'string') && (i.length > 0) && (i[0] != '_') && (['settings', 'domaindefaults', 'domains', 'configfiles', 'smtp', 'letsencrypt', 'peers', 'sms', 'sendgrid', 'sendmail', 'firebase', 'firebaserelay', '$schema'].indexOf(i) == -1)) { addServerWarning('Unrecognized configuration option \"' + i + '\".', 3, [ i ]); } } }
// Read IP lists from files if applicable
config.settings.userallowedip = obj.args.userallowedip = readIpListFromFile(obj.args.userallowedip);
@@ -907,11 +768,11 @@ function CreateMeshCentralServer(config, args) {
config.settings.swarmallowedip = obj.args.swarmallowedip = readIpListFromFile(obj.args.swarmallowedip);
// Check IP lists and ranges
- if (typeof obj.args.userallowedip == 'string') { if (obj.args.userallowedip == '') { config.settings.userallowedip = obj.args.userallowedip = null; } else { config.settings.userallowedip = obj.args.userallowedip = obj.args.userallowedip.split(' ').join('').split(','); } }
- if (typeof obj.args.userblockedip == 'string') { if (obj.args.userblockedip == '') { config.settings.userblockedip = obj.args.userblockedip = null; } else { config.settings.userblockedip = obj.args.userblockedip = obj.args.userblockedip.split(' ').join('').split(','); } }
- if (typeof obj.args.agentallowedip == 'string') { if (obj.args.agentallowedip == '') { config.settings.agentallowedip = obj.args.agentallowedip = null; } else { config.settings.agentallowedip = obj.args.agentallowedip = obj.args.agentallowedip.split(' ').join('').split(','); } }
- if (typeof obj.args.agentblockedip == 'string') { if (obj.args.agentblockedip == '') { config.settings.agentblockedip = obj.args.agentblockedip = null; } else { config.settings.agentblockedip = obj.args.agentblockedip = obj.args.agentblockedip.split(' ').join('').split(','); } }
- if (typeof obj.args.swarmallowedip == 'string') { if (obj.args.swarmallowedip == '') { obj.args.swarmallowedip = null; } else { obj.args.swarmallowedip = obj.args.swarmallowedip.split(' ').join('').split(','); } }
+ if (typeof obj.args.userallowedip == 'string') { if (obj.args.userallowedip == '') { config.settings.userallowedip = obj.args.userallowedip = null; } else { config.settings.userallowedip = obj.args.userallowedip = obj.args.userallowedip.split(','); } }
+ if (typeof obj.args.userblockedip == 'string') { if (obj.args.userblockedip == '') { config.settings.userblockedip = obj.args.userblockedip = null; } else { config.settings.userblockedip = obj.args.userblockedip = obj.args.userblockedip.split(','); } }
+ if (typeof obj.args.agentallowedip == 'string') { if (obj.args.agentallowedip == '') { config.settings.agentallowedip = obj.args.agentallowedip = null; } else { config.settings.agentallowedip = obj.args.agentallowedip = obj.args.agentallowedip.split(','); } }
+ if (typeof obj.args.agentblockedip == 'string') { if (obj.args.agentblockedip == '') { config.settings.agentblockedip = obj.args.agentblockedip = null; } else { config.settings.agentblockedip = obj.args.agentblockedip = obj.args.agentblockedip.split(','); } }
+ if (typeof obj.args.swarmallowedip == 'string') { if (obj.args.swarmallowedip == '') { obj.args.swarmallowedip = null; } else { obj.args.swarmallowedip = obj.args.swarmallowedip.split(','); } }
if ((typeof obj.args.agentupdateblocksize == 'number') && (obj.args.agentupdateblocksize >= 1024) && (obj.args.agentupdateblocksize <= 65531)) { obj.agentUpdateBlockSize = obj.args.agentupdateblocksize; }
if (typeof obj.args.trustedproxy == 'string') { obj.args.trustedproxy = obj.args.trustedproxy.split(' ').join('').split(','); }
if (typeof obj.args.tlsoffload == 'string') { obj.args.tlsoffload = obj.args.tlsoffload.split(' ').join('').split(','); }
@@ -980,7 +841,7 @@ function CreateMeshCentralServer(config, args) {
if (hashpasssplit.length != 2) { console.log("Invalid hashed password."); process.exit(); return; }
user.salt = hashpasssplit[0];
user.hash = hashpasssplit[1];
- obj.db.Set(user, function () { console.log("Done. This command will only work if MeshCentral is stopped."); process.exit(); return; });
+ obj.db.Set(user, function () { console.log("Done."); process.exit(); return; });
} else {
// Hash the password and create the account.
require('./pass').hash(obj.args.pass, function (err, salt, hash, tag) { if (err) { console.log("Unable create account password: " + err); process.exit(); return; } user.salt = salt; user.hash = hash; obj.db.Set(user, function () { console.log("Done."); process.exit(); return; }); }, 0);
@@ -989,7 +850,7 @@ function CreateMeshCentralServer(config, args) {
return;
}
if (obj.args.resetaccount) { // Unlock a user account, set a new password and remove 2FA
- if ((typeof obj.args.resetaccount != 'string') || (obj.args.resetaccount.indexOf(' ') >= 0)) { console.log("Usage: --resetaccount [userid] --domain (domain) --pass [password]."); process.exit(); return; }
+ if ((typeof obj.args.resetaccount != 'string') || ((obj.args.pass == null) && (obj.args.hashpass == null)) || (obj.args.pass == '') || (obj.args.hashpass == '') || (obj.args.resetaccount.indexOf(' ') >= 0)) { console.log("Usage: --resetaccount [userid] --domain (domain) --pass [password]."); process.exit(); return; }
var userid = 'user/' + (obj.args.domain ? obj.args.domain : '') + '/' + obj.args.resetaccount.toLowerCase();
if (obj.args.resetaccount.startsWith('user/')) { userid = obj.args.resetaccount; }
if (userid.split('/').length != 3) { console.log("Invalid userid."); process.exit(); return; }
@@ -997,31 +858,17 @@ function CreateMeshCentralServer(config, args) {
if (err != null) { console.log("Database error: " + err); process.exit(); return; }
if ((docs == null) || (docs.length == 0)) { console.log("Unknown userid, usage: --resetaccount [userid] --domain (domain) --pass [password]."); process.exit(); return; }
const user = docs[0]; if ((user.siteadmin) && (user.siteadmin != 0xFFFFFFFF) && (user.siteadmin & 32) != 0) { user.siteadmin -= 32; } // Unlock the account.
- delete user.phone; delete user.otpekey; delete user.otpsecret; delete user.otpkeys; delete user.otphkeys; delete user.otpdev; delete user.otpsms; delete user.otpmsg; // Disable 2FA
- delete user.msghandle; // Disable users 2fa messaging too
- var config = getConfig(false);
- if (config.domains[user.domain].auth || config.domains[user.domain].authstrategies) {
- console.log('This users domain has external authentication methods enabled so the password will not be changed if you set one')
+ delete user.phone; delete user.otpekey; delete user.otpsecret; delete user.otpkeys; delete user.otphkeys; delete user.otpdev; delete user.otpsms; // Disable 2FA
+ if (obj.args.hashpass) {
+ // Reset an account using a pre-hashed password. Use --hashpassword to pre-hash a password.
+ var hashpasssplit = obj.args.hashpass.split(',');
+ if (hashpasssplit.length != 2) { console.log("Invalid hashed password."); process.exit(); return; }
+ user.salt = hashpasssplit[0];
+ user.hash = hashpasssplit[1];
obj.db.Set(user, function () { console.log("Done."); process.exit(); return; });
} else {
- if (obj.args.hashpass && (typeof obj.args.hashpass == 'string')) {
- // Reset an account using a pre-hashed password. Use --hashpassword to pre-hash a password.
- var hashpasssplit = obj.args.hashpass.split(',');
- if (hashpasssplit.length != 2) { console.log("Invalid hashed password."); process.exit(); return; }
- user.salt = hashpasssplit[0];
- user.hash = hashpasssplit[1];
- obj.db.Set(user, function () { console.log("Done. This command will only work if MeshCentral is stopped."); process.exit(); return; });
- } else if (obj.args.pass && (typeof obj.args.pass == 'string')) {
- // Hash the password and reset the account.
- require('./pass').hash(String(obj.args.pass), user.salt, function (err, hash, tag) {
- if (err) { console.log("Unable to reset password: " + err); process.exit(); return; }
- user.hash = hash;
- obj.db.Set(user, function () { console.log("Done."); process.exit(); return; });
- }, 0);
- } else {
- console.log('Not setting a users password');
- obj.db.Set(user, function () { console.log("Done."); process.exit(); return; });
- }
+ // Hash the password and reset the account.
+ require('./pass').hash(String(obj.args.pass), user.salt, function (err, hash, tag) { if (err) { console.log("Unable to reset password: " + err); process.exit(); return; } user.hash = hash; obj.db.Set(user, function () { console.log("Done."); process.exit(); return; }); }, 0);
}
});
return;
@@ -1035,7 +882,7 @@ function CreateMeshCentralServer(config, args) {
if (err != null) { console.log("Database error: " + err); process.exit(); return; }
if ((docs == null) || (docs.length == 0)) { console.log("Unknown userid, usage: --adminaccount [userid] --domain (domain)."); process.exit(); return; }
docs[0].siteadmin = 0xFFFFFFFF; // Set user as site administrator
- obj.db.Set(docs[0], function () { console.log("Done. This command will only work if MeshCentral is stopped."); process.exit(); return; });
+ obj.db.Set(docs[0], function () { console.log("Done."); process.exit(); return; });
});
return;
}
@@ -1118,27 +965,7 @@ function CreateMeshCentralServer(config, args) {
// Show a list of all configuration files in the database
if (obj.args.dblistconfigfiles) {
- obj.db.GetAllType('cfile', function (err, docs) {
- if (err == null) {
- if (docs.length == 0) {
- console.log("No files found.");
- } else {
- for (var i in docs) {
- if (typeof obj.args.dblistconfigfiles == 'string') {
- const data = obj.db.decryptData(obj.args.dblistconfigfiles, docs[i].data);
- if (data == null) {
- console.log(docs[i]._id.split('/')[1] + ', ' + Buffer.from(docs[i].data, 'base64').length + ' encrypted bytes - Unable to decrypt.');
- } else {
- console.log(docs[i]._id.split('/')[1] + ', ' + data.length + ' bytes, decoded correctly.');
- }
- } else {
- console.log(docs[i]._id.split('/')[1] + ', ' + Buffer.from(docs[i].data, 'base64').length + ' encrypted bytes.');
- }
- }
- }
- } else { console.log('Unable to read from database.'); } process.exit();
- });
- return;
+ obj.db.GetAllType('cfile', function (err, docs) { if (err == null) { if (docs.length == 0) { console.log("No files found."); } else { for (var i in docs) { console.log(docs[i]._id.split('/')[1] + ', ' + Buffer.from(docs[i].data, 'base64').length + ' bytes.'); } } } else { console.log('Unable to read from database.'); } process.exit(); }); return;
}
// Display the content of a configuration file in the database
@@ -1183,11 +1010,7 @@ function CreateMeshCentralServer(config, args) {
const path = obj.path.join(obj.args.dbpushconfigfiles, files[i]), binary = Buffer.from(obj.fs.readFileSync(path, { encoding: 'binary' }), 'binary');
console.log('Pushing ' + file + ', ' + binary.length + ' bytes.');
lockCount++;
- if (obj.args.oldencrypt) {
- obj.db.setConfigFile(file, obj.db.oldEncryptData(obj.args.configkey, binary), function () { if ((--lockCount) == 0) { console.log('Done.'); process.exit(); } });
- } else {
- obj.db.setConfigFile(file, obj.db.encryptData(obj.args.configkey, binary), function () { if ((--lockCount) == 0) { console.log('Done.'); process.exit(); } });
- }
+ obj.db.setConfigFile(file, obj.db.encryptData(obj.args.configkey, binary), function () { if ((--lockCount) == 0) { console.log('Done.'); process.exit(); } });
}
}
if (--lockCount == 0) { process.exit(); }
@@ -1264,7 +1087,7 @@ function CreateMeshCentralServer(config, args) {
for (var j in doc) { if (j.indexOf('.') >= 0) { console.log("Invalid field name (" + j + ") in document: " + json[i]); return; } }
//if ((json[i].type == 'ifinfo') && (json[i].netif2 != null)) { for (var j in json[i].netif2) { var esc = obj.common.escapeFieldName(j); if (esc !== j) { json[i].netif2[esc] = json[i].netif2[j]; delete json[i].netif2[j]; } } }
//if ((json[i].type == 'mesh') && (json[i].links != null)) { for (var j in json[i].links) { var esc = obj.common.escapeFieldName(j); if (esc !== j) { json[i].links[esc] = json[i].links[j]; delete json[i].links[j]; } } }
- }
+ }
//for (i in json) { if ((json[i].type == "node") && (json[i].host != null)) { json[i].rname = json[i].host; delete json[i].host; } } // DEBUG: Change host to rname
setTimeout(function () { // If the Mongo database is being created for the first time, there is a race condition here. This will get around it.
obj.db.RemoveAll(function () {
@@ -1351,7 +1174,7 @@ function CreateMeshCentralServer(config, args) {
}
// Check if the database is capable of performing a backup
- // Moved behind autobackup config init in startex4: obj.db.checkBackupCapability(function (err, msg) { if (msg != null) { obj.addServerWarning(msg, true) } });
+ obj.db.checkBackupCapability(function (err, msg) { if (msg != null) { obj.addServerWarning(msg, true) } });
// Load configuration for database if needed
if (obj.args.loadconfigfromdb) {
@@ -1362,29 +1185,25 @@ function CreateMeshCentralServer(config, args) {
obj.db.getAllConfigFiles(key, function (configFiles) {
if (configFiles == null) { console.log("Error, no configuration files found or invalid configkey."); process.exit(); return; }
if (!configFiles['config.json']) { console.log("Error, could not file config.json from database."); process.exit(); return; }
- if (typeof configFiles['config.json'] == 'object') { configFiles['config.json'] = configFiles['config.json'].toString(); }
- if (configFiles['config.json'].charCodeAt(0) == 65279) { configFiles['config.json'] = configFiles['config.json'].substring(1); }
obj.configurationFiles = configFiles;
// Parse the new configuration file
var config2 = null;
- try { config2 = JSON.parse(configFiles['config.json']); } catch (ex) { console.log('Error, unable to parse config.json from database.', ex); process.exit(); return; }
+ try { config2 = JSON.parse(configFiles['config.json']); } catch (ex) { console.log('Error, unable to parse config.json from database.'); process.exit(); return; }
// Set the command line arguments to the config file if they are not present
if (!config2.settings) { config2.settings = {}; }
for (i in args) { config2.settings[i] = args[i]; }
// Lower case all keys in the config file
- common.objKeysToLower(config2, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders', 'telegram/proxy']);
+ common.objKeysToLower(config2, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders']);
- // Grab some of the values from the original config.json file if present.
+ // Grad some of the values from the original config.json file if present.
config2['mysql'] = config['mysql'];
config2['mariadb'] = config['mariadb'];
config2['mongodb'] = config['mongodb'];
config2['mongodbcol'] = config['mongodbcol'];
config2['dbencryptkey'] = config['dbencryptkey'];
- config2['acebase'] = config['acebase'];
- config2['sqlite3'] = config['sqlite3'];
// We got a new config.json from the database, let's use it.
config = obj.config = config2;
@@ -1400,25 +1219,19 @@ function CreateMeshCentralServer(config, args) {
};
// Time to start the server of real.
- obj.StartEx1b = async function () {
+ obj.StartEx1b = function () {
var i;
- // Add NodeJS version warning if needed
- if (Number(process.version.match(/^v(\d+\.\d+)/)[1]) < 16) { addServerWarning("MeshCentral will require Node v16 or above in the future, your current version is " + process.version + "."); }
-
// Setup certificate operations
obj.certificateOperations = require('./certoperations.js').CertificateOperations(obj);
// Linux format /var/log/auth.log
if (obj.config.settings.authlog != null) {
obj.fs.open(obj.config.settings.authlog, 'a', function (err, fd) {
- if (err == null) { obj.authlogfile = fd; } else { console.log('ERROR: Unable to open: ' + obj.config.settings.authlog); }
+ if (err == null) { obj.authlogfile = fd; obj.authlog = true; } else { console.log('ERROR: Unable to open: ' + obj.config.settings.authlog); }
})
}
- // Start CrowdSec bouncer if needed: https://www.crowdsec.net/
- if (typeof obj.args.crowdsec == 'object') { obj.crowdSecBounser = require('./crowdsec.js').CreateCrowdSecBouncer(obj, obj.args.crowdsec); }
-
// Check if self update is allowed. If running as a Windows service, self-update is not possible.
if (obj.fs.existsSync(obj.path.join(__dirname, 'daemon'))) { obj.serverSelfWriteAllowed = false; }
@@ -1459,21 +1272,15 @@ function CreateMeshCentralServer(config, args) {
if (obj.config.domains[i].limits == null) { obj.config.domains[i].limits = {}; }
if (obj.config.domains[i].dns == null) { obj.config.domains[i].url = (i == '') ? '/' : ('/' + i + '/'); } else { obj.config.domains[i].url = '/'; }
obj.config.domains[i].id = i;
- if ((typeof obj.config.domains[i].maxdeviceview != 'number') || (obj.config.domains[i].maxdeviceview < 1)) { delete obj.config.domains[i].maxdeviceview; }
if (typeof obj.config.domains[i].loginkey == 'string') { obj.config.domains[i].loginkey = [obj.config.domains[i].loginkey]; }
if ((obj.config.domains[i].loginkey != null) && (obj.common.validateAlphaNumericArray(obj.config.domains[i].loginkey, 1, 128) == false)) { console.log("ERROR: Invalid login key, must be alpha-numeric string with no spaces."); process.exit(); return; }
if (typeof obj.config.domains[i].agentkey == 'string') { obj.config.domains[i].agentkey = [obj.config.domains[i].agentkey]; }
if ((obj.config.domains[i].agentkey != null) && (obj.common.validateAlphaNumericArray(obj.config.domains[i].agentkey, 1, 128) == false)) { console.log("ERROR: Invalid agent key, must be alpha-numeric string with no spaces."); process.exit(); return; }
- obj.config.domains[i].userallowedip = obj.config.domains[i].userallowedip = readIpListFromFile(obj.config.domains[i].userallowedip);
- obj.config.domains[i].userblockedip = obj.config.domains[i].userblockedip = readIpListFromFile(obj.config.domains[i].userblockedip);
- obj.config.domains[i].agentallowedip = obj.config.domains[i].agentallowedip = readIpListFromFile(obj.config.domains[i].agentallowedip);
- obj.config.domains[i].agentblockedip = obj.config.domains[i].agentblockedip = readIpListFromFile(obj.config.domains[i].agentblockedip);
- if (typeof obj.config.domains[i].userallowedip == 'string') { if (obj.config.domains[i].userallowedip == '') { delete obj.config.domains[i].userallowedip; } else { obj.config.domains[i].userallowedip = obj.config.domains[i].userallowedip.split(' ').join('').split(','); } }
- if (typeof obj.config.domains[i].userblockedip == 'string') { if (obj.config.domains[i].userblockedip == '') { delete obj.config.domains[i].userblockedip; } else { obj.config.domains[i].userblockedip = obj.config.domains[i].userblockedip.split(' ').join('').split(','); } }
- if (typeof obj.config.domains[i].agentallowedip == 'string') { if (obj.config.domains[i].agentallowedip == '') { delete obj.config.domains[i].agentallowedip; } else { obj.config.domains[i].agentallowedip = obj.config.domains[i].agentallowedip.split(' ').join('').split(','); } }
- if (typeof obj.config.domains[i].agentblockedip == 'string') { if (obj.config.domains[i].agentblockedip == '') { delete obj.config.domains[i].agentblockedip; } else { obj.config.domains[i].agentblockedip = obj.config.domains[i].agentblockedip.split(' ').join('').split(','); } }
+ if (typeof obj.config.domains[i].userallowedip == 'string') { if (obj.config.domains[i].userallowedip == '') { delete obj.config.domains[i].userallowedip; } else { obj.config.domains[i].userallowedip = obj.config.domains[i].userallowedip.split(','); } }
+ if (typeof obj.config.domains[i].userblockedip == 'string') { if (obj.config.domains[i].userblockedip == '') { delete obj.config.domains[i].userblockedip; } else { obj.config.domains[i].userblockedip = obj.config.domains[i].userblockedip.split(','); } }
+ if (typeof obj.config.domains[i].agentallowedip == 'string') { if (obj.config.domains[i].agentallowedip == '') { delete obj.config.domains[i].agentallowedip; } else { obj.config.domains[i].agentallowedip = obj.config.domains[i].agentallowedip.split(','); } }
+ if (typeof obj.config.domains[i].agentblockedip == 'string') { if (obj.config.domains[i].agentblockedip == '') { delete obj.config.domains[i].agentblockedip; } else { obj.config.domains[i].agentblockedip = obj.config.domains[i].agentblockedip.split(','); } }
if (typeof obj.config.domains[i].ignoreagenthashcheck == 'string') { if (obj.config.domains[i].ignoreagenthashcheck == '') { delete obj.config.domains[i].ignoreagenthashcheck; } else { obj.config.domains[i].ignoreagenthashcheck = obj.config.domains[i].ignoreagenthashcheck.split(','); } }
- if (typeof obj.config.domains[i].allowedorigin == 'string') { if (obj.config.domains[i].allowedorigin == '') { delete obj.config.domains[i].allowedorigin; } else { obj.config.domains[i].allowedorigin = obj.config.domains[i].allowedorigin.split(','); } }
if ((obj.config.domains[i].passwordrequirements != null) && (typeof obj.config.domains[i].passwordrequirements == 'object')) {
if (typeof obj.config.domains[i].passwordrequirements.skip2factor == 'string') {
obj.config.domains[i].passwordrequirements.skip2factor = obj.config.domains[i].passwordrequirements.skip2factor.split(',');
@@ -1547,50 +1354,11 @@ function CreateMeshCentralServer(config, args) {
if (i == '') {
addServerWarning("Unable to load Intel AMT TLS root certificate for default domain.", 5);
} else {
- addServerWarning("Unable to load Intel AMT TLS root certificate for domain " + i + ".", 6, [i]);
+ addServerWarning("Unable to load Intel AMT TLS root certificate for domain " + i + ".", 6, [ i ]);
}
}
}
}
-
- // Check agentfileinfo
- if (typeof obj.config.domains[i].agentfileinfo == 'object') {
- if ((obj.config.domains[i].agentfileinfo.fileversionnumber != null) && (obj.common.parseVersion(obj.config.domains[i].agentfileinfo.fileversionnumber) == null)) { delete obj.config.domains[i].agentfileinfo.fileversionnumber; }
- if ((obj.config.domains[i].agentfileinfo.productversionnumber != null) && (obj.common.parseVersion(obj.config.domains[i].agentfileinfo.productversionnumber) == null)) { delete obj.config.domains[i].agentfileinfo.productversionnumber; }
- if ((obj.config.domains[i].agentfileinfo.fileversionnumber == null) && (typeof obj.config.domains[i].agentfileinfo.fileversion == 'string') && (obj.common.parseVersion(obj.config.domains[i].agentfileinfo.fileversion) != null)) { obj.config.domains[i].agentfileinfo.fileversionnumber = obj.config.domains[i].agentfileinfo.fileversion; }
- if (typeof obj.config.domains[i].agentfileinfo.icon == 'string') {
- // Load the agent .ico file
- var icon = null;
- try { icon = require('./authenticode.js').loadIcon(obj.path.join(obj.datapath, obj.config.domains[i].agentfileinfo.icon)); } catch (ex) { }
- if (icon != null) {
- // The icon file was correctly loaded
- obj.config.domains[i].agentfileinfo.icon = icon;
- } else {
- // Failed to load the icon file, display a server warning
- addServerWarning("Unable to load agent icon file: " + obj.config.domains[i].agentfileinfo.icon + ".", 23, [obj.config.domains[i].agentfileinfo.icon]);
- delete obj.config.domains[i].agentfileinfo.icon;
- }
- } else {
- // Invalid icon file path
- delete obj.config.domains[i].agentfileinfo.icon;
- }
- if (typeof obj.config.domains[i].agentfileinfo.logo == 'string') {
- // Load the agent .bmp file
- var logo = null;
- try { logo = require('./authenticode.js').loadBitmap(obj.path.join(obj.datapath, obj.config.domains[i].agentfileinfo.logo)); } catch (ex) { }
- if (logo != null) {
- // The logo file was correctly loaded
- obj.config.domains[i].agentfileinfo.logo = logo;
- } else {
- // Failed to load the icon file, display a server warning
- addServerWarning("Unable to load agent logo file: " + obj.config.domains[i].agentfileinfo.logo + ".", 24, [obj.config.domains[i].agentfileinfo.logo]);
- delete obj.config.domains[i].agentfileinfo.logo;
- }
- } else {
- // Invalid icon file path
- delete obj.config.domains[i].agentfileinfo.logo;
- }
- }
}
// Log passed arguments into Windows Service Log
@@ -1607,19 +1375,9 @@ function CreateMeshCentralServer(config, args) {
if (obj.args.mpsaliasport != null && (typeof obj.args.mpsaliasport != 'number')) obj.args.mpsaliasport = null;
if (obj.args.rediraliasport != null && (typeof obj.args.rediraliasport != 'number')) obj.args.rediraliasport = null;
if (obj.args.redirport == null) obj.args.redirport = 80;
- if (obj.args.minifycore == null) obj.args.minifycore = false;
- if (typeof obj.args.agentidletimeout != 'number') { obj.args.agentidletimeout = 150000; } else { obj.args.agentidletimeout *= 1000 } // Default agent idle timeout is 2m, 30sec.
- if ((obj.args.lanonly != true) && (typeof obj.args.webrtconfig == 'object')) { // fix incase you are using an old mis-spelt webrtconfig
- obj.args.webrtcconfig = obj.args.webrtconfig;
- delete obj.args.webrtconfig;
- }
- if ((obj.args.lanonly != true) && (obj.args.webrtcconfig == null)) { obj.args.webrtcconfig = { iceServers: [{ urls: 'stun:stun.l.google.com:19302' }, { urls: 'stun:stun.cloudflare.com:3478' }] }; } // Setup default WebRTC STUN servers
- else if ((obj.args.lanonly != true) && (typeof obj.args.webrtcconfig == 'object')) {
- if (obj.args.webrtcconfig.iceservers) { // webrtc is case-sensitive, so must rename iceservers to iceServers!
- obj.args.webrtcconfig.iceServers = obj.args.webrtcconfig.iceservers;
- delete obj.args.webrtcconfig.iceservers;
- }
- }
+ if (obj.args.minifycore === 0) obj.args.minifycore = false;
+ if (typeof args.agentidletimeout != 'number') { args.agentidletimeout = 150000; } else { args.agentidletimeout *= 1000 } // Default agent idle timeout is 2m, 30sec.
+ if ((obj.args.lanonly != true) && (obj.args.webrtconfig == null)) { obj.args.webrtconfig = { iceservers: [{ urls: 'stun:stun.l.google.com:19302' }, { urls: 'stun:stun.services.mozilla.com' }] }; } // Setup default WebRTC STUN servers
if (typeof obj.args.ignoreagenthashcheck == 'string') { if (obj.args.ignoreagenthashcheck == '') { delete obj.args.ignoreagenthashcheck; } else { obj.args.ignoreagenthashcheck = obj.args.ignoreagenthashcheck.split(','); } }
// Setup a site administrator
@@ -1659,7 +1417,7 @@ function CreateMeshCentralServer(config, args) {
}
// Setup agent error log
- if ((obj.config) && (obj.config.settings) && (obj.config.settings.agentlogdump)) {
+ if ((obj.config) && (obj.config.settings) && (obj.config.settings.agentlogdump != null)) {
obj.fs.open(obj.path.join(obj.datapath, 'agenterrorlogs.txt'), 'a', function (err, fd) { obj.agentErrorLog = fd; })
}
@@ -1695,11 +1453,6 @@ function CreateMeshCentralServer(config, args) {
return;
}
- // Setup the task manager
- if ((obj.config) && (obj.config.settings) && (obj.config.settings.taskmanager == true)) {
- obj.taskManager = require('./taskmanager').createTaskManager(obj);
- }
-
// Start plugin manager if configuration allows this.
if ((obj.config) && (obj.config.settings) && (obj.config.settings.plugins != null) && (obj.config.settings.plugins != false) && ((typeof obj.config.settings.plugins != 'object') || (obj.config.settings.plugins.enabled != false))) {
obj.pluginHandler = require('./pluginHandler.js').pluginHandler(obj);
@@ -1893,12 +1646,8 @@ function CreateMeshCentralServer(config, args) {
obj.webserver = require('./webserver.js').CreateWebServer(obj, obj.db, obj.args, obj.certificates, obj.StartEx5);
if (obj.redirserver != null) { obj.redirserver.hookMainWebServer(obj.certificates); }
- // Change RelayDNS to a array of strings
- if (typeof obj.args.relaydns == 'string') { obj.args.relaydns = [obj.args.relaydns]; }
- if (obj.common.validateStrArray(obj.args.relaydns, 1) == false) { delete obj.args.relaydns; }
-
// Start the HTTP relay web server if needed
- if ((obj.args.relaydns == null) && (typeof obj.args.relayport == 'number') && (obj.args.relayport != 0)) {
+ if ((obj.args.relayport != null) && (obj.args.relayport != 0)) {
obj.webrelayserver = require('./webrelayserver.js').CreateWebRelayServer(obj, obj.db, obj.args, obj.certificates, function () { });
}
@@ -1974,11 +1723,6 @@ function CreateMeshCentralServer(config, args) {
if ((obj.smsserver != null) && (obj.args.lanonly == true)) { addServerWarning("SMS gateway has limited use in LAN mode.", 19); }
}
- // Setup user messaging
- if (config.messaging != null) {
- obj.msgserver = require('./meshmessaging.js').CreateServer(obj);
- }
-
// Setup web based push notifications
if ((typeof config.settings.webpush == 'object') && (typeof config.settings.webpush.email == 'string')) {
obj.webpush = require('web-push');
@@ -1987,7 +1731,6 @@ function CreateMeshCentralServer(config, args) {
if ((vapidKeys == null) || (typeof vapidKeys.publicKey != 'string') || (typeof vapidKeys.privateKey != 'string')) {
console.log("Generating web push VAPID keys...");
vapidKeys = obj.webpush.generateVAPIDKeys();
- obj.common.moveOldFiles([obj.path.join(obj.datapath, 'vapid.json')]);
obj.fs.writeFileSync(obj.path.join(obj.datapath, 'vapid.json'), JSON.stringify(vapidKeys));
}
obj.webpush.vapidPublicKey = vapidKeys.publicKey;
@@ -1995,31 +1738,19 @@ function CreateMeshCentralServer(config, args) {
if (typeof config.settings.webpush.gcmapi == 'string') { webpush.setGCMAPIKey(config.settings.webpush.gcmapi); }
}
- // Get the current node version
- const verSplit = process.version.substring(1).split('.');
- var nodeVersion = parseInt(verSplit[0]) + (parseInt(verSplit[1]) / 100);
-
// Setup Firebase
if ((config.firebase != null) && (typeof config.firebase.senderid == 'string') && (typeof config.firebase.serverkey == 'string')) {
- addServerWarning('Firebase now requires a service account JSON file, Firebase disabled.', 27);
- } else if ((config.firebase != null) && (typeof config.firebase.serviceaccountfile == 'string')) {
- var serviceAccount;
- try { serviceAccount = JSON.parse(obj.fs.readFileSync(obj.path.join(obj.datapath, config.firebase.serviceaccountfile)).toString()); } catch (ex) { console.log(ex); }
- if (serviceAccount != null) { obj.firebase = require('./firebase').CreateFirebase(obj, serviceAccount); }
+ obj.firebase = require('./firebase').CreateFirebase(obj, config.firebase.senderid, config.firebase.serverkey);
} else if ((typeof config.firebaserelay == 'object') && (typeof config.firebaserelay.url == 'string')) {
// Setup the push messaging relay
obj.firebase = require('./firebase').CreateFirebaseRelay(obj, config.firebaserelay.url, config.firebaserelay.key);
} else if (obj.config.settings.publicpushnotifications === true) {
- // Setup the Firebase push messaging relay using https://alt.meshcentral.com, this is the public push notification server.
- obj.firebase = require('./firebase').CreateFirebaseRelay(obj, 'https://alt.meshcentral.com/firebaserelay.aspx');
+ // Setup the Firebase push messaging relay using https://meshcentral.com, this is the public push notification server.
+ obj.firebase = require('./firebase').CreateFirebaseRelay(obj, 'https://meshcentral.com/firebaserelay.aspx');
}
- // Setup monitoring
- obj.monitoring = require('./monitoring.js').CreateMonitoring(obj, obj.args);
-
// Start periodic maintenance
obj.maintenanceTimer = setInterval(obj.maintenanceActions, 1000 * 60 * 60); // Run this every hour
- //obj.maintenanceTimer = setInterval(obj.maintenanceActions, 1000 * 10 * 1); // DEBUG: Run this more often
// Dispatch an event that the server is now running
obj.DispatchEvent(['*'], obj, { etype: 'server', action: 'started', msg: 'Server started' });
@@ -2104,24 +1835,14 @@ function CreateMeshCentralServer(config, args) {
obj.updateServerState('state', "running");
// Setup auto-backup defaults
- if (obj.config.settings.autobackup == false || obj.config.settings.autobackup == 'false') { obj.config.settings.autobackup = {backupintervalhours: 0}; } //no schedule, but able to console autobackup
- else {
- if (obj.config.settings.autobackup == null || obj.config.settings.autobackup === true) { obj.config.settings.autobackup = {backupintervalhours: 24, keeplastdaysbackup: 10}; };
- if (typeof obj.config.settings.autobackup.backupintervalhours != 'number') { obj.config.settings.autobackup.backupintervalhours = 24; };
- if (typeof obj.config.settings.autobackup.keeplastdaysbackup != 'number') { obj.config.settings.autobackup.keeplastdaysbackup = 10; };
- if (obj.config.settings.autobackup.backuphour != null ) { obj.config.settings.autobackup.backupintervalhours = 24; if ((typeof obj.config.settings.autobackup.backuphour != 'number') || (obj.config.settings.autobackup.backuphour > 23 || obj.config.settings.autobackup.backuphour < 0 )) { obj.config.settings.autobackup.backuphour = 0; }}
- else {obj.config.settings.autobackup.backuphour = -1 };
- //arrayfi in case of string and remove possible ', ' space. !! If a string instead of an array is passed, it will be split by ',' so *{.txt,.log} won't work in that case !!
- if (!obj.config.settings.autobackup.backupignorefilesglob) {obj.config.settings.autobackup.backupignorefilesglob = []}
- else if (typeof obj.config.settings.autobackup.backupignorefilesglob == 'string') { obj.config.settings.autobackup.backupignorefilesglob = obj.config.settings.autobackup.backupignorefilesglob.replaceAll(', ', ',').split(','); };
- if (!obj.config.settings.autobackup.backupskipfoldersglob) {obj.config.settings.autobackup.backupskipfoldersglob = []}
- else if (typeof obj.config.settings.autobackup.backupskipfoldersglob == 'string') { obj.config.settings.autobackup.backupskipfoldersglob = obj.config.settings.autobackup.backupskipfoldersglob.replaceAll(', ', ',').split(','); };
- if (typeof obj.config.settings.autobackup.backuppath == 'string') { obj.backuppath = (obj.config.settings.autobackup.backuppath = (obj.path.resolve(obj.config.settings.autobackup.backuppath))) } else { obj.config.settings.autobackup.backuppath = obj.backuppath };
- if (typeof obj.config.settings.autobackup.backupname != 'string') { obj.config.settings.autobackup.backupname = 'meshcentral-autobackup-'};
- }
+ if (obj.config.settings.autobackup == null) { obj.config.settings.autobackup = { backupintervalhours: 24, keeplastdaysbackup: 10 }; }
+ else if (obj.config.settings.autobackup === false) { delete obj.config.settings.autobackup; }
- // Check if the database is capable of performing a backup
- obj.db.checkBackupCapability(function (err, msg) { if (msg != null) { obj.addServerWarning(msg, true) } });
+ // Check that autobackup path is not within the "meshcentral-data" folder.
+ if ((typeof obj.config.settings.autobackup == 'object') && (typeof obj.config.settings.autobackup.backuppath == 'string') && (obj.path.normalize(obj.config.settings.autobackup.backuppath).startsWith(obj.path.normalize(obj.datapath)))) {
+ addServerWarning("Backup path can't be set within meshcentral-data folder, backup settings ignored.", 21);
+ delete obj.config.settings.autobackup;
+ }
// Load Intel AMT passwords from the "amtactivation.log" file
obj.loadAmtActivationLogPasswords(function (amtPasswords) {
@@ -2283,19 +2004,14 @@ function CreateMeshCentralServer(config, args) {
// Check if we need to perform an automatic backup
function checkAutobackup() {
- if (obj.config.settings.autobackup.backupintervalhours >= 1 ) {
+ if (obj.config.settings.autobackup && (typeof obj.config.settings.autobackup.backupintervalhours == 'number')) {
obj.db.Get('LastAutoBackupTime', function (err, docs) {
- if (err != null) { console.error("checkAutobackup: Error getting LastBackupTime from DB"); return}
+ if (err != null) return;
var lastBackup = 0;
- const currentdate = new Date();
- let currentHour = currentdate.getHours();
- let now = currentdate.getTime();
+ const now = new Date().getTime();
if (docs.length == 1) { lastBackup = docs[0].value; }
const delta = now - lastBackup;
- //const delta = 9999999999; // DEBUG: backup always
- obj.debug ('backup', 'Entering checkAutobackup, lastAutoBackupTime: ' + new Date(lastBackup).toLocaleString('default', { dateStyle: 'medium', timeStyle: 'short' }) + ', delta: ' + (delta/(1000*60*60)).toFixed(2) + ' hours');
- //start autobackup if interval has passed or at configured hour, whichever comes first. When an hour schedule is missed, it will make a backup immediately.
- if ((delta > (obj.config.settings.autobackup.backupintervalhours * 60 * 60 * 1000)) || ((currentHour == obj.config.settings.autobackup.backuphour) && (delta >= 2 * 60 * 60 * 1000))) {
+ if (delta > (obj.config.settings.autobackup.backupintervalhours * 60 * 60 * 1000)) {
// A new auto-backup is required.
obj.db.Set({ _id: 'LastAutoBackupTime', value: now }); // Save the current time in the database
obj.db.performBackup(); // Perform the backup
@@ -2354,7 +2070,7 @@ function CreateMeshCentralServer(config, args) {
// Update the server state
obj.updateServerState('state', "stopped");
};
-
+
// Event Dispatch
obj.AddEventDispatch = function (ids, target) {
obj.debug('dispatch', 'AddEventDispatch', ids);
@@ -2417,10 +2133,6 @@ function CreateMeshCentralServer(config, args) {
storeEvent.links = Object.assign({}, storeEvent.links);
for (var i in storeEvent.links) { var ue = obj.common.escapeFieldName(i); if (ue !== i) { storeEvent.links[ue] = storeEvent.links[i]; delete storeEvent.links[i]; } }
}
- if (storeEvent.mesh) {
- // Escape "mesh" names that may have "." and/or "$"
- storeEvent.mesh = obj.common.escapeLinksFieldNameEx(storeEvent.mesh);
- }
storeEvent.ids = ids;
obj.db.StoreEvent(storeEvent);
}
@@ -2511,7 +2223,7 @@ function CreateMeshCentralServer(config, args) {
// Event any changes on this server only
if ((newConnectivity != oldPowerState) || (newPowerState != oldPowerState)) {
- obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: newConnectivity, pwr: newPowerState, nolog: 1, nopeers: 1, id: Math.random() });
+ obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: newConnectivity, pwr: newPowerState, nolog: 1, nopeers: 1 });
}
}
};
@@ -2524,7 +2236,7 @@ function CreateMeshCentralServer(config, args) {
const domainId = meshSplit[1];
if (obj.config.domains[domainId] == null) return;
const mailserver = obj.config.domains[domainId].mailserver;
- if ((mailserver == null) && (obj.msgserver == null)) return;
+ if (mailserver == null) return;
// Get the device group for this device
const mesh = obj.webserver.meshes[meshid];
@@ -2544,7 +2256,7 @@ function CreateMeshCentralServer(config, args) {
// Check if any user needs email notification
for (var i in users) {
const user = obj.webserver.users[users[i]];
- if (user != null) {
+ if ((user != null) && (user.email != null) && (user.emailVerified == true)) {
var notify = 0;
// Device group notifications
@@ -2557,8 +2269,7 @@ function CreateMeshCentralServer(config, args) {
if (user.notify[nodeid] != null) { notify |= user.notify[nodeid]; }
}
- // Email notifications
- if ((user.email != null) && (user.emailVerified == true) && (mailserver != null) && ((notify & 48) != 0)) {
+ if ((notify & 48) != 0) {
if (stateSet == true) {
if ((notify & 16) != 0) {
mailserver.notifyDeviceConnect(user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo);
@@ -2574,76 +2285,6 @@ function CreateMeshCentralServer(config, args) {
}
}
}
-
- // Messaging notifications
- if ((obj.msgserver != null) && ((notify & 384) != 0)) {
- if (stateSet == true) {
- if ((notify & 128) != 0) {
- obj.msgserver.notifyDeviceConnect(user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo);
- } else {
- obj.msgserver.cancelNotifyDeviceDisconnect(user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo);
- }
- }
- else if (stateSet == false) {
- if ((notify & 256) != 0) {
- obj.msgserver.notifyDeviceDisconnect(user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo);
- } else {
- obj.msgserver.cancelNotifyDeviceConnect(user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo);
- }
- }
- }
- }
- }
- }
-
- // See if we need to notifiy any user of device requested help
- //if (typeof device.name == 'string') { parent.parent.NotifyUserOfDeviceHelpRequest(domain, device._id, device.meshid, device.name, command.msgArgs[0], command.msgArgs[1]); }
-
- obj.NotifyUserOfDeviceHelpRequest = function (domain, meshid, nodeid, devicename, helpusername, helprequest) {
- // Check if there is a email server for this domain
- const meshSplit = meshid.split('/');
- if (meshSplit.length != 3) return;
- const domainId = meshSplit[1];
- if (obj.config.domains[domainId] == null) return;
- const mailserver = obj.config.domains[domainId].mailserver;
- if ((mailserver == null) && (obj.msgserver == null)) return;
-
- // Get the device group for this device
- const mesh = obj.webserver.meshes[meshid];
- if ((mesh == null) || (mesh.links == null)) return;
-
- // Get the list of users that have visibility to this device
- // This includes users that are part of user groups
- const users = [];
- for (var i in mesh.links) {
- if (i.startsWith('user/') && (users.indexOf(i) < 0)) { users.push(i); }
- if (i.startsWith('ugrp/')) {
- var usergrp = obj.webserver.userGroups[i];
- if (usergrp.links != null) { for (var j in usergrp.links) { if (j.startsWith('user/') && (users.indexOf(j) < 0)) { users.push(j); } } }
- }
- }
-
- // Check if any user needs email notification
- for (var i in users) {
- const user = obj.webserver.users[users[i]];
- if (user != null) {
- var notify = 0;
-
- // Device group notifications
- const meshLinks = user.links[meshid];
- if ((meshLinks != null) && (meshLinks.notify != null)) { notify |= meshLinks.notify; }
-
- // User notifications
- if (user.notify != null) {
- if (user.notify[meshid] != null) { notify |= user.notify[meshid]; }
- if (user.notify[nodeid] != null) { notify |= user.notify[nodeid]; }
- }
-
- // Mail help request
- if ((user.email != null) && (user.emailVerified == true) && ((notify & 64) != 0)) { mailserver.sendDeviceHelpMail(domain, user.name, user.email, devicename, nodeid, helpusername, helprequest, user.llang); }
-
- // Message help request
- if ((user.msghandle != null) && ((notify & 512) != 0)) { obj.msgserver.sendDeviceHelpRequest(domain, user.name, user.msghandle, devicename, nodeid, helpusername, helprequest, user.llang); }
}
}
}
@@ -2680,7 +2321,7 @@ function CreateMeshCentralServer(config, args) {
if (connectType == 1) { state.agentPower = powerState; } else if (connectType == 2) { state.ciraPower = powerState; } else if (connectType == 4) { state.amtPower = powerState; }
var powerState = 0, oldPowerState = state.powerState;
if ((state.connectivity & 1) != 0) { powerState = state.agentPower; } else if ((state.connectivity & 2) != 0) { powerState = state.ciraPower; } else if ((state.connectivity & 4) != 0) { powerState = state.amtPower; }
- if ((state.powerState == null) || (state.powerState == undefined) || (state.powerState != powerState)) {
+ if ((state.powerState == null) || (state.powerState != powerState)) {
state.powerState = powerState;
eventConnectChange = 1;
@@ -2692,7 +2333,7 @@ function CreateMeshCentralServer(config, args) {
// Event the node connection change
if (eventConnectChange == 1) {
- obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: state.connectivity, pwr: state.powerState, ct: connectTime, nolog: 1, nopeers: 1, id: Math.random() });
+ obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: state.connectivity, pwr: state.powerState, ct: connectTime, nolog: 1, nopeers: 1 });
// Save indication of node connection change
const lc = { _id: 'lc' + nodeid, type: 'lastconnect', domain: nodeid.split('/')[1], meshid: meshid, time: Date.now(), cause: 1, connectType: connectType };
@@ -2709,7 +2350,7 @@ function CreateMeshCentralServer(config, args) {
if (serverid == null) { serverid = obj.serverId; }
if (obj.peerConnectivityByNode[serverid] == null) return; // Guard against unknown serverid's
var eventConnectChange = 0;
- var state = obj.peerConnectivityByNode[serverid][nodeid];
+ const state = obj.peerConnectivityByNode[serverid][nodeid];
if (state) {
// Change the connection in the node and mesh state lists
if ((state.connectivity & connectType) == 0) { state.connectivity |= connectType; eventConnectChange = 1; }
@@ -2724,7 +2365,7 @@ function CreateMeshCentralServer(config, args) {
if (connectType == 1) { state.agentPower = powerState; } else if (connectType == 2) { state.ciraPower = powerState; } else if (connectType == 4) { state.amtPower = powerState; }
var powerState = 0, oldPowerState = state.powerState;
if ((state.connectivity & 1) != 0) { powerState = state.agentPower; } else if ((state.connectivity & 2) != 0) { powerState = state.ciraPower; } else if ((state.connectivity & 4) != 0) { powerState = state.amtPower; }
- if ((state.powerState == null) || (state.powerState == undefined) || (state.powerState != powerState)) {
+ if ((state.powerState == null) || (state.powerState != powerState)) {
state.powerState = powerState;
eventConnectChange = 1;
@@ -2796,7 +2437,7 @@ function CreateMeshCentralServer(config, args) {
// Event the node connection change
if (eventConnectChange == 1) {
- obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: state.connectivity, pwr: state.powerState, nolog: 1, nopeers: 1, id: Math.random() });
+ obj.DispatchEvent(obj.webserver.CreateNodeDispatchTargets(meshid, nodeid), obj, { action: 'nodeconnect', meshid: meshid, nodeid: nodeid, domain: nodeid.split('/')[1], conn: state.connectivity, pwr: state.powerState, nolog: 1, nopeers: 1 });
// Notify any users of device disconnection
obj.NotifyUserOfDeviceStateChange(meshid, nodeid, Date.now(), connectType, -1, serverid, false, extraInfo);
@@ -2807,7 +2448,7 @@ function CreateMeshCentralServer(config, args) {
// Remove the agent connection from the nodes connection list
if (serverid == null) { serverid = obj.serverId; }
if (obj.peerConnectivityByNode[serverid] == null) return; // Guard against unknown serverid's
- var state = obj.peerConnectivityByNode[serverid][nodeid];
+ const state = obj.peerConnectivityByNode[serverid][nodeid];
if (state == null) return;
// If existing state exist, remove this connection
@@ -2866,7 +2507,7 @@ function CreateMeshCentralServer(config, args) {
if (obj.fs.existsSync(obj.path.join(meshcorePath, 'meshcore.js')) == false) {
meshcorePath = obj.path.join(__dirname, 'agents');
if (obj.fs.existsSync(obj.path.join(meshcorePath, 'meshcore.js')) == false) {
- obj.defaultMeshCores = obj.defaultMeshCoresHash = {}; if (func != null) { func(false); } // meshcore.js not found
+ obj.defaultMeshCores = obj.defaultMeshCoresHash = { }; if (func != null) { func(false); } // meshcore.js not found
}
}
@@ -2932,7 +2573,7 @@ function CreateMeshCentralServer(config, args) {
// We are adding a JS file to the meshcores
var moduleName = modulesDir[i].substring(0, modulesDir[i].length - 3);
if (moduleName.endsWith('.min')) { moduleName = moduleName.substring(0, moduleName.length - 4); } // Remove the ".min" for ".min.js" files.
- const moduleData = ['try { addModule("', moduleName, '", "', obj.escapeCodeString(obj.fs.readFileSync(obj.path.join(moduleDirPath, modulesDir[i])).toString('binary')), '"); addedModules.push("', moduleName, '"); } catch (ex) { }\r\n'];
+ const moduleData = [ 'try { addModule("', moduleName, '", "', obj.escapeCodeString(obj.fs.readFileSync(obj.path.join(moduleDirPath, modulesDir[i])).toString('binary')), '"); addedModules.push("', moduleName, '"); } catch (ex) { }\r\n' ];
// Merge this module
// NOTE: "smbios" module makes some non-AI Linux segfault, only include for IA platforms.
@@ -3161,7 +2802,7 @@ function CreateMeshCentralServer(config, args) {
} catch (ex) { }
}
};
-
+
// List of possible mesh agents
obj.meshAgentsArchitectureNumbers = {
0: { id: 0, localname: 'Unknown', rname: 'meshconsole.exe', desc: 'Unknown agent', update: false, amt: true, platform: 'unknown', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' },
@@ -3178,7 +2819,7 @@ function CreateMeshCentralServer(config, args) {
11: { id: 11, localname: 'meshagent_osx-x86-32', rname: 'meshosx', desc: 'Apple macOS x86-32', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Apple x86-32 binary, no longer supported.
12: { id: 12, localname: 'MeshAgent-Android-x86', rname: 'meshandroid', desc: 'Android x86-32', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' },
13: { id: 13, localname: 'meshagent_pogo', rname: 'meshagent', desc: 'Linux ARM PogoPlug', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' },
- 14: { id: 14, localname: 'meshagent_android.apk', rname: 'meshandroid.apk', desc: 'Android', update: false, amt: false, platform: 'android', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Get this one from Google Play
+ 14: { id: 14, localname: 'MeshAgent-Android-APK', rname: 'meshandroid', desc: 'Android', update: false, amt: false, platform: 'android', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Get this one from Google Play
15: { id: 15, localname: 'meshagent_poky', rname: 'meshagent', desc: 'Linux Poky x86-32', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' },
16: { id: 16, localname: 'meshagent_osx-x86-64', rname: 'meshagent', desc: 'Apple macOS x86-64', update: true, amt: false, platform: 'osx', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Apple x86-64 binary
17: { id: 17, localname: 'MeshAgent-ChromeOS', rname: 'meshagent', desc: 'Google ChromeOS', update: false, amt: false, platform: 'chromeos', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Get this one from Chrome store
@@ -3203,15 +2844,8 @@ function CreateMeshCentralServer(config, args) {
37: { id: 37, localname: 'meshagent_openbsd_x86-64', rname: 'meshagent', desc: 'OpenBSD x86-64', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // OpenBSD x86-64
40: { id: 40, localname: 'meshagent_mipsel24kc', rname: 'meshagent', desc: 'Linux MIPSEL24KC (OpenWRT)', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // MIPS Router with OpenWRT
41: { id: 41, localname: 'meshagent_aarch64-cortex-a53', rname: 'meshagent', desc: 'ARMADA/CORTEX-A53/MUSL (OpenWRT)', update: true, amt: false, platform: 'linux', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // OpenWRT Routers
- 42: { id: 42, localname: 'MeshConsoleARM64.exe', rname: 'meshconsolearm64.exe', desc: 'Windows ARM-64 console', update: true, amt: true, platform: 'win32', core: 'windows-amt', rcore: 'windows-recovery', arcore: 'windows-agentrecovery', tcore: 'windows-tiny' },
- 43: { id: 43, localname: 'MeshServiceARM64.exe', rname: 'meshagentarm64.exe', desc: 'Windows ARM-64 service', update: true, amt: true, platform: 'win32', core: 'windows-amt', rcore: 'windows-recovery', arcore: 'windows-agentrecovery', tcore: 'windows-tiny', codesign: true },
- 10003: { id: 10003, localname: 'MeshService.exe', rname: 'meshagent32.exe', desc: 'Windows x86-32 service', update: true, amt: true, platform: 'win32', core: 'windows-amt', rcore: 'windows-recovery', arcore: 'windows-agentrecovery', tcore: 'windows-tiny', unsigned: true },
- 10004: { id: 10004, localname: 'MeshService64.exe', rname: 'meshagent64.exe', desc: 'Windows x86-64 service', update: true, amt: true, platform: 'win32', core: 'windows-amt', rcore: 'windows-recovery', arcore: 'windows-agentrecovery', tcore: 'windows-tiny', unsigned: true },
10005: { id: 10005, localname: 'meshagent_osx-universal-64', rname: 'meshagent', desc: 'Apple macOS Universal Binary', update: true, amt: false, platform: 'osx', core: 'linux-noamt', rcore: 'linux-recovery', arcore: 'linux-agentrecovery', tcore: 'linux-tiny' }, // Apple Silicon + x86 universal binary
- 10006: { id: 10006, localname: 'MeshCentralAssistant.exe', rname: 'MeshCentralAssistant.exe', desc: 'MeshCentral Assistant for Windows', update: false, amt: false, platform: 'win32' }, // MeshCentral Assistant
- 11000: { id: 11000, localname: 'MeshCmd.exe', rname: 'MeshCmd.exe', desc: 'Windows x86-32 meshcmd', update: false, amt: true, platform: 'win32', codesign: true }, // MeshCMD for Windows x86 32-bit
- 11001: { id: 11001, localname: 'MeshCmd64.exe', rname: 'MeshCmd64.exe', desc: 'Windows x86-64 meshcmd', update: false, amt: true, platform: 'win32', codesign: true }, // MeshCMD for Windows x86 64-bit
- 11002: { id: 11002, localname: 'MeshCmdARM64.exe', rname: 'MeshCmdARM64.exe', desc: 'Windows ARM-64 meshcmd', update: false, amt: true, platform: 'win32', codesign: true } // MeshCMD for Windows ARM 64-bit
+ 10006: { id: 10006, localname: 'MeshCentralAssistant.exe', rname: 'MeshCentralAssistant.exe', desc: 'MeshCentral Assistant for Windows', update: false, amt: false, platform: 'win32' } // MeshCentral Assistant
};
// Sign windows agents
@@ -3254,13 +2888,13 @@ function CreateMeshCentralServer(config, args) {
// Setup the time server
var timeStampUrl = 'http://timestamp.comodoca.com/authenticode';
- if (obj.args.agenttimestampserver === false) { timeStampUrl = null; }
- else if (typeof obj.args.agenttimestampserver == 'string') { timeStampUrl = obj.args.agenttimestampserver; }
+ if (args.agenttimestampserver === false) { timeStampUrl = null; }
+ else if (typeof args.agenttimestampserver == 'string') { timeStampUrl = args.agenttimestampserver; }
// Setup the time server proxy
var timeStampProxy = null;
- if (typeof obj.args.agenttimestampproxy == 'string') { timeStampProxy = obj.args.agenttimestampproxy; }
- else if ((obj.args.agenttimestampproxy !== false) && (typeof obj.args.npmproxy == 'string')) { timeStampProxy = obj.args.npmproxy; }
+ if (typeof args.agenttimestampproxy == 'string') { timeStampProxy = args.agenttimestampproxy; }
+ else if ((args.agenttimestampproxy !== false) && (typeof args.npmproxy == 'string')) { timeStampProxy = args.npmproxy; }
// Setup the pending operations counter
var pendingOperations = 1;
@@ -3276,7 +2910,7 @@ function CreateMeshCentralServer(config, args) {
if (obj.fs.existsSync(agentpath2)) { agentpath = agentpath2; delete obj.meshAgentsArchitectureNumbers[archid].codesign; } // If the agent is present in "meshcentral-data/agents", use that one instead.
} else {
// When processing an extra domain, only load agents that are specific to that domain
- agentpath = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
+ var agentpath = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
if (obj.fs.existsSync(agentpath)) { delete obj.meshAgentsArchitectureNumbers[archid].codesign; } else { continue; } // If the agent is not present in "meshcentral-data/agents" skip.
}
@@ -3298,101 +2932,20 @@ function CreateMeshCentralServer(config, args) {
// If the agent is signed correctly, look to see if the resources in the destination agent are correct
var orgVersionStrings = originalAgent.getVersionInfo();
if (destinationAgentOk == true) {
- const versionStrings = destinationAgent.getVersionInfo();
- const versionProperties = ['FileDescription', 'FileVersion', 'InternalName', 'LegalCopyright', 'OriginalFilename', 'ProductName', 'ProductVersion'];
+ var versionStrings = destinationAgent.getVersionInfo();
+ var versionProperties = ['FileDescription', 'FileVersion', 'InternalName', 'LegalCopyright', 'OriginalFilename', 'ProductName', 'ProductVersion'];
for (var i in versionProperties) {
const prop = versionProperties[i], propl = prop.toLowerCase();
if ((domain.agentfileinfo != null) && (typeof domain.agentfileinfo == 'object') && (typeof domain.agentfileinfo[propl] == 'string')) {
- if (domain.agentfileinfo[propl] != versionStrings[prop]) { destinationAgentOk = false; break; } // If the resource we want is not the same as the destination executable, we need to re-sign the agent.
+ if (domain.agentfileinfo[propl] != versionStrings[prop]) { destinationAgentOk = false; } // If the resource we want is not the same as the destination executable, we need to re-sign the agent.
} else {
- if (orgVersionStrings[prop] != versionStrings[prop]) { destinationAgentOk = false; break; } // if the resource of the orginal agent not the same as the destination executable, we need to re-sign the agent.
- }
- }
-
- // Check file version number
- if (destinationAgentOk == true) {
- if ((domain.agentfileinfo != null) && (typeof domain.agentfileinfo == 'object') && (typeof domain.agentfileinfo['fileversionnumber'] == 'string')) {
- if (domain.agentfileinfo['fileversionnumber'] != versionStrings['~FileVersion']) { destinationAgentOk = false; } // If the resource we want is not the same as the destination executable, we need to re-sign the agent.
- } else {
- if (orgVersionStrings['~FileVersion'] != versionStrings['~FileVersion']) { destinationAgentOk = false; } // if the resource of the orginal agent not the same as the destination executable, we need to re-sign the agent.
- }
- }
-
- // Check product version number
- if (destinationAgentOk == true) {
- if ((domain.agentfileinfo != null) && (typeof domain.agentfileinfo == 'object') && (typeof domain.agentfileinfo['productversionnumber'] == 'string')) {
- if (domain.agentfileinfo['productversionnumber'] != versionStrings['~ProductVersion']) { destinationAgentOk = false; } // If the resource we want is not the same as the destination executable, we need to re-sign the agent.
- } else {
- if (orgVersionStrings['~ProductVersion'] != versionStrings['~ProductVersion']) { destinationAgentOk = false; } // if the resource of the orginal agent not the same as the destination executable, we need to re-sign the agent.
- }
- }
-
- // Check the agent icon
- if (destinationAgentOk == true) {
- if ((domain.agentfileinfo != null) && (domain.agentfileinfo.icon != null)) {
- // Check if the destination agent matches the icon we want
- const agentIconGroups = destinationAgent.getIconInfo();
- if (agentIconGroups != null) {
- const agentIconGroupNames = Object.keys(agentIconGroups);
- if (agentIconGroupNames.length > 0) {
- const agentMainIconGroup = agentIconGroups[agentIconGroupNames[0]];
- if (agentMainIconGroup.resCount != domain.agentfileinfo.icon.resCount) {
- destinationAgentOk = false; // The icon image count is different, don't bother hashing to see if the icons are different.
- } else {
- const agentMainIconGroupHash = require('./authenticode.js').hashObject(agentMainIconGroup);
- const iconHash = require('./authenticode.js').hashObject(domain.agentfileinfo.icon);
- if (agentMainIconGroupHash != iconHash) { destinationAgentOk = false; } // If the existing agent icon does not match the desired icon, we need to re-sign the agent.
- }
- }
- }
- } else {
- // Check if the destination agent has the default icon
- const agentIconGroups1 = destinationAgent.getIconInfo();
- const agentIconGroups2 = originalAgent.getIconInfo();
- if (agentIconGroups1.resCount != agentIconGroups2.resCount) {
- destinationAgentOk = false; // The icon image count is different, don't bother hashing to see if the icons are different.
- } else {
- const iconHash1 = require('./authenticode.js').hashObject(agentIconGroups1);
- const iconHash2 = require('./authenticode.js').hashObject(agentIconGroups2);
- if (iconHash1 != iconHash2) { destinationAgentOk = false; } // If the existing agent icon does not match the desired icon, we need to re-sign the agent.
- }
- }
- }
-
- // Check the agent logo
- if (destinationAgentOk == true) {
- if ((domain.agentfileinfo != null) && (domain.agentfileinfo.logo != null)) {
- // Check if the destination agent matches the logo we want
- const agentBitmaps = destinationAgent.getBitmapInfo();
- if (agentBitmaps != null) {
- const agentBitmapNames = Object.keys(agentBitmaps);
- if (agentBitmapNames.length > 0) {
- const agentMainBitmap = agentBitmaps[agentBitmapNames[0]];
- const agentMainBitmapHash = require('./authenticode.js').hashObject(agentMainBitmap);
- const bitmapHash = require('./authenticode.js').hashObject(domain.agentfileinfo.logo);
- if (agentMainBitmapHash != bitmapHash) { destinationAgentOk = false; } // If the existing agent logo does not match the desired logo, we need to re-sign the agent.
- }
- }
- } else {
- // Check if the destination agent has the default icon
- const agentBitmaps1 = destinationAgent.getBitmapInfo();
- const agentBitmaps2 = originalAgent.getBitmapInfo();
- const agentBitmapNames = Object.keys(agentBitmaps1);
- if (agentBitmapNames.length == 0) {
- destinationAgentOk = false;
- } else {
- const iconHash1 = require('./authenticode.js').hashObject(agentBitmaps1[agentBitmapNames[0]]);
- const iconHash2 = require('./authenticode.js').hashObject(agentBitmaps2[agentBitmapNames[0]]);
- if (iconHash1 != iconHash2) { destinationAgentOk = false; } // If the existing agent icon does not match the desired icon, we need to re-sign the agent.
- }
+ if (orgVersionStrings[prop] != versionStrings[prop]) { destinationAgentOk = false; } // if the resource of the orginal agent not the same as the destination executable, we need to re-sign the agent.
}
}
}
- // If everything looks ok, runs a hash of the original and destination agent .text, .data and .rdata sections. If different, sign the agent again.
- if ((destinationAgentOk == true) && (originalAgent.getHashOfSection('sha384', '.text').compare(destinationAgent.getHashOfSection('sha384', '.text')) != 0)) { destinationAgentOk = false; }
- if ((destinationAgentOk == true) && (originalAgent.getHashOfSection('sha384', '.data').compare(destinationAgent.getHashOfSection('sha384', '.data')) != 0)) { destinationAgentOk = false; }
- if ((destinationAgentOk == true) && (originalAgent.getHashOfSection('sha384', '.rdata').compare(destinationAgent.getHashOfSection('sha384', '.rdata')) != 0)) { destinationAgentOk = false; }
+ // If everything looks ok, runs a hash of the original and destination agent skipping the CRC, resource and signature blocks. If different, sign the agent again.
+ if ((destinationAgentOk == true) && (originalAgent.getHashNoResources('sha384').compare(destinationAgent.getHashNoResources('sha384')) != 0)) { destinationAgentOk = false; }
// We are done comparing the destination agent, close it.
destinationAgent.close();
@@ -3404,10 +2957,10 @@ function CreateMeshCentralServer(config, args) {
const xagentSignedFunc = function agentSignedFunc(err, size) {
if (err == null) {
// Agent was signed succesfuly
- console.log(obj.common.format('Code signed {0}.', agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname));
+ console.log(obj.common.format('Code signed agent {0}.', agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname));
} else {
// Failed to sign agent
- addServerWarning('Failed to sign \"' + agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname + '\": ' + err, 22, [agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname, err]);
+ addServerWarning('Failed to sign agent \"' + agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname + '\": ' + err, 22, [ agentSignedFunc.objx.meshAgentsArchitectureNumbers[agentSignedFunc.archid].localname, err ]);
}
if (--pendingOperations === 0) { agentSignedFunc.func(); }
}
@@ -3422,49 +2975,15 @@ function CreateMeshCentralServer(config, args) {
if ((domain.agentfileinfo != null) && (typeof domain.agentfileinfo == 'object')) {
versionStrings = originalAgent.getVersionInfo();
var versionProperties = ['FileDescription', 'FileVersion', 'InternalName', 'LegalCopyright', 'OriginalFilename', 'ProductName', 'ProductVersion'];
- // Change the agent string properties
for (var i in versionProperties) {
const prop = versionProperties[i], propl = prop.toLowerCase();
if (domain.agentfileinfo[propl] && (domain.agentfileinfo[propl] != versionStrings[prop])) { versionStrings[prop] = domain.agentfileinfo[propl]; resChanges = true; }
}
- // Change the agent file version
- if (domain.agentfileinfo['fileversionnumber'] && (domain.agentfileinfo['fileversionnumber'] != versionStrings['~FileVersion'])) {
- versionStrings['~FileVersion'] = domain.agentfileinfo['fileversionnumber']; resChanges = true;
- }
- // Change the agent product version
- if (domain.agentfileinfo['productversionnumber'] && (domain.agentfileinfo['productversionnumber'] != versionStrings['~ProductVersion'])) {
- versionStrings['~ProductVersion'] = domain.agentfileinfo['productversionnumber']; resChanges = true;
- }
if (resChanges == true) { originalAgent.setVersionInfo(versionStrings); }
-
- // Change the agent icon
- if (domain.agentfileinfo.icon != null) {
- const agentIconGroups = originalAgent.getIconInfo();
- if (agentIconGroups != null) {
- const agentIconGroupNames = Object.keys(agentIconGroups);
- if (agentIconGroupNames.length > 0) {
- const agentMainIconGroupName = agentIconGroupNames[0];
- agentIconGroups[agentIconGroupNames[0]] = domain.agentfileinfo.icon;
- originalAgent.setIconInfo(agentIconGroups);
- }
- }
- }
-
- // Change the agent logo
- if (domain.agentfileinfo.logo != null) {
- const agentBitmaps = originalAgent.getBitmapInfo();
- if (agentBitmaps != null) {
- const agentBitmapNames = Object.keys(agentBitmaps);
- if (agentBitmapNames.length > 0) {
- agentBitmaps[agentBitmapNames[0]] = domain.agentfileinfo.logo;
- originalAgent.setBitmapInfo(agentBitmaps);
- }
- }
- }
}
const signingArguments = { out: signeedagentpath, desc: signDesc, url: signUrl, time: timeStampUrl, proxy: timeStampProxy }; // Shallow clone
- obj.debug('main', "Code signing with arguments: " + JSON.stringify(signingArguments));
+ obj.debug('main', "Code signing agent with arguments: " + JSON.stringify(signingArguments));
if (resChanges == false) {
// Sign the agent the simple way, without changing any resources.
originalAgent.sign(agentSignCertInfo, signingArguments, xagentSignedFunc);
@@ -3511,15 +3030,13 @@ function CreateMeshCentralServer(config, args) {
if (domain.id == '') {
// Load all agents when processing the default domain
agentpath = obj.path.join(__dirname, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
- if (obj.meshAgentsArchitectureNumbers[archid].unsigned !== true) {
- const agentpath2 = obj.path.join(obj.datapath, 'signedagents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
- if (obj.fs.existsSync(agentpath2)) { agentpath = agentpath2; } // If the agent is present in "meshcentral-data/signedagents", use that one instead.
- const agentpath3 = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
- if (obj.fs.existsSync(agentpath3)) { agentpath = agentpath3; } // If the agent is present in "meshcentral-data/agents", use that one instead.
- }
+ const agentpath2 = obj.path.join(obj.datapath, 'signedagents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
+ if (obj.fs.existsSync(agentpath2)) { agentpath = agentpath2; } // If the agent is present in "meshcentral-data/signedagents", use that one instead.
+ const agentpath3 = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
+ if (obj.fs.existsSync(agentpath3)) { agentpath = agentpath3; } // If the agent is present in "meshcentral-data/agents", use that one instead.
} else {
// When processing an extra domain, only load agents that are specific to that domain
- agentpath = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
+ var agentpath = obj.path.join(obj.datapath, 'agents' + suffix, obj.meshAgentsArchitectureNumbers[archid].localname);
if (obj.fs.existsSync(agentpath)) { delete obj.meshAgentsArchitectureNumbers[archid].codesign; } else { continue; } // If the agent is not present in "meshcentral-data/agents" skip.
}
@@ -3738,29 +3255,6 @@ function CreateMeshCentralServer(config, args) {
});
}
- // Encrypt session data
- obj.encryptSessionData = function (data, key) {
- if (data == null) return null;
- if (key == null) { key = obj.loginCookieEncryptionKey; }
- try {
- const iv = Buffer.from(obj.crypto.randomBytes(12), 'binary'), cipher = obj.crypto.createCipheriv('aes-256-gcm', key.slice(0, 32), iv);
- const crypted = Buffer.concat([cipher.update(JSON.stringify(data), 'utf8'), cipher.final()]);
- return Buffer.concat([iv, cipher.getAuthTag(), crypted]).toString(obj.args.cookieencoding ? obj.args.cookieencoding : 'base64').replace(/\+/g, '@').replace(/\//g, '$');
- } catch (ex) { return null; }
- }
-
- // Decrypt the session data
- obj.decryptSessionData = function (data, key) {
- if ((typeof data != 'string') || (data.length < 13)) return {};
- if (key == null) { key = obj.loginCookieEncryptionKey; }
- try {
- const buf = Buffer.from(data.replace(/\@/g, '+').replace(/\$/g, '/'), obj.args.cookieencoding ? obj.args.cookieencoding : 'base64');
- const decipher = obj.crypto.createDecipheriv('aes-256-gcm', key.slice(0, 32), buf.slice(0, 12));
- decipher.setAuthTag(buf.slice(12, 28));
- return JSON.parse(decipher.update(buf.slice(28), 'binary', 'utf8') + decipher.final('utf8'));
- } catch (ex) { return {}; }
- }
-
// Generate a cryptographic key used to encode and decode cookies
obj.generateCookieKey = function () {
return Buffer.from(obj.crypto.randomBytes(80), 'binary');
@@ -3784,7 +3278,7 @@ function CreateMeshCentralServer(config, args) {
obj.decodeCookie = function (cookie, key, timeout) {
if (cookie == null) return null;
var r = obj.decodeCookieAESGCM(cookie, key, timeout);
- if (r === -1) { r = obj.decodeCookieAESSHA(cookie, key, timeout); } // If decodeCookieAESGCM() failed to decode, try decodeCookieAESSHA()
+ if (r == null) { r = obj.decodeCookieAESSHA(cookie, key, timeout); }
if ((r == null) && (obj.args.cookieencoding == null) && (cookie.length != 64) && ((cookie == cookie.toLowerCase()) || (cookie == cookie.toUpperCase()))) {
obj.debug('cookie', 'Upper/Lowercase cookie, try "CookieEncoding":"hex" in settings section of config.json.');
console.log('Upper/Lowercase cookie, try "CookieEncoding":"hex" in settings section of config.json.');
@@ -3836,7 +3330,7 @@ function CreateMeshCentralServer(config, args) {
}
obj.debug('cookie', 'Decoded AESGCM cookie: ' + JSON.stringify(o));
return o;
- } catch (ex) { obj.debug('cookie', 'ERR: Bad AESGCM cookie due to exception: ' + ex); return -1; }
+ } catch (ex) { obj.debug('cookie', 'ERR: Bad AESGCM cookie due to exception: ' + ex); return null; }
};
// Decode a cookie back into an object using a key using AES256 / HMAC-SHA384. Return null if it's not a valid cookie. (key must be 80 bytes or more)
@@ -3876,7 +3370,7 @@ function CreateMeshCentralServer(config, args) {
// Send event to log file
if (obj.config.settings && obj.config.settings.log) {
if (typeof obj.args.log == 'string') { obj.args.log = obj.args.log.split(','); }
- if ((obj.args.log.indexOf(source) >= 0) || (obj.args.log[0] == '*')) {
+ if (obj.args.log.indexOf(source) >= 0) {
const d = new Date();
if (obj.xxLogFile == null) {
try {
@@ -3888,8 +3382,7 @@ function CreateMeshCentralServer(config, args) {
if (obj.xxLogFile != null) {
try {
if (obj.xxLogDateStr != d.toLocaleDateString()) { obj.xxLogDateStr = d.toLocaleDateString(); obj.fs.writeSync(obj.xxLogFile, '---- ' + d.toLocaleDateString() + ' ----\r\n'); }
- const formattedArgs = args.map(function (arg) { return (typeof arg === 'object' && arg !== null) ? JSON.stringify(arg) : arg; });
- obj.fs.writeSync(obj.xxLogFile, new Date().toLocaleTimeString() + ' - ' + source + ': ' + formattedArgs.join(', ') + '\r\n');
+ obj.fs.writeSync(obj.xxLogFile, new Date().toLocaleTimeString() + ' - ' + source + ': ' + args.join(', ') + '\r\n');
} catch (ex) { }
}
}
@@ -3933,7 +3426,7 @@ function CreateMeshCentralServer(config, args) {
function readIpListFromFile(arg) {
if ((typeof arg != 'string') || (!arg.startsWith('file:'))) return arg;
var lines = null;
- try { lines = obj.fs.readFileSync(obj.path.join(obj.datapath, arg.substring(5))).toString().split(/\r?\n/).join('\r').split('\r'); } catch (ex) { }
+ try { lines = obj.fs.readFileSync(obj.path.join(obj.datapath, arg.substring(5))).toString().split('\r\n').join('\r').split('\r'); } catch (ex) { }
if (lines == null) return null;
const validLines = [];
for (var i in lines) { if ((lines[i].length > 0) && (((lines[i].charAt(0) > '0') && (lines[i].charAt(0) < '9')) || (lines[i].charAt(0) == ':'))) validLines.push(lines[i]); }
@@ -3946,25 +3439,18 @@ function CreateMeshCentralServer(config, args) {
function logWarnEvent(msg) { if (obj.servicelog != null) { obj.servicelog.warn(msg); } console.log(msg); }
function logErrorEvent(msg) { if (obj.servicelog != null) { obj.servicelog.error(msg); } console.error(msg); }
obj.getServerWarnings = function () { return serverWarnings; }
- // TODO: migrate from other addServerWarning function and add timestamp
obj.addServerWarning = function (msg, id, args, print) { serverWarnings.push({ msg: msg, id: id, args: args }); if (print !== false) { console.log("WARNING: " + msg); } }
// auth.log functions
- obj.authLog = function (server, msg, args) {
+ obj.authLog = function (server, msg) {
if (typeof msg != 'string') return;
- var str = msg;
- if (args != null) {
- if (typeof args.sessionid == 'string') { str += ', SessionID: ' + args.sessionid; }
- if (typeof args.useragent == 'string') { const userAgentInfo = obj.webserver.getUserAgentInfo(args.useragent); str += ', Browser: ' + userAgentInfo.browserStr + ', OS: ' + userAgentInfo.osStr; }
- }
- obj.debug('authlog', str);
- if (obj.syslogauth != null) { try { obj.syslogauth.log(obj.syslogauth.LOG_INFO, str); } catch (ex) { } }
+ if (obj.syslogauth != null) { try { obj.syslogauth.log(obj.syslogauth.LOG_INFO, msg); } catch (ex) { } }
if (obj.authlogfile != null) { // Write authlog to file
try {
const d = new Date(), month = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'][d.getMonth()];
- str = month + ' ' + d.getDate() + ' ' + obj.common.zeroPad(d.getHours(), 2) + ':' + obj.common.zeroPad(d.getMinutes(), 2) + ':' + d.getSeconds() + ' meshcentral ' + server + '[' + process.pid + ']: ' + msg + ((obj.platform == 'win32') ? '\r\n' : '\n');
- obj.fs.write(obj.authlogfile, str, function (err, written, string) { if (err) { console.error(err); } });
- } catch (ex) { console.error(ex); }
+ msg = month + ' ' + d.getDate() + ' ' + obj.common.zeroPad(d.getHours(), 2) + ':' + obj.common.zeroPad(d.getMinutes(), 2) + ':' + d.getSeconds() + ' meshcentral ' + server + '[' + process.pid + ']: ' + msg + ((obj.platform == 'win32') ? '\r\n' : '\n');
+ obj.fs.write(obj.authlogfile, msg, function (err, written, string) { });
+ } catch (ex) { console.log(ex); }
}
}
@@ -3985,7 +3471,7 @@ function CreateMeshCentralServer(config, args) {
function checkResolveAll(names, func) {
const dns = require('dns'), state = { func: func, count: names.length, err: null };
for (var i in names) {
- dns.lookup(names[i], { all: true }, function (err, records) {
+ dns.resolve(names[i], function (err, records) {
if (err != null) { if (this.state.err == null) { this.state.err = [this.name]; } else { this.state.err.push(this.name); } }
if (--this.state.count == 0) { this.state.func(this.state.err); }
}.bind({ name: names[i], state: state }))
@@ -4007,7 +3493,9 @@ function getConfig(createSampleConfig) {
// Read configuration file if present and change arguments.
var config = {}, configFilePath = path.join(datapath, 'config.json');
- if (args.configfile) { configFilePath = common.joinPath(datapath, args.configfile); }
+ if (args.configfile) {
+ configFilePath = common.joinPath(datapath, args.configfile);
+ }
if (fs.existsSync(configFilePath)) {
// Load and validate the configuration file
try { config = require(configFilePath); } catch (ex) { console.log('ERROR: Unable to parse ' + configFilePath + '.'); return null; }
@@ -4027,7 +3515,7 @@ function getConfig(createSampleConfig) {
// Lower case all keys in the config file
try {
- require('./common.js').objKeysToLower(config, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders', 'telegram/proxy']);
+ require('./common.js').objKeysToLower(config, ['ldapoptions', 'defaultuserwebstate', 'forceduserwebstate', 'httpheaders']);
} catch (ex) {
console.log('CRITICAL ERROR: Unable to access the file \"./common.js\".\r\nCheck folder & file permissions.');
process.exit();
@@ -4037,38 +3525,21 @@ function getConfig(createSampleConfig) {
}
// Check if a list of modules are present and install any missing ones
-function InstallModules(modules, args, func) {
- var missingModules = [];
+function InstallModules(modules, func) {
+ const missingModules = [];
if (modules.length > 0) {
const dependencies = require('./package.json').dependencies;
for (var i in modules) {
// Modules may contain a version tag (foobar@1.0.0), remove it so the module can be found using require
const moduleNameAndVersion = modules[i];
- const moduleInfo = moduleNameAndVersion.split('@', 3);
- var moduleName = null;
- var moduleVersion = null;
- if(moduleInfo.length == 1){ // normal package without version
- moduleName = moduleInfo[0];
- } else if (moduleInfo.length == 2) { // normal package with a version OR custom repo package with no version
- moduleName = moduleInfo[0] === '' ? moduleNameAndVersion : moduleInfo[0];
- moduleVersion = moduleInfo[0] === '' ? null : moduleInfo[1];
- } else if (moduleInfo.length == 3) { // custom repo package and package with a version
- moduleName = "@" + moduleInfo[1];
- moduleVersion = moduleInfo[2];
- }
+ const moduleInfo = moduleNameAndVersion.split('@', 2);
+ var moduleName = moduleInfo[0];
+ var moduleVersion = moduleInfo[1];
+ if (moduleName == '') { moduleName = moduleNameAndVersion; moduleVersion = null; } // If the module name starts with @, don't use @ as a version seperator.
try {
// Does the module need a specific version?
if (moduleVersion) {
- var versionMatch = false;
- var modulePath = null;
- // This is the first way to test if a module is already installed.
- try { versionMatch = (require(`${moduleName}/package.json`).version == moduleVersion) } catch (ex) {
- if (ex.code == "ERR_PACKAGE_PATH_NOT_EXPORTED") { modulePath = ("" + ex).split(' ').at(-1); } else { throw new Error(); }
- }
- // If the module is not installed, but we get the ERR_PACKAGE_PATH_NOT_EXPORTED error, try a second way.
- if ((versionMatch == false) && (modulePath != null)) {
- if (JSON.parse(require('fs').readFileSync(modulePath, 'utf8')).version != moduleVersion) { throw new Error(); }
- }
+ if (require(`${moduleName}/package.json`).version != moduleVersion) { throw new Error(); }
} else {
// For all other modules, do the check here.
// Is the module in package.json? Install exact version.
@@ -4076,39 +3547,32 @@ function InstallModules(modules, args, func) {
require(moduleName);
}
} catch (ex) {
- missingModules.push(moduleNameAndVersion);
+ if (previouslyInstalledModules[modules[i]] !== true) { missingModules.push(moduleNameAndVersion); }
}
}
-
- if (missingModules.length > 0) { if (args.debug) { console.log('Missing Modules: ' + missingModules.join(', ')); } InstallModuleEx(missingModules, args, func); } else { func(); }
+ if (missingModules.length > 0) { InstallModule(missingModules.shift(), InstallModules, modules, func); } else { func(); }
}
}
-// Install all missing modules at once. We will be running "npm install" once, with a full list of all modules we need, no matter if they area already installed or not,
-// this is to make sure NPM gives us exactly what we need. Also, we install the meshcentral with current version, so that NPM does not update it - which it will do if obmitted.
-function InstallModuleEx(modulenames, args, func) {
- var names = modulenames.join(' ');
- console.log('Installing modules', modulenames);
+// Check if a module is present and install it if missing
+function InstallModule(modulename, func, tag1, tag2) {
+ console.log('Installing ' + modulename + '...');
const child_process = require('child_process');
var parentpath = __dirname;
- function getCurrentVersion() { try { return JSON.parse(require('fs').readFileSync(require('path').join(__dirname, 'package.json'), 'utf8')).version; } catch (ex) { } return null; } // Fetch server version
- //const meshCentralVersion = getCurrentVersion();
- //if ((meshCentralVersion != null) && (args.dev == null)) { names = 'meshcentral@' + getCurrentVersion() + ' ' + names; }
// Get the working directory
if ((__dirname.endsWith('/node_modules/meshcentral')) || (__dirname.endsWith('\\node_modules\\meshcentral')) || (__dirname.endsWith('/node_modules/meshcentral/')) || (__dirname.endsWith('\\node_modules\\meshcentral\\'))) { parentpath = require('path').join(__dirname, '../..'); }
- if (args.debug) { console.log('NPM Command Line: ' + npmpath + ` install --save-exact --no-audit --omit=optional --no-fund ${names}`); }
- // always use --save-exact - https://stackoverflow.com/a/64507176/1210734
- child_process.exec(npmpath + ` install --save-exact --no-audit --no-optional --omit=optional ${names}`, { maxBuffer: 512000, timeout: 300000, cwd: parentpath }, function (error, stdout, stderr) {
+ child_process.exec(npmpath + ` install --no-optional ${modulename}`, { maxBuffer: 512000, timeout: 120000, cwd: parentpath }, function (error, stdout, stderr) {
if ((error != null) && (error != '')) {
var mcpath = __dirname;
if (mcpath.endsWith('\\node_modules\\meshcentral') || mcpath.endsWith('/node_modules/meshcentral')) { mcpath = require('path').join(mcpath, '..', '..'); }
- console.log('ERROR: Unable to install required modules. MeshCentral may not have access to npm, or npm may not have suffisent rights to load the new module. To manualy install this module try:\r\n\r\n cd "' + mcpath + '"\r\n npm install --no-audit --no-optional --omit=optional ' + names + '\r\n node node_modules' + ((require('os').platform() == 'win32') ? '\\' : '/') + 'meshcentral');
+ console.log('ERROR: Unable to install required module "' + modulename + '". MeshCentral may not have access to npm, or npm may not have suffisent rights to load the new module. To manualy install this module try:\r\n\r\n cd "' + mcpath + '"\r\n npm install ' + modulename + '\r\n node node_modules' + ((require('os').platform() == 'win32') ? '\\' : '/') + 'meshcentral');
process.exit();
return;
}
- func();
+ previouslyInstalledModules[modulename] = true;
+ func(tag1, tag2);
return;
});
}
@@ -4117,13 +3581,12 @@ function InstallModuleEx(modulenames, args, func) {
process.on('SIGINT', function () { if (meshserver != null) { meshserver.Stop(); meshserver = null; } console.log('Server Ctrl-C exit...'); process.exit(); });
// Add a server warning, warnings will be shown to the administrator on the web application
-// TODO: migrate to obj.addServerWarning?
const serverWarnings = [];
function addServerWarning(msg, id, args, print) { serverWarnings.push({ msg: msg, id: id, args: args }); if (print !== false) { console.log("WARNING: " + msg); } }
/*
var ServerWarnings = {
- 1: "",
+ 1: "MeshCentral SSH support requires NodeJS 11 or higher.",
2: "Missing WebDAV parameters.",
3: "Unrecognized configuration option \"{0}\".",
4: "WebSocket compression is disabled, this feature is broken in NodeJS v11.11 to v12.15 and v13.2",
@@ -4142,14 +3605,7 @@ var ServerWarnings = {
17: "SendGrid server has limited use in LAN mode.",
18: "SMTP server has limited use in LAN mode.",
19: "SMS gateway has limited use in LAN mode.",
- 20: "Invalid \"LoginCookieEncryptionKey\" in config.json.",
- 21: "Backup path can't be set within meshcentral-data folder, backup settings ignored.",
- 22: "Failed to sign agent {0}: {1}",
- 23: "Unable to load agent icon file: {0}.",
- 24: "Unable to load agent logo file: {0}.",
- 25: "This NodeJS version does not support OpenID.",
- 26: "This NodeJS version does not support Discord.js.",
- 27: "Firebase now requires a service account JSON file, Firebase disabled."
+ 20: "Invalid \"LoginCookieEncryptionKey\" in config.json."
};
*/
@@ -4159,14 +3615,14 @@ var meshserver = null;
var childProcess = null;
var previouslyInstalledModules = {};
function mainStart() {
- // Check the NodeJS is version 16 or better.
- if (Number(process.version.match(/^v(\d+\.\d+)/)[1]) < 16) { console.log("MeshCentral requires Node v16 or above, current version is " + process.version + "."); return; }
+ // Check the NodeJS is version 10 or better.
+ if (Number(process.version.match(/^v(\d+\.\d+)/)[1]) < 10) { console.log("MeshCentral requires Node v10 or above, current version is " + process.version + "."); return; }
// If running within the node_modules folder, move working directory to the parent of the node_modules folder.
if (__dirname.endsWith('\\node_modules\\meshcentral') || __dirname.endsWith('/node_modules/meshcentral')) { process.chdir(require('path').join(__dirname, '..', '..')); }
// Check for any missing modules.
- InstallModules(['minimist'], {}, function () {
+ InstallModules(['minimist'], function () {
// Parse inbound arguments
const args = require('minimist')(process.argv.slice(2));
@@ -4203,7 +3659,7 @@ function mainStart() {
// Check if Windows SSPI, LDAP, Passport and YubiKey OTP will be used
var sspi = false;
var ldap = false;
- var passport = [];
+ var passport = null;
var allsspi = true;
var yubikey = false;
var ssh = false;
@@ -4212,82 +3668,61 @@ function mainStart() {
var wildleek = false;
var nodemailer = false;
var sendgrid = false;
- var captcha = false;
if (require('os').platform() == 'win32') { for (var i in config.domains) { domainCount++; if (config.domains[i].auth == 'sspi') { sspi = true; } else { allsspi = false; } } } else { allsspi = false; }
if (domainCount == 0) { allsspi = false; }
for (var i in config.domains) {
if (i.startsWith('_')) continue;
- if (((config.domains[i].smtp != null) && (config.domains[i].smtp.name != 'console')) || (config.domains[i].sendmail != null)) { nodemailer = true; }
+ if ((config.domains[i].smtp != null) || (config.domains[i].sendmail != null)) { nodemailer = true; }
if (config.domains[i].sendgrid != null) { sendgrid = true; }
if (config.domains[i].yubikey != null) { yubikey = true; }
if (config.domains[i].auth == 'ldap') { ldap = true; }
if (mstsc == false) { config.domains[i].mstsc = false; }
- if (config.domains[i].ssh == true) { ssh = true; }
+ if (config.domains[i].ssh == true) { if (nodeVersion < 11) { config.domains[i].ssh = false; } ssh = true; }
if ((typeof config.domains[i].authstrategies == 'object')) {
- if (passport.indexOf('passport') == -1) { passport.push('passport','connect-flash'); } // Passport v0.6.0 requires a patch, see https://github.com/jaredhanson/passport/issues/904 and include connect-flash here to display errors
+ if (passport == null) { passport = ['passport@0.5.3']; } // Passport v0.6.0 is broken with cookie-session, see https://github.com/jaredhanson/passport/issues/904
if ((typeof config.domains[i].authstrategies.twitter == 'object') && (typeof config.domains[i].authstrategies.twitter.clientid == 'string') && (typeof config.domains[i].authstrategies.twitter.clientsecret == 'string') && (passport.indexOf('passport-twitter') == -1)) { passport.push('passport-twitter'); }
if ((typeof config.domains[i].authstrategies.google == 'object') && (typeof config.domains[i].authstrategies.google.clientid == 'string') && (typeof config.domains[i].authstrategies.google.clientsecret == 'string') && (passport.indexOf('passport-google-oauth20') == -1)) { passport.push('passport-google-oauth20'); }
if ((typeof config.domains[i].authstrategies.github == 'object') && (typeof config.domains[i].authstrategies.github.clientid == 'string') && (typeof config.domains[i].authstrategies.github.clientsecret == 'string') && (passport.indexOf('passport-github2') == -1)) { passport.push('passport-github2'); }
+ if ((typeof config.domains[i].authstrategies.reddit == 'object') && (typeof config.domains[i].authstrategies.reddit.clientid == 'string') && (typeof config.domains[i].authstrategies.reddit.clientsecret == 'string') && (passport.indexOf('passport-reddit') == -1)) { passport.push('passport-reddit'); }
if ((typeof config.domains[i].authstrategies.azure == 'object') && (typeof config.domains[i].authstrategies.azure.clientid == 'string') && (typeof config.domains[i].authstrategies.azure.clientsecret == 'string') && (typeof config.domains[i].authstrategies.azure.tenantid == 'string') && (passport.indexOf('passport-azure-oauth2') == -1)) { passport.push('passport-azure-oauth2'); passport.push('jwt-simple'); }
- if ((typeof config.domains[i].authstrategies.oidc == 'object') && (passport.indexOf('openid-client@5.7.1') == -1)) {
- if ((nodeVersion >= 17)
- || ((Math.floor(nodeVersion) == 16) && (nodeVersion >= 16.13))
- || ((Math.floor(nodeVersion) == 14) && (nodeVersion >= 14.15))
- || ((Math.floor(nodeVersion) == 12) && (nodeVersion >= 12.19))) {
- passport.push('openid-client@5.7.1');
- } else {
- addServerWarning('This NodeJS version does not support OpenID Connect on MeshCentral.', 25);
- delete config.domains[i].authstrategies.oidc;
- }
- }
+ if ((typeof config.domains[i].authstrategies.oidc == 'object') && (typeof config.domains[i].authstrategies.oidc.clientid == 'string') && (typeof config.domains[i].authstrategies.oidc.clientsecret == 'string') && (passport.indexOf('@mstrhakr/passport-generic-oidc') == -1)) { passport.push('@mstrhakr/passport-generic-oidc'); }
if ((typeof config.domains[i].authstrategies.saml == 'object') || (typeof config.domains[i].authstrategies.jumpcloud == 'object')) { passport.push('passport-saml'); }
}
if (config.domains[i].sessionrecording != null) { sessionRecording = true; }
if ((config.domains[i].passwordrequirements != null) && (config.domains[i].passwordrequirements.bancommonpasswords == true)) { wildleek = true; }
- if ((config.domains[i].newaccountscaptcha != null) && (config.domains[i].newaccountscaptcha !== false)) { captcha = true; }
- if ((typeof config.domains[i].duo2factor == 'object') && (passport.indexOf('@duosecurity/duo_universal') == -1)) { passport.push('@duosecurity/duo_universal'); }
}
// Build the list of required modules
- // NOTE: ALL MODULES MUST HAVE A VERSION NUMBER AND THE VERSION MUST MATCH THAT USED IN Dockerfile
- var modules = ['archiver@7.0.1', 'body-parser@1.20.3', 'cbor@5.2.0', 'compression@1.7.5', 'cookie-session@2.1.0', 'express@4.21.2', 'express-handlebars@7.1.3', 'express-ws@5.0.2', 'ipcheck@0.1.0', 'minimist@1.2.8', 'multiparty@4.2.3', '@seald-io/nedb', 'node-forge@1.3.1', 'ua-parser-js@1.0.39', 'ws@8.18.0', 'yauzl@2.10.0'];
- if (require('os').platform() == 'win32') { modules.push('node-windows@0.1.14'); modules.push('loadavg-windows@1.1.1'); if (sspi == true) { modules.push('node-sspi@0.2.10'); } } // Add Windows modules
- if (ldap == true) { modules.push('ldapauth-fork@5.0.5'); }
- if (ssh == true) { modules.push('ssh2@1.16.0'); }
+ var modules = ['ws@5.2.3', 'cbor@5.2.0', '@yetzt/nedb', 'https', 'yauzl', 'ipcheck', 'express', 'archiver@5.3.1', 'multiparty', 'node-forge', 'express-ws@4.0.0', 'compression', 'body-parser', 'cookie-session@1.4.0', 'express-handlebars'];
+ if (require('os').platform() == 'win32') { modules.push('node-windows@0.1.4'); modules.push('loadavg-windows'); if (sspi == true) { modules.push('node-sspi'); } } // Add Windows modules
+ if (ldap == true) { modules.push('ldapauth-fork'); }
+ if (ssh == true) { if (nodeVersion < 11) { addServerWarning('MeshCentral SSH support requires NodeJS 11 or higher.', 1); } else { modules.push('ssh2'); } }
if (passport != null) { modules.push(...passport); }
- if (captcha == true) { modules.push('svg-captcha@1.4.0'); }
-
- if (sessionRecording == true) { modules.push('image-size@1.1.1'); } // Need to get the remote desktop JPEG sizes to index the recodring file.
- if (config.letsencrypt != null) { modules.push('acme-client@4.2.5'); } // Add acme-client module. We need to force v4.2.4 or higher since olver versions using SHA-1 which is no longer supported by Let's Encrypt.
+ if (sessionRecording == true) { modules.push('image-size'); } // Need to get the remote desktop JPEG sizes to index the recodring file.
+ if (config.letsencrypt != null) { modules.push('acme-client'); } // Add acme-client module
if (config.settings.mqtt != null) { modules.push('aedes@0.39.0'); } // Add MQTT Modules
- if (config.settings.mysql != null) { modules.push('mysql2@3.11.4'); } // Add MySQL.
- //if (config.settings.mysql != null) { modules.push('@mysql/xdevapi@8.0.33'); } // Add MySQL, official driver (https://dev.mysql.com/doc/dev/connector-nodejs/8.0/)
- if (config.settings.mongodb != null) { modules.push('mongodb@4.13.0'); modules.push('saslprep@1.0.3'); } // Add MongoDB, official driver.
- if (config.settings.postgres != null) { modules.push('pg@8.13.1') } // Add Postgres, official driver.
- if (config.settings.mariadb != null) { modules.push('mariadb@3.4.0'); } // Add MariaDB, official driver.
- if (config.settings.acebase != null) { modules.push('acebase@1.29.5'); } // Add AceBase, official driver.
- if (config.settings.sqlite3 != null) { modules.push('sqlite3@5.1.7'); } // Add sqlite3, official driver.
- if (config.settings.vault != null) { modules.push('node-vault@0.10.2'); } // Add official HashiCorp's Vault module.
- if (config.settings.plugins != null) { modules.push('semver@7.5.4'); } // Required for version compat testing and update checks
- if ((config.settings.plugins != null) && (config.settings.plugins.proxy != null)) { modules.push('https-proxy-agent@7.0.2'); } // Required for HTTP/HTTPS proxy support
- else if (config.settings.xmongodb != null) { modules.push('mongojs@3.1.0'); } // Add MongoJS, old driver.
- if (nodemailer || ((config.smtp != null) && (config.smtp.name != 'console')) || (config.sendmail != null)) { modules.push('nodemailer@6.9.16'); } // Add SMTP support
+ if (config.settings.mysql != null) { modules.push('mysql'); } // Add MySQL.
+ //if (config.settings.mysql != null) { modules.push('@mysql/xdevapi'); } // Add MySQL, official driver (https://dev.mysql.com/doc/dev/connector-nodejs/8.0/)
+ if (config.settings.mongodb != null) { modules.push('mongodb@4.1.0'); modules.push('saslprep'); } // Add MongoDB, official driver.
+ if (config.settings.postgres != null) { modules.push('pg@8.7.1'); modules.push('pgtools@0.3.2'); } // Add Postgres, Postgres driver.
+ if (config.settings.mariadb != null) { modules.push('mariadb'); } // Add MariaDB, official driver.
+ if (config.settings.vault != null) { modules.push('node-vault'); } // Add official HashiCorp's Vault module.
+ if (config.settings.plugins != null) { modules.push('semver'); } // Required for version compat testing and update checks
+ if ((config.settings.plugins != null) && (config.settings.plugins.proxy != null)) { modules.push('https-proxy-agent'); } // Required for HTTP/HTTPS proxy support
+ else if (config.settings.xmongodb != null) { modules.push('mongojs'); } // Add MongoJS, old driver.
+ if (nodemailer || (config.smtp != null) || (config.sendmail != null)) { modules.push('nodemailer'); } // Add SMTP support
if (sendgrid || (config.sendgrid != null)) { modules.push('@sendgrid/mail'); } // Add SendGrid support
- if ((args.translate || args.dev) && (Number(process.version.match(/^v(\d+\.\d+)/)[1]) >= 16)) { modules.push('jsdom@22.1.0'); modules.push('esprima@4.0.1'); modules.push('html-minifier@4.0.0'); } // Translation support
- if (typeof config.settings.crowdsec == 'object') { modules.push('@crowdsec/express-bouncer@0.1.0'); } // Add CrowdSec bounser module (https://www.npmjs.com/package/@crowdsec/express-bouncer)
- if (config.settings.prometheus != null) { modules.push('prom-client'); } // Add Prometheus Metrics support
+ if (args.translate) { modules.push('jsdom'); modules.push('esprima'); modules.push('minify-js'); modules.push('html-minifier'); } // Translation support
- if (typeof config.settings.autobackup == 'object') {
- // Setup encrypted zip support if needed
- if (config.settings.autobackup.zippassword) { modules.push('archiver-zip-encrypted@2.0.0'); }
+ // Setup encrypted zip support if needed
+ if (config.settings.autobackup && config.settings.autobackup.zippassword) {
+ modules.push('archiver-zip-encrypted');
// Enable Google Drive Support
- if (typeof config.settings.autobackup.googledrive == 'object') { modules.push('googleapis@128.0.0'); }
+ if (typeof config.settings.autobackup.googledrive == 'object') { modules.push('googleapis'); }
// Enable WebDAV Support
if (typeof config.settings.autobackup.webdav == 'object') {
- if ((typeof config.settings.autobackup.webdav.url != 'string') || (typeof config.settings.autobackup.webdav.username != 'string') || (typeof config.settings.autobackup.webdav.password != 'string')) { addServerWarning("Missing WebDAV parameters.", 2, null, !args.launch); } else { modules.push('webdav@4.11.4'); }
+ if ((typeof config.settings.autobackup.webdav.url != 'string') || (typeof config.settings.autobackup.webdav.username != 'string') || (typeof config.settings.autobackup.webdav.password != 'string')) { addServerWarning("Missing WebDAV parameters.", 2, null, !args.launch); } else { modules.push('webdav'); }
}
- // Enable S3 Support
- if (typeof config.settings.autobackup.s3 == 'object') { modules.push('minio@8.0.2'); }
}
// Setup common password blocking
@@ -4296,45 +3731,34 @@ function mainStart() {
// Setup 2nd factor authentication
if (config.settings.no2factorauth !== true) {
// Setup YubiKey OTP if configured
- if (yubikey == true) { modules.push('yubikeyotp@0.2.0'); } // Add YubiKey OTP support
+ if (yubikey == true) { modules.push('yubikeyotp'); } // Add YubiKey OTP support
if (allsspi == false) { modules.push('otplib@10.2.3'); } // Google Authenticator support (v10 supports older NodeJS versions).
}
// Desktop multiplexor support
- if (config.settings.desktopmultiplex === true) { modules.push('image-size@1.1.1'); }
+ if (config.settings.desktopmultiplex === true) { modules.push('image-size'); }
// SMS support
- if (config.sms != null) {
- if (config.sms.provider == 'twilio') { modules.push('twilio@4.19.0'); }
- if (config.sms.provider == 'plivo') { modules.push('plivo@4.58.0'); }
- if (config.sms.provider == 'telnyx') { modules.push('telnyx@1.25.5'); }
- }
-
- // Messaging support
- if (config.messaging != null) {
- if (config.messaging.telegram != null) { modules.push('telegram@2.19.8'); modules.push('input@1.0.1'); }
- if (config.messaging.discord != null) { if (nodeVersion >= 17) { modules.push('discord.js@14.6.0'); } else { delete config.messaging.discord; addServerWarning('This NodeJS version does not support Discord.js.', 26); } }
- if (config.messaging.xmpp != null) { modules.push('@xmpp/client@0.13.1'); }
- if (config.messaging.pushover != null) { modules.push('node-pushover@1.0.0'); }
- if (config.messaging.zulip != null) { modules.push('zulip@0.1.0'); }
- }
+ if ((config.sms != null) && (config.sms.provider == 'twilio')) { modules.push('twilio'); }
+ if ((config.sms != null) && (config.sms.provider == 'plivo')) { modules.push('plivo'); }
+ if ((config.sms != null) && (config.sms.provider == 'telnyx')) { modules.push('telnyx'); }
// Setup web based push notifications
- if ((typeof config.settings.webpush == 'object') && (typeof config.settings.webpush.email == 'string')) { modules.push('web-push@3.6.6'); }
+ if ((typeof config.settings.webpush == 'object') && (typeof config.settings.webpush.email == 'string')) { modules.push('web-push'); }
// Firebase Support
- if ((config.firebase != null) && (typeof config.firebase.serviceaccountfile == 'string')) { modules.push('firebase-admin@12.7.0'); }
+ if (config.firebase != null) { modules.push('node-xcs'); }
// Syslog support
- if ((require('os').platform() != 'win32') && (config.settings.syslog || config.settings.syslogjson)) { modules.push('modern-syslog@1.2.0'); }
- if (config.settings.syslogtcp) { modules.push('syslog@0.1.1-1'); }
+ if ((require('os').platform() != 'win32') && (config.settings.syslog || config.settings.syslogjson)) { modules.push('modern-syslog'); }
+ if (config.settings.syslogtcp) { modules.push('syslog'); }
// Setup heapdump support if needed, useful for memory leak debugging
// https://www.arbazsiddiqui.me/a-practical-guide-to-memory-leaks-in-nodejs/
- if (config.settings.heapdump === true) { modules.push('heapdump@0.3.15'); }
+ if (config.settings.heapdump === true) { modules.push('heapdump'); }
// Install any missing modules and launch the server
- InstallModules(modules, args, function () {
+ InstallModules(modules, function () {
if (require('os').platform() == 'win32') { try { require('node-windows'); } catch (ex) { console.log("Module node-windows can't be loaded. Restart MeshCentral."); process.exit(); return; } }
meshserver = CreateMeshCentralServer(config, args);
meshserver.Start();
diff --git a/meshctrl.js b/meshctrl.js
index af4f1626..5f068888 100644
--- a/meshctrl.js
+++ b/meshctrl.js
@@ -16,7 +16,7 @@ var settings = {};
const crypto = require('crypto');
const args = require('minimist')(process.argv.slice(2));
const path = require('path');
-const possibleCommands = ['edituser', 'listusers', 'listusersessions', 'listdevicegroups', 'listdevices', 'listusersofdevicegroup', 'listevents', 'logintokens', 'serverinfo', 'userinfo', 'adduser', 'removeuser', 'adddevicegroup', 'removedevicegroup', 'editdevicegroup', 'broadcast', 'showevents', 'addusertodevicegroup', 'removeuserfromdevicegroup', 'addusertodevice', 'removeuserfromdevice', 'sendinviteemail', 'generateinvitelink', 'config', 'movetodevicegroup', 'deviceinfo', 'removedevice', 'editdevice', 'addlocaldevice', 'addamtdevice', 'addusergroup', 'listusergroups', 'removeusergroup', 'runcommand', 'shell', 'upload', 'download', 'deviceopenurl', 'devicemessage', 'devicetoast', 'addtousergroup', 'removefromusergroup', 'removeallusersfromusergroup', 'devicesharing', 'devicepower', 'indexagenterrorlog', 'agentdownload', 'report', 'grouptoast', 'groupmessage', 'webrelay'];
+const possibleCommands = ['edituser', 'listusers', 'listusersessions', 'listdevicegroups', 'listdevices', 'listusersofdevicegroup', 'listevents', 'logintokens', 'serverinfo', 'userinfo', 'adduser', 'removeuser', 'adddevicegroup', 'removedevicegroup', 'editdevicegroup', 'broadcast', 'showevents', 'addusertodevicegroup', 'removeuserfromdevicegroup', 'addusertodevice', 'removeuserfromdevice', 'sendinviteemail', 'generateinvitelink', 'config', 'movetodevicegroup', 'deviceinfo', 'editdevice', 'addusergroup', 'listusergroups', 'removeusergroup', 'runcommand', 'shell', 'upload', 'download', 'deviceopenurl', 'devicemessage', 'devicetoast', 'addtousergroup', 'removefromusergroup', 'removeallusersfromusergroup', 'devicesharing', 'devicepower', 'indexagenterrorlog', 'agentdownload'];
if (args.proxy != null) { try { require('https-proxy-agent'); } catch (ex) { console.log('Missing module "https-proxy-agent", type "npm install https-proxy-agent" to install it.'); return; } }
if (args['_'].length == 0) {
@@ -36,10 +36,7 @@ if (args['_'].length == 0) {
console.log(" ListEvents - List server events.");
console.log(" LoginTokens - List, create and remove login tokens.");
console.log(" DeviceInfo - Show information about a device.");
- console.log(" AddLocalDevice - Add a local device.");
- console.log(" AddAmtDevice - Add a AMT device.");
console.log(" EditDevice - Make changes to a device.");
- console.log(" RemoveDevice - Delete a device.");
console.log(" Config - Perform operation on config.json file.");
console.log(" AddUser - Create a new user account.");
console.log(" EditUser - Change a user account.");
@@ -65,21 +62,17 @@ if (args['_'].length == 0) {
console.log(" Shell - Access command shell of a remote device.");
console.log(" Upload - Upload a file to a remote device.");
console.log(" Download - Download a file from a remote device.");
- console.log(" WebRelay - Creates a HTTP/HTTPS webrelay link for a remote device.");
console.log(" DeviceOpenUrl - Open a URL on a remote device.");
console.log(" DeviceMessage - Open a message box on a remote device.");
console.log(" DeviceToast - Display a toast notification on a remote device.");
- console.log(" GroupMessage - Open a message box on remote devices in a specific device group.");
- console.log(" GroupToast - Display a toast notification on remote devices in a specific device group.");
console.log(" DevicePower - Perform wake/sleep/reset/off operations on remote devices.");
console.log(" DeviceSharing - View, add and remove sharing links for a given device.");
console.log(" AgentDownload - Download an agent of a specific type for a device group.");
- console.log(" Report - Create and show a CSV report.");
console.log("\r\nSupported login arguments:");
console.log(" --url [wss://server] - Server url, wss://localhost:443 is default.");
console.log(" - Use wss://localhost:443?key=xxx if login key is required.");
console.log(" --loginuser [username] - Login username, admin is default.");
- console.log(" --loginpass [password] - Login password OR Leave blank to enter password at prompt");
+ console.log(" --loginpass [password] - Login password.");
console.log(" --token [number] - 2nd factor authentication token.");
console.log(" --loginkey [hex] - Server login key in hex.");
console.log(" --loginkeyfile [file] - File containing server login key in hex.");
@@ -104,30 +97,21 @@ if (args['_'].length == 0) {
case 'listdevices': { ok = true; break; }
case 'listevents': { ok = true; break; }
case 'logintokens': { ok = true; break; }
- case 'listusersofdevicegroup':
- case 'deviceinfo':
- case 'removedevice':
+ case 'listusersofdevicegroup': {
+ if (args.id == null) { console.log(winRemoveSingleQuotes("Missing group id, use --id '[groupid]'")); }
+ else { ok = true; }
+ break;
+ }
+ case 'deviceinfo': {
+ if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
+ else { ok = true; }
+ break;
+ }
case 'editdevice': {
if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
else { ok = true; }
break;
}
- case 'addlocaldevice': {
- if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
- else if (args.devicename == null) { console.log(winRemoveSingleQuotes("Missing devicename, use --devicename [devicename]")); }
- else if (args.hostname == null) { console.log(winRemoveSingleQuotes("Missing hostname, use --hostname [hostname]")); }
- else { ok = true; }
- break;
- }
- case 'addamtdevice': {
- if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
- else if (args.devicename == null) { console.log(winRemoveSingleQuotes("Missing devicename, use --devicename [devicename]")); }
- else if (args.hostname == null) { console.log(winRemoveSingleQuotes("Missing hostname, use --hostname [hostname]")); }
- else if (args.user == null) { console.log(winRemoveSingleQuotes("Missing user, use --user [user]")); }
- else if (args.pass == null) { console.log(winRemoveSingleQuotes("Missing pass, use --pass [pass]")); }
- else { ok = true; }
- break;
- }
case 'addusertodevicegroup': {
if ((args.id == null) && (args.group == null)) { console.log(winRemoveSingleQuotes("Device group identifier missing, use --id '[groupid]' or --group [groupname]")); }
else if (args.userid == null) { console.log("Add user to group missing useid, use --userid [userid]"); }
@@ -224,7 +208,7 @@ if (args['_'].length == 0) {
case 'sendinviteemail': {
if ((args.id == null) && (args.group == null)) { console.log("Device group identifier missing, use --id '[groupid]' or --group [groupname]"); }
else if (args.email == null) { console.log("Device email is missing, use --email [email]"); }
- else { ok = true; }
+ else { ok = true; }
break;
}
case 'generateinvitelink': {
@@ -257,9 +241,10 @@ if (args['_'].length == 0) {
}
case 'agentdownload': {
if (args.type == null) { console.log(winRemoveSingleQuotes("Missing device type, use --type [agenttype]")); }
- else if ((parseInt(args.type) == null) || isNaN(parseInt(args.type)) || (parseInt(args.type) < 1) || (parseInt(args.type) > 11000)) { console.log(winRemoveSingleQuotes("Invalid agent type, must be a number.")); }
- else if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[meshid]'")); }
- else if ((typeof args.id != 'string') || (args.id.length != 64)) { console.log(winRemoveSingleQuotes("Invalid meshid.")); }
+ var at = parseInt(args.type);
+ if ((at == null) || isNaN(at) || (at < 1) || (at > 11000)) { console.log(winRemoveSingleQuotes("Invalid agent type, must be a number.")); }
+ if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[meshid]'")); }
+ if ((typeof args.id != 'string') || (args.id.length != 64)) { console.log(winRemoveSingleQuotes("Invalid meshid.")); }
else { ok = true; }
break;
}
@@ -278,12 +263,6 @@ if (args['_'].length == 0) {
else { ok = true; }
break;
}
- case 'webrelay': {
- if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
- else if (args.type == null) { console.log(winRemoveSingleQuotes("Missing protocol type, use --type [http,https]")); }
- else { ok = true; }
- break;
- }
case 'deviceopenurl': {
if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device id, use --id '[deviceid]'")); }
else if (args.openurl == null) { console.log("Remote URL, use --openurl [url] specify the link to open."); }
@@ -302,23 +281,6 @@ if (args['_'].length == 0) {
else { ok = true; }
break;
}
- case 'groupmessage': {
- if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device group id, use --id '[devicegroupid]'")); }
- else if (args.msg == null) { console.log("Remote message, use --msg \"[message]\" specify a remote message."); }
- else { ok = true; }
- break;
- }
- case 'grouptoast': {
- if (args.id == null) { console.log(winRemoveSingleQuotes("Missing device group id, use --id '[devicegroupid]'")); }
- else if (args.msg == null) { console.log("Remote message, use --msg \"[message]\" specify a remote message."); }
- else { ok = true; }
- break;
- }
- case 'report': {
- if (args.type == null) { console.log(winRemoveSingleQuotes("Missing report type, use --type '[reporttype]'")); }
- else { ok = true; }
- break;
- }
case 'help': {
if (args['_'].length < 2) {
console.log("Get help on an action. Type:\r\n\r\n help [action]\r\n\r\nPossible actions are: " + possibleCommands.join(', ') + '.');
@@ -342,7 +304,7 @@ if (args['_'].length == 0) {
console.log(" --email [email] - Email address.");
console.log("\r\nOptional arguments:\r\n");
console.log(" --name (name) - Name of recipient to be included in the email.");
- console.log(" --message (msg) - Message to be included in the email.");
+ console.log(" --message (msg) - Message to be included in the email.");
break;
}
case 'generateinvitelink': {
@@ -356,7 +318,7 @@ if (args['_'].length == 0) {
console.log(" --id '[groupid]' - Device group identifier (or --group).");
}
console.log(" --group [groupname] - Device group name (or --id).");
- console.log(" --hours [hours] - Validity period in hours or 0 for infinite.");
+ console.log(" --hours [hours] - Validity period in hours or 0 for infinit.");
console.log("\r\nOptional arguments:\r\n");
console.log(" --flags [mode] - Mode flag for link type (0 = both, 1 = interactive only, 2 = background only)");
break;
@@ -436,7 +398,7 @@ if (args['_'].length == 0) {
console.log(" --group [groupname] - Filter by group name (or --id).");
console.log(" --count - Only return the device count.");
console.log(" --json - Show result as JSON.");
- console.log(" --csv - Show result as comma separated values.");
+ console.log(" --csv - Show result as comma seperated values.");
console.log(" --filter \"[filter]\" - Filter devices using a filter string.");
console.log(" \"x\" - Devices with \"x\" in the name.");
console.log(" \"user:x or u:x\" - Devices with \"x\" in the name of currently logged in user.");
@@ -507,8 +469,8 @@ if (args['_'].length == 0) {
console.log(" --resetpass - Request password reset on next login.");
console.log(" --realname [name] - Set the real name for this account.");
console.log(" --phone [number] - Set the account phone number.");
- console.log(" --rights [none|full|a,b,c] - Comma separated list of server permissions. Possible values:");
- console.log(" manageusers,serverbackup,serverrestore,serverupdate,fileaccess,locked,nonewgroups,notools,usergroups,recordings,locksettings,allevents,nonewdevices");
+ console.log(" --rights [none|full|a,b,c] - Comma seperated list of server permissions. Possible values:");
+ console.log(" manageusers,backup,restore,update,fileaccess,locked,nonewgroups,notools,usergroups,recordings,locksettings,allevents");
break;
}
case 'edituser': {
@@ -524,8 +486,8 @@ if (args['_'].length == 0) {
console.log(" --resetpass - Request password reset on next login.");
console.log(" --realname [name] - Set the real name for this account.");
console.log(" --phone [number] - Set the account phone number.");
- console.log(" --rights [none|full|a,b,c] - Comma separated list of server permissions. Possible values:");
- console.log(" manageusers,serverbackup,serverrestore,serverupdate,fileaccess,locked,nonewgroups,notools,usergroups,recordings,locksettings,allevents,nonewdevices");
+ console.log(" --rights [none|full|a,b,c] - Comma seperated list of server permissions. Possible values:");
+ console.log(" manageusers,backup,restore,update,fileaccess,locked,nonewgroups,notools,usergroups,recordings,locksettings,allevents");
break;
}
case 'removeuser': {
@@ -617,7 +579,6 @@ if (args['_'].length == 0) {
console.log("\r\nOptional arguments:\r\n");
console.log(" --desc [description] - New group description.");
console.log(" --amtonly - New group is agent-less, Intel AMT only.");
- console.log(" --agentless - New group is agent-less only.");
console.log(" --features [number] - Set device group features, sum of numbers below.");
console.log(" 1 = Auto-Remove 2 = Hostname Sync");
console.log(" 4 = Record Sessions");
@@ -666,7 +627,7 @@ if (args['_'].length == 0) {
console.log(" 16 = Terminal prompt for user consent.");
console.log(" 32 = Files prompt for user consent.");
console.log(" 64 = Desktop show connection toolbar.");
- console.log(" --invitecodes [aa,bb] - Comma separated list of invite codes, blank to clear.");
+ console.log(" --invitecodes [aa,bb] - Comma seperated list of invite codes, blank to clear.");
console.log(" --backgroundonly - When used with invitecodes, set agent to only install in background.");
console.log(" --interactiveonly - When used with invitecodes, set agent to only run on demand.");
break;
@@ -784,7 +745,7 @@ if (args['_'].length == 0) {
console.log("\r\nRequired arguments:\r\n");
console.log(" --msg [message] - Message to display.");
console.log("\r\nOptional arguments:\r\n");
- console.log(" --user [userid] - Send the message to the specified user.");
+ console.log(" --user [userid] - Send the message to the speficied user.");
break;
}
case 'deviceinfo': {
@@ -802,66 +763,6 @@ if (args['_'].length == 0) {
console.log(" --json - Give results in JSON format.");
break;
}
- case 'removedevice': {
- console.log("Delete a device, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl RemoveDevice --id 'deviceid'"));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [deviceid] - The device identifier.");
- } else {
- console.log(" --id '[deviceid]' - The device identifier.");
- }
- break;
- }
- case 'addlocaldevice': {
- console.log("Add a Local Device, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl AddLocalDevice --id 'meshid' --devicename 'devicename' --hostname 'hostname'"));
- console.log(winRemoveSingleQuotes(" MeshCtrl AddLocalDevice --id 'meshid' --devicename 'devicename' --hostname 'hostname' --type 6"));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [meshid] - The mesh identifier.");
- console.log(" --devicename [devicename] - The device name.");
- console.log(" --hostname [hostname] - The devices hostname or ip address.");
- } else {
- console.log(" --id '[meshid]' - The mesh identifier.");
- console.log(" --devicename '[devicename]' - The device name.");
- console.log(" --hostname '[hostname]' - The devices hostname or ip address.");
- }
-
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --type [TypeNumber] - With the following choices:");
- console.log(" type 4 - Default, Windows (RDP)");
- console.log(" type 6 - Linux (SSH/SCP/VNC)");
- console.log(" type 29 - macOS (SSH/SCP/VNC)");
- break;
- }
- case 'addamtdevice': {
- console.log("Add an Intel AMT Device, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl AddAmtDevice --id 'meshid' --devicename 'devicename' --hostname 'hostname --user 'admin' --pass 'admin'"));
- console.log(winRemoveSingleQuotes(" MeshCtrl AddAmtDevice --id 'meshid' --devicename 'devicename' --hostname 'hostname --user 'admin' --pass 'admin' --notls"));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [meshid] - The mesh identifier.");
- console.log(" --devicename [devicename] - The device name.");
- console.log(" --hostname [hostname] - The devices hostname or ip address.");
- console.log(" --user [user] - The devices AMT username.");
- console.log(" --pass [pass] - The devices AMT password.");
- console.log("")
- } else {
- console.log(" --id '[meshid]' - The mesh identifier.");
- console.log(" --devicename '[devicename]' - The device name.");
- console.log(" --hostname '[hostname]' - The devices hostname or ip address.");
- console.log(" --user '[user]' - The devices AMT username.");
- console.log(" --pass '[pass]' - The devices AMT password.");
- }
- console.log("\r\nOptional arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --notls - Use No TLS Security.");
- } else {
- console.log(" --notls - Use No TLS Security.");
- }
- break;
- }
case 'editdevice': {
console.log("Change information about a device, Example usages:\r\n");
console.log(winRemoveSingleQuotes(" MeshCtrl EditDevice --id 'deviceid' --name 'device1'"));
@@ -893,7 +794,6 @@ if (args['_'].length == 0) {
console.log("Run a shell command on a remote device, Example usages:\r\n");
console.log(winRemoveSingleQuotes(" MeshCtrl RunCommand --id 'deviceid' --run \"command\""));
console.log(winRemoveSingleQuotes(" MeshCtrl RunCommand --id 'deviceid' --run \"command\" --powershell"));
- console.log(winRemoveSingleQuotes(" MeshCtrl RunCommand --id 'deviceid' --run \"command\" --reply"));
console.log("\r\nRequired arguments:\r\n");
if (process.platform == 'win32') {
console.log(" --id [deviceid] - The device identifier.");
@@ -905,7 +805,6 @@ if (args['_'].length == 0) {
console.log(" --powershell - Run in Windows PowerShell.");
console.log(" --runasuser - Attempt to run the command as logged in user.");
console.log(" --runasuseronly - Only run the command as the logged in user.");
- console.log(" --reply - Return with the output from running the command.");
break;
}
case 'shell': {
@@ -954,7 +853,6 @@ if (args['_'].length == 0) {
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceSharing --id 'deviceid' --add Guest --start " + localISOTime + " --duration 30"));
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceSharing --id 'deviceid' --add Guest --start " + localISOTime + " --duration 30 --daily"));
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceSharing --id 'deviceid' --add Guest --type desktop,terminal --consent prompt"));
- console.log(winRemoveSingleQuotes(" MeshCtrl DeviceSharing --id 'deviceid' --add Guest --type http --port 80"));
console.log("\r\nRequired arguments:\r\n");
if (process.platform == 'win32') {
console.log(" --id [deviceid] - The device identifier.");
@@ -962,23 +860,21 @@ if (args['_'].length == 0) {
console.log(" --id '[deviceid]' - The device identifier.");
}
console.log("\r\nOptional arguments:\r\n");
- console.log(" --remove [shareid] - Remove a device sharing link.");
- console.log(" --add [guestname] - Add a device sharing link.");
- console.log(" --type [desktop,terminal,files,http,https] - Type of sharing to add, can be combined. default is desktop.");
- console.log(" --viewonly - Make desktop sharing view only.");
- console.log(" --consent [notify,prompt,none] - Consent flags, default is notify.");
- console.log(" --start [yyyy-mm-ddThh:mm:ss] - Start time, default is now.");
- console.log(" --end [yyyy-mm-ddThh:mm:ss] - End time.");
- console.log(" --duration [minutes] - Duration of the share, default is 60 minutes.");
- console.log(" --daily - Add recurring daily device share.");
- console.log(" --weekly - Add recurring weekly device share.");
- console.log(" --port [portnumber] - Set alternative port for http or https, default is 80 for http and 443 for https.");
+ console.log(" --remove [shareid] - Remove a device sharing link.");
+ console.log(" --add [guestname] - Add a device sharing link.");
+ console.log(" --type [desktop,terminal,files] - Type of sharing to add, can be combined. default is desktop.");
+ console.log(" --viewonly - Make desktop sharing view only.");
+ console.log(" --consent [notify,prompt] - Consent flags, default is notify.");
+ console.log(" --start [yyyy-mm-ddThh:mm:ss] - Start time, default is now.");
+ console.log(" --end [yyyy-mm-ddThh:mm:ss] - End time.");
+ console.log(" --duration [minutes] - Duration of the share, default is 60 minutes.");
+ console.log(" --daily - Add recurring daily device share.");
+ console.log(" --weekly - Add recurring weekly device share.");
break;
}
case 'agentdownload': {
console.log("Download an agent of a specific type for a given device group, Example usages:\r\n");
console.log(winRemoveSingleQuotes(" MeshCtrl AgentDownload --id 'groupid' --type 3"));
- console.log(winRemoveSingleQuotes(" MeshCtrl AgentDownload --id 'groupid' --type 3 --installflags 1"));
console.log("\r\nRequired arguments:\r\n");
console.log(" --type [ArchitectureNumber] - Agent architecture number.");
if (process.platform == 'win32') {
@@ -986,11 +882,6 @@ if (args['_'].length == 0) {
} else {
console.log(" --id '[groupid]' - The device group identifier.");
}
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --installflags [InstallFlagsNumber] - With the following choices:");
- console.log(" installflags 0 - Default, Interactive & Background, offers connect button & install/uninstall");
- console.log(" installflags 1 - Interactive only, offers only connect button, not install/uninstall");
- console.log(" installflags 2 - Background only, offers only install/uninstall, not connect");
break;
}
case 'upload': {
@@ -1022,21 +913,6 @@ if (args['_'].length == 0) {
console.log(" --target [localpath] - The local path to download the file to.");
break;
}
- case 'webrelay': {
- console.log("Generate a webrelay URL to access a HTTP/HTTPS service on a remote device, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl WebRelay --id 'deviceid' --type http --port 80"));
- console.log(winRemoveSingleQuotes(" MeshCtrl WebRelay --id 'deviceid' --type https --port 443"));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [deviceid] - The device identifier.");
- } else {
- console.log(" --id '[deviceid]' - The device identifier.");
- }
- console.log(" --type [http,https] - Type of relay from remote device, http or https.");
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --port [portnumber] - Set alternative port for http or https, default is 80 for http and 443 for https.");
- break;
- }
case 'deviceopenurl': {
console.log("Open a web page on a remote device, Example usages:\r\n");
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceOpenUrl --id 'deviceid' --openurl http://meshcentral.com"));
@@ -1053,17 +929,15 @@ if (args['_'].length == 0) {
console.log("Display a message on the remote device, Example usages:\r\n");
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceMessage --id 'deviceid' --msg \"message\""));
console.log(winRemoveSingleQuotes(" MeshCtrl DeviceMessage --id 'deviceid' --msg \"message\" --title \"title\""));
- console.log(winRemoveSingleQuotes(" MeshCtrl DeviceMessage --id 'deviceid' --msg \"message\" --title \"title\" --timeout 120000"));
console.log("\r\nRequired arguments:\r\n");
if (process.platform == 'win32') {
- console.log(" --id [deviceid] - The device identifier.");
+ console.log(" --id [deviceid] - The device identifier.");
} else {
- console.log(" --id '[deviceid]' - The device identifier.");
+ console.log(" --id '[deviceid]' - The device identifier.");
}
- console.log(" --msg [message] - The message to display.");
+ console.log(" --msg [message] - The message to display.");
console.log("\r\nOptional arguments:\r\n");
- console.log(" --title [title] - Messagebox title, default is \"MeshCentral\".");
- console.log(" --timeout [miliseconds] - After timeout messagebox vanishes, 0 keeps messagebox open until closed manually, default is 120000 (2 Minutes).");
+ console.log(" --title [title] - Messagebox title, default is \"MeshCentral\".");
break;
}
case 'devicetoast': {
@@ -1081,52 +955,6 @@ if (args['_'].length == 0) {
console.log(" --title [title] - Toast title, default is \"MeshCentral\".");
break;
}
- case 'groupmessage': {
- console.log("Open a message box on remote devices in a specific device group, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl GroupMessage --id 'devicegroupid' --msg \"message\""));
- console.log(winRemoveSingleQuotes(" MeshCtrl GroupMessage --id 'devicegroupid' --msg \"message\" --title \"title\""));
- console.log(winRemoveSingleQuotes(" MeshCtrl GroupMessage --id 'devicegroupid' --msg \"message\" --title \"title\" --timeout 120000"));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [devicegroupid] - The device identifier.");
- } else {
- console.log(" --id '[devicegroupid]' - The device identifier.");
- }
- console.log(" --msg [message] - The message to display.");
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --title [title] - Messagebox title, default is \"MeshCentral\".");
- console.log(" --timeout [miliseconds] - After timeout messagebox vanishes, 0 keeps messagebox open until closed manually, default is 120000 (2 Minutes).");
- break;
- }
- case 'grouptoast': {
- console.log("Display a toast notification on remote devices in a specific device group, Example usages:\r\n");
- console.log(winRemoveSingleQuotes(" MeshCtrl GroupToast --id 'devicegroupid' --msg \"message\""));
- console.log(winRemoveSingleQuotes(" MeshCtrl GroupToast --id 'devicegroupid' --msg \"message\" --title \"title\""));
- console.log("\r\nRequired arguments:\r\n");
- if (process.platform == 'win32') {
- console.log(" --id [devicegroupid] - The device identifier.");
- } else {
- console.log(" --id '[devicegroupid]' - The device identifier.");
- }
- console.log(" --msg [message] - The message to display.");
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --title [title] - Toast title, default is \"MeshCentral\".");
- break;
- }
- case 'report': {
- console.log("Generate a CSV report, Example usages:\r\n");
- console.log(" MeshCtrl Report --type sessions --devicegroup mesh//...");
- console.log(" MeshCtrl Report --type traffic --json");
- console.log(" MeshCtrl Report --type logins --groupby day");
- console.log(" MeshCtrl Report --type db");
- console.log("\r\nOptional arguments:\r\n");
- console.log(" --start [yyyy-mm-ddThh:mm:ss] - Filter the results starting at that date. Defaults to last 24h and last week when used with --groupby day. Usable with sessions, traffic and logins");
- console.log(" --end [yyyy-mm-ddThh:mm:ss] - Filter the results ending at that date. Defaults to now. Usable with sessions, traffic and logins");
- console.log(" --groupby [name] - How to group results. Options: user, day, device. Defaults to user. User and day usable in sessions and logins, device usable in sessions.");
- console.log(" --devicegroup [devicegroupid] - Filter the results by device group. Usable in sessions");
- console.log(" --showtraffic - Add traffic data in sessions report");
- break;
- }
default: {
console.log("Get help on an action. Type:\r\n\r\n help [action]\r\n\r\nPossible actions are: " + possibleCommands.join(', ') + '.');
}
@@ -1136,46 +964,7 @@ if (args['_'].length == 0) {
}
}
- if (ok) {
- if(args.loginpass===true){
- const readline = require('readline');
- const rl = readline.createInterface({
- input: process.stdin,
- output: process.stdout,
- terminal: false
- });
- process.stdout.write('Enter your password: ');
- const stdin = process.openStdin();
- stdin.setRawMode(true); // Set raw mode to prevent echoing of characters
- stdin.resume();
- args.loginpass = '';
- process.stdin.on('data', (char) => {
- char = char + '';
- switch (char) {
- case '\n':
- case '\r':
- case '\u0004': // They've finished entering their password
- stdin.setRawMode(false);
- stdin.pause();
- process.stdout.clearLine(); process.stdout.cursorTo(0);
- rl.close();
- serverConnect();
- break;
- case '\u0003': // Ctrl+C
- process.stdout.write('\n');
- process.exit();
- break;
- default: // Mask the password with "*"
- args.loginpass += char;
- process.stdout.clearLine(); process.stdout.cursorTo(0);
- process.stdout.write('Enter your password: ' + '*'.repeat(args.loginpass.length));
- break;
- }
- });
- }else{
- serverConnect();
- }
- }
+ if (ok) { serverConnect(); }
}
function displayConfigHelp() {
@@ -1196,8 +985,8 @@ function displayConfigHelp() {
function performConfigOperations(args) {
var domainValues = ['title', 'title2', 'titlepicture', 'trustedcert', 'welcomepicture', 'welcometext', 'userquota', 'meshquota', 'newaccounts', 'usernameisemail', 'newaccountemaildomains', 'newaccountspass', 'newaccountsrights', 'geolocation', 'lockagentdownload', 'userconsentflags', 'Usersessionidletimeout', 'auth', 'ldapoptions', 'ldapusername', 'ldapuserbinarykey', 'ldapuseremail', 'footer', 'certurl', 'loginKey', 'userallowedip', 'agentallowedip', 'agentnoproxy', 'agentconfig', 'orphanagentuser', 'httpheaders', 'yubikey', 'passwordrequirements', 'limits', 'amtacmactivation', 'redirects', 'sessionrecording', 'hide'];
- var domainObjectValues = ['ldapoptions', 'httpheaders', 'yubikey', 'passwordrequirements', 'limits', 'amtacmactivation', 'redirects', 'sessionrecording'];
- var domainArrayValues = ['newaccountemaildomains', 'newaccountsrights', 'loginkey', 'agentconfig'];
+ var domainObjectValues = [ 'ldapoptions', 'httpheaders', 'yubikey', 'passwordrequirements', 'limits', 'amtacmactivation', 'redirects', 'sessionrecording' ];
+ var domainArrayValues = [ 'newaccountemaildomains', 'newaccountsrights', 'loginkey', 'agentconfig' ];
var configChange = false;
var fs = require('fs');
var path = require('path');
@@ -1211,7 +1000,7 @@ function performConfigOperations(args) {
if (fs.existsSync(configFile) == false) { console.log("Unable to find config.json."); return; }
var config = null;
try { config = fs.readFileSync(configFile).toString('utf8'); } catch (ex) { console.log("Error: Unable to read config.json"); return; }
- try { config = JSON.parse(fs.readFileSync(configFile)); } catch (e) { console.log('ERROR: Unable to parse ' + configFile + '.'); return null; }
+ try { config = require(configFile); } catch (e) { console.log('ERROR: Unable to parse ' + configFilePath + '.'); return null; }
if (args.adddomain != null) {
didSomething++;
if (config.domains == null) { config.domains = {}; }
@@ -1359,10 +1148,10 @@ function serverConnect() {
var domainid = '', username = 'admin';
if (args.logindomain != null) { domainid = args.logindomain; }
if (args.loginuser != null) { username = args.loginuser; }
- url += (url.indexOf('?key=') >= 0 ? '&auth=' : '?auth=') + encodeCookie({ userid: 'user/' + domainid + '/' + username, domainid: domainid }, ckey);
+ url += '?auth=' + encodeCookie({ userid: 'user/' + domainid + '/' + username, domainid: domainid }, ckey);
} else {
if (args.logindomain != null) { console.log("--logindomain can only be used along with --loginkey."); process.exit(); return; }
- if (loginCookie != null) { url += (url.indexOf('?key=') >= 0 ? '&auth=' : '?auth=') + loginCookie; }
+ if (loginCookie != null) { url += '?auth=' + loginCookie; }
}
const ws = new WebSocket(url, options);
@@ -1382,7 +1171,7 @@ function serverConnect() {
case 'listdevices': {
if (args.details) {
// Get list of devices with lots of details
- ws.send(JSON.stringify({ action: 'getDeviceDetails', type: (args.csv) ? 'csv' : 'json' }));
+ ws.send(JSON.stringify({ action: 'getDeviceDetails', type: (args.csv)?'csv':'json' }));
} else if (args.group) {
ws.send(JSON.stringify({ action: 'nodes', meshname: args.group, responseid: 'meshctrl' }));
} else if (args.id) {
@@ -1395,7 +1184,7 @@ function serverConnect() {
}
case 'listevents': {
limit = null;
- if (args.limit) { limit = parseInt(args.limit); }
+ if (args.limit) { limit = parseInt(args.limit); }
if ((typeof limit != 'number') || (limit < 1)) { limit = null; }
var cmd = null;
@@ -1567,7 +1356,6 @@ function serverConnect() {
var op = { action: 'createmesh', meshname: args.name, meshtype: 2, responseid: 'meshctrl' };
if (args.desc) { op.desc = args.desc; }
if (args.amtonly) { op.meshtype = 1; }
- if (args.agentless) { op.meshtype = 3; }
if (args.features) { op.flags = parseInt(args.features); }
if (args.consent) { op.consent = parseInt(args.consent); }
ws.send(JSON.stringify(op));
@@ -1579,29 +1367,6 @@ function serverConnect() {
ws.send(JSON.stringify(op));
break;
}
- case 'addamtdevice': {
- var op = { action: 'addamtdevice', amttls: 1, responseid: 'meshctrl' };
- if (args.id) { op.meshid = args.id; }
- if ((typeof args.devicename == 'string') && (args.devicename != '')) { op.devicename = args.devicename; }
- if ((typeof args.hostname == 'string') && (args.hostname != '')) { op.hostname = args.hostname; }
- if ((typeof args.user == 'string') && (args.user != '')) { op.amtusername = args.user; }
- if ((typeof args.pass == 'string') && (args.pass != '')) { op.amtpassword = args.pass; }
- if (args.notls) { op.amttls = 0; }
- ws.send(JSON.stringify(op));
- break;
- }
- case 'addlocaldevice': {
- var op = { action: 'addlocaldevice', type: 4, responseid: 'meshctrl' };
- if (args.id) { op.meshid = args.id; }
- if ((typeof args.devicename == 'string') && (args.devicename != '')) { op.devicename = args.devicename; }
- if ((typeof args.hostname == 'string') && (args.hostname != '')) { op.hostname = args.hostname; }
- if (args.type) {
- if ((typeof parseInt(args.type) != 'number') || isNaN(parseInt(args.type))) { console.log("Invalid type."); process.exit(1); return; }
- op.type = args.type;
- }
- ws.send(JSON.stringify(op));
- break;
- }
case 'editdevicegroup': {
var op = { action: 'editmesh', responseid: 'meshctrl' };
if (args.id) { op.meshid = args.id; } else if (args.group) { op.meshidname = args.group; }
@@ -1628,7 +1393,7 @@ function serverConnect() {
break;
}
case 'movetodevicegroup': {
- var op = { action: 'changeDeviceMesh', responseid: 'meshctrl', nodeids: [args.devid] };
+ var op = { action: 'changeDeviceMesh', responseid: 'meshctrl', nodeids: [ args.devid ] };
if (args.id) { op.meshid = args.id; } else if (args.group) { op.meshname = args.group; }
ws.send(JSON.stringify(op));
break;
@@ -1721,11 +1486,6 @@ function serverConnect() {
ws.send(JSON.stringify({ action: 'getsysinfo', nodeid: args.id, nodeinfo: true, responseid: 'meshctrl' }));
break;
}
- case 'removedevice': {
- var op = { action: 'removedevices', nodeids: [ args.id ], responseid: 'meshctrl' };
- ws.send(JSON.stringify(op));
- break;
- }
case 'editdevice': {
var op = { action: 'changedevice', nodeid: args.id, responseid: 'meshctrl' };
if (typeof args.name == 'string') { op.name = args.name; }
@@ -1740,9 +1500,7 @@ function serverConnect() {
case 'runcommand': {
var runAsUser = 0;
if (args.runasuser) { runAsUser = 1; } else if (args.runasuseronly) { runAsUser = 2; }
- var reply = false;
- if (args.reply) { reply = true; }
- ws.send(JSON.stringify({ action: 'runcommands', nodeids: [args.id], type: ((args.powershell) ? 2 : 0), cmds: args.run, responseid: 'meshctrl', runAsUser: runAsUser, reply: reply }));
+ ws.send(JSON.stringify({ action: 'runcommands', nodeids: [args.id], type: ((args.powershell) ? 2 : 0), cmds: args.run, responseid: 'meshctrl', runAsUser: runAsUser }));
break;
}
case 'shell':
@@ -1785,10 +1543,6 @@ function serverConnect() {
var u = settings.xxurl.replace('wss://', 'https://').replace('/control.ashx', '/meshagents');
if (u.indexOf('?') > 0) { u += '&'; } else { u += '?'; }
u += 'id=' + args.type + '&meshid=' + args.id;
- if (args.installflags) {
- if ((typeof parseInt(args.installflags) != 'number') || isNaN(parseInt(args.installflags)) || (parseInt(args.installflags) < 0) || (parseInt(args.installflags) > 2)) { console.log("Invalid Installflags."); process.exit(1); return; }
- u += '&installflags=' + args.installflags;
- }
const options = { rejectUnauthorized: false, checkServerIdentity: onVerifyServer }
const fs = require('fs');
const https = require('https');
@@ -1826,29 +1580,6 @@ function serverConnect() {
req.end()
break;
}
- case 'webrelay': {
- var protocol = null;
- if (args.type != null) {
- if (args.type == 'http') {
- protocol = 1;
- } else if (args.type == 'https') {
- protocol = 2;
- } else {
- console.log("Unknown protocol type: " + args.type); process.exit(1);
- }
- }
- var port = null;
- if (typeof args.port == 'number') {
- if ((args.port < 1) || (args.port > 65535)) { console.log("Port number must be between 1 and 65535."); process.exit(1); }
- port = args.port;
- } else if (protocol == 1) {
- port = 80;
- } else if (protocol == 2) {
- port = 443;
- }
- ws.send(JSON.stringify({ action: 'webrelay', nodeid: args.id, port: port, appid: protocol, responseid: 'meshctrl' }));
- break;
- }
case 'devicesharing': {
if (args.add) {
if (args.add.length == 0) { console.log("Invalid guest name."); process.exit(1); }
@@ -1857,12 +1588,10 @@ function serverConnect() {
var p = 0;
if (args.type != null) {
var shareTypes = args.type.toLowerCase().split(',');
- for (var i in shareTypes) { if ((shareTypes[i] != 'terminal') && (shareTypes[i] != 'desktop') && (shareTypes[i] != 'files') && (shareTypes[i] != 'http') && (shareTypes[i] != 'https')) { console.log("Unknown sharing type: " + shareTypes[i]); process.exit(1); } }
+ for (var i in shareTypes) { if ((shareTypes[i] != 'terminal') && (shareTypes[i] != 'desktop') && (shareTypes[i] != 'files')) { console.log("Unknown sharing type: " + shareTypes[i]); process.exit(1); } }
if (shareTypes.indexOf('terminal') >= 0) { p |= 1; }
if (shareTypes.indexOf('desktop') >= 0) { p |= 2; }
if (shareTypes.indexOf('files') >= 0) { p |= 4; }
- if (shareTypes.indexOf('http') >= 0) { p |= 8; }
- if (shareTypes.indexOf('https') >= 0) { p |= 16; }
}
if (p == 0) { p = 2; } // Desktop
@@ -1897,19 +1626,6 @@ function serverConnect() {
}
}
- var port = null;
- // Set Port Number if http or https
- if ((p & 8) || (p & 16)) {
- if (typeof args.port == 'number') {
- if ((args.port < 1) || (args.port > 65535)) { console.log("Port number must be between 1 and 65535."); process.exit(1); }
- port = args.port;
- } else if ((p & 8)) {
- port = 80;
- } else if ((p & 16)) {
- port = 443;
- }
- }
-
// Start and end time
var start = null, end = null;
if (args.start) { start = Math.floor(Date.parse(args.start) / 1000); end = start + (60 * 60); }
@@ -1926,14 +1642,14 @@ function serverConnect() {
if ((typeof args.duration != 'number') || (args.duration < 1)) { console.log("Invalid duration value."); process.exit(1); return; }
// Recurring sharing
- ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, start: start, expire: args.duration, recurring: recurring, viewOnly: viewOnly, port: port, responseid: 'meshctrl' }));
+ ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, start: start, expire: args.duration, recurring: recurring, viewOnly: viewOnly, responseid: 'meshctrl' }));
} else {
if ((start == null) && (end == null)) {
// Unlimited sharing
- ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, expire: 0, viewOnly: viewOnly, port: port, responseid: 'meshctrl' }));
+ ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, expire: 0, viewOnly: viewOnly, responseid: 'meshctrl' }));
} else {
// Time limited sharing
- ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, start: start, end: end, viewOnly: viewOnly, port: port, responseid: 'meshctrl' }));
+ ws.send(JSON.stringify({ action: 'createDeviceShareLink', nodeid: args.id, guestname: args.add, p: p, consent: consent, start: start, end: end, viewOnly: viewOnly, responseid: 'meshctrl' }));
}
}
} else if (args.remove) {
@@ -1948,56 +1664,13 @@ function serverConnect() {
break;
}
case 'devicemessage': {
- ws.send(JSON.stringify({ action: 'msg', type: 'messagebox', nodeid: args.id, title: args.title ? args.title : "MeshCentral", msg: args.msg, timeout: args.timeout ? args.timeout : 120000, responseid: 'meshctrl' }));
+ ws.send(JSON.stringify({ action: 'msg', type: 'messagebox', nodeid: args.id, title: args.title ? args.title : "MeshCentral", msg: args.msg, responseid: 'meshctrl' }));
break;
}
case 'devicetoast': {
ws.send(JSON.stringify({ action: 'toast', nodeids: [args.id], title: args.title ? args.title : "MeshCentral", msg: args.msg, responseid: 'meshctrl' }));
break;
}
- case 'groupmessage': {
- ws.send(JSON.stringify({ action: 'nodes', meshid: args.id, responseid: 'meshctrl' }));
- break;
- }
- case 'grouptoast': {
- ws.send(JSON.stringify({ action: 'nodes', meshid: args.id, responseid: 'meshctrl' }));
- break;
- }
- case 'report': {
- var reporttype = 1;
- switch(args.type) {
- case 'traffic':
- reporttype = 2;
- break;
- case 'logins':
- reporttype = 3;
- break;
- case 'db':
- reporttype = 4;
- break;
- }
-
- var reportgroupby = 1;
- if(args.groupby){
- reportgroupby = args.groupby === 'device' ? 2 : args.groupby === 'day' ? 3: 1;
- }
-
- var start = null, end = null;
- if (args.start) {
- start = Math.floor(Date.parse(args.start) / 1000);
- } else {
- start = reportgroupby === 3 ? Math.round(new Date().getTime() / 1000) - (168 * 3600) : Math.round(new Date().getTime() / 1000) - (24 * 3600);
- }
- if (args.end) {
- end = Math.floor(Date.parse(args.end) / 1000);
- } else {
- end = Math.round(new Date().getTime() / 1000);
- }
- if (end <= start) { console.log("End time must be ahead of start time."); process.exit(1); return; }
-
- ws.send(JSON.stringify({ action: 'report', type: reporttype, groupBy: reportgroupby, devGroup: args.devicegroup || null, start, end, tz: Intl.DateTimeFormat().resolvedOptions().timeZone, tf: new Date().getTimezoneOffset(), showTraffic: args.hasOwnProperty('showtraffic'), l: 'en', responseid: 'meshctrl' }));
- break;
- }
}
});
@@ -2010,11 +1683,11 @@ function serverConnect() {
var srights = args.rights.toLowerCase().split(',');
if (srights.indexOf('full') != -1) { siteadmin = 0xFFFFFFFF; }
if (srights.indexOf('none') != -1) { siteadmin = 0x00000000; }
- if (srights.indexOf('backup') != -1 || srights.indexOf('serverbackup') != -1) { siteadmin |= 0x00000001; }
+ if (srights.indexOf('backup') != -1) { siteadmin |= 0x00000001; }
if (srights.indexOf('manageusers') != -1) { siteadmin |= 0x00000002; }
- if (srights.indexOf('restore') != -1 || srights.indexOf('serverrestore') != -1) { siteadmin |= 0x00000004; }
+ if (srights.indexOf('restore') != -1) { siteadmin |= 0x00000004; }
if (srights.indexOf('fileaccess') != -1) { siteadmin |= 0x00000008; }
- if (srights.indexOf('update') != -1 || srights.indexOf('serverupdate') != -1) { siteadmin |= 0x00000010; }
+ if (srights.indexOf('update') != -1) { siteadmin |= 0x00000010; }
if (srights.indexOf('locked') != -1) { siteadmin |= 0x00000020; }
if (srights.indexOf('nonewgroups') != -1) { siteadmin |= 0x00000040; }
if (srights.indexOf('notools') != -1) { siteadmin |= 0x00000080; }
@@ -2022,7 +1695,6 @@ function serverConnect() {
if (srights.indexOf('recordings') != -1) { siteadmin |= 0x00000200; }
if (srights.indexOf('locksettings') != -1) { siteadmin |= 0x00000400; }
if (srights.indexOf('allevents') != -1) { siteadmin |= 0x00000800; }
- if (srights.indexOf('nonewdevices') != -1) { siteadmin |= 0x00001000; }
}
if (args.siteadmin) { siteadmin = 0xFFFFFFFF; }
@@ -2035,7 +1707,7 @@ function serverConnect() {
return siteadmin;
}
- ws.on('close', function () { process.exit(); });
+ ws.on('close', function() { process.exit(); });
ws.on('error', function (err) {
if (err.code == 'ENOTFOUND') { console.log('Unable to resolve ' + url); }
else if (err.code == 'ECONNREFUSED') { console.log('Unable to connect to ' + url); }
@@ -2219,9 +1891,6 @@ function serverConnect() {
case 'toast': // TOAST
case 'adduser': // ADDUSER
case 'edituser': // EDITUSER
- case 'addamtdevice': // ADDAMTDEVICE
- case 'addlocaldevice': // ADDLOCALDEVICE
- case 'removedevices': // REMOVEDEVICE
case 'changedevice': // EDITDEVICE
case 'deleteuser': // REMOVEUSER
case 'createmesh': // ADDDEVICEGROUP
@@ -2243,7 +1912,6 @@ function serverConnect() {
case 'removeDeviceShare':
case 'userbroadcast': { // BROADCAST
if ((settings.cmd == 'shell') || (settings.cmd == 'upload') || (settings.cmd == 'download')) return;
- if ((data.type == 'runcommands') && (settings.cmd != 'runcommand')) return;
if ((settings.multiresponse != null) && (settings.multiresponse > 1)) { settings.multiresponse--; break; }
if (data.responseid == 'meshctrl') {
if (data.meshid) { console.log(data.result, data.meshid); }
@@ -2254,7 +1922,6 @@ function serverConnect() {
break;
}
case 'createDeviceShareLink':
- case 'webrelay':
if (data.result == 'OK') {
if (data.publicid) { console.log('ID: ' + data.publicid); }
console.log('URL: ' + data.url);
@@ -2290,11 +1957,11 @@ function serverConnect() {
console.log(x);
var mesh = [], user = [], node = [];
if (data.ugroups[i].links != null) { for (var j in data.ugroups[i].links) { if (j.startsWith('mesh/')) { mesh.push(j); } if (j.startsWith('user/')) { user.push(j); } if (j.startsWith('node/')) { node.push(j); } } }
- console.log(' Users:');
+ console.log(' Users:');
if (user.length > 0) { for (var j in user) { console.log(' ' + user[j]); } } else { console.log(' (None)'); }
- console.log(' Device Groups:');
+ console.log(' Device Groups:');
if (mesh.length > 0) { for (var j in mesh) { console.log(' ' + mesh[j] + ', ' + data.ugroups[i].links[mesh[j]].rights); } } else { console.log(' (None)'); }
- console.log(' Devices:');
+ console.log(' Devices:');
if (node.length > 0) { for (var j in node) { console.log(' ' + node[j] + ', ' + data.ugroups[i].links[node[j]].rights); } } else { console.log(' (None)'); }
}
}
@@ -2389,7 +2056,7 @@ function serverConnect() {
if (args.filter != null) {
for (var meshid in data.nodes) {
for (var d in data.nodes[meshid]) { data.nodes[meshid][d].meshid = meshid; }
- data.nodes[meshid] = parseSearchOrInput(data.nodes[meshid], args.filter.toString().toLowerCase());
+ data.nodes[meshid] = parseSearchOrInput(data.nodes[meshid], args.filter.toLowerCase());
}
}
@@ -2417,7 +2084,7 @@ function serverConnect() {
} else if (args.json) {
// Return all devices in JSON format
var nodes = [];
-
+
for (var i in data.nodes) {
const devicesInMesh = data.nodes[i];
for (var j in devicesInMesh) {
@@ -2447,30 +2114,6 @@ function serverConnect() {
}
process.exit();
}
- if ((settings.cmd == 'groupmessage') && (data.responseid == 'meshctrl')) {
- if ((data.nodes != null)) {
- for (var i in data.nodes) {
- for (let index = 0; index < data.nodes[i].length; index++) {
- const element = data.nodes[i][index];
- ws.send(JSON.stringify({ action: 'msg', type: 'messagebox', nodeid: element._id, title: args.title ? args.title : "MeshCentral", msg: args.msg, timeout: args.timeout ? args.timeout : 120000 }));
- }
- }
- }
-
- setTimeout(function(){ console.log('ok'); process.exit(); }, 1000);
- }
- if ((settings.cmd == 'grouptoast') && (data.responseid == 'meshctrl')) {
- if (data.nodes != null) {
- for (var i in data.nodes) {
- var nodes = [];
- for (let index = 0; index < data.nodes[i].length; index++) {
- const element = data.nodes[i][index];
- nodes.push(element._id);
- }
- ws.send(JSON.stringify({ action: 'toast', nodeids: nodes, title: args.title ? args.title : "MeshCentral", msg: args.msg, responseid: 'meshctrl' }));
- }
- }
- }
break;
}
case 'meshes': { // LISTDEVICEGROUPS
@@ -2540,8 +2183,6 @@ function serverConnect() {
if (data.cause == 'noauth') {
if (data.msg == 'tokenrequired') {
console.log('Authentication token required, use --token [number].');
- } else if (data.msg == 'nokey') {
- console.log('URL key is invalid or missing, please specify ?key=xxx in url');
} else {
if ((args.loginkeyfile != null) || (args.loginkey != null)) {
console.log('Invalid login, check the login key and that this computer has the correct time.');
@@ -2595,15 +2236,6 @@ function serverConnect() {
console.log(data.data);
process.exit();
}
- case 'report': {
- console.log('group,' + data.data.columns.flatMap(c => c.id).join(','));
- Object.keys(data.data.groups).forEach(gk => {
- data.data.groups[gk].entries.forEach(e => {
- console.log(gk + ',' + Object.values(e).join(','));
- });
- });
- process.exit();
- }
default: { break; }
}
//console.log('Data', data);
@@ -2666,8 +2298,8 @@ function getDevicesThatMatchFilter(nodes, x) {
} else if (tagSearch != null) {
// Tag filter
for (var d in nodes) {
- if ((nodes[d].tags == null) && (tagSearch == '')) { r.push(nodes[d]); }
- else if (nodes[d].tags != null) { for (var j in nodes[d].tags) { if (nodes[d].tags[j].toLowerCase() == tagSearch) { r.push(nodes[d]); break; } } }
+ if ((nodes[d].tags == null) && (tagSearch == '')) { r.push(d); }
+ else if (nodes[d].tags != null) { for (var j in nodes[d].tags) { if (nodes[d].tags[j].toLowerCase() == tagSearch) { r.push(d); break; } } }
}
} else if (agentTagSearch != null) {
// Agent Tag filter
@@ -2707,9 +2339,9 @@ function getDevicesThatMatchFilter(nodes, x) {
var rs = x.split(/\s+/).join('|'), rx = new RegExp(rs); // In some cases (like +), this can throw an exception.
for (var d in nodes) {
//if (showRealNames) {
- //if (nodes[d].rnamel != null && rx.test(nodes[d].rnamel.toLowerCase())) { r.push(nodes[d]); }
+ //if (nodes[d].rnamel != null && rx.test(nodes[d].rnamel.toLowerCase())) { r.push(nodes[d]); }
//} else {
- if (rx.test(nodes[d].name.toLowerCase())) { r.push(nodes[d]); }
+ if (rx.test(nodes[d].name.toLowerCase())) { r.push(nodes[d]); }
//}
}
} catch (ex) { for (var d in nodes) { r.push(nodes[d]); } }
@@ -2782,7 +2414,7 @@ function connectTunnel(url) {
if ((cmd.action == 'uploadack') || (cmd.action == 'uploadstart')) {
settings.inFlight--;
if (settings.uploadFile == null) { if (settings.inFlight == 0) { process.exit(); } return; } // If the file is closed and there is no more in-flight data, exit.
- var loops = (cmd.action == 'uploadstart') ? 16 : 1; // If this is the first data to be sent, hot start now. We are going to have 16 blocks of data in-flight.
+ var loops = (cmd.action == 'uploadstart')?16:1; // If this is the first data to be sent, hot start now. We are going to have 16 blocks of data in-flight.
for (var i = 0; i < loops; i++) {
if (settings.uploadFile == null) continue;
var buf = Buffer.alloc(65565);
@@ -2824,7 +2456,7 @@ function connectTunnel(url) {
// node meshctrl download --id oL4Y6Eg0qjnpHFrp1AxfxnBPenbDGnDSkC@HSOnAheIyd51pKhqSCUgJZakzwfKl --file c:\temp\MC-8Languages.png --target c:\temp\bob.png
settings.tunnelws.on('message', function (rawdata) {
if (settings.tunnelwsstate == 1) {
- if ((rawdata.length > 0) && (rawdata.toString()[0] != '{')) {
+ if ((rawdata.length > 0) && (rawdata[0] != '{')) {
// This is binary data, this test is ok because 4 first bytes is a control value.
if ((rawdata.length > 4) && (settings.downloadFile != null)) { settings.downloadSize += (rawdata.length - 4); require('fs').writeSync(settings.downloadFile, rawdata, 4, rawdata.length - 4); }
if ((rawdata[3] & 1) != 0) { // Check end flag
@@ -2905,7 +2537,7 @@ function displayDeviceInfo(sysinfo, lastconnect, network, nodes) {
}
}
}
- if ((sysinfo == null && lastconnect == null && network == null) || (node == null)) {
+ if (node == null) {
console.log("Invalid device id");
process.exit(); return;
}
@@ -2958,7 +2590,7 @@ function displayDeviceInfo(sysinfo, lastconnect, network, nodes) {
// MeshAgent
if (node.agent) {
var output = {}, outputCount = 0;
- var agentsStr = ["Unknown", "Windows 32bit console", "Windows 64bit console", "Windows 32bit service", "Windows 64bit service", "Linux 32bit", "Linux 64bit", "MIPS", "XENx86", "Android", "Linux ARM", "macOS x86-32bit", "Android x86", "PogoPlug ARM", "Android", "Linux Poky x86-32bit", "macOS x86-64bit", "ChromeOS", "Linux Poky x86-64bit", "Linux NoKVM x86-32bit", "Linux NoKVM x86-64bit", "Windows MinCore console", "Windows MinCore service", "NodeJS", "ARM-Linaro", "ARMv6l / ARMv7l", "ARMv8 64bit", "ARMv6l / ARMv7l / NoKVM", "MIPS24KC (OpenWRT)", "Apple Silicon", "FreeBSD x86-64", "Unknown", "Linux ARM 64 bit (glibc/2.24 NOKVM)", "Alpine Linux x86 64 Bit (MUSL)", "Assistant (Windows)", "Armada370 - ARM32/HF (libc/2.26)", "OpenWRT x86-64", "OpenBSD x86-64", "Unknown", "Unknown", "MIPSEL24KC (OpenWRT)", "ARMADA/CORTEX-A53/MUSL (OpenWRT)", "Windows ARM 64bit console", "Windows ARM 64bit service"];
+ var agentsStr = ["Unknown", "Windows 32bit console", "Windows 64bit console", "Windows 32bit service", "Windows 64bit service", "Linux 32bit", "Linux 64bit", "MIPS", "XENx86", "Android ARM", "Linux ARM", "MacOS 32bit", "Android x86", "PogoPlug ARM", "Android APK", "Linux Poky x86-32bit", "MacOS 64bit", "ChromeOS", "Linux Poky x86-64bit", "Linux NoKVM x86-32bit", "Linux NoKVM x86-64bit", "Windows MinCore console", "Windows MinCore service", "NodeJS", "ARM-Linaro", "ARMv6l / ARMv7l", "ARMv8 64bit", "ARMv6l / ARMv7l / NoKVM", "Unknown", "Unknown", "FreeBSD x86-64"];
if ((node.agent != null) && (node.agent.id != null) && (node.agent.ver != null)) {
var str = '';
if (node.agent.id <= agentsStr.length) { str = agentsStr[node.agent.id]; } else { str = agentsStr[0]; }
diff --git a/meshdesktopmultiplex.js b/meshdesktopmultiplex.js
index 9b6d1e19..80bcad27 100644
--- a/meshdesktopmultiplex.js
+++ b/meshdesktopmultiplex.js
@@ -342,7 +342,7 @@ function CreateDesktopMultiplexor(parent, domain, nodeid, id, func) {
parent.parent.fs.close(fd);
// Now that the recording file is closed, check if we need to index this file.
- if (domain.sessionrecording.index && domain.sessionrecording.index !== false) { parent.parent.certificateOperations.acceleratorPerformOperation('indexMcRec', filename); }
+ if (domain.sessionrecording.index !== false) { parent.parent.certificateOperations.acceleratorPerformOperation('indexMcRec', filename); }
// Add a event entry about this recording
var basefile = parent.parent.path.basename(filename);
@@ -847,7 +847,7 @@ function CreateDesktopMultiplexor(parent, domain, nodeid, id, func) {
return;
}
// Write the recording file header
- parent.parent.debug('relay', 'Relay: Started recording to file: ' + recFullFilename);
+ parent.parent.debug('relay', 'Relay: Started recoding to file: ' + recFullFilename);
var metadata = { magic: 'MeshCentralRelaySession', ver: 1, nodeid: obj.nodeid, meshid: obj.meshid, time: new Date().toLocaleString(), protocol: 2, devicename: obj.name, devicegroup: obj.meshname };
var firstBlock = JSON.stringify(metadata);
recordingEntry(fd, 1, 0, firstBlock, function () {
@@ -1347,8 +1347,6 @@ function CreateMeshRelayEx2(parent, ws, req, domain, user, cookie) {
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -1438,4 +1436,4 @@ a given size and timestamp. When looking at network traffic the flags are import
- If traffic has the first (0x0001) flag set, the data is binary otherwise it's a string.
- If the traffic has the second (0x0002) flag set, traffic is coming from the user's browser, if not, it's coming from the MeshAgent.
-*/
+*/
\ No newline at end of file
diff --git a/meshmail.js b/meshmail.js
index c5977ea1..168b6769 100644
--- a/meshmail.js
+++ b/meshmail.js
@@ -26,7 +26,6 @@ module.exports.CreateMeshMail = function (parent, domain) {
obj.mailCookieEncryptionKey = null;
obj.verifyemail = false;
obj.domain = domain;
- obj.emailDelay = 5 * 60 * 1000; // Default of 5 minute email delay.
//obj.mailTemplates = {};
const sortCollator = new Intl.Collator(undefined, { numeric: true, sensitivity: 'base' })
const constants = (obj.parent.crypto.constants ? obj.parent.crypto.constants : require('constants')); // require('constants') is deprecated in Node 11.10, use require('crypto').constants instead.
@@ -42,38 +41,30 @@ module.exports.CreateMeshMail = function (parent, domain) {
obj.sendGridServer = require('@sendgrid/mail');
obj.sendGridServer.setApiKey(obj.config.sendgrid.apikey);
if (obj.config.sendgrid.verifyemail == true) { obj.verifyemail = true; }
- if ((typeof obj.config.sendgrid.emaildelayseconds == 'number') && (obj.config.sendgrid.emaildelayseconds > 0)) { obj.emailDelay = obj.config.sendgrid.emaildelayseconds * 1000; }
} else if (obj.config.smtp != null) {
// Setup SMTP mail server
- if ((typeof obj.config.smtp.emaildelayseconds == 'number') && (obj.config.smtp.emaildelayseconds > 0)) { obj.emailDelay = obj.config.smtp.emaildelayseconds * 1000; }
- if (obj.config.smtp.name == 'console') {
- // This is for debugging, the mails will be displayed on the console
- obj.smtpServer = 'console';
- } else {
- const nodemailer = require('nodemailer');
- var options = { name: obj.config.smtp.name, host: obj.config.smtp.host, secure: (obj.config.smtp.tls == true), tls: {} };
- //var options = { host: obj.config.smtp.host, secure: (obj.config.smtp.tls == true), tls: { secureProtocol: 'SSLv23_method', ciphers: 'RSA+AES:!aNULL:!MD5:!DSS', secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION | constants.SSL_OP_CIPHER_SERVER_PREFERENCE, rejectUnauthorized: false } };
- if (obj.config.smtp.port != null) { options.port = obj.config.smtp.port; }
- if (obj.config.smtp.tlscertcheck === false) { options.tls.rejectUnauthorized = false; }
- if (obj.config.smtp.tlsstrict === true) { options.tls.secureProtocol = 'SSLv23_method'; options.tls.ciphers = 'RSA+AES:!aNULL:!MD5:!DSS'; options.tls.secureOptions = constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION | constants.SSL_OP_CIPHER_SERVER_PREFERENCE; }
- if ((obj.config.smtp.auth != null) && (typeof obj.config.smtp.auth == 'object')) {
- var user = obj.config.smtp.from;
- if ((user == null) && (obj.config.smtp.user != null)) { user = obj.config.smtp.user; }
- if ((obj.config.smtp.auth.user != null) && (typeof obj.config.smtp.auth.user == 'string')) { user = obj.config.smtp.auth.user; }
- if (user.toLowerCase().endsWith('@gmail.com')) { options = { service: 'gmail', auth: { user: user } }; obj.config.smtp.host = 'gmail'; } else { options.auth = { user: user } }
- if (obj.config.smtp.auth.type) { options.auth.type = obj.config.smtp.auth.type; }
- if (obj.config.smtp.auth.clientid) { options.auth.clientId = obj.config.smtp.auth.clientid; options.auth.type = 'OAuth2'; }
- if (obj.config.smtp.auth.clientsecret) { options.auth.clientSecret = obj.config.smtp.auth.clientsecret; }
- if (obj.config.smtp.auth.refreshtoken) { options.auth.refreshToken = obj.config.smtp.auth.refreshtoken; }
- }
- else if ((obj.config.smtp.user != null) && (obj.config.smtp.pass != null)) { options.auth = { user: obj.config.smtp.user, pass: obj.config.smtp.pass }; }
- if (obj.config.smtp.verifyemail == true) { obj.verifyemail = true; }
-
- obj.smtpServer = nodemailer.createTransport(options);
+ const nodemailer = require('nodemailer');
+ var options = { name: obj.config.smtp.name, host: obj.config.smtp.host, secure: (obj.config.smtp.tls == true), tls: {} };
+ //var options = { host: obj.config.smtp.host, secure: (obj.config.smtp.tls == true), tls: { secureProtocol: 'SSLv23_method', ciphers: 'RSA+AES:!aNULL:!MD5:!DSS', secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION | constants.SSL_OP_CIPHER_SERVER_PREFERENCE, rejectUnauthorized: false } };
+ if (obj.config.smtp.port != null) { options.port = obj.config.smtp.port; }
+ if (obj.config.smtp.tlscertcheck === false) { options.tls.rejectUnauthorized = false; }
+ if (obj.config.smtp.tlsstrict === true) { options.tls.secureProtocol = 'SSLv23_method'; options.tls.ciphers = 'RSA+AES:!aNULL:!MD5:!DSS'; options.tls.secureOptions = constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION | constants.SSL_OP_CIPHER_SERVER_PREFERENCE; }
+ if ((obj.config.smtp.auth != null) && (typeof obj.config.smtp.auth == 'object')) {
+ var user = obj.config.smtp.from;
+ if ((user == null) && (obj.config.smtp.user != null)) { user = obj.config.smtp.user; }
+ if ((obj.config.smtp.auth.user != null) && (typeof obj.config.smtp.auth.user == 'string')) { user = obj.config.smtp.auth.user; }
+ if (user.toLowerCase().endsWith('@gmail.com')) { options = { service: 'gmail', auth: { user: user } }; obj.config.smtp.host = 'gmail'; } else { options.auth = { user: user } }
+ if (obj.config.smtp.auth.type) { options.auth.type = obj.config.smtp.auth.type; }
+ if (obj.config.smtp.auth.clientid) { options.auth.clientId = obj.config.smtp.auth.clientid; options.auth.type = 'OAuth2'; }
+ if (obj.config.smtp.auth.clientsecret) { options.auth.clientSecret = obj.config.smtp.auth.clientsecret; }
+ if (obj.config.smtp.auth.refreshtoken) { options.auth.refreshToken = obj.config.smtp.auth.refreshtoken; }
}
+ else if ((obj.config.smtp.user != null) && (obj.config.smtp.pass != null)) { options.auth = { user: obj.config.smtp.user, pass: obj.config.smtp.pass }; }
+ if (obj.config.smtp.verifyemail == true) { obj.verifyemail = true; }
+
+ obj.smtpServer = nodemailer.createTransport(options);
} else if (obj.config.sendmail != null) {
// Setup Sendmail
- if ((typeof obj.config.sendmail.emaildelayseconds == 'number') && (obj.config.sendmail.emaildelayseconds > 0)) { obj.emailDelay = obj.config.sendmail.emaildelayseconds * 1000; }
const nodemailer = require('nodemailer');
var options = { sendmail: true };
if (typeof obj.config.sendmail.newline == 'string') { options.newline = obj.config.sendmail.newline; }
@@ -385,8 +376,8 @@ module.exports.CreateMeshMail = function (parent, domain) {
}
// Set all the template replacement options and generate the final email text (both in txt and html formats).
- const optionsHtml = { username: EscapeHtml(username), email: EscapeHtml(email), servername: EscapeHtml(domain.title ? domain.title : 'MeshCentral'), header: true, footer: false };
- const optionsTxt = { username: username, email: email, servername: domain.title ? domain.title : 'MeshCentral', header: true, footer: false };
+ var optionsHtml = { username: username, email: email, servername: domain.title ? domain.title : 'MeshCentral', header: true, footer: false };
+ var optionsTxt = { username: username, email: email, servername: domain.title ? domain.title : 'MeshCentral', header: true, footer: false };
if ((connections == null) || (connections.length == 0)) {
optionsHtml.connections = false;
optionsTxt.connections = false;
@@ -414,39 +405,6 @@ module.exports.CreateMeshMail = function (parent, domain) {
});
};
- // Send device help request notification mail
- obj.sendDeviceHelpMail = function (domain, username, email, devicename, nodeid, helpusername, helprequest, language) {
- obj.checkEmail(email, function (checked) {
- if (checked) {
- parent.debug('email', "Sending device help notification to " + email);
-
- if ((parent.certificates == null) || (parent.certificates.CommonName == null) || (parent.certificates.CommonName.indexOf('.') == -1)) {
- parent.debug('email', "Error: Server name not set."); // If the server name is not set, email not possible.
- return;
- }
-
- var template = getTemplate('device-help', domain, language);
- if ((template == null) || (template.htmlSubject == null) || (template.txtSubject == null)) {
- parent.debug('email', "Error: Failed to get mail template."); // No email template found
- return;
- }
-
- // Set all the template replacement options and generate the final email text (both in txt and html formats).
- const optionsHtml = { devicename: EscapeHtml(devicename), helpusername: EscapeHtml(helpusername), helprequest: EscapeHtml(helprequest), nodeid: nodeid.split('/')[2], servername: EscapeHtml(domain.title ? domain.title : 'MeshCentral') };
- const optionsTxt = { devicename: devicename, helpusername: helpusername, helprequest: helprequest, nodeid: nodeid.split('/')[2], servername: domain.title ? domain.title : 'MeshCentral' };
-
- // Get from field
- var from = null;
- if (obj.config.sendgrid && (typeof obj.config.sendgrid.from == 'string')) { from = obj.config.sendgrid.from; }
- else if (obj.config.smtp && (typeof obj.config.smtp.from == 'string')) { from = obj.config.smtp.from; }
-
- // Send the email
- obj.pendingMails.push({ to: email, from: from, subject: mailReplacements(template.htmlSubject, domain, optionsTxt), text: mailReplacements(template.txt, domain, optionsTxt), html: mailReplacements(template.html, domain, optionsHtml) });
- sendNextMail();
- }
- });
- };
-
// Send out the next mail in the pending list
function sendNextMail() {
if ((obj.sendingMail == true) || (obj.pendingMails.length == 0)) { return; }
@@ -482,50 +440,39 @@ module.exports.CreateMeshMail = function (parent, domain) {
}
});
} else if (obj.smtpServer != null) {
+ // SMTP send
parent.debug('email', 'SMTP sending mail to ' + mailToSend.to + '.');
- if (obj.smtpServer == 'console') {
- // Display the email on the console, this is for easy debugging
- if (mailToSend.from == null) { delete mailToSend.from; }
- if (mailToSend.html == null) { delete mailToSend.html; }
- console.log('Email', mailToSend);
+ obj.smtpServer.sendMail(mailToSend, function (err, info) {
+ parent.debug('email', 'SMTP response: ' + JSON.stringify(err) + ', ' + JSON.stringify(info));
obj.sendingMail = false;
- obj.pendingMails.shift();
- obj.retry = 0;
- sendNextMail();
- } else {
- // SMTP send
- obj.smtpServer.sendMail(mailToSend, function (err, info) {
- parent.debug('email', 'SMTP response: ' + JSON.stringify(err) + ', ' + JSON.stringify(info));
- obj.sendingMail = false;
- if (err == null) {
- // Send the next mail
+ if (err == null) {
+ // Send the next mail
+ obj.pendingMails.shift();
+ obj.retry = 0;
+ sendNextMail();
+ } else {
+ obj.retry++;
+ parent.debug('email', 'SMTP server failed (Retry:' + obj.retry + '): ' + JSON.stringify(err));
+ console.log('SMTP server failed (Retry:' + obj.retry + '/3): ' + JSON.stringify(err));
+ // Wait and try again
+ if (obj.retry < 3) {
+ setTimeout(sendNextMail, 10000);
+ } else {
+ // Failed, send the next mail
+ parent.debug('email', 'SMTP server failed (Skipping): ' + JSON.stringify(err));
+ console.log('SMTP server failed (Skipping): ' + JSON.stringify(err));
obj.pendingMails.shift();
obj.retry = 0;
sendNextMail();
- } else {
- obj.retry++;
- parent.debug('email', 'SMTP server failed (Retry:' + obj.retry + '): ' + JSON.stringify(err));
- console.log('SMTP server failed (Retry:' + obj.retry + '/3): ' + JSON.stringify(err));
- // Wait and try again
- if (obj.retry < 3) {
- setTimeout(sendNextMail, 10000);
- } else {
- // Failed, send the next mail
- parent.debug('email', 'SMTP server failed (Skipping): ' + JSON.stringify(err));
- console.log('SMTP server failed (Skipping): ' + JSON.stringify(err));
- obj.pendingMails.shift();
- obj.retry = 0;
- sendNextMail();
- }
}
- });
- }
+ }
+ });
}
}
// Send out the next mail in the pending list
obj.verify = function () {
- if ((obj.smtpServer == null) || (obj.smtpServer == 'console')) return;
+ if (obj.smtpServer == null) return;
obj.smtpServer.verify(function (err, info) {
if (err == null) {
if (obj.config.smtp.host == 'gmail') {
@@ -575,7 +522,7 @@ module.exports.CreateMeshMail = function (parent, domain) {
}
//
- // Device connection and disconnection notifications
+ // Device connetion and disconnection notifications
//
obj.deviceNotifications = {}; // UserId --> { timer, nodes: nodeid --> connectType }
@@ -588,7 +535,7 @@ module.exports.CreateMeshMail = function (parent, domain) {
// Add the user and start a timer
if (obj.deviceNotifications[user._id] == null) {
obj.deviceNotifications[user._id] = { nodes: {} };
- obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, obj.emailDelay);
+ obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, 5 * 60 * 1000); // 5 minute before email is sent
}
// Add the device
@@ -652,7 +599,7 @@ module.exports.CreateMeshMail = function (parent, domain) {
// Add the user and start a timer
if (obj.deviceNotifications[user._id] == null) {
obj.deviceNotifications[user._id] = { nodes: {} };
- obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, obj.emailDelay);
+ obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, 5 * 60 * 1000); // 5 minute before email is sent
}
// Add the device
diff --git a/meshmessaging.js b/meshmessaging.js
deleted file mode 100644
index 646ae4a2..00000000
--- a/meshmessaging.js
+++ /dev/null
@@ -1,757 +0,0 @@
-/**
-* @description MeshCentral user messaging communication module
-* @author Ylian Saint-Hilaire
-* @copyright Intel Corporation 2022
-* @license Apache-2.0
-* @version v0.0.1
-*/
-
-/*xjslint node: true */
-/*xjslint plusplus: true */
-/*xjslint maxlen: 256 */
-/*jshint node: true */
-/*jshint strict: false */
-/*jshint esversion: 6 */
-"use strict";
-
-/*
-// For Telegram user login, add this in config.json
-"messaging": {
- "telegram": {
- "apiid": 00000000,
- "apihash": "00000000000000000000000",
- "session": "aaaaaaaaaaaaaaaaaaaaaaa"
- }
-}
-
-// For Telegram bot login, add this in config.json
-"messaging": {
- "telegram": {
- "apiid": 00000000,
- "apihash": "00000000000000000000000",
- "bottoken": "00000000:aaaaaaaaaaaaaaaaaaaaaaaa"
- }
-}
-
-// For Telegram login with proxy settings, add this in config.json
-{
- "messaging": {
- "telegram": {
- "apiid": 0,
- "apihash": "00000000000000000000000",
- "session": "aaaaaaaaaaaaaaaaaaaaaaa",
- "useWSS": false, // Important. Most proxies cannot use SSL.
- "proxy": {
- "ip": "123.123.123.123", // Proxy host (IP or hostname)
- "port": 123, // Proxy port
- "MTProxy": false, // Whether it's an MTProxy or a normal Socks one
- "secret": "00000000000000000000000000000000", // If used MTProxy then you need to provide a secret (or zeros).
- "socksType": 5, // If used Socks you can choose 4 or 5.
- "timeout": 2 // Timeout (in seconds) for connection,
- }
- }
- }
-}
-
-// For Discord login, add this in config.json
-"messaging": {
- "discord": {
- "inviteurl": "https://discord.gg/xxxxxxxxx",
- "token": "xxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxx"
- }
-}
-
-// For XMPP login, add this in config.json
-{
- "messaging": {
- "xmpp": {
- "service": "xmppserver.com",
- "credentials": {
- "username": "username",
- "password": "password"
- }
- }
- }
-}
-
-// For CallMeBot
-// For Signal Messenger: https://www.callmebot.com/blog/free-api-signal-send-messages/
-{
- "messaging": {
- "callmebot": true
- }
-}
-
-// For Pushover
-{
- "messaging": {
- "pushover": {
- "token": "xxxxxxx"
- }
- }
-}
-
-// For ntfy
-{
- "messaging": {
- "ntfy": true
- }
-}
-
-// For zulip
-{
- "messaging": {
- "site": "https://api.zulip.com",
- "email": "your-bot@zulip.com",
- "api_key": "your_32_character_api_key"
- }
-}
-
-// For Slack Webhook
-{
- "messaging": {
- "slack": true
- }
-}
-
-*/
-
-// Construct a messaging server object
-module.exports.CreateServer = function (parent) {
- var obj = {};
- obj.parent = parent;
- obj.providers = 0; // 1 = Telegram, 2 = Signal, 4 = Discord, 8 = XMPP, 16 = CallMeBot, 32 = Pushover, 64 = ntfy, 128 = Zulip, 256 = Slack
- obj.telegramClient = null;
- obj.discordClient = null;
- obj.discordUrl = null;
- obj.xmppClient = null;
- var xmppXml = null;
- obj.callMeBotClient = null;
- obj.pushoverClient = null;
- obj.zulipClient = null;
- obj.slackClient = null;
- const sortCollator = new Intl.Collator(undefined, { numeric: true, sensitivity: 'base' })
-
- // Telegram client setup
- if (parent.config.messaging.telegram) {
- // Validate Telegram configuration values
- var telegramOK = true;
- if (typeof parent.config.messaging.telegram.apiid != 'number') { console.log('Invalid or missing Telegram apiid.'); telegramOK = false; }
- if (typeof parent.config.messaging.telegram.apihash != 'string') { console.log('Invalid or missing Telegram apihash.'); telegramOK = false; }
- if ((typeof parent.config.messaging.telegram.session != 'string') && (typeof parent.config.messaging.telegram.bottoken != 'string')) { console.log('Invalid or missing Telegram session or bottoken.'); telegramOK = false; }
-
- if (telegramOK) {
- // Setup Telegram
- async function setupTelegram() {
- const { TelegramClient } = require('telegram');
- const { StringSession } = require('telegram/sessions');
- const { Logger } = require('telegram/extensions/Logger');
- const logger = new Logger({ LogLevel : 'none' });
- const input = require('input');
- var client;
- var options = { connectionRetries: 5, baseLogger: logger };
- if (parent.config.messaging.telegram.usewss == false) { options.useWSS = false; }
- if (typeof parent.config.messaging.telegram.connectionretries == 'number') { options.connectionRetries = parent.config.messaging.telegram.connectionretries; }
- if (typeof parent.config.messaging.telegram.proxy == 'object') { options.proxy = parent.config.messaging.telegram.proxy; }
- if (parent.config.messaging.telegram.bottoken == null) {
- // User login
- var stringSession = new StringSession(parent.config.messaging.telegram.session);
- const client = new TelegramClient(stringSession, parent.config.messaging.telegram.apiid, parent.config.messaging.telegram.apihash, options);
- await client.start({ onError: function (err) { console.log('Telegram error', err); } });
- obj.telegramClient = client;
- obj.providers += 1; // Enable Telegram messaging
- console.log("MeshCentral Telegram client is user connected.");
- } else {
- // Bot login
- var stringSession = new StringSession('');
- const client = new TelegramClient(stringSession, parent.config.messaging.telegram.apiid, parent.config.messaging.telegram.apihash, options);
- await client.start({ botAuthToken: parent.config.messaging.telegram.bottoken, onError: function (err) { console.log('Telegram error', err); } });
- obj.telegramClient = client;
- obj.providers += 1; // Enable Telegram messaging
- console.log("MeshCentral Telegram client is bot connected.");
- }
- }
- setupTelegram();
- }
- }
-
- // Discord client setup
- if (parent.config.messaging.discord) {
- // Validate Discord configuration values
- var discordOK = true;
- if (typeof parent.config.messaging.discord.token != 'string') { console.log('Invalid or missing Discord token.'); discordOK = false; }
-
- if (discordOK) {
- // Setup Discord
- const { Client, GatewayIntentBits } = require('discord.js');
- var discordClient = new Client({
- intents: [
- GatewayIntentBits.Guilds,
- GatewayIntentBits.GuildMessages,
- GatewayIntentBits.MessageContent,
- GatewayIntentBits.GuildMembers,
- GatewayIntentBits.DirectMessages
- ]
- });
-
- // Called when Discord client is connected
- discordClient.on('ready', function() {
- console.log(`MeshCentral Discord client is connected as ${discordClient.user.tag}!`);
- obj.discordClient = discordClient;
- obj.discordUrl = parent.config.messaging.discord.serverurl;
- obj.providers += 4; // Enable Discord messaging
- });
-
- // Receives incoming messages, ignore for now
- discordClient.on('messageCreate', function(message) {
- if (message.author.bot) return false;
- console.log(`Discord message from ${message.author.username}: ${message.content}`, message.channel.type);
- //message.channel.send("Channel Hello");
- //message.author.send('Private Hello');
- });
-
- // Called when Discord client received an interaction
- discordClient.on('interactionCreate', async function(interaction) {
- console.log('Discord interaction', interaction);
- if (!interaction.isChatInputCommand()) return;
- if (interaction.commandName === 'ping') { await interaction.reply('Pong!'); }
- });
-
- // Connect Discord client
- discordClient.login(parent.config.messaging.discord.token);
- }
- }
-
- // XMPP client setup
- if (parent.config.messaging.xmpp) {
- // Validate XMPP configuration values
- var xmppOK = true;
- if (typeof parent.config.messaging.xmpp.service != 'string') { console.log('Invalid or missing XMPP service.'); xmppOK = false; }
-
- if (xmppOK) {
- // Setup XMPP
- const { client, xml } = require('@xmpp/client');
- const xmpp = client(parent.config.messaging.xmpp);
- xmpp.on('error', function (err) { parent.debug('email', 'XMPP error: ' + err); console.error('XMPP error', err); });
- xmpp.on('offline', function () { parent.debug('email', 'XMPP client is offline.'); console.log('XMPP offline'); });
- //xmpp.on('stanza', async function (stanza) { if (stanza.is("message")) { await xmpp.send(xml('presence', { type: 'unavailable' })); await xmpp.stop(); } });
- xmpp.on('online', async function (address) {
- // await xmpp.send(xml("presence")); const message = xml("message", { type: "chat", to: "username@server.com" }, xml("body", {}, "hello world")); await xmpp.send(message);
- xmppXml = xml;
- obj.xmppClient = xmpp;
- obj.providers += 8; // Enable XMPP messaging
- console.log("MeshCentral XMPP client is connected.");
- });
- xmpp.start().catch(console.error);
- }
- }
-
- // CallMeBot client setup (https://www.callmebot.com/)
- if (parent.config.messaging.callmebot) {
- obj.callMeBotClient = true;
- obj.providers += 16; // Enable CallMeBot messaging
- }
-
- // Pushover client setup (https://pushover.net)
- if (typeof parent.config.messaging.pushover == 'object') {
- // Validate Pushover configuration values
- var pushoverOK = true;
- if (typeof parent.config.messaging.pushover.token != 'string') { console.log('Invalid or missing Pushover token.'); pushoverOK = false; }
-
- if (pushoverOK) {
- // Setup PushOver
- obj.pushoverClient = true;
- obj.providers += 32; // Enable Pushover messaging
- }
- }
-
- // ntfy client setup (https://ntfy.sh/)
- if (parent.config.messaging.ntfy) {
- obj.ntfyClient = true;
- obj.providers += 64; // Enable ntfy messaging
- }
-
- // Zulip client setup (https://zulip.com/)
- if (typeof parent.config.messaging.zulip == 'object') {
- var zulip = require('zulip');
- obj.zulipClient = new zulip.Client(parent.config.messaging.zulip);
- obj.providers += 128; // Enable zulip messaging
- }
-
- // Slack Webhook setup (https://slack.com)
- if (parent.config.messaging.slack) {
- obj.slackClient = true;
- obj.providers += 256; // Enable slack messaging
- }
-
- // Send a direct message to a specific userid
- async function discordSendMsg(userId, message) {
- const user = await obj.discordClient.users.fetch(userId).catch(function () { return null; });
- if (!user) return;
- await user.send(message).catch(function (ex) { console.log('Discord Error', ex); });
- }
-
- // Convert a userTag to a userId. We need to query the Discord server to find this information.
- // Example: findUserByTab('aaaa#0000', function (userid) { sendMsg(userid, 'message'); });
- async function discordFindUserByTag(userTag, func) {
- var username = userTag.split('#')[0];
- const guilds = await obj.discordClient.guilds.fetch();
- guilds.forEach(async function (value, key) {
- var guild = await value.fetch();
- const guildMembers = await guild.members.search({ query: username });
- guildMembers.forEach(async function (value, key) {
- if ((value.user.username + (value.user.discriminator != '0' ? '#' + value.user.discriminator : ''))== userTag) { func(key); return; }
- });
- });
- }
-
- // Send an XMPP message
- async function sendXmppMessage(to, msg, func) {
- const message = xmppXml('message', { type: 'chat', to: to.substring(5) }, xmppXml('body', {}, msg));
- await obj.xmppClient.send(message);
- if (func != null) { func(true); }
- }
-
- // Send an user message
- obj.sendMessage = function(to, msg, domain, func) {
- if ((to.startsWith('telegram:')) && (obj.telegramClient != null)) { // Telegram
- async function sendTelegramMessage(to, msg, func) {
- if (obj.telegramClient == null) return;
- parent.debug('email', 'Sending Telegram message to: ' + to.substring(9) + ': ' + msg);
- try { await obj.telegramClient.sendMessage(to.substring(9), { message: msg }); if (func != null) { func(true); } } catch (ex) { if (func != null) { func(false, ex); } }
- }
- sendTelegramMessage(to, msg, func);
- } else if ((to.startsWith('discord:')) && (obj.discordClient != null)) { // Discord
- discordFindUserByTag(to.substring(8), function (userid) {
- parent.debug('email', 'Sending Discord message to: ' + to.substring(9) + ', ' + userid + ': ' + msg);
- discordSendMsg(userid, msg); if (func != null) { func(true); }
- });
- } else if ((to.startsWith('xmpp:')) && (obj.xmppClient != null)) { // XMPP
- parent.debug('email', 'Sending XMPP message to: ' + to.substring(5) + ': ' + msg);
- sendXmppMessage(to, msg, func);
- } else if ((to.startsWith('callmebot:')) && (obj.callMeBotClient != null)) { // CallMeBot
- parent.debug('email', 'Sending CallMeBot message to: ' + to.substring(10) + ': ' + msg);
- console.log('Sending CallMeBot message to: ' + to.substring(10) + ': ' + msg);
- var toData = to.substring(10).split('|');
- if ((toData[0] == 'signal') && (toData.length == 3)) {
- var url = 'https://api.callmebot.com/signal/send.php?phone=' + encodeURIComponent(toData[1]) + '&apikey=' + encodeURIComponent(toData[2]) + '&text=' + encodeURIComponent(msg);
- require('https').get(url, function (r) { if (func != null) { func(r.statusCode == 200); } });
- } else if ((toData[0] == 'whatsapp') && (toData.length == 3)) {
- var url = 'https://api.callmebot.com/whatsapp.php?phone=' + encodeURIComponent(toData[1]) + '&apikey=' + encodeURIComponent(toData[2]) + '&text=' + encodeURIComponent(msg);
- require('https').get(url, function (r) { if (func != null) { func(r.statusCode == 200); } });
- } else if ((toData[0] == 'facebook') && (toData.length == 2)) {
- var url = 'https://api.callmebot.com/facebook/send.php?apikey=' + encodeURIComponent(toData[1]) + '&text=' + encodeURIComponent(msg);
- require('https').get(url, function (r) { if (func != null) { func(r.statusCode == 200); } });
- } else if ((toData[0] == 'telegram') && (toData.length == 2)) {
- var url = 'https://api.callmebot.com/text.php?user=' + encodeURIComponent(toData[1]) + '&text=' + encodeURIComponent(msg);
- require('https').get(url, function (r) { if (func != null) { func(r.statusCode == 200); } });
- }
- } else if ((to.startsWith('pushover:')) && (obj.pushoverClient != null)) { // Pushover
- const Pushover = require('node-pushover');
- const push = new Pushover({ token: parent.config.messaging.pushover.token, user: to.substring(9) });
- push.send(domain.title ? domain.title : 'MeshCentral', msg, function (err, res) { if (func != null) { func(err == null); } });
- } else if ((to.startsWith('ntfy:')) && (obj.ntfyClient != null)) { // ntfy
- const url = 'https://' + (((typeof parent.config.messaging.ntfy == 'object') && (typeof parent.config.messaging.ntfy.host == 'string')) ? parent.config.messaging.ntfy.host : 'ntfy.sh') + '/' + encodeURIComponent(to.substring(5));
- const headers = { 'User-Agent': 'MeshCentral v' + parent.currentVer };
- if (typeof parent.config.messaging.ntfy.authorization == 'string') { headers['Authorization'] = parent.config.messaging.ntfy.authorization; }
- const req = require('https').request(new URL(url), { method: 'POST', headers: headers }, function (res) { if (func != null) { func(res.statusCode == 200); } });
- req.end(msg);
- } else if ((to.startsWith('zulip:')) && (obj.zulipClient != null)) { // zulip
- obj.zulipClient.sendMessage({
- type: 'private',
- content: msg,
- to: [ to.substring(6) ],
- subject: domain.title ? domain.title : 'MeshCentral'
- });
- if (func != null) { func(true); }
- }else if ((to.startsWith('slack:')) && (obj.slackClient != null)) { //slack
- const req = require('https').request(new URL(to.substring(6)), { method: 'POST' }, function (res) { if (func != null) { func(true); } });
- req.on('error', function (err) { if (func != null) { func(false); } });
- req.write(JSON.stringify({"text": msg }));
- req.end();
- } else {
- // No providers found
- if (func != null) { func(false, "No messaging providers found for this message."); }
- }
- }
-
- // Convert a CallMeBot URL into a handle
- obj.callmebotUrlToHandle = function (xurl) {
- var url = null;
- try { url = require('url').parse(xurl); } catch (ex) { return; }
- if ((url == null) || (url.host != 'api.callmebot.com') || (url.query == null)) return;
- var urlArgs = {}, urlArgs2 = url.query.split('&');
- for (var i in urlArgs2) { var j = urlArgs2[i].indexOf('='); if (j > 0) { urlArgs[urlArgs2[i].substring(0, j)] = urlArgs2[i].substring(j + 1); } }
- if ((urlArgs['phone'] != null) && (urlArgs['phone'].indexOf('|') >= 0)) return;
- if ((urlArgs['apikey'] != null) && (urlArgs['apikey'].indexOf('|') >= 0)) return;
- if ((urlArgs['user'] != null) && (urlArgs['user'].indexOf('|') >= 0)) return;
- // Signal Messenger, Whatapp, Facebook and Telegram
- if (url.path.startsWith('/signal') && (urlArgs['phone'] != null) && (urlArgs['apikey'] != null)) { return 'callmebot:signal|' + urlArgs['phone'] + '|' + urlArgs['apikey']; }
- if (url.path.startsWith('/whatsapp') && (urlArgs['phone'] != null) && (urlArgs['apikey'] != null)) { return 'callmebot:whatsapp|' + urlArgs['phone'] + '|' + urlArgs['apikey']; }
- if (url.path.startsWith('/facebook') && (urlArgs['apikey'] != null)) { return 'callmebot:facebook|' + urlArgs['apikey']; }
- if (url.path.startsWith('/text') && (urlArgs['user'] != null)) { return 'callmebot:telegram|' + urlArgs['user']; }
- return null;
- }
-
- // Get the correct SMS template
- function getTemplate(templateNumber, domain, lang) {
- parent.debug('email', 'Getting SMS template #' + templateNumber + ', lang: ' + lang);
- if (Array.isArray(lang)) { lang = lang[0]; } // TODO: For now, we only use the first language given.
-
- var r = {}, emailsPath = null;
- if ((domain != null) && (domain.webemailspath != null)) { emailsPath = domain.webemailspath; }
- else if (obj.parent.webEmailsOverridePath != null) { emailsPath = obj.parent.webEmailsOverridePath; }
- else if (obj.parent.webEmailsPath != null) { emailsPath = obj.parent.webEmailsPath; }
- if ((emailsPath == null) || (obj.parent.fs.existsSync(emailsPath) == false)) { return null }
-
- // Get the non-english email if needed
- var txtfile = null;
- if ((lang != null) && (lang != 'en')) {
- var translationsPath = obj.parent.path.join(emailsPath, 'translations');
- var translationsPathTxt = obj.parent.path.join(emailsPath, 'translations', 'sms-messages_' + lang + '.txt');
- if (obj.parent.fs.existsSync(translationsPath) && obj.parent.fs.existsSync(translationsPathTxt)) {
- txtfile = obj.parent.fs.readFileSync(translationsPathTxt).toString();
- }
- }
-
- // Get the english email
- if (txtfile == null) {
- var pathTxt = obj.parent.path.join(emailsPath, 'sms-messages.txt');
- if (obj.parent.fs.existsSync(pathTxt)) {
- txtfile = obj.parent.fs.readFileSync(pathTxt).toString();
- }
- }
-
- // No email templates
- if (txtfile == null) { return null; }
-
- // Decode the TXT file
- var lines = txtfile.split('\r\n').join('\n').split('\n')
- if (lines.length <= templateNumber) return null;
-
- return lines[templateNumber];
- }
-
- // Send messaging account verification
- obj.sendMessagingCheck = function (domain, to, verificationCode, language, func) {
- parent.debug('email', "Sending verification message to " + to);
-
- var sms = getTemplate(0, domain, language);
- if (sms == null) { parent.debug('email', "Error: Failed to get SMS template"); return; } // No SMS template found
-
- // Setup the template
- sms = sms.split('[[0]]').join(domain.title ? domain.title : 'MeshCentral');
- sms = sms.split('[[1]]').join(verificationCode);
-
- // Send the message
- obj.sendMessage(to, sms, domain, func);
- };
-
- // Send 2FA verification
- obj.sendToken = function (domain, to, verificationCode, language, func) {
- parent.debug('email', "Sending login token message to " + to);
-
- var sms = getTemplate(1, domain, language);
- if (sms == null) { parent.debug('email', "Error: Failed to get SMS template"); return; } // No SMS template found
-
- // Setup the template
- sms = sms.split('[[0]]').join(domain.title ? domain.title : 'MeshCentral');
- sms = sms.split('[[1]]').join(verificationCode);
-
- // Send the message
- obj.sendMessage(to, sms, domain, func);
- };
-
- // Send device state change notification
- obj.sendDeviceNotify = function (domain, username, to, connections, disconnections, lang) {
- if (to == null) return;
- parent.debug('email', "Sending device state change message to " + to);
-
- // Format the message
- var sms = [];
- if (connections.length > 0) { sms.push('Connections: ' + connections.join(', ')); } // TODO: Translate 'Connections: '
- if (disconnections.length > 0) { sms.push('Disconnections: ' + disconnections.join(', ')); } // TODO: Translate 'Disconnections: '
- if (sms.length == 0) return;
- sms = sms.join(' - ');
- if (sms.length > 1000) { sms = sms.substring(0, 997) + '...'; } // Limit messages to 1000 characters
-
- // Send the message
- obj.sendMessage(to, sms, domain, null);
- };
-
- // Send help request notification
- obj.sendDeviceHelpRequest = function (domain, username, to, devicename, nodeid, helpusername, helprequest, lang) {
- if (to == null) return;
- parent.debug('email', "Sending device help request message to " + to);
-
- // Format the message
- var sms = "Help Request from " + devicename + ': ' + helprequest; // TODO: Translate 'Help Request from {0}:'
- if (sms.length > 1000) { sms = sms.substring(0, 997) + '...'; } // Limit messages to 1000 characters
-
- // Send the message
- obj.sendMessage(to, sms, domain, null);
- }
-
-
- //
- // Device connection and disconnection notifications
- //
-
- obj.deviceNotifications = {}; // UserId --> { timer, nodes: nodeid --> connectType }
-
- // A device connected and a user needs to be notified about it.
- obj.notifyDeviceConnect = function (user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo) {
- const mesh = parent.webserver.meshes[meshid];
- if (mesh == null) return;
-
- // Add the user and start a timer
- if (obj.deviceNotifications[user._id] == null) {
- obj.deviceNotifications[user._id] = { nodes: {} };
- obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, 1 * 60 * 1000); // 1 minute before message is sent
- }
-
- // Add the device
- if (obj.deviceNotifications[user._id].nodes[nodeid] == null) {
- obj.deviceNotifications[user._id].nodes[nodeid] = { c: connectType }; // This device connection need to be added
- } else {
- const info = obj.deviceNotifications[user._id].nodes[nodeid];
- if ((info.d != null) && ((info.d & connectType) != 0)) {
- info.d -= connectType; // This device disconnect cancels out a device connection
- if (((info.c == null) || (info.c == 0)) && ((info.d == null) || (info.d == 0))) {
- // This device no longer needs a notification
- delete obj.deviceNotifications[user._id].nodes[nodeid];
- if (Object.keys(obj.deviceNotifications[user._id].nodes).length == 0) {
- // This user no longer needs a notification
- clearTimeout(obj.deviceNotifications[user._id].timer);
- delete obj.deviceNotifications[user._id];
- }
- return;
- }
- } else {
- if (info.c != null) {
- info.c |= connectType; // This device disconnect needs to be added
- } else {
- info.c = connectType; // This device disconnect needs to be added
- }
- }
- }
-
- // Set the device group name
- if ((extraInfo != null) && (extraInfo.name != null)) { obj.deviceNotifications[user._id].nodes[nodeid].nn = extraInfo.name; }
- obj.deviceNotifications[user._id].nodes[nodeid].mn = mesh.name;
- }
-
- // Cancel a device disconnect notification
- obj.cancelNotifyDeviceDisconnect = function (user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo) {
- const mesh = parent.webserver.meshes[meshid];
- if (mesh == null) return;
-
- if ((obj.deviceNotifications[user._id] != null) && (obj.deviceNotifications[user._id].nodes[nodeid] != null)) {
- const info = obj.deviceNotifications[user._id].nodes[nodeid];
- if ((info.d != null) && ((info.d & connectType) != 0)) {
- info.d -= connectType; // This device disconnect cancels out a device connection
- if (((info.c == null) || (info.c == 0)) && ((info.d == null) || (info.d == 0))) {
- // This device no longer needs a notification
- delete obj.deviceNotifications[user._id].nodes[nodeid];
- if (Object.keys(obj.deviceNotifications[user._id].nodes).length == 0) {
- // This user no longer needs a notification
- clearTimeout(obj.deviceNotifications[user._id].timer);
- delete obj.deviceNotifications[user._id];
- }
- }
- }
- }
- }
-
- // A device disconnected and a user needs to be notified about it.
- obj.notifyDeviceDisconnect = function (user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo) {
- const mesh = parent.webserver.meshes[meshid];
- if (mesh == null) return;
-
- // Add the user and start a timer
- if (obj.deviceNotifications[user._id] == null) {
- obj.deviceNotifications[user._id] = { nodes: {} };
- obj.deviceNotifications[user._id].timer = setTimeout(function () { sendDeviceNotifications(user._id); }, 1 * 60 * 1000); // 1 minute before message is sent
- }
-
- // Add the device
- if (obj.deviceNotifications[user._id].nodes[nodeid] == null) {
- obj.deviceNotifications[user._id].nodes[nodeid] = { d: connectType }; // This device disconnect need to be added
- } else {
- const info = obj.deviceNotifications[user._id].nodes[nodeid];
- if ((info.c != null) && ((info.c & connectType) != 0)) {
- info.c -= connectType; // This device disconnect cancels out a device connection
- if (((info.d == null) || (info.d == 0)) && ((info.c == null) || (info.c == 0))) {
- // This device no longer needs a notification
- delete obj.deviceNotifications[user._id].nodes[nodeid];
- if (Object.keys(obj.deviceNotifications[user._id].nodes).length == 0) {
- // This user no longer needs a notification
- clearTimeout(obj.deviceNotifications[user._id].timer);
- delete obj.deviceNotifications[user._id];
- }
- return;
- }
- } else {
- if (info.d != null) {
- info.d |= connectType; // This device disconnect needs to be added
- } else {
- info.d = connectType; // This device disconnect needs to be added
- }
- }
- }
-
- // Set the device group name
- if ((extraInfo != null) && (extraInfo.name != null)) { obj.deviceNotifications[user._id].nodes[nodeid].nn = extraInfo.name; }
- obj.deviceNotifications[user._id].nodes[nodeid].mn = mesh.name;
- }
-
- // Cancel a device connect notification
- obj.cancelNotifyDeviceConnect = function (user, meshid, nodeid, connectTime, connectType, powerState, serverid, extraInfo) {
- const mesh = parent.webserver.meshes[meshid];
- if (mesh == null) return;
-
- if ((obj.deviceNotifications[user._id] != null) && (obj.deviceNotifications[user._id].nodes[nodeid] != null)) {
- const info = obj.deviceNotifications[user._id].nodes[nodeid];
- if ((info.c != null) && ((info.c & connectType) != 0)) {
- info.c -= connectType; // This device disconnect cancels out a device connection
- if (((info.d == null) || (info.d == 0)) && ((info.c == null) || (info.c == 0))) {
- // This device no longer needs a notification
- delete obj.deviceNotifications[user._id].nodes[nodeid];
- if (Object.keys(obj.deviceNotifications[user._id].nodes).length == 0) {
- // This user no longer needs a notification
- clearTimeout(obj.deviceNotifications[user._id].timer);
- delete obj.deviceNotifications[user._id];
- }
- }
- }
- }
- }
-
- // Send a notification about device connections and disconnections to a user
- function sendDeviceNotifications(userid) {
- if (obj.deviceNotifications[userid] == null) return;
- clearTimeout(obj.deviceNotifications[userid].timer);
-
- var connections = [];
- var disconnections = [];
-
- for (var nodeid in obj.deviceNotifications[userid].nodes) {
- var info = obj.deviceNotifications[userid].nodes[nodeid];
- if ((info.c != null) && (info.c > 0) && (info.nn != null) && (info.mn != null)) {
- /*
- var c = [];
- if (info.c & 1) { c.push("Agent"); }
- if (info.c & 2) { c.push("CIRA"); }
- if (info.c & 4) { c.push("AMT"); }
- if (info.c & 8) { c.push("AMT-Relay"); }
- if (info.c & 16) { c.push("MQTT"); }
- connections.push(info.mn + ', ' + info.nn + ': ' + c.join(', '));
- */
- if (info.c & 1) { connections.push(info.nn); }
- }
- if ((info.d != null) && (info.d > 0) && (info.nn != null) && (info.mn != null)) {
- /*
- var d = [];
- if (info.d & 1) { d.push("Agent"); }
- if (info.d & 2) { d.push("CIRA"); }
- if (info.d & 4) { d.push("AMT"); }
- if (info.d & 8) { d.push("AMT-Relay"); }
- if (info.d & 16) { d.push("MQTT"); }
- disconnections.push(info.mn + ', ' + info.nn + ': ' + d.join(', '));
- */
- if (info.d & 1) { disconnections.push(info.nn); }
- }
- }
-
- // Sort the notifications
- connections.sort(sortCollator.compare);
- disconnections.sort(sortCollator.compare);
-
- // Get the user and domain
- const user = parent.webserver.users[userid];
- if ((user == null) || (user.msghandle == null)) return;
- const domain = obj.parent.config.domains[user.domain];
- if (domain == null) return;
-
- // Send the message
- obj.sendDeviceNotify(domain, user.name, user.msghandle, connections, disconnections, user.llang);
-
- // Clean up
- delete obj.deviceNotifications[userid];
- }
-
- return obj;
-};
-
-// Called to setup the Telegram session key
-module.exports.SetupTelegram = async function (parent) {
- // If basic telegram values are not setup, instruct the user on how to get them.
- if ((typeof parent.config.messaging != 'object') || (typeof parent.config.messaging.telegram != 'object') || (typeof parent.config.messaging.telegram.apiid != 'number') || (typeof parent.config.messaging.telegram.apihash != 'string')) {
- console.log('Login to your Telegram account at this URL: https://my.telegram.org/.');
- console.log('Click "API development tools" and fill your application details (only app title and short name required).');
- console.log('Click "Create application"');
- console.log('Set this apiid and apihash values in the messaging section of the config.json like this:');
- console.log('{');
- console.log(' "messaging": {');
- console.log(' "telegram": {');
- console.log(' "apiid": 123456,');
- console.log(' "apihash": "123456abcdfg"');
- console.log(' }');
- console.log(' }');
- console.log('}');
- console.log('Then, run --setuptelegram again to continue.');
- process.exit();
- return;
- }
-
- // If the session value is missing, perform the process to get it
- if (((parent.config.messaging.telegram.session == null) || (parent.config.messaging.telegram.session == '') || (typeof parent.config.messaging.telegram.session != 'string')) && ((parent.config.messaging.telegram.bottoken == null) || (parent.config.messaging.telegram.bottoken == '') || (typeof parent.config.messaging.telegram.bottoken != 'string'))) {
- if (parent.args.setuptelegram == 'user') {
- const { TelegramClient } = require('telegram');
- const { StringSession } = require('telegram/sessions');
- const { Logger } = require('telegram/extensions/Logger');
- const logger = new Logger({ LogLevel: 'none' });
- const input = require('input');
- const stringSession = new StringSession('');
- const client = new TelegramClient(stringSession, parent.config.messaging.telegram.apiid, parent.config.messaging.telegram.apihash, { connectionRetries: 5, baseLogger: logger });
- await client.start({
- phoneNumber: async function () { return await input.text("Please enter your number (+1-111-222-3333): "); },
- password: async function () { return await input.text("Please enter your password: "); },
- phoneCode: async function () { return await input.text("Please enter the code you received: "); },
- onError: function (err) { console.log('Telegram error', err); }
- });
- console.log('Set this session value in the messaging section of the config.json like this:');
- console.log('{');
- console.log(' "messaging": {');
- console.log(' "telegram": {');
- console.log(' "apiid": ' + parent.config.messaging.telegram.apiid + ',');
- console.log(' "apihash": "' + parent.config.messaging.telegram.apihash + '",');
- console.log(' "session": "' + client.session.save() + '"');
- console.log(' }');
- console.log(' }');
- console.log('}');
- process.exit();
- } else if (parent.args.setuptelegram == 'bot') {
- console.log('Login to your Telegram account, search for "BotFather", message him and create a bot.');
- console.log('Once you get the HTTP API token, add it in the config.json as "bottoken" like so:');
- console.log('{');
- console.log(' "messaging": {');
- console.log(' "telegram": {');
- console.log(' "apiid": ' + parent.config.messaging.telegram.apiid + ',');
- console.log(' "apihash": "' + parent.config.messaging.telegram.apihash + '",');
- console.log(' "bottoken": "00000000:aaaaaaaaaaaaaaaaaaaaaaaa"');
- console.log(' }');
- console.log(' }');
- console.log('}');
- process.exit();
- } else {
- console.log('run "--setuptelegram bot" to setup Telegram login as a bot (typical).');
- console.log('run "--setuptelegram user" to setup Telegram login as a user.');
- process.exit();
- }
- }
-
- // All Telegram values seem ok
- console.log('Telegram seems to be configured correctly in the config.json, no need to run --setuptelegram.');
- process.exit();
-};
diff --git a/meshrelay.js b/meshrelay.js
index 7f91904d..aab96b60 100644
--- a/meshrelay.js
+++ b/meshrelay.js
@@ -14,29 +14,27 @@
"use strict";
// Mesh Rights
-const MESHRIGHT_EDITMESH = 0x00000001; // 1
-const MESHRIGHT_MANAGEUSERS = 0x00000002; // 2
-const MESHRIGHT_MANAGECOMPUTERS = 0x00000004; // 4
-const MESHRIGHT_REMOTECONTROL = 0x00000008; // 8
-const MESHRIGHT_AGENTCONSOLE = 0x00000010; // 16
-const MESHRIGHT_SERVERFILES = 0x00000020; // 32
-const MESHRIGHT_WAKEDEVICE = 0x00000040; // 64
-const MESHRIGHT_SETNOTES = 0x00000080; // 128
-const MESHRIGHT_REMOTEVIEWONLY = 0x00000100; // 256
-const MESHRIGHT_NOTERMINAL = 0x00000200; // 512
-const MESHRIGHT_NOFILES = 0x00000400; // 1024
-const MESHRIGHT_NOAMT = 0x00000800; // 2048
-const MESHRIGHT_DESKLIMITEDINPUT = 0x00001000; // 4096
-const MESHRIGHT_LIMITEVENTS = 0x00002000; // 8192
-const MESHRIGHT_CHATNOTIFY = 0x00004000; // 16384
-const MESHRIGHT_UNINSTALL = 0x00008000; // 32768
-const MESHRIGHT_NODESKTOP = 0x00010000; // 65536
-const MESHRIGHT_REMOTECOMMAND = 0x00020000; // 131072
-const MESHRIGHT_RESETOFF = 0x00040000; // 262144
-const MESHRIGHT_GUESTSHARING = 0x00080000; // 524288
-const MESHRIGHT_DEVICEDETAILS = 0x00100000; // 1048576
-const MESHRIGHT_RELAY = 0x00200000; // 2097152
-const MESHRIGHT_ADMIN = 0xFFFFFFFF;
+const MESHRIGHT_EDITMESH = 0x00000001;
+const MESHRIGHT_MANAGEUSERS = 0x00000002;
+const MESHRIGHT_MANAGECOMPUTERS = 0x00000004;
+const MESHRIGHT_REMOTECONTROL = 0x00000008;
+const MESHRIGHT_AGENTCONSOLE = 0x00000010;
+const MESHRIGHT_SERVERFILES = 0x00000020;
+const MESHRIGHT_WAKEDEVICE = 0x00000040;
+const MESHRIGHT_SETNOTES = 0x00000080;
+const MESHRIGHT_REMOTEVIEWONLY = 0x00000100;
+const MESHRIGHT_NOTERMINAL = 0x00000200;
+const MESHRIGHT_NOFILES = 0x00000400;
+const MESHRIGHT_NOAMT = 0x00000800;
+const MESHRIGHT_DESKLIMITEDINPUT = 0x00001000;
+const MESHRIGHT_LIMITEVENTS = 0x00002000;
+const MESHRIGHT_CHATNOTIFY = 0x00004000;
+const MESHRIGHT_UNINSTALL = 0x00008000;
+const MESHRIGHT_NODESKTOP = 0x00010000;
+const MESHRIGHT_REMOTECOMMAND = 0x00020000;
+const MESHRIGHT_RESETOFF = 0x00040000;
+const MESHRIGHT_GUESTSHARING = 0x00080000;
+const MESHRIGHT_ADMIN = 0xFFFFFFFF;
// Protocol:
// 1 = Terminal
@@ -119,9 +117,6 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
try { sr = parseInt(req.query.slowrelay); } catch (ex) { }
if ((typeof sr == 'number') && (sr > 0) && (sr < 1000)) { obj.ws.slowRelay = sr; }
}
-
- // Check if protocol is set in the cookie and if so replace req.query.p but only if its not already set or blank
- if ((cookie != null) && (typeof cookie.p == 'number') && (obj.req.query.p === undefined || obj.req.query.p === "")) { obj.req.query.p = cookie.p; }
// Mesh Rights
const MESHRIGHT_EDITMESH = 1;
@@ -445,15 +440,15 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
relayinfo.peer1.sendPeerImage();
} else {
// Write the recording file header
- parent.parent.debug('relay', 'Relay: Started recording to file: ' + recFullFilename);
+ parent.parent.debug('relay', 'Relay: Started recoding to file: ' + recFullFilename);
var metadata = {
magic: 'MeshCentralRelaySession',
ver: 1,
userid: sessionUser._id,
username: sessionUser.name,
sessionid: obj.id,
- ipaddr1: ((obj.peer == null) || (obj.peer.req == null)) ? null : obj.peer.req.clientIp,
- ipaddr2: (obj.req == null) ? null : obj.req.clientIp,
+ ipaddr1: (obj.req == null) ? null : obj.req.clientIp,
+ ipaddr2: ((obj.peer == null) || (obj.peer.req == null)) ? null : obj.peer.req.clientIp,
time: new Date().toLocaleString(),
protocol: (((obj.req == null) || (obj.req.query == null)) ? null : obj.req.query.p),
nodeid: (((obj.req == null) || (obj.req.query == null)) ? null : obj.req.query.nodeid)
@@ -567,7 +562,7 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
} else {
ws._socket.pause(); // Hold traffic until the other connection
parent.parent.debug('relay', 'Relay holding: ' + obj.id + ' (' + obj.req.clientIp + ') ' + (obj.authenticated ? 'Authenticated' : ''));
- parent.wsrelays[obj.id] = { peer1: obj, state: 1, timeout: setTimeout(closeBothSides, 15000) };
+ parent.wsrelays[obj.id] = { peer1: obj, state: 1, timeout: setTimeout(closeBothSides, 60000) };
}
// Check if a peer server has this connection
@@ -744,34 +739,32 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
var logfile = ws.logfile;
delete ws.logfile;
if (peer.ws) { delete peer.ws.logfile; }
- setTimeout(function(){ // wait 5 seconds before finishing file for some reason?
- recordingEntry(logfile, 3, 0, 'MeshCentralMCREC', function (logfile, tag) {
- parent.parent.fs.closeSync(logfile.fd);
+ recordingEntry(logfile, 3, 0, 'MeshCentralMCREC', function (logfile, tag) {
+ parent.parent.fs.close(logfile.fd);
- // Now that the recording file is closed, check if we need to index this file.
- if (domain.sessionrecording.index && domain.sessionrecording.index !== false) { parent.parent.certificateOperations.acceleratorPerformOperation('indexMcRec', tag.logfile.filename); }
+ // Now that the recording file is closed, check if we need to index this file.
+ if (domain.sessionrecording.index !== false) { parent.parent.certificateOperations.acceleratorPerformOperation('indexMcRec', tag.logfile.filename); }
- // Compute session length
- var sessionLength = null;
- if (tag.logfile.startTime != null) { sessionLength = Math.round((Date.now() - tag.logfile.startTime) / 1000); }
+ // Compute session length
+ var sessionLength = null;
+ if (tag.logfile.startTime != null) { sessionLength = Math.round((Date.now() - tag.logfile.startTime) / 1000); }
- // Add a event entry about this recording
- var basefile = parent.parent.path.basename(tag.logfile.filename);
- var event = { etype: 'relay', action: 'recording', domain: domain.id, nodeid: tag.logfile.nodeid, msg: "Finished recording session" + (sessionLength ? (', ' + sessionLength + ' second(s)') : ''), filename: basefile, size: tag.logfile.size };
- if (user) { event.userids = [user._id]; } else if (peer.user) { event.userids = [peer.user._id]; }
- var xprotocol = (((obj.req == null) || (obj.req.query == null)) ? null : obj.req.query.p);
- if ((xprotocol == null) && (logfile.text == 2)) { xprotocol = 200; }
- if (xprotocol != null) { event.protocol = parseInt(xprotocol); }
- var mesh = parent.meshes[tag.logfile.meshid];
- if (mesh != null) { event.meshname = mesh.name; event.meshid = mesh._id; }
- if (tag.logfile.startTime) { event.startTime = tag.logfile.startTime; event.lengthTime = sessionLength; }
- if (tag.logfile.name) { event.name = tag.logfile.name; }
- if (tag.logfile.icon) { event.icon = tag.logfile.icon; }
- parent.parent.DispatchEvent(['*', 'recording', tag.logfile.nodeid, tag.logfile.meshid], obj, event);
+ // Add a event entry about this recording
+ var basefile = parent.parent.path.basename(tag.logfile.filename);
+ var event = { etype: 'relay', action: 'recording', domain: domain.id, nodeid: tag.logfile.nodeid, msg: "Finished recording session" + (sessionLength ? (', ' + sessionLength + ' second(s)') : ''), filename: basefile, size: tag.logfile.size };
+ if (user) { event.userids = [user._id]; } else if (peer.user) { event.userids = [peer.user._id]; }
+ var xprotocol = (((obj.req == null) || (obj.req.query == null)) ? null : obj.req.query.p);
+ if ((xprotocol == null) && (logfile.text == 2)) { xprotocol = 200; }
+ if (xprotocol != null) { event.protocol = parseInt(xprotocol); }
+ var mesh = parent.meshes[tag.logfile.meshid];
+ if (mesh != null) { event.meshname = mesh.name; event.meshid = mesh._id; }
+ if (tag.logfile.startTime) { event.startTime = tag.logfile.startTime; event.lengthTime = sessionLength; }
+ if (tag.logfile.name) { event.name = tag.logfile.name; }
+ if (tag.logfile.icon) { event.icon = tag.logfile.icon; }
+ parent.parent.DispatchEvent(['*', 'recording', tag.logfile.nodeid, tag.logfile.meshid], obj, event);
- cleanUpRecordings();
- }, { ws: ws, pws: peer.ws, logfile: logfile });
- },5000);
+ cleanUpRecordings();
+ }, { ws: ws, pws: peer.ws, logfile: logfile });
}
try { ws.close(); } catch (ex) { }
@@ -875,8 +868,8 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (docs.length == 0) { console.log('ERR: Node not found'); try { obj.close(); } catch (e) { } return; } // Disconnect websocket
const node = docs[0];
- // Check if this user has permission to relay thru this computer (MESHRIGHT_REMOTECONTROL or MESHRIGHT_RELAY rights)
- if ((obj.nouser !== true) && ((parent.GetNodeRights(obj.user, node.meshid, node._id) & 0x00200008) == 0)) { console.log('ERR: Access denied (1)'); try { obj.close(); } catch (ex) { } return; }
+ // Check if this user has permission to manage this computer
+ if ((obj.nouser !== true) && ((parent.GetNodeRights(user, node.meshid, node._id) & MESHRIGHT_REMOTECONTROL) == 0)) { console.log('ERR: Access denied (1)'); try { obj.close(); } catch (e) { } return; }
// Set nodeid and meshid
obj.nodeid = node._id;
@@ -886,8 +879,8 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
const rcookieData = {};
if (user != null) { rcookieData.ruserid = user._id; } else if (obj.nouser === true) { rcookieData.nouser = 1; }
const rcookie = parent.parent.encodeCookie(rcookieData, parent.parent.loginCookieEncryptionKey);
- if (obj.id == null) { obj.id = parent.crypto.randomBytes(9).toString('base64').replace(/\+/g, '@').replace(/\//g, '$'); } // If there is no connection id, generate one.
- const command = { nodeid: cookie.nodeid, action: 'msg', type: 'tunnel', value: '*/' + xdomain + 'meshrelay.ashx?' + (obj.req.query.p != null ? ('p=' + obj.req.query.p + '&') : '') + 'id=' + obj.id + '&rauth=' + rcookie, tcpport: cookie.tcpport, tcpaddr: cookie.tcpaddr, soptions: {} };
+ if (obj.id == null) { obj.id = ('' + Math.random()).substring(2); } // If there is no connection id, generate one.
+ const command = { nodeid: cookie.nodeid, action: 'msg', type: 'tunnel', value: '*/' + xdomain + 'meshrelay.ashx?id=' + obj.id + '&rauth=' + rcookie, tcpport: cookie.tcpport, tcpaddr: cookie.tcpaddr, soptions: {} };
if (user) { command.userid = user._id; }
if (typeof domain.consentmessages == 'object') {
if (typeof domain.consentmessages.title == 'string') { command.soptions.consentTitle = domain.consentmessages.title; }
@@ -896,8 +889,6 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -916,18 +907,19 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (docs.length == 0) { console.log('ERR: Node not found'); try { obj.close(); } catch (e) { } return; } // Disconnect websocket
const node = docs[0];
- // Check if this user has permission to relay thru this computer (MESHRIGHT_REMOTECONTROL or MESHRIGHT_RELAY rights)
- if ((parent.GetNodeRights(obj.user, node.meshid, node._id) & 0x00200008) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (ex) { } return; }
+ // Check if this user has permission to manage this computer
+ if ((parent.GetNodeRights(user, node.meshid, node._id) & MESHRIGHT_REMOTECONTROL) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (e) { } return; }
// Set nodeid and meshid
obj.nodeid = node._id;
obj.meshid = node.meshid;
// Send connection request to agent
- if (obj.id == null) { obj.id = parent.crypto.randomBytes(9).toString('base64').replace(/\+/g, '@').replace(/\//g, '$'); } // If there is no connection id, generate one.
+ if (obj.id == null) { obj.id = ('' + Math.random()).substring(2); } // If there is no connection id, generate one.
const rcookie = parent.parent.encodeCookie({ ruserid: user._id }, parent.parent.loginCookieEncryptionKey);
+
if (obj.req.query.tcpport != null) {
- const command = { nodeid: obj.req.query.nodeid, action: 'msg', type: 'tunnel', userid: user._id, value: '*/' + xdomain + 'meshrelay.ashx?' + (obj.req.query.p != null ? ('p=' + obj.req.query.p + '&') : '') + 'id=' + obj.id + '&rauth=' + rcookie, tcpport: obj.req.query.tcpport, tcpaddr: ((obj.req.query.tcpaddr == null) ? '127.0.0.1' : obj.req.query.tcpaddr), soptions: {} };
+ const command = { nodeid: obj.req.query.nodeid, action: 'msg', type: 'tunnel', userid: user._id, value: '*/' + xdomain + 'meshrelay.ashx?id=' + obj.id + '&rauth=' + rcookie, tcpport: obj.req.query.tcpport, tcpaddr: ((obj.req.query.tcpaddr == null) ? '127.0.0.1' : obj.req.query.tcpaddr), soptions: {} };
if (typeof domain.consentmessages == 'object') {
if (typeof domain.consentmessages.title == 'string') { command.soptions.consentTitle = domain.consentmessages.title; }
if (typeof domain.consentmessages.desktop == 'string') { command.soptions.consentMsgDesktop = domain.consentmessages.desktop; }
@@ -935,8 +927,6 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -947,15 +937,14 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
parent.parent.debug('relay', 'Relay: Sending agent TCP tunnel command: ' + JSON.stringify(command));
if (obj.sendAgentMessage(command, user._id, domain.id) == false) { delete obj.id; parent.parent.debug('relay', 'Relay: Unable to contact this agent (' + obj.req.clientIp + ')'); }
} else if (obj.req.query.udpport != null) {
- const command = { nodeid: obj.req.query.nodeid, action: 'msg', type: 'tunnel', userid: user._id, value: '*/' + xdomain + 'meshrelay.ashx?' + (obj.req.query.p != null ? ('p=' + obj.req.query.p + '&') : '') + 'id=' + obj.id + '&rauth=' + rcookie, udpport: obj.req.query.udpport, udpaddr: ((obj.req.query.udpaddr == null) ? '127.0.0.1' : obj.req.query.udpaddr), soptions: {} }; if (typeof domain.consentmessages == 'object') {
+ const command = { nodeid: obj.req.query.nodeid, action: 'msg', type: 'tunnel', userid: user._id, value: '*/' + xdomain + 'meshrelay.ashx?id=' + obj.id + '&rauth=' + rcookie, udpport: obj.req.query.udpport, udpaddr: ((obj.req.query.udpaddr == null) ? '127.0.0.1' : obj.req.query.udpaddr), soptions: {} };
+ if (typeof domain.consentmessages == 'object') {
if (typeof domain.consentmessages.title == 'string') { command.soptions.consentTitle = domain.consentmessages.title; }
if (typeof domain.consentmessages.desktop == 'string') { command.soptions.consentMsgDesktop = domain.consentmessages.desktop; }
if (typeof domain.consentmessages.terminal == 'string') { command.soptions.consentMsgTerminal = domain.consentmessages.terminal; }
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -975,15 +964,15 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (docs.length == 0) { console.log('ERR: Node not found'); try { obj.close(); } catch (e) { } return; } // Disconnect websocket
const node = docs[0];
- // Check if this user has permission to relay thru this computer (MESHRIGHT_REMOTECONTROL or MESHRIGHT_RELAY rights)
- if ((obj.nouser !== true) && ((parent.GetNodeRights(obj.user, node.meshid, node._id) & 0x00200008) == 0)) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (ex) { } return; }
+ // Check if this user has permission to manage this computer
+ if ((obj.nouser !== true) && ((parent.GetNodeRights(user, node.meshid, node._id) & MESHRIGHT_REMOTECONTROL) == 0)) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (e) { } return; }
// Set nodeid and meshid
obj.nodeid = node._id;
obj.meshid = node.meshid;
// Send connection request to agent
- if (obj.id == null) { obj.id = parent.crypto.randomBytes(9).toString('base64').replace(/\+/g, '@').replace(/\//g, '$'); } // If there is no connection id, generate one.
+ if (obj.id == null) { obj.id = ('' + Math.random()).substring(2); }
const rcookieData = { nodeid: node._id };
if (user != null) { rcookieData.ruserid = user._id; } else if (obj.nouser === true) { rcookieData.nouser = 1; }
const rcookie = parent.parent.encodeCookie(rcookieData, parent.parent.loginCookieEncryptionKey);
@@ -1007,8 +996,6 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -1031,8 +1018,8 @@ function CreateMeshRelayEx(parent, ws, req, domain, user, cookie) {
if (docs.length == 0) { console.log('ERR: Node not found'); try { obj.close(); } catch (e) { } return; } // Disconnect websocket
const node = docs[0];
- // Check if this user has permission to relay thru this computer (MESHRIGHT_REMOTECONTROL or MESHRIGHT_RELAY rights)
- if ((parent.GetNodeRights(obj.user, node.meshid, node._id) & 0x00200008) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (ex) { } return; }
+ // Check if this user has permission to manage this computer
+ if ((parent.GetNodeRights(user, node.meshid, node._id) & MESHRIGHT_REMOTECONTROL) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (e) { } return; }
// Set nodeid and meshid
obj.nodeid = node._id;
@@ -1131,7 +1118,7 @@ module.exports.CreateLocalRelay = function (parent, ws, req, domain, user, cooki
function CreateLocalRelayEx(parent, ws, req, domain, user, cookie) {
const net = require('net');
var obj = {};
- obj.id = parent.crypto.randomBytes(9).toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
+ obj.id = Buffer.from(parent.crypto.randomBytes(9), 'binary').toString('base64');
obj.req = req;
obj.ws = ws;
obj.user = user;
@@ -1237,7 +1224,6 @@ function CreateLocalRelayEx(parent, ws, req, domain, user, cookie) {
else if (req.query.p == 11) { protocolStr = 'SSH-TERM'; }
else if (req.query.p == 12) { protocolStr = 'VNC'; }
else if (req.query.p == 13) { protocolStr = 'SSH-FILES'; }
- else if (req.query.p == 14) { protocolStr = 'Web-TCP'; }
var event = { etype: 'relay', action: 'relaylog', domain: domain.id, userid: obj.user._id, username: obj.user.name, msgid: 121, msgArgs: [obj.id, protocolStr, obj.host, Math.floor((Date.now() - obj.time) / 1000)], msg: 'Ended local relay session \"' + obj.id + '\", protocol ' + protocolStr + ' to ' + obj.host + ', ' + Math.floor((Date.now() - obj.time) / 1000) + ' second(s)', nodeid: obj.req.query.nodeid, protocol: req.query.p, in: inTraffc, out: outTraffc };
if (obj.guestname) { event.guestname = obj.guestname; } // If this is a sharing session, set the guest name here.
parent.parent.DispatchEvent(['*', user._id], obj, event);
@@ -1278,8 +1264,8 @@ function CreateLocalRelayEx(parent, ws, req, domain, user, cookie) {
obj.host = node.host;
obj.meshid = node.meshid;
- // Check if this user has permission to relay thru this computer (MESHRIGHT_REMOTECONTROL or MESHRIGHT_RELAY rights)
- if ((parent.GetNodeRights(obj.user, node.meshid, node._id) & 0x00200008) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (ex) { } return; }
+ // Check if this user has permission to manage this computer
+ if ((parent.GetNodeRights(obj.user, node.meshid, node._id) & MESHRIGHT_REMOTECONTROL) == 0) { console.log('ERR: Access denied (2)'); try { obj.close(); } catch (e) { } return; }
// Setup TCP client
obj.client = new net.Socket();
@@ -1292,7 +1278,6 @@ function CreateLocalRelayEx(parent, ws, req, domain, user, cookie) {
else if (req.query.p == 11) { protocolStr = 'SSH-TERM'; }
else if (req.query.p == 12) { protocolStr = 'VNC'; }
else if (req.query.p == 13) { protocolStr = 'SSH-FILES'; }
- else if (req.query.p == 14) { protocolStr = 'Web-TCP'; }
obj.time = Date.now();
var event = { etype: 'relay', action: 'relaylog', domain: domain.id, userid: obj.user._id, username: obj.user.name, msgid: 120, msgArgs: [obj.id, protocolStr, obj.host], msg: 'Started local relay session \"' + obj.id + '\", protocol ' + protocolStr + ' to ' + obj.host, nodeid: req.query.nodeid, protocol: req.query.p };
if (obj.guestname) { event.guestname = obj.guestname; } // If this is a sharing session, set the guest name here.
@@ -1331,4 +1316,4 @@ function CreateLocalRelayEx(parent, ws, req, domain, user, cookie) {
// If this is not an authenticated session, or the session does not have routing instructions, just go ahead an connect to existing session.
performRelay();
return obj;
-};
+};
\ No newline at end of file
diff --git a/meshsms.js b/meshsms.js
index 1746c23e..e2b2b7ce 100644
--- a/meshsms.js
+++ b/meshsms.js
@@ -37,15 +37,9 @@
"apikey": "xxxxxxx",
"from": "15555555555"
}
-
-// For URL, add this in config.json
-"sms": {
- "provider": "url",
- "url": "https://sample.com/?phone={{phone}}&msg={{message}}"
-}
*/
-// Construct a SMS server object
+// Construct a MeshAgent object, called upon connection
module.exports.CreateMeshSMS = function (parent) {
var obj = {};
obj.parent = parent;
@@ -84,16 +78,6 @@ module.exports.CreateMeshSMS = function (parent) {
obj.provider = require('telnyx')(parent.config.sms.apikey);
break;
}
- case 'url': {
- // Validate URL configuration values
- if (parent.config.sms.url != 'console') {
- if (typeof parent.config.sms.url != 'string') { console.log('Invalid or missing SMS gateway URL value.'); return null; }
- if (!parent.config.sms.url.toLowerCase().startsWith('http://') && !parent.config.sms.url.toLowerCase().startsWith('https://')) { console.log('Invalid or missing SMS gateway, URL must start with http:// or https://.'); return null; }
- if (parent.config.sms.url.indexOf('{{message}}') == -1) { console.log('Invalid or missing SMS gateway, URL must include {{message}}.'); return null; }
- if (parent.config.sms.url.indexOf('{{phone}}') == -1) { console.log('Invalid or missing SMS gateway, URL must include {{phone}}.'); return null; }
- }
- break;
- }
default: {
// Unknown SMS gateway provider
console.log('Unknown SMS gateway provider: ' + parent.config.sms.provider);
@@ -139,29 +123,6 @@ module.exports.CreateMeshSMS = function (parent) {
if (err != null) { parent.debug('email', 'SMS error: ' + err.type); } else { parent.debug('email', 'SMS result: ' + JSON.stringify(result)); }
if (func != null) { func((err == null), err ? err.type : null, result); }
});
- } else if (parent.config.sms.provider == 'url') { // URL
- if (parent.config.sms.url == 'console') {
- // This is for debugging, just display the SMS to the console
- console.log('SMS (' + to + '): ' + msg);
- if (func != null) { func(true, null, null); }
- } else {
- var sms = parent.config.sms.url.split('{{phone}}').join(encodeURIComponent(to)).split('{{message}}').join(encodeURIComponent(msg));
- parent.debug('email', 'SMS URL: ' + sms);
- sms = require('url').parse(sms);
- if (sms.protocol == 'https:') {
- // HTTPS GET request
- const options = { hostname: sms.hostname, port: sms.port ? sms.port : 443, path: sms.path, method: 'GET', rejectUnauthorized: false };
- const request = require('https').request(options, function (res) { parent.debug('email', 'SMS result: ' + res.statusCode); if (func != null) { func(res.statusCode == 200, (res.statusCode == 200) ? null : res.statusCode, null); } res.on('data', function (d) { }); });
- request.on('error', function (err) { parent.debug('email', 'SMS error: ' + err); if (func != null) { func(false, err, null); } });
- request.end();
- } else {
- // HTTP GET request
- const options = { hostname: sms.hostname, port: sms.port ? sms.port : 80, path: sms.path, method: 'GET' };
- const request = require('http').request(options, function (res) { parent.debug('email', 'SMS result: ' + res.statusCode); if (func != null) { func(res.statusCode == 200, (res.statusCode == 200) ? null : res.statusCode, null); } res.on('data', function (d) { }); });
- request.on('error', function (err) { parent.debug('email', 'SMS error: ' + err); if (func != null) { func(false, err, null); } });
- request.end();
- }
- }
}
}
diff --git a/meshuser.js b/meshuser.js
index ac237dfd..aa2fe965 100644
--- a/meshuser.js
+++ b/meshuser.js
@@ -1,4 +1,4 @@
-/**
+/**
* @description MeshCentral MeshAgent
* @author Ylian Saint-Hilaire & Bryan Roe
* @copyright Intel Corporation 2018-2022
@@ -52,7 +52,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
const MESHRIGHT_RESETOFF = 0x00040000; // 262144
const MESHRIGHT_GUESTSHARING = 0x00080000; // 524288
const MESHRIGHT_DEVICEDETAILS = 0x00100000; // 1048576
- const MESHRIGHT_RELAY = 0x00200000; // 2097152
const MESHRIGHT_ADMIN = 0xFFFFFFFF;
// Site rights
@@ -84,7 +83,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
const PROTOCOL_WEBVNC = 204;
// MeshCentral Satellite
- const SATELLITE_PRESENT = 1; // This session is a MeshCentral Satellite session
+ const SATELLITE_PRESENT = 1; // This session is a MeshCentral Salellite session
const SATELLITE_802_1x = 2; // This session supports 802.1x profile checking and creation
// Events
@@ -106,12 +105,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
obj.domain = domain;
obj.ws = ws;
- // Information related to the current page the user is looking at
- obj.deviceSkip = 0; // How many devices to skip
- obj.deviceLimit = 0; // How many devices to view
- obj.visibleDevices = null; // An object of visible nodeid's if the user is in paging mode
- if (domain.maxdeviceview != null) { obj.deviceLimit = domain.maxdeviceview; }
-
// Check if we are a cross-domain administrator
if (parent.parent.config.settings.managecrossdomain && (parent.parent.config.settings.managecrossdomain.indexOf(user._id) >= 0)) { obj.crossDomain = true; }
@@ -421,9 +414,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// If this session is logged in using a loginToken and the token is removed, disconnect.
if ((req.session.loginToken != null) && (typeof event == 'object') && (event.action == 'loginTokenChanged') && (event.removed != null) && (event.removed.indexOf(req.session.loginToken) >= 0)) { delete req.session; obj.close(); return; }
- // If this user is not viewing all devices and paging, check if this event is in the current page
- if (isEventWithinPage(ids) == false) return;
-
// Normally, only allow this user to receive messages from it's own domain.
// If the user is a cross domain administrator, allow some select messages from different domains.
if ((event.domain == null) || (event.domain == domain.id) || ((obj.crossDomain === true) && (allowedCrossDomainMessages.indexOf(event.action) >= 0))) {
@@ -564,9 +554,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
if (matchingDomains.length > 0) { serverinfo.amtAcmFqdn = matchingDomains; }
}
+ if ((typeof domain.altmessenging == 'object') && (typeof domain.altmessenging.name == 'string') && (typeof domain.altmessenging.url == 'string')) { serverinfo.altmessenging = [{ name: domain.altmessenging.name, url: domain.altmessenging.url, localurl: domain.altmessenging.localurl }]; }
if (typeof domain.devicemeshrouterlinks == 'object') { serverinfo.devicemeshrouterlinks = domain.devicemeshrouterlinks; }
- if ((typeof domain.altmessenging == 'object') && (typeof domain.altmessenging.name == 'string') && (typeof domain.altmessenging.url == 'string')) { serverinfo.altmessenging = [{ name: domain.altmessenging.name, url: domain.altmessenging.url, localurl: domain.altmessenging.localurl, type: domain.altmessenging.type }]; }
- if (Array.isArray(domain.altmessenging)) { serverinfo.altmessenging = []; for (var i in domain.altmessenging) { if ((typeof domain.altmessenging[i] == 'object') && (typeof domain.altmessenging[i].name == 'string') && (typeof domain.altmessenging[i].url == 'string')) { serverinfo.altmessenging.push({ name: domain.altmessenging[i].name, url: domain.altmessenging[i].url, type: domain.altmessenging[i].type }); } } }
+ if (Array.isArray(domain.altmessenging)) { serverinfo.altmessenging = []; for (var i in domain.altmessenging) { if ((typeof domain.altmessenging[i] == 'object') && (typeof domain.altmessenging[i].name == 'string') && (typeof domain.altmessenging[i].url == 'string')) { serverinfo.altmessenging.push({ name: domain.altmessenging[i].name, url: domain.altmessenging[i].url }); } } }
serverinfo.https = true;
serverinfo.redirport = args.redirport;
if (parent.parent.webpush != null) { serverinfo.vapidpublickey = parent.parent.webpush.vapidPublicKey; } // Web push public key
@@ -576,16 +566,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (domain.passwordrequirements.lock2factor == true) { serverinfo.lock2factor = true; } // Indicate 2FA change are not allowed
if (typeof domain.passwordrequirements.maxfidokeys == 'number') { serverinfo.maxfidokeys = domain.passwordrequirements.maxfidokeys; }
}
- if (parent.parent.msgserver != null) { // Setup messaging providers information
- serverinfo.userMsgProviders = parent.parent.msgserver.providers;
- if (parent.parent.msgserver.discordUrl != null) { serverinfo.discordUrl = parent.parent.msgserver.discordUrl; }
- }
- if ((typeof parent.parent.config.messaging == 'object') && (typeof parent.parent.config.messaging.ntfy == 'object') && (typeof parent.parent.config.messaging.ntfy.userurl == 'string')) { // nfty user url
- serverinfo.userMsgNftyUrl = parent.parent.config.messaging.ntfy.userurl;
- }
// Build the mobile agent URL, this is used to connect mobile devices
- var agentServerName = parent.getWebServerName(domain, req);
+ var agentServerName = parent.getWebServerName(domain);
if (typeof parent.args.agentaliasdns == 'string') { agentServerName = parent.args.agentaliasdns; }
var xdomain = (domain.dns == null) ? domain.id : '';
var agentHttpsPort = ((parent.args.aliasport == null) ? parent.args.port : parent.args.aliasport); // Use HTTPS alias port is specified
@@ -600,13 +583,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
}
if (typeof domain.userconsentflags == 'number') { serverinfo.consent = domain.userconsentflags; }
- if ((typeof domain.usersessionidletimeout == 'number') && (domain.usersessionidletimeout > 0)) {serverinfo.timeout = (domain.usersessionidletimeout * 60 * 1000); }
- if (typeof domain.logoutonidlesessiontimeout == 'boolean') {
- serverinfo.logoutonidlesessiontimeout = domain.logoutonidlesessiontimeout;
- } else {
- // Default
- serverinfo.logoutonidlesessiontimeout = true;
- }
+ if ((typeof domain.usersessionidletimeout == 'number') && (domain.usersessionidletimeout > 0)) { serverinfo.timeout = (domain.usersessionidletimeout * 60 * 1000); }
if (user.siteadmin === SITERIGHT_ADMIN) {
if (parent.parent.config.settings.managealldevicegroups.indexOf(user._id) >= 0) { serverinfo.manageAllDeviceGroups = true; }
if (obj.crossDomain === true) { serverinfo.crossDomain = []; for (var i in parent.parent.config.domains) { serverinfo.crossDomain.push(i); } }
@@ -616,19 +593,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if ((typeof domain.terminal.linuxshell == 'string') && (domain.terminal.linuxshell != 'any')) { serverinfo.linuxshell = domain.terminal.linuxshell; }
}
if (Array.isArray(domain.preconfiguredremoteinput)) { serverinfo.preConfiguredRemoteInput = domain.preconfiguredremoteinput; }
- if (Array.isArray(domain.preconfiguredscripts)) {
- const r = [];
- for (var i in domain.preconfiguredscripts) {
- const types = ['', 'bat', 'ps1', 'sh', 'agent']; // 1 = Windows Command, 2 = Windows PowerShell, 3 = Linux, 4 = Agent
- const script = domain.preconfiguredscripts[i];
- if ((typeof script.name == 'string') && (script.name.length <= 32) && (typeof script.type == 'string') && ((typeof script.file == 'string') || (typeof script.cmd == 'string'))) {
- const s = { name: script.name, type: types.indexOf(script.type.toLowerCase()) };
- if (s.type > 0) { r.push(s); }
- }
- }
- serverinfo.preConfiguredScripts = r;
- }
- if (domain.maxdeviceview != null) { serverinfo.maxdeviceview = domain.maxdeviceview; } // Maximum number of devices a user can view at any given time
// Send server information
try { ws.send(JSON.stringify({ action: 'serverinfo', serverinfo: serverinfo })); } catch (ex) { }
@@ -691,13 +655,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
switch (command.action) {
case 'nodes':
{
- // If in paging mode, look to set the skip and limit values
- if (domain.maxdeviceview != null) {
- if ((typeof command.skip == 'number') && (command.skip >= 0)) { obj.deviceSkip = command.skip; }
- if ((typeof command.limit == 'number') && (command.limit > 0)) { obj.deviceLimit = command.limit; }
- if (obj.deviceLimit > domain.maxdeviceview) { obj.deviceLimit = domain.maxdeviceview; }
- }
-
var links = [], extraids = null, err = null;
// Resolve the device group name if needed
@@ -737,21 +694,17 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
// Request a list of all nodes
- db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', command.id, obj.deviceSkip, obj.deviceLimit, function (err, docs) {
+ db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', command.id, function (err, docs) {
- //console.log(err, docs, links, extraids, domain.id, 'node', command.id);
+ //console.log(err, docs);
if (docs == null) { docs = []; }
parent.common.unEscapeAllLinksFieldName(docs);
- var r = {}, nodeCount = docs.length;
- if (domain.maxdeviceview != null) { obj.visibleDevices = {}; }
+ var r = {};
for (i in docs) {
// Check device links, if a link points to an unknown user, remove it.
- parent.cleanDevice(docs[i]); // TODO: This will make the total device count incorrect and will affect device paging.
-
- // If we are paging, add the device to the page here
- if (domain.maxdeviceview != null) { obj.visibleDevices[docs[i]._id] = 1; }
+ parent.cleanDevice(docs[i]);
// Remove any connectivity and power state information, that should not be in the database anyway.
// TODO: Find why these are sometimes saved in the db.
@@ -784,10 +737,10 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Remove SSH credentials if present
if (docs[i].ssh != null) {
- if ((docs[i].ssh[user._id] != null) && (docs[i].ssh[user._id].u)) {
- if (docs[i].ssh.k && docs[i].ssh[user._id].kp) { docs[i].ssh = 2; } // Username, key and password
- else if (docs[i].ssh[user._id].k) { docs[i].ssh = 3; } // Username and key. No password.
- else if (docs[i].ssh[user._id].p) { docs[i].ssh = 1; } // Username and password
+ if ((docs[i].ssh[obj.user._id] != null) && (docs[i].ssh[obj.user._id].u)) {
+ if (docs[i].ssh.k && docs[i].ssh[obj.user._id].kp) { docs[i].ssh = 2; } // Username, key and password
+ else if (docs[i].ssh[obj.user._id].k) { docs[i].ssh = 3; } // Username and key. No password.
+ else if (docs[i].ssh[obj.user._id].p) { docs[i].ssh = 1; } // Username and password
else { delete docs[i].ssh; }
} else {
delete docs[i].ssh;
@@ -795,7 +748,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
// Remove RDP credentials if present, only set to 1 if our userid has RDP credentials
- if ((docs[i].rdp != null) && (docs[i].rdp[user._id] != null)) { docs[i].rdp = 1; } else { delete docs[i].rdp; }
+ if ((docs[i].rdp != null) && (docs[i].rdp[obj.user._id] != null)) { docs[i].rdp = 1; } else { delete docs[i].rdp; }
// Remove Intel AMT credential if present
if (docs[i].intelamt != null) {
@@ -821,48 +774,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if ((xipkvmport != null) && (xipkvmport.sessions != null)) { docs[i].sessions = xipkvmport.sessions; }
}
- // Patch node links with names, like meshes links with names
- for (var a in docs[i].links) {
- if (!docs[i].links[a].name) {
- if (parent.users[a] && parent.users[a].realname) { docs[i].links[a].name = parent.users[a].realname; }
- else if (parent.users[a] && parent.users[a].name) { docs[i].links[a].name = parent.users[a].name; }
- }
- }
-
r[meshid].push(docs[i]);
}
- const response = { action: 'nodes', responseid: command.responseid, nodes: r, tag: command.tag };
- if (domain.maxdeviceview != null) {
- // If in paging mode, report back the skip and limit values
- response.skip = obj.deviceSkip;
- response.limit = obj.deviceLimit;
-
- // Add total device count
- // Only set response.totalcount if we need to be in paging mode
- if (nodeCount < response.limit) {
- if (obj.deviceSkip > 0) { response.totalcount = obj.deviceSkip + nodeCount; } else { obj.visibleDevices = null; }
- try { ws.send(JSON.stringify(response)); } catch (ex) { }
- } else {
- // Ask the database for the total device count
- if (db.CountAllTypeNoTypeFieldMeshFiltered) {
- db.CountAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', command.id, function (err, count) {
- if ((err != null) || (typeof count != 'number') || ((obj.deviceSkip == 0) && (count < obj.deviceLimit))) {
- obj.visibleDevices = null;
- } else {
- response.totalcount = count;
- }
- try { ws.send(JSON.stringify(response)); } catch (ex) { }
- });
- } else {
- // The database does not support device counting
- obj.visibleDevices = null; // We are not in paging mode
- try { ws.send(JSON.stringify(response)); } catch (ex) { }
- }
- }
- } else {
- obj.visibleDevices = null; // We are not in paging mode
- try { ws.send(JSON.stringify(response)); } catch (ex) { }
- }
+ try { ws.send(JSON.stringify({ action: 'nodes', responseid: command.responseid, nodes: r, tag: command.tag })); } catch (ex) { }
});
break;
}
@@ -871,15 +785,15 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Check permissions
if ((user.siteadmin & 8) != 0) {
// Perform a file operation (Create Folder, Delete Folder, Delete File...)
- if (common.validateString(command.fileop, 3, 16) == false) return;
+ if (common.validateString(command.fileop, 4, 16) == false) return;
var sendUpdate = true, path = meshPathToRealPath(command.path, user); // This will also check access rights
if (path == null) break;
if ((command.fileop == 'createfolder') && (common.IsFilenameValid(command.newfolder) == true)) {
// Create a new folder
- try { fs.mkdirSync(parent.path.join(path, command.newfolder)); } catch (ex) {
+ try { fs.mkdirSync(path + '/' + command.newfolder); } catch (ex) {
try { fs.mkdirSync(path); } catch (ex) { }
- try { fs.mkdirSync(parent.path.join(path, command.newfolder)); } catch (ex) { }
+ try { fs.mkdirSync(path + '/' + command.newfolder); } catch (ex) { }
}
}
else if (command.fileop == 'delete') {
@@ -908,47 +822,23 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
else if ((command.fileop == 'rename') && (common.IsFilenameValid(command.oldname) === true) && (common.IsFilenameValid(command.newname) === true)) {
// Rename
- try { fs.renameSync(parent.path.join(path, command.oldname), parent.path.join(path, command.newname)); } catch (e) { }
+ try { fs.renameSync(path + '/' + command.oldname, path + '/' + command.newname); } catch (e) { }
}
else if ((command.fileop == 'copy') || (command.fileop == 'move')) {
// Copy or move of one or many files
if (common.validateArray(command.names, 1) == false) return;
var scpath = meshPathToRealPath(command.scpath, user); // This will also check access rights
if (scpath == null) break;
- // TODO: Check quota if this is a copy
+ // TODO: Check quota if this is a copy!!!!!!!!!!!!!!!!
for (i in command.names) {
if (common.IsFilenameValid(command.names[i]) === true) {
var s = parent.path.join(scpath, command.names[i]), d = parent.path.join(path, command.names[i]);
sendUpdate = false;
- try { fs.mkdirSync(path); } catch (ex) { } // try to create folder first incase folder is missing
copyFile(s, d, function (op) { if (op != null) { fs.unlink(op, function (err) { parent.parent.DispatchEvent([user._id], obj, 'updatefiles'); }); } else { parent.parent.DispatchEvent([user._id], obj, 'updatefiles'); } }, ((command.fileop == 'move') ? s : null));
}
}
- } else if (command.fileop == 'get') {
- // Get a short file and send it back on the web socket
- if (common.validateString(command.file, 1, 4096) == false) return;
- const scpath = meshPathToRealPath(command.path, user); // This will also check access rights
- if ((scpath == null) || (command.file !== parent.path.basename(command.file))) break;
- const filePath = parent.path.join(scpath, command.file);
- fs.stat(filePath, function (err, stat) {
- if ((err != null) || (stat == null) || (stat.size >= 204800)) return;
- fs.readFile(filePath, function (err, data) {
- if ((err != null) || (data == null)) return;
- command.data = data.toString('base64');
- ws.send(JSON.stringify(command)); // Send the file data back, base64 encoded.
- });
- });
- } else if (command.fileop == 'set') {
- // Set a short file transfered on the web socket
- if (common.validateString(command.file, 1, 4096) == false) return;
- if (typeof command.data != 'string') return;
- const scpath = meshPathToRealPath(command.path, user); // This will also check access rights
- if ((scpath == null) || (command.file !== parent.path.basename(command.file))) break;
- const filePath = parent.path.join(scpath, command.file);
- var data = null;
- try { data = Buffer.from(command.data, 'base64'); } catch (ex) { return; }
- fs.writeFile(filePath, data, function (err) { if (err == null) { parent.parent.DispatchEvent([user._id], obj, 'updatefiles'); } });
}
+
if (sendUpdate == true) { parent.parent.DispatchEvent([user._id], obj, 'updatefiles'); } // Fire an event causing this user to update this files
}
break;
@@ -1003,8 +893,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (typeof domain.consentmessages.files == 'string') { command.soptions.consentMsgFiles = domain.consentmessages.files; }
if ((typeof domain.consentmessages.consenttimeout == 'number') && (domain.consentmessages.consenttimeout > 0)) { command.soptions.consentTimeout = domain.consentmessages.consenttimeout; }
if (domain.consentmessages.autoacceptontimeout === true) { command.soptions.consentAutoAccept = true; }
- if (domain.consentmessages.autoacceptifnouser === true) { command.soptions.consentAutoAcceptIfNoUser = true; }
- if (domain.consentmessages.oldstyle === true) { command.soptions.oldStyle = true; }
}
if (typeof domain.notificationmessages == 'object') {
if (typeof domain.notificationmessages.title == 'string') { command.soptions.notifyTitle = domain.notificationmessages.title; }
@@ -1038,20 +926,15 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// TODO: Add the meshes command.userid has access to (???)
var filter = [command.userid];
- var actionfilter = null;
- if (command.filter != null) {
- if (['agentlog','batchupload','changenode','manual','relaylog','removenode','runcommands'].includes(command.filter)) actionfilter = command.filter;
- }
-
if ((command.limit == null) || (typeof command.limit != 'number')) {
// Send the list of all events for this session
- db.GetUserEvents(filter, domain.id, command.userid, actionfilter, function (err, docs) {
+ db.GetUserEvents(filter, domain.id, command.userid, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, userid: command.userid, tag: command.tag })); } catch (ex) { }
});
} else {
// Send the list of most recent events for this session, up to 'limit' count
- db.GetUserEventsWithLimit(filter, domain.id, command.userid, command.limit, actionfilter, function (err, docs) {
+ db.GetUserEventsWithLimit(filter, domain.id, command.userid, command.limit, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, userid: command.userid, tag: command.tag })); } catch (ex) { }
});
@@ -1069,20 +952,15 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
var limit = 10000;
if (common.validateInt(command.limit, 1, 1000000) == true) { limit = command.limit; }
- var filter = null;
- if (command.filter != null) {
- if (['agentlog','batchupload','changenode','manual','relaylog','removenode','runcommands'].includes(command.filter)) filter = command.filter;
- }
-
if (((rights & MESHRIGHT_LIMITEVENTS) != 0) && (rights != MESHRIGHT_ADMIN)) {
// Send the list of most recent events for this nodeid that only apply to us, up to 'limit' count
- db.GetNodeEventsSelfWithLimit(node._id, domain.id, user._id, limit, filter, function (err, docs) {
+ db.GetNodeEventsSelfWithLimit(node._id, domain.id, user._id, limit, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, nodeid: node._id, tag: command.tag })); } catch (ex) { }
});
} else {
// Send the list of most recent events for this nodeid, up to 'limit' count
- db.GetNodeEventsWithLimit(node._id, domain.id, limit, filter, function (err, docs) {
+ db.GetNodeEventsWithLimit(node._id, domain.id, limit, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, nodeid: node._id, tag: command.tag })); } catch (ex) { }
});
@@ -1102,20 +980,15 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
for (var link in obj.user.links) { if (((obj.user.links[link].rights & MESHRIGHT_LIMITEVENTS) != 0) && ((obj.user.links[link].rights != MESHRIGHT_ADMIN))) { exGroupFilter2.push(link); } }
for (var i in filter2) { if (exGroupFilter2.indexOf(filter2[i]) == -1) { filter.push(filter2[i]); } }
- var actionfilter = null;
- if (command.filter != null) {
- if (['agentlog','batchupload','changenode','manual','relaylog','removenode','runcommands'].includes(command.filter)) actionfilter = command.filter;
- }
-
if ((command.limit == null) || (typeof command.limit != 'number')) {
// Send the list of all events for this session
- db.GetEvents(filter, domain.id, actionfilter, function (err, docs) {
+ db.GetEvents(filter, domain.id, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, user: command.user, tag: command.tag })); } catch (ex) { }
});
} else {
// Send the list of most recent events for this session, up to 'limit' count
- db.GetEventsWithLimit(filter, domain.id, command.limit, actionfilter, function (err, docs) {
+ db.GetEventsWithLimit(filter, domain.id, command.limit, function (err, docs) {
if (err != null) return;
try { ws.send(JSON.stringify({ action: 'events', events: docs, user: command.user, tag: command.tag })); } catch (ex) { }
});
@@ -1129,11 +1002,11 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (domain.sessionrecording.filepath) { recordingsPath = domain.sessionrecording.filepath; } else { recordingsPath = parent.parent.recordpath; }
if (recordingsPath == null) return;
fs.readdir(recordingsPath, function (err, files) {
- if (err != null) { try { ws.send(JSON.stringify({ action: 'recordings', error: 1, tag: command.tag })); } catch (ex) { } return; }
+ if (err != null) return;
if ((command.limit == null) || (typeof command.limit != 'number')) {
// Send the list of all recordings
- db.GetEvents(['recording'], domain.id, null, function (err, docs) {
- if (err != null) { try { ws.send(JSON.stringify({ action: 'recordings', error: 2, tag: command.tag })); } catch (ex) { } return; }
+ db.GetEvents(['recording'], domain.id, function (err, docs) {
+ if (err != null) return;
for (var i in docs) {
delete docs[i].action; delete docs[i].etype; delete docs[i].msg; // TODO: We could make a more specific query in the DB and never have these.
if (files.indexOf(docs[i].filename) >= 0) { docs[i].present = 1; }
@@ -1142,8 +1015,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
} else {
// Send the list of most recent recordings, up to 'limit' count
- db.GetEventsWithLimit(['recording'], domain.id, command.limit, null, function (err, docs) {
- if (err != null) { try { ws.send(JSON.stringify({ action: 'recordings', error: 2, tag: command.tag })); } catch (ex) { } return; }
+ db.GetEventsWithLimit(['recording'], domain.id, command.limit, function (err, docs) {
+ if (err != null) return;
for (var i in docs) {
delete docs[i].action; delete docs[i].etype; delete docs[i].msg; // TODO: We could make a more specific query in the DB and never have these.
if (files.indexOf(docs[i].filename) >= 0) { docs[i].present = 1; }
@@ -1426,11 +1299,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (command.resetNextLogin === true) { chguser.passchange = -1; }
if ((command.consent != null) && (typeof command.consent == 'number')) { if (command.consent == 0) { delete chguser.consent; } else { chguser.consent = command.consent; } change = 1; }
if ((command.phone != null) && (typeof command.phone == 'string') && ((command.phone == '') || isPhoneNumber(command.phone))) { if (command.phone == '') { delete chguser.phone; } else { chguser.phone = command.phone; } change = 1; }
- if ((command.msghandle != null) && (typeof command.msghandle == 'string')) {
- if (command.msghandle.startsWith('callmebot:http')) { const h = parent.parent.msgserver.callmebotUrlToHandle(command.msghandle.substring(10)); if (h) { command.msghandle = h; } else { command.msghandle = ''; } }
- if (command.msghandle == '') { delete chguser.msghandle; } else { chguser.msghandle = command.msghandle; }
- change = 1;
- }
if ((command.flags != null) && (typeof command.flags == 'number')) {
// Flags: 1 = Account Image, 2 = Session Recording
if ((command.flags == 0) && (chguser.flags != null)) { delete chguser.flags; change = 1; } else { if (command.flags !== chguser.flags) { chguser.flags = command.flags; change = 1; } }
@@ -1522,16 +1390,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
var ugrpdomain, err = null;
try {
- // Check if we are in a mode that does not allow manual user group creation
- if (
- (typeof domain.authstrategies == 'object') &&
- (typeof domain.authstrategies['oidc'] == 'object') &&
- (typeof domain.authstrategies['oidc'].groups == 'object') &&
- ((domain.authstrategies['oidc'].groups.sync == true) || ((typeof domain.authstrategies['oidc'].groups.sync == 'object') && (domain.authstrategies['oidc'].groups.sync.enabled == true)))
- ) {
- err = "Not allowed in OIDC mode with user group sync.";
- }
-
// Check if we have new group restriction
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = "Permission denied"; }
@@ -1621,11 +1479,11 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
db.Set(ugrp);
if (db.changeStream == false) { parent.userGroups[ugrpid] = ugrp; }
- // Event the user group creation
+ // Event the device group creation
var event = { etype: 'ugrp', userid: user._id, username: user.name, ugrpid: ugrpid, name: ugrp.name, desc: ugrp.desc, action: 'createusergroup', links: ugrp.links, msgid: 69, msgArgv: [ugrp.name], msg: 'User group created: ' + ugrp.name, ugrpdomain: domain.id };
parent.parent.DispatchEvent(['*', ugrpid, user._id], obj, event); // Even if DB change stream is active, this event must be acted upon.
- // Event any pending events, these must be sent out after the group creation event is dispatched.
+ // Event any pending events, these must be sent out after the group creation event is displatched.
for (var i in pendingDispatchEvents) { var ev = pendingDispatchEvents[i]; parent.parent.DispatchEvent(ev[0], ev[1], ev[2]); }
// Log in the auth log
@@ -1668,13 +1526,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
var group = groups[0];
- // If this user group is an externally managed user group, it can't be deleted unless there are no users in it.
- if (group.membershipType != null) {
- var userCount = 0;
- if (group.links != null) { for (var i in group.links) { if (i.startsWith('user/')) { userCount++; } } }
- if (userCount > 0) return;
- }
-
// Unlink any user and meshes that have a link to this group
if (group.links) {
for (var i in group.links) {
@@ -1735,8 +1586,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
change = '';
var group = parent.userGroups[command.ugrpid];
if (group != null) {
- // If this user group is an externally managed user group, the name of the user group can't be edited
- if ((group.membershipType == null) && (common.validateString(command.name, 1, 64) == true) && (command.name != group.name)) { change = 'User group name changed from "' + group.name + '" to "' + command.name + '"'; group.name = command.name; }
+ if ((common.validateString(command.name, 1, 64) == true) && (command.name != group.name)) { change = 'User group name changed from "' + group.name + '" to "' + command.name + '"'; group.name = command.name; }
if ((common.validateString(command.desc, 0, 1024) == true) && (command.desc != group.desc)) { if (change != '') change += ' and description changed'; else change += 'User group "' + group.name + '" description changed'; group.desc = command.desc; }
if ((typeof command.consent == 'number') && (command.consent != group.consent)) { if (change != '') change += ' and consent changed'; else change += 'User group "' + group.name + '" consent changed'; group.consent = command.consent; }
@@ -1759,15 +1609,11 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
- // 2 = WebPage device connections
- // 4 = WebPage device disconnections
- // 8 = WebPage device desktop and serial events
- // 16 = Email device connections
- // 32 = Email device disconnections
- // 64 = Email device help request
- // 128 = Messaging device connections
- // 256 = Messaging device disconnections
- // 512 = Messaging device help request
+ // 2 = WebPage device connections
+ // 4 = WebPage device disconnections
+ // 8 = WebPage device desktop and serial events
+ // 16 = Email device connections
+ // 32 = Email device disconnections
var err = null;
try {
@@ -1812,15 +1658,11 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
- // 2 = WebPage device connections
- // 4 = WebPage device disconnections
- // 8 = WebPage device desktop and serial events
- // 16 = Email device connections
- // 32 = Email device disconnections
- // 64 = Email device help request
- // 128 = Messaging device connections
- // 256 = Messaging device disconnections
- // 512 = Messaging device help request
+ // 2 = WebPage device connections
+ // 4 = WebPage device disconnections
+ // 8 = WebPage device desktop and serial events
+ // 16 = Email device connections
+ // 32 = Email device disconnections
var err = null;
try {
@@ -1862,10 +1704,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// If this account is settings locked, return here.
if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return;
-
- // Do not allow change password if sspi or ldap
- if ((domain.auth == 'sspi') || (domain.auth == 'ldap')) return;
-
+
// Change our own password
if (common.validateString(command.oldpass, 1, 256) == false) break;
if (common.validateString(command.newpass, 1, 256) == false) break;
@@ -2056,7 +1895,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
var httpsPort = ((args.aliasport == null) ? args.port : args.aliasport); // Use HTTPS alias port is specified
var xdomain = (domain.dns == null) ? domain.id : '';
if (xdomain != '') xdomain += "/";
- var url = "https://" + parent.getWebServerName(domain, req) + ":" + httpsPort + "/" + xdomain + "messenger?id=meshmessenger/" + encodeURIComponent(command.userid) + "/" + encodeURIComponent(user._id);
+ var url = "https://" + parent.getWebServerName(domain) + ":" + httpsPort + "/" + xdomain + "messenger?id=meshmessenger/" + encodeURIComponent(command.userid) + "/" + encodeURIComponent(user._id);
// Perform web push notification
var payload = { body: "Chat Request, Click here to accept.", icon: 8, url: url }; // Icon 8 is the user icon.
@@ -2079,7 +1918,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
var httpsPort = ((args.aliasport == null) ? args.port : args.aliasport); // Use HTTPS alias port is specified
var xdomain = (domain.dns == null) ? domain.id : '';
if (xdomain != '') xdomain += "/";
- var url = "https://" + parent.getWebServerName(domain, req) + ":" + httpsPort + "/" + xdomain + "messenger?id=meshmessenger/" + encodeURIComponent(command.nodeid) + "/" + encodeURIComponent(user._id);
+ var url = "https://" + parent.getWebServerName(domain) + ":" + httpsPort + "/" + xdomain + "messenger?id=meshmessenger/" + encodeURIComponent(command.nodeid) + "/" + encodeURIComponent(user._id);
// Open a web page on the remote device
routeCommandToNode({ 'action': 'openUrl', 'nodeid': command.nodeid, 'userid': user._id, 'username': user.name, 'url': url });
@@ -2425,7 +2264,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
try {
- if (common.validateString(command.userid, 1, 1024) == false) { err = "Invalid userid"; } // Check userid
+ if (common.validateString(command.userid, 8, 1024) == false) { err = "Invalid userid"; } // Check userid
if (common.validateString(command.meshid, 8, 134) == false) { err = "Invalid groupid"; } // Check meshid
if (command.userid.indexOf('/') == -1) { command.userid = 'user/' + domain.id + '/' + command.userid; }
if (command.userid == obj.user._id) { err = "Can't remove self"; } // Can't add of modify self
@@ -2562,98 +2401,77 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
case 'addlocaldevice':
{
- var err = null;
- // Perform input validation
- try {
- if (common.validateString(command.meshid, 8, 134) == false) { err = "Invalid device group id"; } // Check meshid
- if (common.validateString(command.devicename, 1, 256) == false) { err = "Invalid devicename"; } // Check device name
- if (common.validateString(command.hostname, 1, 256) == false) { err = "Invalid hostname"; } // Check hostname
- if (typeof command.type != 'number') { err = "Invalid type"; } // Type must be a number
- if ((command.type != 4) && (command.type != 6) && (command.type != 29)) { err = "Invalid type"; } // Check device type
- else {
- if (command.meshid.indexOf('/') == -1) { command.meshid = 'mesh/' + domain.id + '/' + command.meshid; }
- mesh = parent.meshes[command.meshid];
- if (mesh == null) { err = "Unknown device group"; }
- if (mesh.mtype != 3) { err = "Local device agentless mesh only allowed" } // This operation is only allowed for mesh type 3, local device agentless mesh.
- else if ((parent.GetMeshRights(user, mesh) & MESHRIGHT_MANAGECOMPUTERS) == 0) { err = "Permission denied"; }
- else if ((command.meshid.split('/').length != 3) || (command.meshid.split('/')[1] != domain.id)) { err = "Invalid domain"; } // Invalid domain, operation only valid for current domain
- }
- } catch (ex) { console.log(ex); err = "Validation exception: " + ex; }
- // Handle any errors
- if (err != null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'changeDeviceMesh', responseid: command.responseid, result: err })); } catch (ex) { } }
- break;
+ if (common.validateString(command.meshid, 8, 134) == false) break; // Check meshid
+ if ((command.meshid.split('/').length != 3) || (command.meshid.split('/')[1] != domain.id)) return; // Invalid domain, operation only valid for current domain
+ if (common.validateString(command.devicename, 1, 256) == false) break; // Check device name
+ if (common.validateString(command.hostname, 1, 256) == false) break; // Check hostname
+ if (typeof command.type != 'number') break; // Type must be a number
+ if ((command.type != 4) && (command.type != 6) && (command.type != 29)) break; // Check device type
+
+ // Get the mesh
+ mesh = parent.meshes[command.meshid];
+ if (mesh) {
+ if (mesh.mtype != 3) return; // This operation is only allowed for mesh type 3, local device agentless mesh.
+
+ // Check if this user has rights to do this
+ if ((parent.GetMeshRights(user, mesh) & MESHRIGHT_MANAGECOMPUTERS) == 0) return;
+
+ // Create a new nodeid
+ parent.crypto.randomBytes(48, function (err, buf) {
+ // Create the new node
+ nodeid = 'node/' + domain.id + '/' + buf.toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
+ var device = { type: 'node', _id: nodeid, meshid: command.meshid, mtype: 3, icon: 1, name: command.devicename, host: command.hostname, domain: domain.id, agent: { id: command.type, caps: 0 } };
+ db.Set(device);
+
+ // Event the new node
+ parent.parent.DispatchEvent(parent.CreateMeshDispatchTargets(command.meshid, [nodeid]), obj, { etype: 'node', userid: user._id, username: user.name, action: 'addnode', node: parent.CloneSafeNode(device), msgid: 84, msgArgs: [command.devicename, mesh.name], msg: 'Added device ' + command.devicename + ' to device group ' + mesh.name, domain: domain.id });
+ });
}
- // Create a new nodeid
- parent.crypto.randomBytes(48, function (err, buf) {
- // Create the new node
- nodeid = 'node/' + domain.id + '/' + buf.toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
- var device = { type: 'node', _id: nodeid, meshid: command.meshid, mtype: 3, icon: 1, name: command.devicename, host: command.hostname, domain: domain.id, agent: { id: command.type, caps: 0 } };
- db.Set(device);
-
- // Event the new node
- parent.parent.DispatchEvent(parent.CreateMeshDispatchTargets(command.meshid, [nodeid]), obj, { etype: 'node', userid: user._id, username: user.name, action: 'addnode', node: parent.CloneSafeNode(device), msgid: 84, msgArgs: [command.devicename, mesh.name], msg: 'Added device ' + command.devicename + ' to device group ' + mesh.name, domain: domain.id });
- // Send response if required
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'addlocaldevice', responseid: command.responseid, result: 'ok' })); } catch (ex) { } }
- });
break;
}
case 'addamtdevice':
{
if (args.wanonly == true) return; // This is a WAN-only server, local Intel AMT computers can't be added
- var err = null;
- // Perform input validation
- try {
- if (common.validateString(command.meshid, 8, 134) == false) { err = "Invalid device group id"; } // Check meshid
- if (common.validateString(command.devicename, 1, 256) == false) { err = "Invalid devicename"; } // Check device name
- if (common.validateString(command.hostname, 1, 256) == false) { err = "Invalid hostname"; } // Check hostname
- if (common.validateString(command.amtusername, 0, 16) == false) { err = "Invalid amtusername"; } // Check username
- if (common.validateString(command.amtpassword, 0, 16) == false) { err = "Invalid amtpassword"; } // Check password
- if (command.amttls == '0') { command.amttls = 0; } else if (command.amttls == '1') { command.amttls = 1; } // Check TLS flag
- if ((command.amttls != 1) && (command.amttls != 0)) { err = "Invalid amttls"; }
- else {
- if (command.meshid.indexOf('/') == -1) { command.meshid = 'mesh/' + domain.id + '/' + command.meshid; }
- // Get the mesh
- mesh = parent.meshes[command.meshid];
- if (mesh == null) { err = "Unknown device group"; }
- if (mesh.mtype != 1) { err = "Intel AMT agentless mesh only allowed"; } // This operation is only allowed for mesh type 1, Intel AMT agentless mesh.
- // Check if this user has rights to do this
- else if ((parent.GetMeshRights(user, mesh) & MESHRIGHT_MANAGECOMPUTERS) == 0) { err = "Permission denied"; }
- else if ((command.meshid.split('/').length != 3) || (command.meshid.split('/')[1] != domain.id)) { err = "Invalid domain"; } // Invalid domain, operation only valid for current domain
- }
- } catch (ex) { console.log(ex); err = "Validation exception: " + ex; }
-
- // Handle any errors
- if (err != null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'changeDeviceMesh', responseid: command.responseid, result: err })); } catch (ex) { } }
- break;
- }
+ if (common.validateString(command.meshid, 8, 134) == false) break; // Check meshid
+ if ((command.meshid.split('/').length != 3) || (command.meshid.split('/')[1] != domain.id)) return; // Invalid domain, operation only valid for current domain
+ if (common.validateString(command.devicename, 1, 256) == false) break; // Check device name
+ if (common.validateString(command.hostname, 1, 256) == false) break; // Check hostname
+ if (common.validateString(command.amtusername, 0, 16) == false) break; // Check username
+ if (common.validateString(command.amtpassword, 0, 16) == false) break; // Check password
+ if (command.amttls == '0') { command.amttls = 0; } else if (command.amttls == '1') { command.amttls = 1; } // Check TLS flag
+ if ((command.amttls != 1) && (command.amttls != 0)) break;
// If we are in WAN-only mode, hostname is not used
if ((args.wanonly == true) && (command.hostname)) { delete command.hostname; }
- // Create a new nodeid
- parent.crypto.randomBytes(48, function (err, buf) {
- // Create the new node
- nodeid = 'node/' + domain.id + '/' + buf.toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
- var device = { type: 'node', _id: nodeid, meshid: command.meshid, mtype: 1, icon: 1, name: command.devicename, host: command.hostname, domain: domain.id, intelamt: { user: command.amtusername, pass: command.amtpassword, tls: command.amttls } };
+ // Get the mesh
+ mesh = parent.meshes[command.meshid];
+ if (mesh) {
+ if (mesh.mtype != 1) return; // This operation is only allowed for mesh type 1, Intel AMT agentless mesh.
- // Add optional feilds
- if (common.validateInt(command.state, 0, 3)) { device.intelamt.state = command.state; }
- if (common.validateString(command.ver, 1, 16)) { device.intelamt.ver = command.ver; }
- if (common.validateString(command.hash, 1, 256)) { device.intelamt.hash = command.hash; }
- if (common.validateString(command.realm, 1, 256)) { device.intelamt.realm = command.realm; }
+ // Check if this user has rights to do this
+ if ((parent.GetMeshRights(user, mesh) & MESHRIGHT_MANAGECOMPUTERS) == 0) return;
- // Save the device to the database
- db.Set(device);
+ // Create a new nodeid
+ parent.crypto.randomBytes(48, function (err, buf) {
+ // Create the new node
+ nodeid = 'node/' + domain.id + '/' + buf.toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
+ var device = { type: 'node', _id: nodeid, meshid: command.meshid, mtype: 1, icon: 1, name: command.devicename, host: command.hostname, domain: domain.id, intelamt: { user: command.amtusername, pass: command.amtpassword, tls: command.amttls } };
- // Event the new node
- parent.parent.DispatchEvent(parent.CreateMeshDispatchTargets(command.meshid, [nodeid]), obj, { etype: 'node', userid: user._id, username: user.name, action: 'addnode', node: parent.CloneSafeNode(device), msgid: 84, msgArgs: [command.devicename, mesh.name], msg: 'Added device ' + command.devicename + ' to device group ' + mesh.name, domain: domain.id });
- // Send response if required
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'addamtdevice', responseid: command.responseid, result: 'ok' })); } catch (ex) { } }
- });
+ // Add optional feilds
+ if (common.validateInt(command.state, 0, 3)) { device.intelamt.state = command.state; }
+ if (common.validateString(command.ver, 1, 16)) { device.intelamt.ver = command.ver; }
+ if (common.validateString(command.hash, 1, 256)) { device.intelamt.hash = command.hash; }
+ if (common.validateString(command.realm, 1, 256)) { device.intelamt.realm = command.realm; }
+ // Save the device to the database
+ db.Set(device);
+
+ // Event the new node
+ parent.parent.DispatchEvent(parent.CreateMeshDispatchTargets(command.meshid, [nodeid]), obj, { etype: 'node', userid: user._id, username: user.name, action: 'addnode', node: parent.CloneSafeNode(device), msgid: 84, msgArgs: [command.devicename, mesh.name], msg: 'Added device ' + command.devicename + ' to device group ' + mesh.name, domain: domain.id });
+ });
+ }
break;
}
case 'scanamtdevice':
@@ -2791,20 +2609,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
{
if (common.validateArray(command.nodeids, 1) == false) break; // Check nodeid's
for (i in command.nodeids) {
- var nodeid = command.nodeids[i], err = null;
-
- // Argument validation
- if (common.validateString(nodeid, 1, 1024) == false) { err = 'Invalid nodeid'; } // Check nodeid
- else {
- if (nodeid.indexOf('/') == -1) { nodeid = 'node/' + domain.id + '/' + nodeid; }
- if ((nodeid.split('/').length != 3) || (nodeid.split('/')[1] != domain.id)) { err = 'Invalid domain'; } // Invalid domain, operation only valid for current domain
- }
- if (err != null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'removedevices', responseid: command.responseid, result: err })); } catch (ex) { } }
- continue;
- }
// Get the node and the rights for this node
- parent.GetNodeWithRights(domain, user, nodeid, function (node, rights, visible) {
+ parent.GetNodeWithRights(domain, user, command.nodeids[i], function (node, rights, visible) {
// Check we have the rights to delete this device
if ((rights & MESHRIGHT_UNINSTALL) == 0) return;
@@ -2859,10 +2665,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
});
}
-
- // Send response if required, in this case we always send ok which is not ideal.
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'removedevices', responseid: command.responseid, result: 'ok' })); } catch (ex) { } }
-
break;
}
case 'wakedevices':
@@ -2955,206 +2757,75 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
break;
}
- case 'webrelay':
- {
- if (common.validateString(command.nodeid, 8, 128) == false) { err = 'Invalid node id'; } // Check the nodeid
- else if (command.nodeid.indexOf('/') == -1) { command.nodeid = 'node/' + domain.id + '/' + command.nodeid; }
- else if ((command.nodeid.split('/').length != 3) || (command.nodeid.split('/')[1] != domain.id)) { err = 'Invalid domain'; } // Invalid domain, operation only valid for current domain
- else if ((command.port != null) && (common.validateInt(command.port, 1, 65535) == false)) { err = 'Invalid port value'; } // Check the port if present
- else {
- if (command.nodeid.split('/').length == 1) { command.nodeid = 'node/' + domain.id + '/' + command.nodeid; }
- var snode = command.nodeid.split('/');
- if ((snode.length != 3) || (snode[0] != 'node') || (snode[1] != domain.id)) { err = 'Invalid node id'; }
- }
- // Handle any errors
- if (err != null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'webrelay', responseid: command.responseid, result: err })); } catch (ex) { } }
- break;
- }
- // Get the device rights
- parent.GetNodeWithRights(domain, user, command.nodeid, function (node, rights, visible) {
- // If node not found or we don't have remote control, reject.
- if (node == null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'webrelay', responseid: command.responseid, result: 'Invalid node id' })); } catch (ex) { } }
- return;
- }
- var relayid = null;
- var addr = null;
- if (node.mtype == 3) { // Setup device relay if needed
- var mesh = parent.meshes[node.meshid];
- if (mesh && mesh.relayid) { relayid = mesh.relayid; addr = node.host; }
- }
- var webRelayDns = (args.relaydns != null) ? args.relaydns[0] : obj.getWebServerName(domain, req);
- var webRelayPort = ((args.relaydns != null) ? ((typeof args.aliasport == 'number') ? args.aliasport : args.port) : ((parent.webrelayserver != null) ? ((typeof args.relayaliasport == 'number') ? args.relayaliasport : parent.webrelayserver.port) : 0));
- if (webRelayPort == 0) { try { ws.send(JSON.stringify({ action: 'webrelay', responseid: command.responseid, result: 'WebRelay Disabled' })); return; } catch (ex) { } }
- const authRelayCookie = parent.parent.encodeCookie({ ruserid: user._id, x: req.session.x }, parent.parent.loginCookieEncryptionKey);
- var url = 'https://' + webRelayDns + ':' + webRelayPort + '/control-redirect.ashx?n=' + command.nodeid + '&p=' + command.port + '&appid=' + command.appid + '&c=' + authRelayCookie;
- if (addr != null) { url += '&addr=' + addr; }
- if (relayid != null) { url += '&relayid=' + relayid }
- command.url = url;
- if (command.responseid != null) { command.result = 'OK'; }
- try { ws.send(JSON.stringify(command)); } catch (ex) { }
- });
- break;
- }
case 'runcommands':
{
if (common.validateArray(command.nodeids, 1) == false) break; // Check nodeid's
- if (typeof command.presetcmd != 'number') {
- if (typeof command.type != 'number') break; // Check command type
- if (typeof command.runAsUser != 'number') { command.runAsUser = 0; } // Check runAsUser
- }
+ if (typeof command.type != 'number') break; // Check command type
+ if (typeof command.cmds != 'string') break; // Check commands
+ if (typeof command.runAsUser != 'number') { command.runAsUser = 0; } // Check runAsUser
- const processRunCommand = function (command) {
- for (i in command.nodeids) {
- var nodeid = command.nodeids[i], err = null;
+ for (i in command.nodeids) {
+ var nodeid = command.nodeids[i], err = null;
- // Argument validation
- if (common.validateString(nodeid, 1, 1024) == false) { err = 'Invalid nodeid'; } // Check nodeid
- else {
- if (nodeid.indexOf('/') == -1) { nodeid = 'node/' + domain.id + '/' + nodeid; }
- if ((nodeid.split('/').length != 3) || (nodeid.split('/')[1] != domain.id)) { err = 'Invalid domain'; } // Invalid domain, operation only valid for current domain
- }
- if (err != null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: err })); } catch (ex) { } }
- continue;
+ // Argument validation
+ if (common.validateString(nodeid, 1, 1024) == false) { err = 'Invalid nodeid'; } // Check nodeid
+ else {
+ if (nodeid.indexOf('/') == -1) { nodeid = 'node/' + domain.id + '/' + nodeid; }
+ if ((nodeid.split('/').length != 3) || (nodeid.split('/')[1] != domain.id)) { err = 'Invalid domain'; } // Invalid domain, operation only valid for current domain
+ }
+ if (err != null) {
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: err })); } catch (ex) { } }
+ continue;
+ }
+
+ // Get the node and the rights for this node
+ parent.GetNodeWithRights(domain, user, nodeid, function (node, rights, visible) {
+ // Check if this node was found
+ if (node == null) {
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Invalid nodeid' })); } catch (ex) { } }
+ return;
}
- // Get the node and the rights for this node
- parent.GetNodeWithRights(domain, user, nodeid, function (node, rights, visible) {
- // Check if this node was found
- if (node == null) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Invalid nodeid' })); } catch (ex) { } }
- return;
- }
+ // Check we have the rights to run commands on this device
+ if ((rights & MESHRIGHT_REMOTECOMMAND) == 0) {
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Access denied' })); } catch (ex) { } }
+ return;
+ }
- if (command.type == 4) {
- // This is an agent console command
-
- // Check we have the rights to run commands on this device, MESHRIGHT_REMOTECONTROL & MESHRIGHT_AGENTCONSOLE are needed
- if ((rights & 24) != 24) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Access denied' })); } catch (ex) { } }
- return;
- }
-
- var theCommand = { action: 'msg', type: 'console', value: command.cmds, rights: rights, sessionid: ws.sessionId };
- if (parent.parent.multiServer != null) { // peering setup
- parent.parent.multiServer.DispatchMessage({ action: 'agentCommand', nodeid: node._id, command: theCommand});
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'OK' })); } catch (ex) { } }
- } else {
- // Send the commands to the agent
- var agent = parent.wsagents[node._id];
- if ((agent != null) && (agent.authenticated == 2) && (agent.agentInfo != null)) {
- try { agent.send(JSON.stringify(theCommand)); } catch (ex) { }
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'OK' })); } catch (ex) { } }
- } else {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Agent not connected' })); } catch (ex) { } }
- }
- }
+ // Get the agent and run the commands
+ var agent = parent.wsagents[node._id];
+ if ((agent != null) && (agent.authenticated == 2) && (agent.agentInfo != null)) {
+ // Check if this agent is correct for this command type
+ // command.type 1 = Windows Command, 2 = Windows PowerShell, 3 = Linux/BSD/macOS
+ var commandsOk = false;
+ if ((agent.agentInfo.agentId > 0) && (agent.agentInfo.agentId < 5)) {
+ // Windows Agent
+ if ((command.type == 1) || (command.type == 2)) { commandsOk = true; }
+ else if (command.type === 0) { command.type = 1; commandsOk = true; } // Set the default type of this agent
} else {
- // This is a standard (bash/shell/powershell) command.
+ // Non-Windows Agent
+ if (command.type == 3) { commandsOk = true; }
+ else if (command.type === 0) { command.type = 3; commandsOk = true; } // Set the default type of this agent
+ }
+ if (commandsOk == true) {
+ // Send the commands to the agent
+ try { agent.send(JSON.stringify({ action: 'runcommands', type: command.type, cmds: command.cmds, runAsUser: command.runAsUser })); } catch (ex) { }
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'OK' })); } catch (ex) { } }
- // Check we have the rights to run commands on this device
- if ((rights & MESHRIGHT_REMOTECOMMAND) == 0) {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Access denied' })); } catch (ex) { } }
- return;
- }
-
- if (typeof command.reply != 'boolean') command.reply = false;
- if (typeof command.responseid != 'string') command.responseid = null;
+ // Send out an event that these commands where run on this device
+ var targets = parent.CreateNodeDispatchTargets(node.meshid, node._id, ['server-users', user._id]);
var msgid = 24; // "Running commands"
if (command.type == 1) { msgid = 99; } // "Running commands as user"
if (command.type == 2) { msgid = 100; } // "Running commands as user if possible"
- // Check if this agent is correct for this command type
- // command.type 1 = Windows Command, 2 = Windows PowerShell, 3 = Linux/BSD/macOS
- var commandsOk = false;
- if ((node.agent.id > 0) && (node.agent.id < 5)) {
- // Windows Agent
- if ((command.type == 1) || (command.type == 2)) { commandsOk = true; }
- else if (command.type === 0) { command.type = 1; commandsOk = true; } // Set the default type of this agent
- } else {
- // Non-Windows Agent
- if (command.type == 3) { commandsOk = true; }
- else if (command.type === 0) { command.type = 3; commandsOk = true; } // Set the default type of this agent
- }
- if (commandsOk == true) {
- var theCommand = { action: 'runcommands', type: command.type, cmds: command.cmds, runAsUser: command.runAsUser, reply: command.reply, responseid: command.responseid };
- var agent = parent.wsagents[node._id];
- if ((agent != null) && (agent.authenticated == 2) && (agent.agentInfo != null)) {
- // Send the commands to the agent
- try { agent.send(JSON.stringify(theCommand)); } catch (ex) { }
- if (command.responseid != null && command.reply == false) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'OK' })); } catch (ex) { } }
- // Send out an event that these commands where run on this device
- var targets = parent.CreateNodeDispatchTargets(node.meshid, node._id, ['server-users', user._id]);
- var event = { etype: 'node', userid: user._id, username: user.name, nodeid: node._id, action: 'runcommands', msg: 'Running commands', msgid: msgid, cmds: command.cmds, cmdType: command.type, runAsUser: command.runAsUser, domain: domain.id };
- parent.parent.DispatchEvent(targets, obj, event);
- } else if (parent.parent.multiServer != null) { // peering setup
- // Send the commands to the agent
- parent.parent.multiServer.DispatchMessage({ action: 'agentCommand', nodeid: node._id, command: theCommand});
- if (command.responseid != null && command.reply == false) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'OK' })); } catch (ex) { } }
- // Send out an event that these commands where run on this device
- var targets = parent.CreateNodeDispatchTargets(node.meshid, node._id, ['server-users', user._id]);
- var event = { etype: 'node', userid: user._id, username: user.name, nodeid: node._id, action: 'runcommands', msg: 'Running commands', msgid: msgid, cmds: command.cmds, cmdType: command.type, runAsUser: command.runAsUser, domain: domain.id };
- parent.parent.multiServer.DispatchEvent(targets, obj, event);
- } else {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Agent not connected' })); } catch (ex) { } }
- }
- } else {
- if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Invalid command type' })); } catch (ex) { } }
- }
+ var event = { etype: 'node', userid: user._id, username: user.name, nodeid: node._id, action: 'runcommands', msg: 'Running commands', msgid: msgid, cmds: command.cmds, cmdType: command.type, runAsUser: command.runAsUser, domain: domain.id };
+ parent.parent.DispatchEvent(targets, obj, event);
+ } else {
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Invalid command type' })); } catch (ex) { } }
}
- });
- }
- }
-
- if (typeof command.presetcmd == 'number') {
- // If a pre-set command is used, load the command
- if (Array.isArray(domain.preconfiguredscripts) == false) return;
- const script = domain.preconfiguredscripts[command.presetcmd];
- if (script == null) return;
- delete command.presetcmd;
-
- // Decode script type
- const types = ['', 'bat', 'ps1', 'sh', 'agent']; // 1 = Windows Command, 2 = Windows PowerShell, 3 = Linux, 4 = Agent
- if (typeof script.type == 'string') { const stype = types.indexOf(script.type.toLowerCase()); if (stype > 0) { command.type = stype; } }
- if (command.type == null) return;
-
- // Decode script runas
- if (command.type != 4) {
- const runAsModes = ['agent', 'userfirst', 'user']; // 0 = AsAgent, 1 = UserFirst, 2 = UserOnly
- if (typeof script.runas == 'string') { const srunas = runAsModes.indexOf(script.runas.toLowerCase()); if (srunas >= 0) { command.runAsUser = srunas; } }
- }
-
- if (typeof script.file == 'string') {
- // The pre-defined script commands are in a file, load it
- const scriptPath = parent.common.joinPath(parent.parent.datapath, script.file);
- fs.readFile(scriptPath, function (err, data) {
- // If loaded correctly, run loaded commands
- if ((err != null) || (data == null) || (data.length == 0) || (data.length > 65535)) return;
- command.cmds = data.toString();
- processRunCommand(command);
- });
- } else if (typeof script.cmd == 'string') {
- // The pre-defined script commands are right in the config.json, use that
- command.cmds = script.cmd;
- processRunCommand(command);
- }
- } else if (typeof command.cmdpath == 'string') {
- // If a server command path is used, load the script from the path
- var file = parent.getServerFilePath(user, domain, command.cmdpath);
- if (file != null) {
- fs.readFile(file.fullpath, function (err, data) {
- // If loaded correctly, run loaded commands
- if ((err != null) || (data == null) || (data.length == 0) || (data.length > 65535)) return;
- command.cmds = data.toString();
- delete command.cmdpath;
- processRunCommand(command);
- });
- }
- } else if (typeof command.cmds == 'string') {
- // Run provided commands
- if (command.cmds.length > 65535) return;
- processRunCommand(command);
+ } else {
+ if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'runcommands', responseid: command.responseid, result: 'Agent not connected' })); } catch (ex) { } }
+ }
+ });
}
break;
}
@@ -3213,8 +2884,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
if ((command.actiontype >= 300) && (command.actiontype < 400)) {
- if ((command.actiontype != 302) && (command.actiontype != 308) && (command.actiontype < 310) && (command.actiontype > 316)) return; // Invalid action type.
- // Intel AMT power command, actiontype: 2 = Power on, 8 = Power down, 10 = reset, 11 = Power on to BIOS, 12 = Reset to BIOS, 13 = Power on to BIOS with SOL, 14 = Reset to BIOS with SOL, 15 = Power on to PXE, 16 = Reset to PXE
+ if ((command.actiontype != 302) && (command.actiontype != 308) && (command.actiontype != 310)) return; // Invalid action type.
+ // Intel AMT power command, actiontype: 2 = Power on, 8 = Power down, 10 = reset
parent.parent.DispatchEvent('*', obj, { action: 'amtpoweraction', userid: user._id, username: user.name, nodeids: [node._id], domain: domain.id, nolog: 1, actiontype: command.actiontype - 300 });
} else {
if ((command.actiontype < 2) && (command.actiontype > 4)) return; // Invalid action type.
@@ -3310,7 +2981,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'changedevice', responseid: command.responseid, result: 'Access Denied' })); } catch (ex) { } }
return;
}
- node = common.unEscapeLinksFieldName(node); // unEscape node data for rdp/ssh credentials
var mesh = parent.meshes[node.meshid], amtchange = 0;
// Ready the node change event
@@ -3632,46 +3302,14 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
parent.parent.DispatchEvent(targets, obj, event);
break;
}
- case 'otpduo':
- {
- // Do not allow this command if 2FA's are locked
- if ((domain.passwordrequirements) && (domain.passwordrequirements.lock2factor == true)) return;
-
- // Do not allow if Duo is not supported
- if ((typeof domain.duo2factor != 'object') || (typeof domain.duo2factor.integrationkey != 'string') || (typeof domain.duo2factor.secretkey != 'string') || (typeof domain.duo2factor.apihostname != 'string')) return;
-
- // Do not allow if Duo is disabled
- if ((typeof domain.passwordrequirements == 'object') && (domain.passwordrequirements.duo2factor == false)) return;
-
- // Do not allow this command when logged in using a login token
- if (req.session.loginToken != null) break;
-
- if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
-
- // Check input
- if ((typeof command.enabled != 'boolean') || (command.enabled != false)) return;
-
- // See if we really need to change the state
- if ((command.enabled === false) && (user.otpduo == null)) return;
-
- // Change the duo 2FA of this user
- delete user.otpduo;
- parent.db.SetUser(user);
- ws.send(JSON.stringify({ action: 'otpduo', success: true, enabled: command.enabled })); // Report success
-
- // Notify change
- var targets = ['*', 'server-users', user._id];
- if (user.groups) { for (var i in user.groups) { targets.push('server-users:' + i); } }
- var event = { etype: 'user', userid: user._id, username: user.name, account: parent.CloneSafeUser(user), action: 'accountchange', msgid: command.enabled ? 160 : 161, msg: command.enabled ? "Enabled duo two-factor authentication." : "Disabled duo two-factor authentication.", domain: domain.id };
- if (db.changeStream) { event.noact = 1; } // If DB change stream is active, don't use this event to change the user. Another event will come.
- parent.parent.DispatchEvent(targets, obj, event);
- break;
- }
case 'otpauth-request':
{
// Do not allow this command if 2FA's are locked
if ((domain.passwordrequirements) && (domain.passwordrequirements.lock2factor == true)) { ws.send(JSON.stringify({ action: 'otpauth-request', err: 1 })); return; }
+ // Do not allow this command if backup codes are not allowed
+ if ((domain.passwordrequirements) && (domain.passwordrequirements.backupcode2factor == false)) { ws.send(JSON.stringify({ action: 'otpauth-request', err: 2 })); return; }
+
// Do not allow this command when logged in using a login token
if (req.session.loginToken != null) { ws.send(JSON.stringify({ action: 'otpauth-request', err: 3 })); return; }
@@ -3690,11 +3328,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
const secret = otplib.authenticator.generateSecret(); // TODO: Check the random source of this value.
var domainName = parent.certificates.CommonName;
- if (domain.dns != null) {
- domainName = domain.dns;
- } else if (domain.dns == null && domain.id != '') {
- domainName += "/" + domain.id;
- }
+ if (domain.dns != null) { domainName = domain.dns; }
ws.send(JSON.stringify({ action: 'otpauth-request', secret: secret, url: otplib.authenticator.keyuri(encodeURIComponent(user.name), domainName, secret) }));
}
break;
@@ -3704,6 +3338,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Do not allow this command if 2FA's are locked
if ((domain.passwordrequirements) && (domain.passwordrequirements.lock2factor == true)) return;
+ // Do not allow this command if backup codes are not allowed
+ if ((domain.passwordrequirements) && (domain.passwordrequirements.backupcode2factor == false)) return;
+
// Do not allow this command when logged in using a login token
if (req.session.loginToken != null) break;
@@ -3743,6 +3380,9 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Do not allow this command if 2FA's are locked
if ((domain.passwordrequirements) && (domain.passwordrequirements.lock2factor == true)) return;
+ // Do not allow this command if backup codes are not allowed
+ if ((domain.passwordrequirements) && (domain.passwordrequirements.backupcode2factor == false)) return;
+
// Do not allow this command when logged in using a login token
if (req.session.loginToken != null) break;
@@ -4155,7 +3795,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
mesh = parent.meshes[command.meshid];
if ((mesh == null) || (parent.IsMeshViewable(user, mesh) == false)) { err = 'Invalid group id'; }
}
- var serverName = parent.getWebServerName(domain, req);
+ var serverName = parent.getWebServerName(domain);
// Handle any errors
if (err != null) {
@@ -4356,7 +3996,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Event device share removal
if (removedExact != null) {
// Send out an event that we removed a device share
- var targets = parent.CreateNodeDispatchTargets(node.meshid, node._id, ['server-users', 'server-shareremove', user._id]);
+ var targets = parent.CreateNodeDispatchTargets(node.meshid, node._id, ['server-users', user._id]);
var event = { etype: 'node', userid: user._id, username: user.name, nodeid: node._id, action: 'removedDeviceShare', msg: 'Removed Device Share', msgid: 102, msgArgs: [removedExact.guestName], domain: domain.id, publicid: command.publicid };
parent.parent.DispatchEvent(targets, obj, event);
@@ -4389,9 +4029,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
else if ((command.start != null) && (typeof command.start != 'number')) { err = 'Invalid start time'; } // Check the start time in UTC seconds
else if ((command.end != null) && (typeof command.end != 'number')) { err = 'Invalid end time'; } // Check the end time in UTC seconds
else if (common.validateInt(command.consent, 0, 256) == false) { err = 'Invalid flags'; } // Check the flags
- else if (common.validateInt(command.p, 1, 31) == false) { err = 'Invalid protocol'; } // Check the protocol, 1 = Terminal, 2 = Desktop, 4 = Files, 8 = HTTP, 16 = HTTPS
+ else if (common.validateInt(command.p, 1, 7) == false) { err = 'Invalid protocol'; } // Check the protocol, 1 = Terminal, 2 = Desktop, 4 = Files
else if ((command.recurring != null) && (common.validateInt(command.recurring, 1, 2) == false)) { err = 'Invalid recurring value'; } // Check the recurring value, 1 = Daily, 2 = Weekly
- else if ((command.port != null) && (common.validateInt(command.port, 1, 65535) == false)) { err = 'Invalid port value'; } // Check the port if present
else if ((command.recurring != null) && ((command.end != null) || (command.start == null) || (command.expire == null))) { err = 'Invalid recurring command'; }
else if ((command.expire == null) && ((command.start == null) || (command.end == null) || (command.start > command.end))) { err = 'No time specified'; } // Check that a time range is present
else {
@@ -4449,7 +4088,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
// If we have view only remote desktop rights, force view-only on the guest share.
- if ((rights != MESHRIGHT_ADMIN) && ((rights & MESHRIGHT_REMOTEVIEWONLY) != 0)) { command.viewOnly = true; }
+ if ((rights != MESHRIGHT_ADMIN) && ((rights & MESHRIGHT_REMOTEVIEWONLY) != 0)) { command.viewOnly = true; command.p = (command.p & 1); }
// Create cookie
var publicid = getRandomPassword(), startTime = null, expireTime = null, duration = null;
@@ -4479,7 +4118,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (inviteCookie == null) { if (command.responseid != null) { try { ws.send(JSON.stringify({ action: 'createDeviceShareLink', responseid: command.responseid, result: 'Unable to generate shareing cookie' })); } catch (ex) { } } return; }
// Create the server url
- var serverName = parent.getWebServerName(domain, req);
+ var serverName = parent.getWebServerName(domain);
var httpsPort = ((args.aliasport == null) ? args.port : args.aliasport); // Use HTTPS alias port is specified
var xdomain = (domain.dns == null) ? domain.id : '';
if (xdomain != '') xdomain += '/';
@@ -4491,7 +4130,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
try { ws.send(JSON.stringify(command)); } catch (ex) { }
// Create a device sharing database entry
- var shareEntry = { _id: 'deviceshare-' + publicid, type: 'deviceshare', xmeshid: node.meshid, nodeid: node._id, p: command.p, domain: node.domain, publicid: publicid, userid: user._id, guestName: command.guestname, consent: command.consent, port: command.port, url: url };
+ var shareEntry = { _id: 'deviceshare-' + publicid, type: 'deviceshare', xmeshid: node.meshid, nodeid: node._id, p: command.p, domain: node.domain, publicid: publicid, userid: user._id, guestName: command.guestname, consent: command.consent, url: url };
if ((startTime != null) && (expireTime != null)) { shareEntry.startTime = startTime; shareEntry.expireTime = expireTime; }
else if ((startTime != null) && (duration != null)) { shareEntry.startTime = startTime; shareEntry.duration = duration; }
if (command.recurring) { shareEntry.recurring = command.recurring; }
@@ -4582,7 +4221,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (rights == MESHRIGHT_ADMIN) {
var token = parent.parent.mqttbroker.generateLogin(node.meshid, node._id);
var r = { action: 'getmqttlogin', responseid: command.responseid, nodeid: node._id, user: token.user, pass: token.pass };
- const serverName = parent.getWebServerName(domain, req);
+ const serverName = parent.getWebServerName(domain);
// Add MPS URL
if (parent.parent.mpsserver != null) {
@@ -4722,7 +4361,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
} else {
try {
parent.parent.pluginHandler.plugins[command.plugin].serveraction(command, obj, parent);
- } catch (ex) { console.log('Error loading plugin handler (' + ex + ')'); }
+ } catch (ex) { console.log('Error loading plugin handler (' + e + ')'); }
}
break;
}
@@ -4752,16 +4391,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (typeof command.logmsg == 'string') { message.msg = command.logmsg; } else { message.nolog = 1; }
parent.parent.DispatchEvent(['*', user._id], obj, message);
}
-
- if (parent.parent.pluginHandler != null) // If the plugin's are not supported, reject this command.
- {
- command.userid = user._id;
- try {
- for( var pluginName in parent.parent.pluginHandler.plugins)
- if( typeof parent.parent.pluginHandler.plugins[pluginName].uiCustomEvent === 'function' )
- parent.parent.pluginHandler.plugins[pluginName].uiCustomEvent(command, obj);
- } catch (ex) { console.log('Error loading plugin handler (' + ex + ')'); }
- }
break;
}
case 'serverBackup': {
@@ -4932,7 +4561,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
} else {
// Old way
- db.GetUserEvents([user._id], domain.id, user._id, null, function (err, docs) {
+ db.GetUserEvents([user._id], domain.id, user._id, function (err, docs) {
if (err != null) return;
var e = [];
for (var i in docs) {
@@ -4958,7 +4587,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
} else {
// Old way
- db.GetUserEvents([command.userid], domain.id, user._id, null, function (err, docs) {
+ db.GetUserEvents([command.userid], domain.id, user._id, function (err, docs) {
if (err != null) return;
var e = [];
for (var i in docs) { if ((docs[i].msgArgs) && (docs[i].userid == command.userid) && ((docs[i].action == 'authfail') || (docs[i].action == 'login'))) { e.push({ t: docs[i].time, m: docs[i].msgid, a: docs[i].msgArgs }); } }
@@ -5076,295 +4705,195 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
case 'getDeviceDetails': {
if ((common.validateStrArray(command.nodeids, 1) == false) && (command.nodeids != null)) break; // Check nodeids
if (common.validateString(command.type, 3, 4) == false) break; // Check type
-
- const links = parent.GetAllMeshIdWithRights(user);
- const extraids = getUserExtraIds();
- db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', null, obj.deviceSkip, obj.deviceLimit, function (err, docs) {
- if (docs == null) return;
- const ids = [];
- if (command.nodeids != null) {
- // Create a list of node ids and query them for last device connection time
- for (var i in command.nodeids) { ids.push('lc' + command.nodeids[i]); }
- } else {
- // Create a list of node ids for this user and query them for last device connection time
- for (var i in docs) { ids.push('lc' + docs[i]._id); }
- }
- db.GetAllIdsOfType(ids, domain.id, 'lastconnect', function (err, docs) {
- const lastConnects = {};
- if (docs != null) { for (var i in docs) { lastConnects[docs[i]._id] = docs[i]; } }
- getDeviceDetailedInfo(command.nodeids, command.type, function (results, type) {
- for (var i = 0; i < results.length; i++) {
- // Remove any device system and network information is we do not have details rights to this device
- if ((parent.GetNodeRights(user, results[i].node.meshid, results[i].node._id) & MESHRIGHT_DEVICEDETAILS) == 0) {
- delete results[i].sys; delete results[i].net;
- }
+ // Create a list of node ids and query them for last device connection time
+ const ids = []
+ for (var i in command.nodeids) { ids.push('lc' + command.nodeids[i]); }
+ db.GetAllIdsOfType(ids, domain.id, 'lastconnect', function (err, docs) {
+ const lastConnects = {};
+ if (docs != null) { for (var i in docs) { lastConnects[docs[i]._id] = docs[i]; } }
- // Merge any last connection information
- const lc = lastConnects['lc' + results[i].node._id];
- if (lc != null) { delete lc._id; delete lc.type; delete lc.meshid; delete lc.domain; results[i].lastConnect = lc; }
-
- // Remove any connectivity and power state information, that should not be in the database anyway.
- // TODO: Find why these are sometimes saved in the db.
- if (results[i].node.conn != null) { delete results[i].node.conn; }
- if (results[i].node.pwr != null) { delete results[i].node.pwr; }
- if (results[i].node.agct != null) { delete results[i].node.agct; }
- if (results[i].node.cict != null) { delete results[i].node.cict; }
-
- // Add the connection state
- var state = parent.parent.GetConnectivityState(results[i].node._id);
- if (state) {
- results[i].node.conn = state.connectivity;
- results[i].node.pwr = state.powerState;
- if ((state.connectivity & 1) != 0) { var agent = parent.wsagents[results[i].node._id]; if (agent != null) { results[i].node.agct = agent.connectTime; } }
-
- // Use the connection time of the CIRA/Relay connection
- if ((state.connectivity & 2) != 0) {
- var ciraConnection = parent.parent.mpsserver.GetConnectionToNode(results[i].node._id, null, true);
- if ((ciraConnection != null) && (ciraConnection.tag != null)) { results[i].node.cict = ciraConnection.tag.connectTime; }
- }
- }
-
+ getDeviceDetailedInfo(command.nodeids, command.type, function (results, type) {
+ for (var i = 0; i < results.length; i++) {
+ // Remove any device system and network information is we do not have details rights to this device
+ if ((parent.GetNodeRights(user, results[i].node.meshid, results[i].node._id) & MESHRIGHT_DEVICEDETAILS) == 0) {
+ delete results[i].sys; delete results[i].net;
}
- var output = null;
- if (type == 'csv') {
- try {
- // Create the CSV file
- output = 'id,name,rname,host,icon,ip,osdesc,groupname,av,update,firewall,bitlocker,avdetails,tags,lastbootuptime,cpu,osbuild,biosDate,biosVendor,biosVersion,biosSerial,biosMode,boardName,boardVendor,boardVersion,productUuid,tpmversion,tpmmanufacturer,tpmmanufacturerversion,tpmisactivated,tpmisenabled,tpmisowned,totalMemory,agentOpenSSL,agentCommitDate,agentCommitHash,agentCompileTime,netIfCount,macs,addresses,lastConnectTime,lastConnectAddr\r\n';
- for (var i = 0; i < results.length; i++) {
- const nodeinfo = results[i];
+ // Merge any last connection information
+ const lc = lastConnects['lc' + results[i].node._id];
+ if (lc != null) { delete lc._id; delete lc.type;; delete lc.meshid; delete lc.domain; results[i].lastConnect = lc; }
+ }
- // Node information
- if (nodeinfo.node != null) {
- const n = nodeinfo.node;
- output += csvClean(n._id) + ',' + csvClean(n.name) + ',' + csvClean(n.rname ? n.rname : '') + ',' + csvClean(n.host ? n.host : '') + ',' + (n.icon ? n.icon : 1) + ',' + (n.ip ? n.ip : '') + ',' + (n.osdesc ? csvClean(n.osdesc) : '') + ',' + csvClean(parent.meshes[n.meshid].name);
- if (typeof n.wsc == 'object') {
- output += ',' + csvClean(n.wsc.antiVirus ? n.wsc.antiVirus : '') + ',' + csvClean(n.wsc.autoUpdate ? n.wsc.autoUpdate : '') + ',' + csvClean(n.wsc.firewall ? n.wsc.firewall : '')
- } else { output += ',,,'; }
- if (typeof n.volumes == 'object') {
- var bitlockerdetails = '', firstbitlocker = true;
- for (var a in n.volumes) { if (typeof n.volumes[a].protectionStatus !== 'undefined') { if (firstbitlocker) { firstbitlocker = false; } else { bitlockerdetails += '|'; } bitlockerdetails += a + '/' + n.volumes[a].volumeStatus; } }
- output += ',' + csvClean(bitlockerdetails);
- } else {
- output += ',';
- }
- if (typeof n.av == 'object') {
- var avdetails = '', firstav = true;
- for (var a in n.av) { if (typeof n.av[a].product == 'string') { if (firstav) { firstav = false; } else { avdetails += '|'; } avdetails += (n.av[a].product + '/' + ((n.av[a].enabled) ? 'enabled' : 'disabled') + '/' + ((n.av[a].updated) ? 'updated' : 'notupdated')); } }
- output += ',' + csvClean(avdetails);
- } else {
- output += ',';
- }
- if (typeof n.tags == 'object') {
- var tagsdetails = '', firsttags = true;
- for (var a in n.tags) { if (firsttags) { firsttags = false; } else { tagsdetails += '|'; } tagsdetails += n.tags[a]; }
- output += ',' + csvClean(tagsdetails);
- } else {
- output += ',';
- }
- if (typeof n.lastbootuptime == 'number') { output += ',' + n.lastbootuptime; } else { output += ','; }
- } else {
- output += ',,,,,,,,,,,,,,,,,,,,';
- }
-
- // System infomation
- if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.windows)) {
- // Windows
- output += ',';
- if (nodeinfo.sys.hardware.windows.cpu && (nodeinfo.sys.hardware.windows.cpu.length > 0) && (typeof nodeinfo.sys.hardware.windows.cpu[0].Name == 'string')) { output += csvClean(nodeinfo.sys.hardware.windows.cpu[0].Name); }
- output += ',';
- if (nodeinfo.sys.hardware.windows.osinfo && (nodeinfo.sys.hardware.windows.osinfo.BuildNumber)) { output += csvClean(nodeinfo.sys.hardware.windows.osinfo.BuildNumber); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_date)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_date); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_vendor)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_vendor); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_version)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_version); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_serial)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_serial); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_mode)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_mode); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_name)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_name); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_vendor)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_vendor); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_version)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_version); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.product_uuid)) { output += csvClean(nodeinfo.sys.hardware.identifiers.product_uuid); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.SpecVersion) { output += csvClean(nodeinfo.sys.hardware.tpm.SpecVersion); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.ManufacturerId) { output += csvClean(nodeinfo.sys.hardware.tpm.ManufacturerId); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.ManufacturerVersion) { output += csvClean(nodeinfo.sys.hardware.tpm.ManufacturerVersion); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsActivated) { output += csvClean(nodeinfo.sys.hardware.tpm.IsActivated ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsEnabled) { output += csvClean(nodeinfo.sys.hardware.tpm.IsEnabled ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsOwned) { output += csvClean(nodeinfo.sys.hardware.tpm.IsOwned ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.windows.memory) {
- var totalMemory = 0;
- for (var j in nodeinfo.sys.hardware.windows.memory) {
- if (nodeinfo.sys.hardware.windows.memory[j].Capacity) {
- if (typeof nodeinfo.sys.hardware.windows.memory[j].Capacity == 'number') { totalMemory += nodeinfo.sys.hardware.windows.memory[j].Capacity; }
- if (typeof nodeinfo.sys.hardware.windows.memory[j].Capacity == 'string') { totalMemory += parseInt(nodeinfo.sys.hardware.windows.memory[j].Capacity); }
- }
- }
- output += csvClean('' + totalMemory);
- }
- } else if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.mobile)) {
- // Mobile
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.bootloader)) { output += csvClean(nodeinfo.sys.hardware.mobile.bootloader); }
- output += ',';
- output += ',';
- output += ',';
- if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.model)) { output += csvClean(nodeinfo.sys.hardware.mobile.model); }
- output += ',';
- if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.brand)) { output += csvClean(nodeinfo.sys.hardware.mobile.brand); }
- output += ',';
- output += ',';
- if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.id)) { output += csvClean(nodeinfo.sys.hardware.mobile.id); }
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- output += ',';
- } else if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.linux)) {
- // Linux
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.cpu_name)) { output += csvClean(nodeinfo.sys.hardware.identifiers.cpu_name); }
- output += ',,';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_date)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_date); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_vendor)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_vendor); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_version)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_version); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.product_serial)) { output += csvClean(nodeinfo.sys.hardware.linux.product_serial); }
- else if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_serial)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_serial); }
- output += ',';
- if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_mode)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_mode); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_name)) { output += csvClean(nodeinfo.sys.hardware.linux.board_name); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_vendor)) { output += csvClean(nodeinfo.sys.hardware.linux.board_vendor); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_version)) { output += csvClean(nodeinfo.sys.hardware.linux.board_version); }
- output += ',';
- if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.product_uuid)) { output += csvClean(nodeinfo.sys.hardware.linux.product_uuid); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.SpecVersion) { output += csvClean(nodeinfo.sys.hardware.tpm.SpecVersion); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.ManufacturerId) { output += csvClean(nodeinfo.sys.hardware.tpm.ManufacturerId); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.ManufacturerVersion) { output += csvClean(nodeinfo.sys.hardware.tpm.ManufacturerVersion); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsActivated) { output += csvClean(nodeinfo.sys.hardware.tpm.IsActivated ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsEnabled) { output += csvClean(nodeinfo.sys.hardware.tpm.IsEnabled ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.tpm && nodeinfo.sys.hardware.tpm.IsOwned) { output += csvClean(nodeinfo.sys.hardware.tpm.IsOwned ? 'true' : 'false'); }
- output += ',';
- if (nodeinfo.sys.hardware.linux.memory) {
- if (nodeinfo.sys.hardware.linux.memory.Memory_Device) {
- var totalMemory = 0;
- for (var j in nodeinfo.sys.hardware.linux.memory.Memory_Device) {
- if (nodeinfo.sys.hardware.linux.memory.Memory_Device[j].Size) {
- if (typeof nodeinfo.sys.hardware.linux.memory.Memory_Device[j].Size == 'number') { totalMemory += nodeinfo.sys.hardware.linux.memory.Memory_Device[j].Size; }
- if (typeof nodeinfo.sys.hardware.linux.memory.Memory_Device[j].Size == 'string') { totalMemory += parseInt(nodeinfo.sys.hardware.linux.memory.Memory_Device[j].Size); }
- }
- }
- output += csvClean('' + (totalMemory * Math.pow(1024, 3)));
- }
- }
- } else {
- output += ',,,,,,,,,,,,,,,,,,';
- }
-
- // Agent information
- if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.agentvers)) {
- output += ',';
- if (nodeinfo.sys.hardware.agentvers.openssl) { output += csvClean(nodeinfo.sys.hardware.agentvers.openssl); }
- output += ',';
- if (nodeinfo.sys.hardware.agentvers.commitDate) { output += csvClean(nodeinfo.sys.hardware.agentvers.commitDate); }
- output += ',';
- if (nodeinfo.sys.hardware.agentvers.commitHash) { output += csvClean(nodeinfo.sys.hardware.agentvers.commitHash); }
- output += ',';
- if (nodeinfo.sys.hardware.agentvers.compileTime) { output += csvClean(nodeinfo.sys.hardware.agentvers.compileTime); }
- } else {
- output += ',,,,';
- }
-
- // Network interfaces
- if ((nodeinfo.net) && (nodeinfo.net.netif2)) {
- output += ',';
- output += Object.keys(nodeinfo.net.netif2).length; // Interface count
- var macs = [], addresses = [];
- for (var j in nodeinfo.net.netif2) {
- if (Array.isArray(nodeinfo.net.netif2[j])) {
- for (var k = 0; k < nodeinfo.net.netif2[j].length; k++) {
- if (typeof nodeinfo.net.netif2[j][k].mac == 'string') { macs.push(nodeinfo.net.netif2[j][k].mac); }
- if (typeof nodeinfo.net.netif2[j][k].address == 'string') { addresses.push(nodeinfo.net.netif2[j][k].address); }
- }
- }
- }
- output += ',';
- output += csvClean(macs.join(' ')); // MACS
- output += ',';
- output += csvClean(addresses.join(' ')); // Addresses
- } else {
- output += ',,,';
- }
-
- // Last connection information
- if (nodeinfo.lastConnect) {
- output += ',';
- if (nodeinfo.lastConnect.time) {
- // Last connection time
- if ((typeof command.l == 'string') && (typeof command.tz == 'string')) {
- output += csvClean(new Date(nodeinfo.lastConnect.time).toLocaleString(command.l, { timeZone: command.tz }))
- } else {
- output += nodeinfo.lastConnect.time;
- }
- }
- output += ',';
- if (typeof nodeinfo.lastConnect.addr == 'string') { output += csvClean(nodeinfo.lastConnect.addr); } // Last connection address and port
- } else {
- output += ',,';
- }
-
- output += '\r\n';
- }
- } catch (ex) { console.log(ex); }
- } else {
- // Create the JSON file
-
- // Add the device group name to each device
+ var output = null;
+ if (type == 'csv') {
+ try {
+ // Create the CSV file
+ output = 'id,name,rname,host,icon,ip,osdesc,groupname,av,update,firewall,avdetails,cpu,osbuild,biosDate,biosVendor,biosVersion,boardName,boardVendor,boardVersion,productUuid,totalMemory,agentOpenSSL,agentCommitDate,agentCommitHash,agentCompileTime,netIfCount,macs,addresses,lastConnectTime,lastConnectAddr\r\n';
for (var i = 0; i < results.length; i++) {
const nodeinfo = results[i];
- if (nodeinfo.node) {
- const mesh = parent.meshes[nodeinfo.node.meshid];
- if (mesh) { results[i].node.groupname = mesh.name; }
- }
- }
- output = JSON.stringify(results, null, 2);
+ // Node information
+ if (nodeinfo.node != null) {
+ const n = nodeinfo.node;
+ output += csvClean(n._id) + ',' + csvClean(n.name) + ',' + csvClean(n.rname ? n.rname : '') + ',' + csvClean(n.host ? n.host : '') + ',' + (n.icon ? n.icon : 1) + ',' + (n.ip ? n.ip : '') + ',' + (n.osdesc ? csvClean(n.osdesc) : '') + ',' + csvClean(parent.meshes[n.meshid].name);
+ if (typeof n.wsc == 'object') {
+ output += ',' + csvClean(n.wsc.antiVirus ? n.wsc.antiVirus : '') + ',' + csvClean(n.wsc.autoUpdate ? n.wsc.autoUpdate : '') + ',' + csvClean(n.wsc.firewall ? n.wsc.firewall : '')
+ } else { output += ',,,'; }
+ if (typeof n.av == 'object') {
+ var avdetails = '', firstav = true;
+ for (var a in n.av) { if (typeof n.av[a].product == 'string') { if (firstav) { firstav = false; } else { avdetails += '|'; } avdetails += (n.av[a].product + '/' + ((n.av[a].enabled) ? 'enabled' : 'disabled') + '/' + ((n.av[a].updated) ? 'updated' : 'notupdated')); } }
+ output += ',' + csvClean(avdetails);
+ }
+ else { output += ','; }
+ } else {
+ output += ',,,,,,,,,,,';
+ }
+
+ // System infomation
+ if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.windows) && (nodeinfo.sys.hardware.windows)) {
+ // Windows
+ output += ',';
+ if (nodeinfo.sys.hardware.windows.cpu && (nodeinfo.sys.hardware.windows.cpu.length > 0) && (typeof nodeinfo.sys.hardware.windows.cpu[0].Name == 'string')) { output += csvClean(nodeinfo.sys.hardware.windows.cpu[0].Name); }
+ output += ',';
+ if (nodeinfo.sys.hardware.windows.osinfo && (nodeinfo.sys.hardware.windows.osinfo.BuildNumber)) { output += csvClean(nodeinfo.sys.hardware.windows.osinfo.BuildNumber); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_date)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_date); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_vendor)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_vendor); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.bios_version)) { output += csvClean(nodeinfo.sys.hardware.identifiers.bios_version); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_name)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_name); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_vendor)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_vendor); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.board_version)) { output += csvClean(nodeinfo.sys.hardware.identifiers.board_version); }
+ output += ',';
+ if (nodeinfo.sys.hardware.identifiers && (nodeinfo.sys.hardware.identifiers.product_uuid)) { output += csvClean(nodeinfo.sys.hardware.identifiers.product_uuid); }
+ output += ',';
+ if (nodeinfo.sys.hardware.windows.memory) {
+ var totalMemory = 0;
+ for (var j in nodeinfo.sys.hardware.windows.memory) {
+ if (nodeinfo.sys.hardware.windows.memory[j].Capacity) {
+ if (typeof nodeinfo.sys.hardware.windows.memory[j].Capacity == 'number') { totalMemory += nodeinfo.sys.hardware.windows.memory[j].Capacity; }
+ if (typeof nodeinfo.sys.hardware.windows.memory[j].Capacity == 'string') { totalMemory += parseInt(nodeinfo.sys.hardware.windows.memory[j].Capacity); }
+ }
+ }
+ output += csvClean('' + totalMemory);
+ }
+ } else if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.mobile)) {
+ // Mobile
+ output += ',';
+ output += ',';
+ output += ',';
+ output += ',';
+ output += ',';
+ if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.bootloader)) { output += csvClean(nodeinfo.sys.hardware.mobile.bootloader); }
+ output += ',';
+ if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.model)) { output += csvClean(nodeinfo.sys.hardware.mobile.model); }
+ output += ',';
+ if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.brand)) { output += csvClean(nodeinfo.sys.hardware.mobile.brand); }
+ output += ',';
+ output += ',';
+ if (nodeinfo.sys.hardware.mobile && (nodeinfo.sys.hardware.mobile.id)) { output += csvClean(nodeinfo.sys.hardware.mobile.id); }
+ output += ',';
+ } else if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.windows) && (nodeinfo.sys.hardware.linux)) {
+ // Linux
+ output += ',';
+ output += ',';
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_date)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_date); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_vendor)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_vendor); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.bios_version)) { output += csvClean(nodeinfo.sys.hardware.linux.bios_version); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_name)) { output += csvClean(nodeinfo.sys.hardware.linux.board_name); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_vendor)) { output += csvClean(nodeinfo.sys.hardware.linux.board_vendor); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.board_version)) { output += csvClean(nodeinfo.sys.hardware.linux.board_version); }
+ output += ',';
+ if (nodeinfo.sys.hardware.linux && (nodeinfo.sys.hardware.linux.product_uuid)) { output += csvClean(nodeinfo.sys.hardware.linux.product_uuid); }
+ output += ',';
+ } else {
+ output += ',,,,,,,,,,';
+ }
+
+ // Agent information
+ if ((nodeinfo.sys) && (nodeinfo.sys.hardware) && (nodeinfo.sys.hardware.agentvers)) {
+ output += ',';
+ if (nodeinfo.sys.hardware.agentvers.openssl) { output += csvClean(nodeinfo.sys.hardware.agentvers.openssl); }
+ output += ',';
+ if (nodeinfo.sys.hardware.agentvers.commitDate) { output += csvClean(nodeinfo.sys.hardware.agentvers.commitDate); }
+ output += ',';
+ if (nodeinfo.sys.hardware.agentvers.commitHash) { output += csvClean(nodeinfo.sys.hardware.agentvers.commitHash); }
+ output += ',';
+ if (nodeinfo.sys.hardware.agentvers.compileTime) { output += csvClean(nodeinfo.sys.hardware.agentvers.compileTime); }
+ } else {
+ output += ',,,,';
+ }
+
+ // Network interfaces
+ if ((nodeinfo.net) && (nodeinfo.net.netif2)) {
+ output += ',';
+ output += Object.keys(nodeinfo.net.netif2).length; // Interface count
+ var macs = [], addresses = [];
+ for (var j in nodeinfo.net.netif2) {
+ if (Array.isArray(nodeinfo.net.netif2[j])) {
+ for (var k = 0; k < nodeinfo.net.netif2[j].length; k++) {
+ if (typeof nodeinfo.net.netif2[j][k].mac == 'string') { macs.push(nodeinfo.net.netif2[j][k].mac); }
+ if (typeof nodeinfo.net.netif2[j][k].address == 'string') { addresses.push(nodeinfo.net.netif2[j][k].address); }
+ }
+ }
+ }
+ output += ',';
+ output += csvClean(macs.join(' ')); // MACS
+ output += ',';
+ output += csvClean(addresses.join(' ')); // Addresses
+ } else {
+ output += ',,,';
+ }
+
+ // Last connection information
+ if (nodeinfo.lastConnect) {
+ output += ',';
+ if (nodeinfo.lastConnect.time) {
+ // Last connection time
+ if ((typeof command.l == 'string') && (typeof command.tz == 'string')) {
+ output += csvClean(new Date(nodeinfo.lastConnect.time).toLocaleString(command.l, { timeZone: command.tz }))
+ } else {
+ output += nodeinfo.lastConnect.time;
+ }
+ }
+ output += ',';
+ if (typeof nodeinfo.lastConnect.addr == 'string') { output += csvClean(nodeinfo.lastConnect.addr); } // Last connection address and port
+ } else {
+ output += ',,';
+ }
+
+ output += '\r\n';
+ }
+ } catch (ex) { console.log(ex); }
+ } else {
+ // Create the JSON file
+
+ // Add the device group name to each device
+ for (var i = 0; i < results.length; i++) {
+ const nodeinfo = results[i];
+ if (nodeinfo.node) {
+ const mesh = parent.meshes[nodeinfo.node.meshid];
+ if (mesh) { results[i].node.groupname = mesh.name; }
+ }
}
- try { ws.send(JSON.stringify({ action: 'getDeviceDetails', data: output, type: type })); } catch (ex) { }
- });
+
+ output = JSON.stringify(results, null, 2);
+ }
+ try { ws.send(JSON.stringify({ action: 'getDeviceDetails', data: output, type: type })); } catch (ex) { }
});
});
+
break;
}
case 'endDesktopMultiplex': {
@@ -5417,109 +4946,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
break;
}
- case 'importamtdevices': {
- if ((command.amtdevices == null) || (command.meshid == null) || (typeof command.meshid != 'string') || (command.meshid.startsWith('mesh/' + domain.id + '/') == false)) return;
- const mesh = parent.meshes[command.meshid];
- if ((mesh == null) || (mesh.mtype != 1) || (parent.GetMeshRights(user, command.meshid) & MESHRIGHT_EDITMESH) == 0) return null; // This user must have mesh rights to edit the device group
- var amtDevices = [];
-
- // Decode a JSON file from the Intel SCS migration tool
- if ((typeof command.amtdevices == 'object') && (typeof command.amtdevices.ApplicationData == 'object') && (command.amtdevices.ApplicationData.Application == 'Intel vPro(R) Manageability Migration Tool') && (typeof command.amtdevices['ManagedSystems'] == 'object') && (Array.isArray(command.amtdevices['ManagedSystems']['ManagedSystemsList']))) {
- for (var i in command.amtdevices['ManagedSystems']['ManagedSystemsList']) {
- const importDev = command.amtdevices['ManagedSystems']['ManagedSystemsList'][i];
- var host = null;
- if ((typeof importDev.Fqdn == 'string') && (importDev.Fqdn != '')) { host = importDev.Fqdn; }
- if ((host == null) && (typeof importDev.IPv4 == 'string') && (importDev.IPv4 != '')) { host = importDev.IPv4; }
- if (host != null) {
- // Create a new Intel AMT device
- const nodeid = 'node/' + domain.id + '/' + parent.crypto.randomBytes(48).toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
- const device = { type: 'node', _id: nodeid, meshid: mesh._id, mtype: 1, icon: 1, name: host, host: host, domain: domain.id, intelamt: { user: 'admin', state: 2 } };
-
- // Add optional fields
- if (typeof importDev.AmtVersion == 'string') { device.intelamt.ver = importDev.AmtVersion; }
- if (typeof importDev.ConfiguredPassword == 'string') { device.intelamt.pass = importDev.ConfiguredPassword; }
- if (typeof importDev.Uuid == 'string') { device.intelamt.uuid = importDev.Uuid; }
- if (importDev.ConnectionType == 'TLS') { device.intelamt.tls = 1; }
-
- // Check if we are already adding a device with the same hostname, if so, skip it.
- var skip = false;
- for (var i in amtDevices) { if (amtDevices[i].host.toLowerCase() == device.host.toLowerCase()) { skip = true; } }
- if (skip == false) { amtDevices.push(device); }
- }
- }
- }
-
- // Decode a JSON file from MeshCommander
- if ((typeof command.amtdevices == 'object') && (typeof command.amtdevices.webappversion == 'string') && (Array.isArray(command.amtdevices.computers))) {
- for (var i in command.amtdevices.computers) {
- const importDev = command.amtdevices.computers[i];
- if ((typeof importDev.host == 'string') && (importDev.host != '') && (importDev.host != '127.0.0.1') && (importDev.host.toLowerCase() != 'localhost')) {
- // Create a new Intel AMT device
- const nodeid = 'node/' + domain.id + '/' + parent.crypto.randomBytes(48).toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
- const device = { type: 'node', _id: nodeid, meshid: mesh._id, mtype: 1, icon: 1, host: importDev.host, domain: domain.id, intelamt: { user: 'admin', state: 2 } };
- if (typeof importDev.name == 'string') { device.name = importDev.name; } else { device.name = importDev.host; }
-
- // Add optional fields
- if (typeof importDev.user == 'string') { device.intelamt.user = importDev.user; }
- if (typeof importDev.pass == 'string') { device.intelamt.pass = importDev.pass; }
- if ((importDev.tls === true) || (importDev.tls === 1)) { device.intelamt.tls = 1; }
- if (typeof importDev.digestrealm == 'string') { device.intelamt.realm = importDev.digestrealm; }
- if (typeof importDev.ver == 'string') { device.intelamt.ver = importDev.ver; }
- if (typeof importDev.uuid == 'string') { device.intelamt.uuid = importDev.uuid; }
- if (typeof importDev.pstate == 'number') { device.intelamt.state = importDev.pstate; }
- if (typeof importDev.tlscerthash == 'string') { device.intelamt.hash = importDev.tlscerthash; }
- if (typeof importDev.icon == 'number') { device.icon = importDev.icon; }
- if (typeof importDev.desc == 'string') { device.desc = importDev.desc; }
-
- // Check if we are already adding a device with the same hostname, if so, skip it.
- var skip = false;
- for (var i in amtDevices) { if (amtDevices[i].host.toLowerCase() == device.host.toLowerCase()) { skip = true; } }
- if (skip == false) { amtDevices.push(device); }
- }
- }
- }
-
- // Decode a JSON file in simple format
- if (Array.isArray(command.amtdevices)) {
- for (var i in command.amtdevices) {
- const importDev = command.amtdevices[i];
- if ((typeof importDev.fqdn == 'string') && (importDev.fqdn != '') && (importDev.fqdn != '127.0.0.1') && (importDev.fqdn.toLowerCase() != 'localhost')) {
- // Create a new Intel AMT device
- const nodeid = 'node/' + domain.id + '/' + parent.crypto.randomBytes(48).toString('base64').replace(/\+/g, '@').replace(/\//g, '$');
- const device = { type: 'node', _id: nodeid, meshid: mesh._id, mtype: 1, icon: 1, host: importDev.fqdn, domain: domain.id, intelamt: { user: 'admin', state: 2 } };
- if (typeof importDev.name == 'string') { device.name = importDev.name; } else { device.name = importDev.host; }
-
- // Add optional fields
- if (typeof importDev.username == 'string') { device.intelamt.user = importDev.username; }
- if (typeof importDev.password == 'string') { device.intelamt.pass = importDev.password; }
- if ((importDev.tls === true) || (importDev.tls === 1)) { device.intelamt.tls = 1; }
- if (typeof importDev.version == 'string') { device.intelamt.ver = importDev.version; }
- if (typeof importDev.digestrealm == 'string') { device.intelamt.realm = importDev.digestrealm; }
- if (typeof importDev.uuid == 'string') { device.intelamt.uuid = importDev.uuid; }
- if (typeof importDev.pstate == 'number') { device.intelamt.state = importDev.pstate; }
- if (typeof importDev.tlscerthash == 'string') { device.intelamt.hash = importDev.tlscerthash; }
- if (typeof importDev.icon == 'number') { device.icon = importDev.icon; }
- if (typeof importDev.desc == 'string') { device.desc = importDev.desc; }
-
- // Check if we are already adding a device with the same hostname, if so, skip it.
- var skip = false;
- for (var i in amtDevices) { if (amtDevices[i].host.toLowerCase() == device.host.toLowerCase()) { skip = true; } }
- if (skip == false) { amtDevices.push(device); }
- }
- }
- }
-
- // Add all the correctly parsed devices to the database and event them
- // TODO: We may want to remove any devices with duplicate hostnames
- if (amtDevices.length == 0) return;
- for (var i in amtDevices) {
- // Save the device to the database
- db.Set(amtDevices[i]);
- // Event the new node
- parent.parent.DispatchEvent(parent.CreateMeshDispatchTargets(command.meshid, [nodeid]), obj, { etype: 'node', userid: user._id, username: user.name, action: 'addnode', node: parent.CloneSafeNode(amtDevices[i]), msgid: 84, msgArgs: [amtDevices[i].name, mesh.name], msg: 'Added device ' + amtDevices[i].name + ' to device group ' + mesh.name, domain: domain.id });
- }
- break;
- }
default: {
// Unknown user action
console.log('Unknown action from user ' + user.name + ': ' + command.action + '.');
@@ -5540,7 +4966,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
'changelang': serverCommandChangeLang,
'close': serverCommandClose,
'confirmPhone': serverCommandConfirmPhone,
- 'confirmMessaging': serverCommandConfirmMessaging,
'emailuser': serverCommandEmailUser,
'files': serverCommandFiles,
'getClip': serverCommandGetClip,
@@ -5557,21 +4982,18 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
'pong': serverCommandPong,
'powertimeline': serverCommandPowerTimeline,
'print': serverCommandPrint,
- 'removePhone': serverCommandRemovePhone,
- 'removeMessaging': serverCommandRemoveMessaging,
+ 'removePhone': serverCommandremovePhone,
'removeuserfromusergroup': serverCommandRemoveUserFromUserGroup,
'report': serverCommandReport,
'serverclearerrorlog': serverCommandServerClearErrorLog,
'serverconsole': serverCommandServerConsole,
'servererrors': serverCommandServerErrors,
- 'serverconfig': serverCommandServerConfig,
'serverstats': serverCommandServerStats,
'servertimelinestats': serverCommandServerTimelineStats,
'serverupdate': serverCommandServerUpdate,
'serverversion': serverCommandServerVersion,
'setClip': serverCommandSetClip,
'smsuser': serverCommandSmsUser,
- 'msguser': serverCommandMsgUser,
'trafficdelta': serverCommandTrafficDelta,
'trafficstats': serverCommandTrafficStats,
'updateAgents': serverCommandUpdateAgents,
@@ -5579,8 +5001,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
'urlargs': serverCommandUrlArgs,
'users': serverCommandUsers,
'verifyemail': serverCommandVerifyEmail,
- 'verifyPhone': serverCommandVerifyPhone,
- 'verifyMessaging': serverCommandVerifyMessaging
+ 'verifyPhone': serverCommandVerifyPhone
};
const serverUserCommands = {
@@ -5608,12 +5029,11 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
'dupagents': [serverUserCommandDupAgents, ""],
'email': [serverUserCommandEmail, ""],
'emailnotifications': [serverUserCommandEmailNotifications, ""],
- 'msgnotifications': [serverUserCommandMessageNotifications, ""],
'firebase': [serverUserCommandFirebase, ""],
'heapdump': [serverUserCommandHeapDump, ""],
'heapdump2': [serverUserCommandHeapDump2, ""],
'help': [serverUserCommandHelp, ""],
- 'info': [serverUserCommandInfo, "Returns the most immidiatly useful information about this server, including MeshCentral and NodeJS versions. This is often information required to file a bug. Optionally use info h for human readable form."],
+ 'info': [serverUserCommandInfo, "Returns the most immidiatly useful information about this server, including MeshCentral and NodeJS versions. This is often information required to file a bug."],
'le': [serverUserCommandLe, ""],
'lecheck': [serverUserCommandLeCheck, ""],
'leevents': [serverUserCommandLeEvents, ""],
@@ -5629,8 +5049,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
'serverupdate': [serverUserCommandServerUpdate, "Updates server to latest version. Optional version argument to install specific version. Example: serverupdate 0.8.49"],
'setmaxtasks': [serverUserCommandSetMaxTasks, ""],
'showpaths': [serverUserCommandShowPaths, ""],
- 'sms': [serverUserCommandSMS, "Send a SMS message to a specified phone number"],
- 'msg': [serverUserCommandMsg, "Send a user message to a user handle"],
+ 'sms': [serverUserCommandSMS, ""],
'swarmstats': [serverUserCommandSwarmStats, ""],
'tasklimiter': [serverUserCommandTaskLimiter, "Returns the internal status of the tasklimiter. This is a system used to smooth out work done by the server. It's used by, for example, agent updates so that not all agents are updated at the same time."],
'trafficdelta': [serverUserCommandTrafficDelta, ""],
@@ -5650,7 +5069,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (common.validateString(command.nodeid, 1, 1024) == false) { err = 'Invalid nodeid'; } // Check the nodeid
else if (common.validateInt(command.rights) == false) { err = 'Invalid rights'; } // Device rights must be an integer
else if ((command.rights & 7) != 0) { err = 'Invalid rights'; } // EDITMESH, MANAGEUSERS or MANAGECOMPUTERS rights can't be assigned to a user to device link
- else if ((common.validateStrArray(command.usernames, 1, 128) == false) && (common.validateStrArray(command.userids, 1, 128) == false)) { err = 'Invalid usernames'; } // Username is between 1 and 128 characters
+ else if ((common.validateStrArray(command.usernames, 1, 64) == false) && (common.validateStrArray(command.userids, 1, 128) == false)) { err = 'Invalid usernames'; } // Username is between 1 and 64 characters
else {
if (command.nodeid.indexOf('/') == -1) { command.nodeid = 'node/' + domain.id + '/' + command.nodeid; }
else if ((command.nodeid.split('/').length != 3) || (command.nodeid.split('/')[1] != domain.id)) { err = 'Invalid domain'; } // Invalid domain, operation only valid for current domain
@@ -5797,7 +5216,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
try {
if (common.validateString(command.meshid, 8, 134) == false) { err = 'Invalid groupid'; } // Check the meshid
else if (common.validateInt(command.meshadmin) == false) { err = 'Invalid group rights'; } // Mesh rights must be an integer
- else if ((common.validateStrArray(command.usernames, 1, 128) == false) && (common.validateStrArray(command.userids, 1, 128) == false)) { err = 'Invalid usernames'; } // Username is between 1 and 128 characters
+ else if ((common.validateStrArray(command.usernames, 1, 64) == false) && (common.validateStrArray(command.userids, 1, 128) == false)) { err = 'Invalid usernames'; } // Username is between 1 and 64 characters
else {
if (command.meshid.indexOf('/') == -1) { command.meshid = 'mesh/' + domain.id + '/' + command.meshid; }
mesh = parent.meshes[command.meshid];
@@ -6128,7 +5547,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
try {
if ((user.siteadmin & SITERIGHT_USERGROUPS) == 0) { err = 'Permission denied'; }
else if (common.validateString(command.ugrpid, 1, 1024) == false) { err = 'Invalid groupid'; } // Check the meshid
- else if (common.validateStrArray(command.usernames, 1, 128) == false) { err = 'Invalid usernames'; } // Username is between 1 and 128 characters
+ else if (common.validateStrArray(command.usernames, 1, 64) == false) { err = 'Invalid usernames'; } // Username is between 1 and 64 characters
else {
var ugroupidsplit = command.ugrpid.split('/');
if ((ugroupidsplit.length != 3) || (ugroupidsplit[0] != 'ugrp') || ((obj.crossDomain !== true) && (ugroupidsplit[1] != domain.id))) { err = 'Invalid groupid'; }
@@ -6149,9 +5568,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Get the user group
var group = parent.userGroups[command.ugrpid];
if (group != null) {
- // If this user group is an externally managed user group, we can't add users to it.
- if ((group != null) && (group.membershipType != null)) return;
-
if (group.links == null) { group.links = {}; }
var unknownUsers = [], addedCount = 0, failCount = 0, knownUsers = [];
@@ -6161,7 +5577,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
var chguser = parent.users[chguserid];
if (chguser == null) { chguserid = 'user/' + addUserDomain.id + '/' + command.usernames[i]; chguser = parent.users[chguserid]; }
if (chguser != null) {
- // Add usr group to user
+ // Add mesh to user
if (chguser.links == null) { chguser.links = {}; }
chguser.links[group._id] = { rights: 1 };
db.SetUser(chguser);
@@ -6219,7 +5635,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
ws.send(JSON.stringify({
action: 'authcookie',
cookie: parent.parent.encodeCookie({ userid: user._id, domainid: domain.id, ip: req.clientIp }, parent.parent.loginCookieEncryptionKey),
- rcookie: parent.parent.encodeCookie({ ruserid: user._id, x: req.session.x }, parent.parent.loginCookieEncryptionKey)
+ rcookie: parent.parent.encodeCookie({ ruserid: user._id }, parent.parent.loginCookieEncryptionKey)
}));
} catch (ex) { }
}
@@ -6295,7 +5711,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
parent.db.SetUser(user);
// Event the change
- var message = { etype: 'user', userid: user._id, username: user.name, account: parent.CloneSafeUser(user), action: 'accountchange', domain: domain.id, msgid: 3, msgArgs: ['', (oldlang ? oldlang : 'default'), (user.lang ? user.lang : 'default')] };
+ var message = { etype: 'user', userid: user._id, username: user.name, account: parent.CloneSafeUser(user), action: 'accountchange', domain: domain.id, msgid: 2, msgArgs: [(oldlang ? oldlang : 'default'), (user.lang ? user.lang : 'default')] };
if (db.changeStream) { message.noact = 1; } // If DB change stream is active, don't use this event to change the user. Another event will come.
message.msg = 'Changed language from ' + (oldlang ? oldlang : 'default') + ' to ' + (user.lang ? user.lang : 'default');
@@ -6339,35 +5755,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
parent.parent.DispatchEvent(['*', 'server-users', user._id], obj, event);
}
- function serverCommandConfirmMessaging(command) {
- // Do not allow this command when logged in using a login token
- if (req.session.loginToken != null) return;
-
- if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
- if ((parent.parent.msgserver == null) || (typeof command.cookie != 'string') || (typeof command.code != 'string') || (obj.failedMsgCookieCheck == 1)) return; // Input checks
- var cookie = parent.parent.decodeCookie(command.cookie);
- if (cookie == null) return; // Invalid cookie
- if (cookie.s != ws.sessionId) return; // Invalid session
- if (cookie.c != command.code) {
- obj.failedMsgCookieCheck = 1;
- // Code does not match, delay the response to limit how many guesses we can make and don't allow more than 1 guess at any given time.
- setTimeout(function () {
- ws.send(JSON.stringify({ action: 'verifyMessaging', cookie: command.cookie, success: true }));
- delete obj.failedMsgCookieCheck;
- }, 2000 + (parent.crypto.randomBytes(2).readUInt16BE(0) % 4095));
- return;
- }
-
- // Set the user's messaging handle
- user.msghandle = cookie.p;
- db.SetUser(user);
-
- // Event the change
- var event = { etype: 'user', userid: user._id, username: user.name, account: parent.CloneSafeUser(user), action: 'accountchange', msgid: 156, msgArgs: [user.name], msg: 'Verified messaging account of user ' + EscapeHtml(user.name), domain: domain.id };
- if (db.changeStream) { event.noact = 1; } // If DB change stream is active, don't use this event to change the user. Another event will come.
- parent.parent.DispatchEvent(['*', 'server-users', user._id], obj, event);
- }
-
function serverCommandEmailUser(command) {
var errMsg = null, emailuser = null;
if (domain.mailserver == null) { errMsg = 'Email server not enabled'; }
@@ -6416,7 +5803,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (command.nodeid) { cookieContent.nodeid = command.nodeid; }
if (command.tcpaddr) { cookieContent.tcpaddr = command.tcpaddr; } // Indicates the browser want the agent to TCP connect to a remote address
if (command.tcpport) { cookieContent.tcpport = command.tcpport; } // Indicates the browser want the agent to TCP connect to a remote port
- if (command.tag == 'novnc') { cookieContent.p = 12; } // If tag is novnc we must encode a protocol for meshrelay logging
if (node.mtype == 3) { cookieContent.lc = 1; command.localRelay = true; } // Indicate this is for a local connection
command.cookie = parent.parent.encodeCookie(cookieContent, parent.parent.loginCookieEncryptionKey);
command.trustedCert = parent.isTrustedCert(domain);
@@ -6465,12 +5851,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
delete doc.type;
delete doc.domain;
delete doc._id;
-
- // If this is not a device group admin users, don't send any BitLocker recovery passwords
- if ((rights != MESHRIGHT_ADMIN) && (doc.hardware) && (doc.hardware.windows) && (doc.hardware.windows.volumes)) {
- for (var i in doc.hardware.windows.volumes) { delete doc.hardware.windows.volumes[i].recoveryPassword; }
- }
-
if (command.nodeinfo === true) { doc.node = node; doc.rights = rights; }
obj.send(doc);
} else {
@@ -6534,30 +5914,14 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
function serverCommandLastConnects(command) {
- if (obj.visibleDevices == null) {
- // If we are not paging, get all devices visible to this user
- const links = parent.GetAllMeshIdWithRights(user);
- const extraids = getUserExtraIds();
- db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', null, obj.deviceSkip, obj.deviceLimit, function (err, docs) {
- if (docs == null) return;
+ const links = parent.GetAllMeshIdWithRights(user);
+ const extraids = getUserExtraIds();
+ db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', null, function (err, docs) {
+ if (docs == null) return;
- // Create a list of node ids for this user and query them for last device connection time
- const ids = []
- for (var i in docs) { ids.push('lc' + docs[i]._id); }
-
- // Pull list of last connections only for device owned by this user
- db.GetAllIdsOfType(ids, domain.id, 'lastconnect', function (err, docs) {
- if (docs == null) return;
- const response = {};
- for (var j in docs) { response[docs[j]._id.substring(2)] = docs[j].time; }
- obj.send({ action: 'lastconnects', lastconnects: response, tag: command.tag });
- });
- });
- } else {
- // If we are paging, we know what devices the user is look at
// Create a list of node ids for this user and query them for last device connection time
const ids = []
- for (var i in obj.visibleDevices) { ids.push('lc' + i); }
+ for (var i in docs) { ids.push('lc' + docs[i]._id); }
// Pull list of last connections only for device owned by this user
db.GetAllIdsOfType(ids, domain.id, 'lastconnect', function (err, docs) {
@@ -6566,7 +5930,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
for (var j in docs) { response[docs[j]._id.substring(2)] = docs[j].time; }
obj.send({ action: 'lastconnects', lastconnects: response, tag: command.tag });
});
- }
+ });
}
function serverCommandLoginCookie(command) {
@@ -6621,7 +5985,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
function serverCommandPrint(command) { console.log(command.value); }
- function serverCommandRemovePhone(command) {
+ function serverCommandremovePhone(command) {
// Do not allow this command when logged in using a login token
if (req.session.loginToken != null) return;
@@ -6638,23 +6002,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
parent.parent.DispatchEvent(['*', 'server-users', user._id], obj, event);
}
- function serverCommandRemoveMessaging(command) {
- // Do not allow this command when logged in using a login token
- if (req.session.loginToken != null) return;
-
- if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
- if (user.msghandle == null) return;
-
- // Clear the user's phone
- delete user.msghandle;
- db.SetUser(user);
-
- // Event the change
- var event = { etype: 'user', userid: user._id, username: user.name, account: parent.CloneSafeUser(user), action: 'accountchange', msgid: 157, msgArgs: [user.name], msg: 'Removed messaging account of user ' + EscapeHtml(user.name), domain: domain.id };
- if (db.changeStream) { event.noact = 1; } // If DB change stream is active, don't use this event to change the user. Another event will come.
- parent.parent.DispatchEvent(['*', 'server-users', user._id], obj, event);
- }
-
function serverCommandRemoveUserFromUserGroup(command) {
var err = null;
try {
@@ -6686,12 +6033,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
var chguser = parent.users[command.userid];
if (chguser != null) {
- // Get the user group
- var group = parent.userGroups[command.ugrpid];
-
- // If this user group is an externally managed user group, we can't remove a user from it.
- if ((group != null) && (group.membershipType != null)) return;
-
if ((chguser.links != null) && (chguser.links[command.ugrpid] != null)) {
delete chguser.links[command.ugrpid];
@@ -6705,6 +6046,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
parent.parent.DispatchEvent([chguser._id], obj, 'resubscribe');
}
+ // Get the user group
+ var group = parent.userGroups[command.ugrpid];
if (group != null) {
// Remove the user from the group
if ((group.links != null) && (group.links[command.userid] != null)) {
@@ -6723,13 +6066,13 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
function serverCommandReport(command) {
- if (common.validateInt(command.type, 1, 4) == false) return; // Validate type
+ if (common.validateInt(command.type, 1, 3) == false) return; // Validate type
if (common.validateInt(command.groupBy, 1, 3) == false) return; // Validate groupBy: 1 = User, 2 = Device, 3 = Day
if ((typeof command.start != 'number') || (typeof command.end != 'number') || (command.start >= command.end)) return; // Validate start and end time
const manageAllDeviceGroups = ((user.siteadmin == 0xFFFFFFFF) && (parent.parent.config.settings.managealldevicegroups.indexOf(user._id) >= 0));
if ((command.devGroup != null) && (manageAllDeviceGroups == false) && ((user.links == null) || (user.links[command.devGroup] == null))) return; // Asking for a device group that is not allowed
- const msgIdFilter = [5, 10, 11, 12, 122, 123, 124, 125, 126, 144];
+ const msgIdFilter = [5, 10, 11, 12, 122, 123, 124, 125, 126];
switch (command.type) {
case 1: {
remoteSessionReport(command, manageAllDeviceGroups, msgIdFilter);
@@ -6743,10 +6086,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
userLoginReport(command);
break;
}
- case 4: {
- databaseRecordsReport(command);
- break;
- }
}
}
@@ -6784,14 +6123,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
fs.readFile(parent.parent.getConfigFilePath('mesherrors.txt'), 'utf8', function (err, data) { obj.send({ action: 'servererrors', data: data }); });
}
- function serverCommandServerConfig(command) {
- // Load the server config.json. This is a sensitive file so care must be taken to only send to trusted administrators.
- if (userHasSiteUpdate() && (domain.myserver !== false) && ((domain.myserver == null) || (domain.myserver.config === true))) {
- const configFilePath = common.joinPath(parent.parent.datapath, (parent.parent.args.configfile ? parent.parent.args.configfile : 'config.json'));
- fs.readFile(configFilePath, 'utf8', function (err, data) { obj.send({ action: 'serverconfig', data: data }); });
- }
- }
-
function serverCommandServerStats(command) {
// Only accept if the "My Server" tab is allowed for this domain
if (domain.myserver === false) return;
@@ -6872,29 +6203,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
}
- function serverCommandMsgUser(command) {
- var errMsg = null, msguser = null;
- if ((parent.parent.msgserver == null) || (parent.parent.msgserver.providers == 0)) { errMsg = "Messaging server not enabled"; }
- else if ((user.siteadmin & 2) == 0) { errMsg = "No user management rights"; }
- else if (common.validateString(command.userid, 1, 2048) == false) { errMsg = "Invalid username"; }
- else if (common.validateString(command.msg, 1, 160) == false) { errMsg = "Invalid message"; }
- else {
- msguser = parent.users[command.userid];
- if (msguser == null) { errMsg = "Invalid username"; }
- else if (msguser.msghandle == null) { errMsg = "No messaging service configured for this user"; }
- }
-
- if (errMsg != null) { displayNotificationMessage(errMsg); return; }
-
- parent.parent.msgserver.sendMessage(msguser.msghandle, command.msg, domain, function (success, msg) {
- if (success) {
- displayNotificationMessage("Message succesfuly sent.", null, null, null, 32);
- } else {
- if (typeof msg == 'string') { displayNotificationMessage("Messaging error: " + msg, null, null, null, 34, [msg]); } else { displayNotificationMessage("Messaging error", null, null, null, 33); }
- }
- });
- }
-
function serverCommandTrafficDelta(command) {
const stats = parent.getTrafficDelta(obj.trafficStats);
obj.trafficStats = stats.current;
@@ -7003,34 +6311,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
}
- function serverCommandVerifyMessaging(command) {
- // Do not allow this command when logged in using a login token
- if (req.session.loginToken != null) return;
-
- if ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1024) != 0)) return; // If this account is settings locked, return here.
- if (parent.parent.msgserver == null) return;
- if (common.validateString(command.handle, 1, 1024) == false) return; // Check handle length
-
- // Setup the handle for the right messaging service
- var handle = null;
- if ((command.service == 1) && ((parent.parent.msgserver.providers & 1) != 0)) { handle = 'telegram:@' + command.handle; }
- if ((command.service == 4) && ((parent.parent.msgserver.providers & 4) != 0)) { handle = 'discord:' + command.handle; }
- if ((command.service == 8) && ((parent.parent.msgserver.providers & 8) != 0)) { handle = 'xmpp:' + command.handle; }
- if ((command.service == 16) && ((parent.parent.msgserver.providers & 16) != 0)) { handle = parent.parent.msgserver.callmebotUrlToHandle(command.handle); }
- if ((command.service == 32) && ((parent.parent.msgserver.providers & 32) != 0)) { handle = 'pushover:' + command.handle; }
- if ((command.service == 64) && ((parent.parent.msgserver.providers & 64) != 0)) { handle = 'ntfy:' + command.handle; }
- if ((command.service == 128) && ((parent.parent.msgserver.providers & 128) != 0)) { handle = 'zulip:' + command.handle; }
- if ((command.service == 256) && ((parent.parent.msgserver.providers & 256) != 0)) { handle = 'slack:' + command.handle; }
- if (handle == null) return;
-
- // Send a verification message
- const code = common.zeroPad(getRandomSixDigitInteger(), 6);
- const messagingCookie = parent.parent.encodeCookie({ a: 'verifyMessaging', c: code, p: handle, s: ws.sessionId });
- parent.parent.msgserver.sendMessagingCheck(domain, handle, code, parent.getLanguageCodes(req), function (success) {
- ws.send(JSON.stringify({ action: 'verifyMessaging', cookie: messagingCookie, success: success }));
- });
- }
-
function serverUserCommandHelp(cmdData) {
var fin = '', f = '', availcommands = [];
for (var i in serverUserCommands) { availcommands.push(i); }
@@ -7154,33 +6434,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
}
- function serverUserCommandMsg(cmdData) {
- if ((parent.parent.msgserver == null) || (parent.parent.msgserver.providers == 0)) {
- cmdData.result = "No messaging providers configured.";
- } else {
- if (cmdData.cmdargs['_'].length != 2) {
- var r = [];
- if ((parent.parent.msgserver.providers & 1) != 0) { r.push("Usage: MSG \"telegram:[@UserHandle]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 2) != 0) { r.push("Usage: MSG \"signal:[UserHandle]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 4) != 0) { r.push("Usage: MSG \"discord:[Username#0000]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 8) != 0) { r.push("Usage: MSG \"xmpp:[username@server.com]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 32) != 0) { r.push("Usage: MSG \"pushover:[userkey]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 64) != 0) { r.push("Usage: MSG \"ntfy:[topic]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 128) != 0) { r.push("Usage: MSG \"zulip:[topic]\" \"Message\"."); }
- if ((parent.parent.msgserver.providers & 256) != 0) { r.push("Usage: MSG \"slack:[webhook]\" \"Message\"."); }
- cmdData.result = r.join('\r\n');
- } else {
- parent.parent.msgserver.sendMessage(cmdData.cmdargs['_'][0], cmdData.cmdargs['_'][1], domain, function (status, msg) {
- if (typeof msg == 'string') {
- try { ws.send(JSON.stringify({ action: 'serverconsole', value: status ? ('Success: ' + msg) : ('Failed: ' + msg), tag: cmdData.command.tag })); } catch (ex) { }
- } else {
- try { ws.send(JSON.stringify({ action: 'serverconsole', value: status ? 'Success' : 'Failed', tag: cmdData.command.tag })); } catch (ex) { }
- }
- });
- }
- }
- }
-
function serverUserCommandEmail(cmdData) {
if (domain.mailserver == null) {
cmdData.result = "No email service enabled.";
@@ -7206,23 +6459,7 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
x += ' ' + info.mn + ', ' + info.nn + ', c:' + (info.c ? info.c : 0) + ', d:' + (info.d ? info.d : 0) + '\r\n';
}
}
- cmdData.result = ((x == '') ? 'None' : x);
- }
- }
-
- function serverUserCommandMessageNotifications(cmdData) {
- if (parent.parent.msgserver == null) {
- cmdData.result = "No messaging service enabled.";
- } else {
- var x = '';
- for (var userid in parent.parent.msgserver.deviceNotifications) {
- x += userid + '\r\n';
- for (var nodeid in parent.parent.msgserver.deviceNotifications[userid].nodes) {
- const info = parent.parent.msgserver.deviceNotifications[userid].nodes[nodeid];
- x += ' ' + info.mn + ', ' + info.nn + ', c:' + (info.c ? info.c : 0) + ', d:' + (info.d ? info.d : 0) + '\r\n';
- }
- }
- cmdData.result = ((x == '') ? 'None' : x);
+ cmdData.result = ((x == '')?'None':x);
}
}
@@ -7271,9 +6508,13 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
for (var i in parent.badLoginTable) {
badLoginCount++;
if (typeof parent.badLoginTable[i] == 'number') {
- cmdData.result += (i + " - Cooloff for " + Math.floor((parent.badLoginTable[i] - Date.now()) / 60000) + " minute(s)\r\n");
+ cmdData.result += "Cooloff for " + Math.floor((parent.badLoginTable[i] - Date.now()) / 60000) + " minute(s)\r\n";
} else {
- cmdData.result += (i + ' - ' + parent.badLoginTable[i].length + " attempt(s) until Cooloff ban\r\n");
+ if (parent.badLoginTable[i].length > 1) {
+ cmdData.result += (i + ' - ' + parent.badLoginTable[i].length + " records\r\n");
+ } else {
+ cmdData.result += (i + ' - ' + parent.badLoginTable[i].length + " record\r\n");
+ }
}
}
if (badLoginCount == 0) { cmdData.result += 'No bad logins.'; }
@@ -7559,55 +6800,21 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
function serverUserCommandInfo(cmdData) {
- function convertSeconds (s, form) {
- if (!['long', 'shortprecise'].includes(form)) {
- form = 'shortprecise';
- }
- let t = {}, r = '';
- t.d = Math.floor(s / (24 * 3600));
- s %= 24 * 3600;
- t.h= Math.floor(s / 3600);
- s %= 3600;
- t.m = Math.floor(s / 60);
- t.s =(s%60).toFixed(0);
- if ( form == 'long') {
- r = t.d + ((t.d == 1) ? ' day, ' : ' days, ') + t.h + ((t.h == 1) ? ' hour, ' : ' hours, ') + t.m + ((t.m == 1) ? ' minute, ' : ' minutes, ') + t.s+ ((t.s == 1) ? ' second' : ' seconds');
- } else if (form == 'shortprecise') {
- r = String(t.d).padStart(2, '0') + ':' + String(t.h).padStart(2, '0') + ':' + String(t.m).padStart(2, '0') + ':' + String((s%60).toFixed(2)).padStart(5, '0') + 's';
- }
- return r;
- }
- var info = {}, arg = null, t = {}, r = '';
- if ((cmdData.cmdargs['_'] != null) && (cmdData.cmdargs['_'][0] != null)) { arg = cmdData.cmdargs['_'][0].toLowerCase(); }
+ var info = {};
try { info.meshVersion = 'v' + parent.parent.currentVer; } catch (ex) { }
try { info.nodeVersion = process.version; } catch (ex) { }
try { info.runMode = (["Hybrid (LAN + WAN) mode", "WAN mode", "LAN mode"][(args.lanonly ? 2 : (args.wanonly ? 1 : 0))]); } catch (ex) { }
try { info.productionMode = ((process.env.NODE_ENV != null) && (process.env.NODE_ENV == 'production')); } catch (ex) { }
- try { info.database = ["Unknown", "NeDB", "MongoJS", "MongoDB", "MariaDB", "MySQL", "PostgreSQL", "AceBase", "SQLite"][parent.parent.db.databaseType]; } catch (ex) { }
+ try { info.database = ["Unknown", "NeDB", "MongoJS", "MongoDB", "MariaDB", "MySQL", "PostgreSQL"][parent.parent.db.databaseType]; } catch (ex) { }
try { if (parent.db.databaseType == 3) { info.dbChangeStream = parent.db.changeStream; info.dbBulkOperations = (parent.parent.config.settings.mongodbbulkoperations === true); } } catch (ex) { }
try { if (parent.parent.multiServer != null) { info.serverId = parent.parent.multiServer.serverid; } } catch (ex) { }
try { if (parent.parent.pluginHandler != null) { info.plugins = []; for (var i in parent.parent.pluginHandler.plugins) { info.plugins.push(i); } } } catch (ex) { }
try { info.platform = process.platform; } catch (ex) { }
try { info.arch = process.arch; } catch (ex) { }
try { info.pid = process.pid; } catch (ex) { }
- if (arg == 'h') {
- try {
- info.uptime = convertSeconds(process.uptime(), 'long');
- info.cpuUsage = {
- system: (convertSeconds(process.cpuUsage().system /1000000)),
- user: (convertSeconds(process.cpuUsage().user /1000000))
- }
- info.memoryUsage = {};
- for (const [key,value] of Object.entries(process.memoryUsage())){
- info.memoryUsage[key] = ([value]/1048576).toFixed(2) + 'Mb';
- }
- } catch (ex) { }
- }
- else {
- try { info.uptime = process.uptime(); } catch (ex) { }
- try { info.cpuUsage = process.cpuUsage(); } catch (ex) { }
- try { info.memoryUsage = process.memoryUsage(); } catch (ex) { }
- }
+ try { info.uptime = process.uptime(); } catch (ex) { }
+ try { info.cpuUsage = process.cpuUsage(); } catch (ex) { }
+ try { info.memoryUsage = process.memoryUsage(); } catch (ex) { }
try { info.warnings = parent.parent.getServerWarnings(); } catch (ex) { console.log(ex); }
try { info.allDevGroupManagers = parent.parent.config.settings.managealldevicegroups; } catch (ex) { }
try { if (process.traceDeprecation == true) { info.traceDeprecation = true; } } catch (ex) { }
@@ -7710,13 +6917,8 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
cmdData.result += 'Record: ' + parent.parent.recordpath + '\r\n';
cmdData.result += 'WebPublic: ' + parent.parent.webPublicPath + '\r\n';
cmdData.result += 'WebViews: ' + parent.parent.webViewsPath + '\r\n';
- cmdData.result += 'WebEmails: ' + parent.parent.webEmailsPath + '\r\n';
- if (parent.parent.webPublicOverridePath) { cmdData.result += 'XWebPublic: ' + parent.parent.webPublicOverridePath + '\r\n'; }
- if (parent.parent.webViewsOverridePath) { cmdData.result += 'XWebViews: ' + parent.parent.webViewsOverridePath + '\r\n'; }
- if (parent.parent.webEmailsOverridePath) { cmdData.result += 'XWebEmails: ' + parent.parent.webEmailsOverridePath + '\r\n'; }
- if (domain.webpublicpath) { cmdData.result += 'DomainWebPublic: ' + domain.webpublicpath + '\r\n'; }
- if (domain.webviewspath) { cmdData.result += 'DomainWebViews: ' + domain.webviewspath + '\r\n'; }
- if (domain.webemailspath) { cmdData.result += 'DomainWebEmails: ' + domain.webemailspath + '\r\n'; }
+ if (parent.parent.webViewsOverridePath) { cmdData.result += 'XWebPublic: ' + parent.parent.webViewsOverridePath + '\r\n'; }
+ if (parent.parent.webViewsOverridePath) { cmdData.result += 'XWebViews: ' + parent.parent.webPublicOverridePath + '\r\n'; }
}
function serverUserCommandMigrationAgents(cmdData) {
@@ -7771,9 +6973,10 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
}
function serverUserCommandAutoBackup(cmdData) {
- cmdData.result = parent.db.performBackup(function (msg) {
+ var backupResult = parent.db.performBackup(function (msg) {
try { ws.send(JSON.stringify({ action: 'serverconsole', value: msg, tag: cmdData.command.tag })); } catch (ex) { }
});
+ if (backupResult == 0) { cmdData.result = 'Starting auto-backup...'; } else { cmdData.result = 'Backup alreay in progress.'; }
}
function serverUserCommandBackupConfig(cmdData) {
@@ -7878,7 +7081,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Session length
if (((docs[i].msgid >= 10) && (docs[i].msgid <= 12)) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[3] == 'number')) { entry.length = docs[i].msgArgs[3]; }
else if ((docs[i].msgid >= 122) && (docs[i].msgid <= 126) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[0] == 'number')) { entry.length = docs[i].msgArgs[0]; }
- else if ((docs[i].msgid == 144) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[1] == 'number')) { entry.length = docs[i].msgArgs[1]; }
if (command.groupBy == 1) { // Add entry to per user
if (data.groups[docs[i].userid] == null) { data.groups[docs[i].userid] = { entries: [] }; }
@@ -7945,7 +7147,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Session length
if (((docs[i].msgid >= 10) && (docs[i].msgid <= 12)) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[3] == 'number')) { userEntry.length += docs[i].msgArgs[3]; }
else if ((docs[i].msgid >= 122) && (docs[i].msgid <= 126) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[0] == 'number')) { userEntry.length += docs[i].msgArgs[0]; }
- else if ((docs[i].msgid == 144) && (docs[i].msgArgs != null) && (typeof docs[i].msgArgs == 'object') && (typeof docs[i].msgArgs[1] == 'number')) { userEntry.length += docs[i].msgArgs[1]; }
// Set the user entry
userEntries[docs[i].userid] = userEntry;
@@ -8014,15 +7215,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
});
}
- function databaseRecordsReport(command) {
- if (user.siteadmin != 0xFFFFFFFF) return; // This report is only available to full administrators
- parent.parent.db.getDbStats(function (stats) {
- var data = { groups: { 0: { entries: [] } } };
- data.columns = [{ id: 'record', title: "Record", format: 'records' }, { id: 'recordcount', title: "Count", align: 'center', sumBy: true }];
- for (var i in stats) { if ((i != 'total') && (stats[i] > 0)) { data.groups[0].entries.push({ record: i, recordcount: stats[i] }); } }
- try { ws.send(JSON.stringify({ action: 'report', data: data })); } catch (ex) { }
- });
- }
// Return detailed information about an array of nodeid's
function getDeviceDetailedInfo(nodeids, type, func) {
@@ -8082,66 +7274,22 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
// Return detailed information about all nodes this user has access to
function getAllDeviceDetailedInfo(type, func) {
- // If we are not paging, get all devices visible to this user
- if (obj.visibleDevices == null) {
+ // Get all device groups this user has access to
+ var links = parent.GetAllMeshIdWithRights(user);
- // Get all device groups this user has access to
- var links = parent.GetAllMeshIdWithRights(user);
+ // Add any nodes with direct rights or any nodes with user group direct rights
+ var extraids = getUserExtraIds();
- // Add any nodes with direct rights or any nodes with user group direct rights
- var extraids = getUserExtraIds();
+ // Request a list of all nodes
+ db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', null, function (err, docs) {
+ if (docs == null) { docs = []; }
+ parent.common.unEscapeAllLinksFieldName(docs);
- // Request a list of all nodes
- db.GetAllTypeNoTypeFieldMeshFiltered(links, extraids, domain.id, 'node', null, obj.deviceSkip, obj.deviceLimit, function (err, docs) {
- if (docs == null) { docs = []; }
- parent.common.unEscapeAllLinksFieldName(docs);
+ var results = [], resultPendingCount = 0;
+ for (i in docs) {
+ // Check device links, if a link points to an unknown user, remove it.
+ parent.cleanDevice(docs[i]);
- var results = [], resultPendingCount = 0;
- if (docs.length == 0) { // no results return blank array
- func(docs, type);
- } else {
- for (i in docs) {
- // Check device links, if a link points to an unknown user, remove it.
- parent.cleanDevice(docs[i]);
-
- // Fetch the node from the database
- resultPendingCount++;
- const getNodeFunc = function (node, rights, visible) {
- if ((node != null) && (visible == true)) {
- const getNodeSysInfoFunc = function (err, docs) {
- const getNodeNetInfoFunc = function (err, docs) {
- var netinfo = null;
- if ((err == null) && (docs != null) && (docs.length == 1)) { netinfo = docs[0]; }
- resultPendingCount--;
- getNodeNetInfoFunc.results.push({ node: parent.CloneSafeNode(getNodeNetInfoFunc.node), sys: getNodeNetInfoFunc.sysinfo, net: netinfo });
- if (resultPendingCount == 0) { func(getNodeFunc.results, type); }
- }
- getNodeNetInfoFunc.results = getNodeSysInfoFunc.results;
- getNodeNetInfoFunc.nodeid = getNodeSysInfoFunc.nodeid;
- getNodeNetInfoFunc.node = getNodeSysInfoFunc.node;
- if ((err == null) && (docs != null) && (docs.length == 1)) { getNodeNetInfoFunc.sysinfo = docs[0]; }
-
- // Query the database for network information
- db.Get('if' + getNodeSysInfoFunc.nodeid, getNodeNetInfoFunc);
- }
- getNodeSysInfoFunc.results = getNodeFunc.results;
- getNodeSysInfoFunc.nodeid = getNodeFunc.nodeid;
- getNodeSysInfoFunc.node = node;
-
- // Query the database for system information
- db.Get('si' + getNodeFunc.nodeid, getNodeSysInfoFunc);
- } else { resultPendingCount--; }
- if (resultPendingCount == 0) { func(getNodeFunc.results.join('\r\n'), type); }
- }
- getNodeFunc.results = results;
- getNodeFunc.nodeid = docs[i]._id;
- parent.GetNodeWithRights(domain, user, docs[i]._id, getNodeFunc);
- }
- }
- });
- } else {
- // If we are paging, we know what devices the user is look at
- for (var id in obj.visibleDevices) {
// Fetch the node from the database
resultPendingCount++;
const getNodeFunc = function (node, rights, visible) {
@@ -8172,10 +7320,10 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
if (resultPendingCount == 0) { func(getNodeFunc.results.join('\r\n'), type); }
}
getNodeFunc.results = results;
- getNodeFunc.nodeid = id;
- parent.GetNodeWithRights(domain, user, id, getNodeFunc);
+ getNodeFunc.nodeid = docs[i]._id;
+ parent.GetNodeWithRights(domain, user, docs[i]._id, getNodeFunc);
}
- }
+ });
}
// Display a notification message for this session only.
@@ -8333,29 +7481,14 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
function count2factoraAuths() {
var email2fa = (((typeof domain.passwordrequirements != 'object') || (domain.passwordrequirements.email2factor != false)) && (domain.mailserver != null));
var sms2fa = ((parent.parent.smsserver != null) && ((typeof domain.passwordrequirements != 'object') || (domain.passwordrequirements.sms2factor != false)));
- var msg2fa = ((parent.parent.msgserver != null) && (parent.parent.msgserver.providers != 0) && ((typeof domain.passwordrequirements != 'object') || (domain.passwordrequirements.msg2factor != false)));
- var duo2fa = ((typeof domain.passwordrequirements != 'object') || (typeof domain.passwordrequirements.duo2factor == 'object'));
var authFactorCount = 0;
if (typeof user.otpsecret == 'string') { authFactorCount++; } // Authenticator time factor
if (email2fa && (user.otpekey != null)) { authFactorCount++; } // EMail factor
if (sms2fa && (user.phone != null)) { authFactorCount++; } // SMS factor
- if (msg2fa && (user.msghandle != null)) { authFactorCount++; } // Messaging factor
- if (duo2fa && (user.otpduo != null)) { authFactorCount++; } // Duo authentication factor
if (user.otphkeys != null) { authFactorCount += user.otphkeys.length; } // FIDO hardware factor
if ((authFactorCount > 0) && (user.otpkeys != null)) { authFactorCount++; } // Backup keys
return authFactorCount;
}
- // Return true if the event is for a device that is part of the currently visible page
- function isEventWithinPage(ids) {
- if (obj.visibleDevices == null) return true; // Add devices are visible
- var r = true;
- for (var i in ids) {
- // If the event is for a visible device, return true
- if (ids[i].startsWith('node/')) { r = false; if (obj.visibleDevices[ids[i]] != null) return true; }
- }
- return r; // If this event is not for any specific device, return true
- }
-
return obj;
};
diff --git a/monitoring.js b/monitoring.js
deleted file mode 100644
index ffb03da7..00000000
--- a/monitoring.js
+++ /dev/null
@@ -1,117 +0,0 @@
-/**
-* @description MeshCentral monitoring module
-* @author Simon Smith
-* @license Apache-2.0
-* @version v0.0.1
-*/
-
-"use strict";
-
-module.exports.CreateMonitoring = function (parent, args) {
- var obj = {};
- obj.args = args;
- obj.parent = parent;
- obj.express = require('express');
- obj.app = obj.express();
- obj.prometheus = null;
- if (args.compression !== false) { obj.app.use(require('compression')()); }
- obj.app.disable('x-powered-by');
- obj.counterMetrics = { // Counter Metrics always start at 0 and increase but never decrease
- RelayErrors: { description: "Relay Errors" }, // parent.webserver.relaySessionErrorCount
- UnknownGroup: { description: "Unknown Group" }, // meshDoesNotExistCount
- InvalidPKCSsignature: { description: "Invalid PKCS signature" }, // invalidPkcsSignatureCount
- InvalidRSAsignature: { description: "Invalid RSA signature" }, // invalidRsaSignatureCount
- InvalidJSON: { description: "Invalid JSON" }, // invalidJsonCount
- UnknownAction: { description: "Unknown Action" }, // unknownAgentActionCount
- BadWebCertificate: { description: "Bad Web Certificate" }, // agentBadWebCertHashCount
- BadSignature: { description: "Bad Signature" }, // (agentBadSignature1Count + agentBadSignature2Count)
- MaxSessionsReached: { description: "Max Sessions Reached" }, // agentMaxSessionHoldCount
- UnknownDeviceGroup: { description: "Unknown Device Group" }, // (invalidDomainMeshCount + invalidDomainMesh2Count)
- InvalidDeviceGroupType: { description: "Invalid Device Group Type" }, // invalidMeshTypeCount
- DuplicateAgent: { description: "Duplicate Agent" }, // duplicateAgentCount
- blockedUsers: { description: "Blocked Users" }, // blockedUsers
- blockedAgents: { description: "Blocked Agents" }, // blockedAgents
- };
- obj.gaugeMetrics = { // Gauge Metrics always start at 0 and can increase and decrease
- ConnectedIntelAMT: { description: "Connected Intel AMT" }, // parent.mpsserver.ciraConnections[i].length
- UserAccounts: { description: "User Accounts" }, // Object.keys(parent.webserver.users).length
- DeviceGroups: { description: "Device Groups" }, // parent.webserver.meshes (ONLY WHERE deleted=null)
- AgentSessions: { description: "Agent Sessions" }, // Object.keys(parent.webserver.wsagents).length
- ConnectedUsers: { description: "Connected Users" }, // Object.keys(parent.webserver.wssessions).length
- UsersSessions: { description: "Users Sessions" }, // Object.keys(parent.webserver.wssessions2).length
- RelaySessions: { description: "Relay Sessions" }, // parent.webserver.relaySessionCount
- RelayCount: { description: "Relay Count" } // Object.keys(parent.webserver.wsrelays).length30bb4fb74dfb758d36be52a7
- }
- obj.collectors = [];
- if (parent.config.settings.prometheus != null) { // Create Prometheus Monitoring Endpoint
- if ((typeof parent.config.settings.prometheus == 'number') && ((parent.config.settings.prometheus < 1) || (parent.config.settings.prometheus > 65535))) {
- console.log('Promethus port number is invalid, Prometheus metrics endpoint has be disabled');
- delete parent.config.settings.prometheus;
- } else {
- const port = ((typeof parent.config.settings.prometheus == 'number') ? parent.config.settings.prometheus : 9464);
- obj.prometheus = require('prom-client');
- const collectDefaultMetrics = obj.prometheus.collectDefaultMetrics;
- collectDefaultMetrics();
- for (const key in obj.gaugeMetrics) {
- obj.gaugeMetrics[key].prometheus = new obj.prometheus.Gauge({ name: 'meshcentral_' + String(key).toLowerCase(), help: obj.gaugeMetrics[key].description });
- }
- for (const key in obj.counterMetrics) {
- obj.counterMetrics[key].prometheus = new obj.prometheus.Counter({ name: 'meshcentral_' + String(key).toLowerCase(), help: obj.counterMetrics[key].description });
- }
- obj.app.get('/', function (req, res) { res.send('MeshCentral Prometheus server.'); });
- obj.app.listen(port, function () {
- console.log('MeshCentral Prometheus server running on port ' + port + '.');
- obj.parent.updateServerState('prometheus-port', port);
- });
- obj.app.get('/metrics', async (req, res) => {
- try {
- // Count the number of device groups that are not deleted
- var activeDeviceGroups = 0;
- for (var i in parent.webserver.meshes) { if (parent.webserver.meshes[i].deleted == null) { activeDeviceGroups++; } } // This is not ideal for performance, we want to dome something better.
- var gauges = {
- UserAccounts: Object.keys(parent.webserver.users).length,
- DeviceGroups: activeDeviceGroups,
- AgentSessions: Object.keys(parent.webserver.wsagents).length,
- ConnectedUsers: Object.keys(parent.webserver.wssessions).length,
- UsersSessions: Object.keys(parent.webserver.wssessions2).length,
- RelaySessions: parent.webserver.relaySessionCount,
- RelayCount: Object.keys(parent.webserver.wsrelays).length,
- ConnectedIntelAMT: 0
- };
- if (parent.mpsserver != null) {
- for (var i in parent.mpsserver.ciraConnections) {
- gauges.ConnectedIntelAMT += parent.mpsserver.ciraConnections[i].length;
- }
- }
- for (const key in gauges) { obj.gaugeMetrics[key].prometheus.set(gauges[key]); }
- // Take a look at agent errors
- var agentstats = parent.webserver.getAgentStats();
- const counters = {
- RelayErrors: parent.webserver.relaySessionErrorCount,
- UnknownGroup: agentstats.meshDoesNotExistCount,
- InvalidPKCSsignature: agentstats.invalidPkcsSignatureCount,
- InvalidRSAsignature: agentstats.invalidRsaSignatureCount,
- InvalidJSON: agentstats.invalidJsonCount,
- UnknownAction: agentstats.unknownAgentActionCount,
- BadWebCertificate: agentstats.agentBadWebCertHashCount,
- BadSignature: (agentstats.agentBadSignature1Count + agentstats.agentBadSignature2Count),
- MaxSessionsReached: agentstats.agentMaxSessionHoldCount,
- UnknownDeviceGroup: (agentstats.invalidDomainMeshCount + agentstats.invalidDomainMesh2Count),
- InvalidDeviceGroupType: (agentstats.invalidMeshTypeCount + agentstats.invalidMeshType2Count),
- DuplicateAgent: agentstats.duplicateAgentCount,
- blockedUsers: parent.webserver.blockedUsers,
- blockedAgents: parent.webserver.blockedAgents
- };
- for (const key in counters) { obj.counterMetrics[key].prometheus.reset(); obj.counterMetrics[key].prometheus.inc(counters[key]); }
- res.set('Content-Type', obj.prometheus.register.contentType);
- await Promise.all(obj.collectors.map((collector) => (collector(req, res))));
- res.end(await obj.prometheus.register.metrics());
- } catch (ex) {
- console.log(ex);
- res.status(500).end();
- }
- });
- }
- }
- return obj;
-}
\ No newline at end of file
diff --git a/mpsserver.js b/mpsserver.js
index ec5a8312..cacc4241 100644
--- a/mpsserver.js
+++ b/mpsserver.js
@@ -30,7 +30,7 @@ module.exports.CreateMpsServer = function (parent, db, args, certificates) {
const net = require('net');
const tls = require('tls');
const MAX_IDLE = 90000; // 90 seconds max idle time, higher than the typical KEEP-ALIVE periode of 60 seconds
- const KEEPALIVE_INTERVAL = 30; // 30 seconds is typical keepalive interval for AMT CIRA connection
+ const KEEPALIVE_INTERVAL = 30; // 30 seconds is typical keepalive interval for AMT CIRA connection
// This MPS server is also a tiny HTTPS server. HTTP responses are here.
obj.httpResponses = {
@@ -48,7 +48,7 @@ module.exports.CreateMpsServer = function (parent, db, args, certificates) {
obj.server = tls.createServer({ key: certificates.mps.key, cert: certificates.mps.cert, requestCert: true, rejectUnauthorized: false, ciphers: "HIGH:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_AES_128_CCM_8_SHA256:TLS_AES_128_CCM_SHA256:TLS_CHACHA20_POLY1305_SHA256", secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION | constants.SSL_OP_CIPHER_SERVER_PREFERENCE | constants.SSL_OP_NO_TLSv1 | constants.SSL_OP_NO_TLSv1_1 }, onConnection)
} else {
// Lower security MPS in order to support older Intel AMT CIRA connections, we have to turn on TLSv1.
- obj.server = tls.createServer({ key: certificates.mps.key, cert: certificates.mps.cert, minVersion: 'TLSv1', requestCert: true, rejectUnauthorized: false, ciphers: "HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!SRP:!CAMELLIA:@SECLEVEL=0", secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION }, onConnection)
+ obj.server = tls.createServer({ key: certificates.mps.key, cert: certificates.mps.cert, minVersion: 'TLSv1', requestCert: true, rejectUnauthorized: false, ciphers: "HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!SRP:!CAMELLIA", secureOptions: constants.SSL_OP_NO_SSLv2 | constants.SSL_OP_NO_SSLv3 | constants.SSL_OP_NO_COMPRESSION }, onConnection)
}
//obj.server.on('error', function () { console.log('MPS tls server error'); });
obj.server.on('newSession', function (id, data, cb) { if (tlsSessionStoreCount > 1000) { tlsSessionStoreCount = 0; tlsSessionStore = {}; } tlsSessionStore[id.toString('hex')] = data; tlsSessionStoreCount++; cb(); });
@@ -58,7 +58,7 @@ module.exports.CreateMpsServer = function (parent, db, args, certificates) {
obj.server.listen(args.mpsport, args.mpsportbind, function () {
console.log("MeshCentral Intel(R) AMT server running on " + certificates.AmtMpsName + ":" + args.mpsport + ((args.mpsaliasport != null) ? (", alias port " + args.mpsaliasport) : "") + ".");
obj.parent.authLog('mps', 'Server listening on ' + ((args.mpsportbind != null) ? args.mpsportbind : '0.0.0.0') + ' port ' + args.mpsport + '.');
- }).on("error", function (err) { console.error("ERROR: MeshCentral Intel(R) AMT server port " + args.mpsport + " is not available. Check if the MeshCentral is already running."); if (args.exactports) { process.exit(); } });
+ }).on("error", function (err) { console.error("ERROR: MeshCentral Intel(R) AMT server port " + args.mpsport + " is not available."); if (args.exactports) { process.exit(); } });
obj.server.on('tlsClientError', function (err, tlssocket) { if (args.mpsdebug) { var remoteAddress = tlssocket.remoteAddress; if (tlssocket.remoteFamily == 'IPv6') { remoteAddress = '[' + remoteAddress + ']'; } console.log('MPS:Invalid TLS connection from ' + remoteAddress + ':' + tlssocket.remotePort + '.'); } });
}
@@ -733,7 +733,7 @@ module.exports.CreateMpsServer = function (parent, db, args, certificates) {
return;
} else {
// Attempts reverse DNS loopup on the device IP address
- const reverseDnsLookupHandler = function (err, hostnames) {
+ require('dns').reverse(socket.remoteAddr, function (err, hostnames) {
var hostname = socket.remoteAddr;
if ((err == null) && (hostnames != null) && (hostnames.length > 0)) { hostname = hostnames[0]; }
@@ -752,8 +752,7 @@ module.exports.CreateMpsServer = function (parent, db, args, certificates) {
addedDeviceCount++;
var change = 'Added CIRA device ' + socket.tag.name + ' to group ' + initialMesh.name;
obj.parent.DispatchEvent(['*', socket.tag.meshid], obj, { etype: 'node', action: 'addnode', node: parent.webserver.CloneSafeNode(device), msg: change, domain: initialMesh.domain });
- }
- try { require('dns').reverse(socket.remoteAddr, reverseDnsLookupHandler); } catch (ex) { reverseDnsLookupHandler(ex, null); }
+ });
}
} else {
// Node is already present
diff --git a/multiserver.js b/multiserver.js
index 7d87d09d..2a1aa9c6 100644
--- a/multiserver.js
+++ b/multiserver.js
@@ -86,7 +86,7 @@ module.exports.CreateMultiServer = function (parent, args) {
// Start authenticate the peer server by sending a auth nonce & server TLS cert hash.
// Send 384 bits SHA384 hash of TLS cert public key + 384 bits nonce
- obj.ws.send(Buffer.from(obj.common.ShortToStr(1) + obj.serverCertHash + obj.nonce, 'binary')); // Command 1, hash + nonce
+ obj.ws.send(obj.common.ShortToStr(1) + obj.serverCertHash + obj.nonce); // Command 1, hash + nonce
});
// If a message is received
@@ -101,7 +101,7 @@ module.exports.CreateMultiServer = function (parent, args) {
switch (cmd) {
case 1: {
// Server authentication request
- if (msg.length != 98) { obj.parent.parent.debug('peer', 'OutPeer: Bad server authentication message, length = ' + msg.length + ', should be 98. HEX: ' + Buffer.from(msg.substring(0, 4096), 'binary').toString('hex')); return; }
+ if (msg.length != 98) { obj.parent.parent.debug('peer', 'OutPeer: BAD MESSAGE(A1)'); return; }
// Check that the server hash matches the TLS server certificate public key hash
if (obj.url.toLowerCase().startsWith('wss://') && (obj.serverCertHash != msg.substring(2, 50))) { obj.parent.parent.debug('peer', 'OutPeer: Server hash mismatch.'); disconnect(); return; }
@@ -110,7 +110,7 @@ module.exports.CreateMultiServer = function (parent, args) {
// Perform the hash signature using the server agent certificate
obj.parent.parent.certificateOperations.acceleratorPerformSignature(0, msg.substring(2) + obj.nonce, null, function (tag, signature) {
// Send back our certificate + signature
- if (obj.ws != null) { obj.ws.send(Buffer.from(obj.common.ShortToStr(2) + obj.common.ShortToStr(obj.agentCertificateAsn1.length) + obj.agentCertificateAsn1 + signature, 'binary')); } // Command 2, certificate + signature
+ if (obj.ws != null) { obj.ws.send(obj.common.ShortToStr(2) + obj.common.ShortToStr(obj.agentCertificateAsn1.length) + obj.agentCertificateAsn1 + signature); } // Command 2, certificate + signature
});
break;
@@ -139,7 +139,7 @@ module.exports.CreateMultiServer = function (parent, args) {
// Send information about our server to the peer
if (obj.connectionState == 15) {
- obj.send({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 });
+ obj.ws.send(JSON.stringify({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 }));
for (var i in obj.pendingData) { processServerData(obj.pendingData[i]); } // Process any pending data
obj.pendingData = [];
}
@@ -150,7 +150,7 @@ module.exports.CreateMultiServer = function (parent, args) {
// Peer server confirmed authentication, we are allowed to send commands to the server
obj.connectionState |= 8;
if (obj.connectionState == 15) {
- obj.send({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 });
+ obj.ws.send(JSON.stringify({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 }));
for (var i in obj.pendingData) { processServerData(obj.pendingData[i]); } // Process any pending data
obj.pendingData = [];
}
@@ -187,9 +187,9 @@ module.exports.CreateMultiServer = function (parent, args) {
obj.send = function (msg) {
try {
if (obj.ws == null || obj.connectionState != 15) { return; }
- if (typeof msg == 'string') { obj.ws.send(msg); return; }
if (typeof msg == 'object') { obj.ws.send(JSON.stringify(msg)); return; }
- } catch (ex) { }
+ if (typeof msg == 'string') { obj.ws.send(msg); return; }
+ } catch (e) { }
};
// Process incoming peer server JSON data
@@ -244,11 +244,12 @@ module.exports.CreateMultiServer = function (parent, args) {
obj.parent.parent.debug('peer', 'InPeer: Connected (' + obj.remoteaddr + ')');
// Send a message to the peer server
- obj.send = function (msg) {
+ obj.send = function (data) {
try {
- if (typeof msg == 'string') { obj.ws.send(msg); return; }
- if (typeof msg == 'object') { obj.ws.send(JSON.stringify(msg)); return; }
- } catch (ex) { }
+ if (typeof data == 'string') { obj.ws.send(Buffer.from(data, 'binary')); return; }
+ if (typeof data == 'object') { obj.ws.send(JSON.stringify(data)); return; }
+ obj.ws.send(data);
+ } catch (e) { }
};
// Disconnect this server
@@ -280,7 +281,7 @@ module.exports.CreateMultiServer = function (parent, args) {
// Perform the hash signature using the server agent certificate
obj.parent.parent.certificateOperations.acceleratorPerformSignature(0, msg.substring(2) + obj.nonce, null, function (tag, signature) {
// Send back our certificate + signature
- obj.ws.send(Buffer.from(obj.common.ShortToStr(2) + obj.common.ShortToStr(obj.agentCertificateAsn1.length) + obj.agentCertificateAsn1 + signature, 'binary')); // Command 2, certificate + signature
+ obj.send(obj.common.ShortToStr(2) + obj.common.ShortToStr(obj.agentCertificateAsn1.length) + obj.agentCertificateAsn1 + signature); // Command 2, certificate + signature
});
// Check the peer server signature if we can
@@ -325,13 +326,13 @@ module.exports.CreateMultiServer = function (parent, args) {
// Start authenticate the peer server by sending a auth nonce & server TLS cert hash.
// Send 384 bits SHA382 hash of TLS cert public key + 384 bits nonce
obj.nonce = obj.crypto.randomBytes(48).toString('binary');
- obj.ws.send(Buffer.from(obj.common.ShortToStr(1) + obj.webCertificateHash + obj.nonce, 'binary')); // Command 1, hash + nonce
+ obj.send(obj.common.ShortToStr(1) + obj.webCertificateHash + obj.nonce); // Command 1, hash + nonce
// Once we get all the information about an peer server, run this to hook everything up to the server
function completePeerServerConnection() {
if (obj.authenticated != 1) return;
- obj.ws.send(Buffer.from(obj.common.ShortToStr(4), 'binary'));
- obj.send({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 });
+ obj.send(obj.common.ShortToStr(4));
+ obj.send(JSON.stringify({ action: 'info', serverid: obj.parent.serverid, dbid: obj.parent.parent.db.identifier, key: obj.parent.parent.serverKey.toString('hex'), serverCertHash: obj.parent.parent.webserver.webCertificateHashBase64 }));
obj.authenticated = 2;
// Process any pending data that was received before peer authentication
@@ -404,7 +405,8 @@ module.exports.CreateMultiServer = function (parent, args) {
// Dispatch an event to all other MeshCentral2 peer servers
obj.DispatchEvent = function (ids, source, event) {
- for (var serverid in obj.peerServers) { obj.peerServers[serverid].send({ action: 'bus', ids: ids, event: event }); }
+ var busmsg = JSON.stringify({ action: 'bus', ids: ids, event: event });
+ for (var serverid in obj.peerServers) { obj.peerServers[serverid].send(busmsg); }
};
// Dispatch a message to other MeshCentral2 peer servers
@@ -435,10 +437,10 @@ module.exports.CreateMultiServer = function (parent, args) {
obj.peerServers[peerServerId] = server;
// Send the list of connections to the peer
- server.send({ action: 'connectivityTable', connectivityTable: obj.parent.peerConnectivityByNode[obj.parent.serverId] });
+ server.send(JSON.stringify({ action: 'connectivityTable', connectivityTable: obj.parent.peerConnectivityByNode[obj.parent.serverId] }));
// Send a list of user sessions to the peer
- server.send({ action: 'sessionsTable', sessionsTable: Object.keys(obj.parent.webserver.wssessions2) });
+ server.send(JSON.stringify({ action: 'sessionsTable', sessionsTable: Object.keys(obj.parent.webserver.wssessions2) }));
};
// We disconnected to a peer server, clean up everything
@@ -586,20 +588,6 @@ module.exports.CreateMultiServer = function (parent, args) {
}
break;
}
- case 'agentCommand': {
- if (msg.nodeid != null) {
- // Route this message to a connected agent
- var agent = obj.parent.webserver.wsagents[msg.nodeid];
- if (agent != null) { agent.send(JSON.stringify(msg.command)); }
- } else if (msg.meshid != null) {
- // Route this message to all connected agents of this mesh
- for (var nodeid in obj.parent.webserver.wsagents) {
- var agent = obj.parent.webserver.wsagents[nodeid];
- if (agent.dbMeshKey == msg.meshid) { try { agent.send(JSON.stringify(msg.command)); } catch (ex) { } }
- }
- }
- break;
- }
default: {
// Unknown peer server command
console.log('Unknown action from peer server ' + peerServerId + ': ' + msg.action + '.');
@@ -648,7 +636,7 @@ module.exports.CreateMultiServer = function (parent, args) {
peerTunnel.ws2.on('close', function (req) { peerTunnel.parent.parent.debug('peer', 'FTunnel disconnect ' + peerTunnel.serverid); peerTunnel.close(); });
// If a message is received from the peer, Peer ---> Browser (TODO: Pipe this?)
- peerTunnel.ws2.on('message', function (msg, isBinary) { try { peerTunnel.ws2._socket.pause(); peerTunnel.ws1.send((isBinary ? msg : msg.toString('binary')), function () { peerTunnel.ws2._socket.resume(); }); } catch (e) { } });
+ peerTunnel.ws2.on('message', function (msg) { try { peerTunnel.ws2._socket.pause(); peerTunnel.ws1.send(msg, function () { peerTunnel.ws2._socket.resume(); }); } catch (e) { } });
// Register the connection event
peerTunnel.ws2.on('open', function () {
diff --git a/package-lock.json b/package-lock.json
deleted file mode 100644
index caf31a34..00000000
--- a/package-lock.json
+++ /dev/null
@@ -1,2448 +0,0 @@
-{
- "name": "meshcentral",
- "version": "1.1.35",
- "lockfileVersion": 3,
- "requires": true,
- "packages": {
- "": {
- "name": "meshcentral",
- "version": "1.1.35",
- "license": "Apache-2.0",
- "dependencies": {
- "@seald-io/nedb": "4.0.4",
- "archiver": "7.0.1",
- "body-parser": "1.20.3",
- "cbor": "5.2.0",
- "compression": "1.7.5",
- "cookie-session": "2.1.0",
- "express": "4.21.2",
- "express-handlebars": "7.1.3",
- "express-ws": "5.0.2",
- "ipcheck": "0.1.0",
- "minimist": "1.2.8",
- "multiparty": "4.2.3",
- "node-forge": "1.3.1",
- "ua-parser-js": "1.0.39",
- "ws": "8.18.0",
- "yauzl": "2.10.0"
- },
- "bin": {
- "meshcentral": "bin/meshcentral"
- },
- "engines": {
- "node": ">=16.0.0"
- }
- },
- "node_modules/@pkgjs/parseargs": {
- "version": "0.11.0",
- "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
- "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
- "license": "MIT",
- "optional": true,
- "engines": {
- "node": ">=14"
- }
- },
- "node_modules/@seald-io/binary-search-tree": {
- "version": "1.0.3",
- "resolved": "https://registry.npmjs.org/@seald-io/binary-search-tree/-/binary-search-tree-1.0.3.tgz",
- "integrity": "sha512-qv3jnwoakeax2razYaMsGI/luWdliBLHTdC6jU55hQt1hcFqzauH/HsBollQ7IR4ySTtYhT+xyHoijpA16C+tA=="
- },
- "node_modules/@seald-io/nedb": {
- "version": "4.0.4",
- "resolved": "https://registry.npmjs.org/@seald-io/nedb/-/nedb-4.0.4.tgz",
- "integrity": "sha512-CUNcMio7QUHTA+sIJ/DC5JzVNNsHe743TPmC4H5Gij9zDLMbmrCT2li3eVB72/gF63BPS8pWEZrjlAMRKA8FDw==",
- "license": "MIT",
- "dependencies": {
- "@seald-io/binary-search-tree": "^1.0.3",
- "localforage": "^1.9.0",
- "util": "^0.12.4"
- }
- },
- "node_modules/abort-controller": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz",
- "integrity": "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==",
- "license": "MIT",
- "dependencies": {
- "event-target-shim": "^5.0.0"
- },
- "engines": {
- "node": ">=6.5"
- }
- },
- "node_modules/accepts": {
- "version": "1.3.8",
- "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
- "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
- "license": "MIT",
- "dependencies": {
- "mime-types": "~2.1.34",
- "negotiator": "0.6.3"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/accepts/node_modules/negotiator": {
- "version": "0.6.3",
- "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
- "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/ansi-regex": {
- "version": "6.1.0",
- "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz",
- "integrity": "sha512-7HSX4QQb4CspciLpVFwyRe79O3xsIZDDLER21kERQ71oaPodF8jL725AgJMFAYbooIqolJoRLuM81SpeUkpkvA==",
- "license": "MIT",
- "engines": {
- "node": ">=12"
- },
- "funding": {
- "url": "https://github.com/chalk/ansi-regex?sponsor=1"
- }
- },
- "node_modules/ansi-styles": {
- "version": "6.2.1",
- "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
- "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==",
- "license": "MIT",
- "engines": {
- "node": ">=12"
- },
- "funding": {
- "url": "https://github.com/chalk/ansi-styles?sponsor=1"
- }
- },
- "node_modules/archiver": {
- "version": "7.0.1",
- "resolved": "https://registry.npmjs.org/archiver/-/archiver-7.0.1.tgz",
- "integrity": "sha512-ZcbTaIqJOfCc03QwD468Unz/5Ir8ATtvAHsK+FdXbDIbGfihqh9mrvdcYunQzqn4HrvWWaFyaxJhGZagaJJpPQ==",
- "license": "MIT",
- "dependencies": {
- "archiver-utils": "^5.0.2",
- "async": "^3.2.4",
- "buffer-crc32": "^1.0.0",
- "readable-stream": "^4.0.0",
- "readdir-glob": "^1.1.2",
- "tar-stream": "^3.0.0",
- "zip-stream": "^6.0.1"
- },
- "engines": {
- "node": ">= 14"
- }
- },
- "node_modules/archiver-utils": {
- "version": "5.0.2",
- "resolved": "https://registry.npmjs.org/archiver-utils/-/archiver-utils-5.0.2.tgz",
- "integrity": "sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==",
- "license": "MIT",
- "dependencies": {
- "glob": "^10.0.0",
- "graceful-fs": "^4.2.0",
- "is-stream": "^2.0.1",
- "lazystream": "^1.0.0",
- "lodash": "^4.17.15",
- "normalize-path": "^3.0.0",
- "readable-stream": "^4.0.0"
- },
- "engines": {
- "node": ">= 14"
- }
- },
- "node_modules/archiver-utils/node_modules/lazystream": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/lazystream/-/lazystream-1.0.1.tgz",
- "integrity": "sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==",
- "license": "MIT",
- "dependencies": {
- "readable-stream": "^2.0.5"
- },
- "engines": {
- "node": ">= 0.6.3"
- }
- },
- "node_modules/archiver-utils/node_modules/lazystream/node_modules/readable-stream": {
- "version": "2.3.8",
- "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
- "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
- "license": "MIT",
- "dependencies": {
- "core-util-is": "~1.0.0",
- "inherits": "~2.0.3",
- "isarray": "~1.0.0",
- "process-nextick-args": "~2.0.0",
- "safe-buffer": "~5.1.1",
- "string_decoder": "~1.1.1",
- "util-deprecate": "~1.0.1"
- }
- },
- "node_modules/archiver-utils/node_modules/lazystream/node_modules/string_decoder": {
- "version": "1.1.1",
- "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
- "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
- "license": "MIT",
- "dependencies": {
- "safe-buffer": "~5.1.0"
- }
- },
- "node_modules/archiver-utils/node_modules/readable-stream": {
- "version": "4.6.0",
- "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
- "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
- "license": "MIT",
- "dependencies": {
- "abort-controller": "^3.0.0",
- "buffer": "^6.0.3",
- "events": "^3.3.0",
- "process": "^0.11.10",
- "string_decoder": "^1.3.0"
- },
- "engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
- }
- },
- "node_modules/archiver-utils/node_modules/safe-buffer": {
- "version": "5.1.2",
- "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
- "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
- "license": "MIT"
- },
- "node_modules/archiver/node_modules/minimatch": {
- "version": "5.1.6",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.6.tgz",
- "integrity": "sha512-lKwV/1brpG6mBUFHtb7NUmtABCb2WZZmm2wNiOA5hAb8VdCS4B3dtMWyvcoViccwAW/COERjXLt0zP1zXUN26g==",
- "license": "ISC",
- "dependencies": {
- "brace-expansion": "^2.0.1"
- },
- "engines": {
- "node": ">=10"
- }
- },
- "node_modules/archiver/node_modules/readable-stream": {
- "version": "4.6.0",
- "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
- "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
- "license": "MIT",
- "dependencies": {
- "abort-controller": "^3.0.0",
- "buffer": "^6.0.3",
- "events": "^3.3.0",
- "process": "^0.11.10",
- "string_decoder": "^1.3.0"
- },
- "engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
- }
- },
- "node_modules/archiver/node_modules/readdir-glob": {
- "version": "1.1.3",
- "resolved": "https://registry.npmjs.org/readdir-glob/-/readdir-glob-1.1.3.tgz",
- "integrity": "sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA==",
- "license": "Apache-2.0",
- "dependencies": {
- "minimatch": "^5.1.0"
- }
- },
- "node_modules/array-flatten": {
- "version": "1.1.1",
- "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
- "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
- "license": "MIT"
- },
- "node_modules/async": {
- "version": "3.2.6",
- "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
- "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
- "license": "MIT"
- },
- "node_modules/available-typed-arrays": {
- "version": "1.0.7",
- "resolved": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz",
- "integrity": "sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==",
- "license": "MIT",
- "dependencies": {
- "possible-typed-array-names": "^1.0.0"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/b4a": {
- "version": "1.6.7",
- "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.6.7.tgz",
- "integrity": "sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg==",
- "license": "Apache-2.0"
- },
- "node_modules/balanced-match": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
- "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
- "license": "MIT"
- },
- "node_modules/bare-events": {
- "version": "2.5.0",
- "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.5.0.tgz",
- "integrity": "sha512-/E8dDe9dsbLyh2qrZ64PEPadOQ0F4gbl1sUJOrmph7xOiIxfY8vwab/4bFLh4Y88/Hk/ujKcrQKc+ps0mv873A==",
- "license": "Apache-2.0",
- "optional": true
- },
- "node_modules/base64-js": {
- "version": "1.5.1",
- "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
- "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
- "funding": [
- {
- "type": "github",
- "url": "https://github.com/sponsors/feross"
- },
- {
- "type": "patreon",
- "url": "https://www.patreon.com/feross"
- },
- {
- "type": "consulting",
- "url": "https://feross.org/support"
- }
- ],
- "license": "MIT"
- },
- "node_modules/bignumber.js": {
- "version": "9.1.2",
- "resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.1.2.tgz",
- "integrity": "sha512-2/mKyZH9K85bzOEfhXDBFZTGd1CTs+5IHpeFQo9luiBG7hghdC851Pj2WAhb6E3R6b9tZj/XKhbg4fum+Kepug==",
- "license": "MIT",
- "engines": {
- "node": "*"
- }
- },
- "node_modules/body-parser": {
- "version": "1.20.3",
- "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
- "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
- "license": "MIT",
- "dependencies": {
- "bytes": "3.1.2",
- "content-type": "~1.0.5",
- "debug": "2.6.9",
- "depd": "2.0.0",
- "destroy": "1.2.0",
- "http-errors": "2.0.0",
- "iconv-lite": "0.4.24",
- "on-finished": "2.4.1",
- "qs": "6.13.0",
- "raw-body": "2.5.2",
- "type-is": "~1.6.18",
- "unpipe": "1.0.0"
- },
- "engines": {
- "node": ">= 0.8",
- "npm": "1.2.8000 || >= 1.4.16"
- }
- },
- "node_modules/brace-expansion": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
- "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
- "license": "MIT",
- "dependencies": {
- "balanced-match": "^1.0.0"
- }
- },
- "node_modules/buffer": {
- "version": "6.0.3",
- "resolved": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz",
- "integrity": "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==",
- "funding": [
- {
- "type": "github",
- "url": "https://github.com/sponsors/feross"
- },
- {
- "type": "patreon",
- "url": "https://www.patreon.com/feross"
- },
- {
- "type": "consulting",
- "url": "https://feross.org/support"
- }
- ],
- "license": "MIT",
- "dependencies": {
- "base64-js": "^1.3.1",
- "ieee754": "^1.2.1"
- }
- },
- "node_modules/buffer-crc32": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-1.0.0.tgz",
- "integrity": "sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==",
- "license": "MIT",
- "engines": {
- "node": ">=8.0.0"
- }
- },
- "node_modules/bytes": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
- "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/call-bind": {
- "version": "1.0.8",
- "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz",
- "integrity": "sha512-oKlSFMcMwpUg2ednkhQ454wfWiU/ul3CkJe/PEHcTKuiX6RpbehUiFMXu13HalGZxfUwCQzZG747YXBn1im9ww==",
- "license": "MIT",
- "dependencies": {
- "call-bind-apply-helpers": "^1.0.0",
- "es-define-property": "^1.0.0",
- "get-intrinsic": "^1.2.4",
- "set-function-length": "^1.2.2"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/call-bind-apply-helpers": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.1.tgz",
- "integrity": "sha512-BhYE+WDaywFg2TBWYNXAE+8B1ATnThNBqXHP5nQu0jWJdVvY2hvkpyB3qOmtmDePiS5/BDQ8wASEWGMWRG148g==",
- "license": "MIT",
- "dependencies": {
- "es-errors": "^1.3.0",
- "function-bind": "^1.1.2"
- },
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/call-bound": {
- "version": "1.0.3",
- "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.3.tgz",
- "integrity": "sha512-YTd+6wGlNlPxSuri7Y6X8tY2dmm12UMH66RpKMhiX6rsk5wXXnYgbUcOt8kiS31/AjfoTOvCsE+w8nZQLQnzHA==",
- "license": "MIT",
- "dependencies": {
- "call-bind-apply-helpers": "^1.0.1",
- "get-intrinsic": "^1.2.6"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/cbor": {
- "version": "5.2.0",
- "resolved": "https://registry.npmjs.org/cbor/-/cbor-5.2.0.tgz",
- "integrity": "sha512-5IMhi9e1QU76ppa5/ajP1BmMWZ2FHkhAhjeVKQ/EFCgYSEaeVaoGtL7cxJskf9oCCk+XjzaIdc3IuU/dbA/o2A==",
- "license": "MIT",
- "dependencies": {
- "bignumber.js": "^9.0.1",
- "nofilter": "^1.0.4"
- },
- "engines": {
- "node": ">=6.0.0"
- }
- },
- "node_modules/color-convert": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
- "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
- "license": "MIT",
- "dependencies": {
- "color-name": "~1.1.4"
- },
- "engines": {
- "node": ">=7.0.0"
- }
- },
- "node_modules/color-name": {
- "version": "1.1.4",
- "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
- "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
- "license": "MIT"
- },
- "node_modules/compressible": {
- "version": "2.0.18",
- "resolved": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz",
- "integrity": "sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==",
- "license": "MIT",
- "dependencies": {
- "mime-db": ">= 1.43.0 < 2"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/compression": {
- "version": "1.7.5",
- "resolved": "https://registry.npmjs.org/compression/-/compression-1.7.5.tgz",
- "integrity": "sha512-bQJ0YRck5ak3LgtnpKkiabX5pNF7tMUh1BSy2ZBOTh0Dim0BUu6aPPwByIns6/A5Prh8PufSPerMDUklpzes2Q==",
- "license": "MIT",
- "dependencies": {
- "bytes": "3.1.2",
- "compressible": "~2.0.18",
- "debug": "2.6.9",
- "negotiator": "~0.6.4",
- "on-headers": "~1.0.2",
- "safe-buffer": "5.2.1",
- "vary": "~1.1.2"
- },
- "engines": {
- "node": ">= 0.8.0"
- }
- },
- "node_modules/content-disposition": {
- "version": "0.5.4",
- "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
- "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
- "license": "MIT",
- "dependencies": {
- "safe-buffer": "5.2.1"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/content-type": {
- "version": "1.0.5",
- "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
- "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/cookie": {
- "version": "0.7.1",
- "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
- "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/cookie-session": {
- "version": "2.1.0",
- "resolved": "https://registry.npmjs.org/cookie-session/-/cookie-session-2.1.0.tgz",
- "integrity": "sha512-u73BDmR8QLGcs+Lprs0cfbcAPKl2HnPcjpwRXT41sEV4DRJ2+W0vJEEZkG31ofkx+HZflA70siRIjiTdIodmOQ==",
- "license": "MIT",
- "dependencies": {
- "cookies": "0.9.1",
- "debug": "3.2.7",
- "on-headers": "~1.0.2",
- "safe-buffer": "5.2.1"
- },
- "engines": {
- "node": ">= 0.10"
- }
- },
- "node_modules/cookie-session/node_modules/debug": {
- "version": "3.2.7",
- "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz",
- "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==",
- "license": "MIT",
- "dependencies": {
- "ms": "^2.1.1"
- }
- },
- "node_modules/cookie-session/node_modules/ms": {
- "version": "2.1.3",
- "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
- "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
- "license": "MIT"
- },
- "node_modules/cookie-signature": {
- "version": "1.0.6",
- "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
- "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
- "license": "MIT"
- },
- "node_modules/cookies": {
- "version": "0.9.1",
- "resolved": "https://registry.npmjs.org/cookies/-/cookies-0.9.1.tgz",
- "integrity": "sha512-TG2hpqe4ELx54QER/S3HQ9SRVnQnGBtKUz5bLQWtYAQ+o6GpgMs6sYUvaiJjVxb+UXwhRhAEP3m7LbsIZ77Hmw==",
- "license": "MIT",
- "dependencies": {
- "depd": "~2.0.0",
- "keygrip": "~1.1.0"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/core-util-is": {
- "version": "1.0.3",
- "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
- "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==",
- "license": "MIT"
- },
- "node_modules/crc-32": {
- "version": "1.2.2",
- "resolved": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
- "integrity": "sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==",
- "license": "Apache-2.0",
- "bin": {
- "crc32": "bin/crc32.njs"
- },
- "engines": {
- "node": ">=0.8"
- }
- },
- "node_modules/crc32-stream": {
- "version": "6.0.0",
- "resolved": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-6.0.0.tgz",
- "integrity": "sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==",
- "license": "MIT",
- "dependencies": {
- "crc-32": "^1.2.0",
- "readable-stream": "^4.0.0"
- },
- "engines": {
- "node": ">= 14"
- }
- },
- "node_modules/crc32-stream/node_modules/readable-stream": {
- "version": "4.6.0",
- "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
- "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
- "license": "MIT",
- "dependencies": {
- "abort-controller": "^3.0.0",
- "buffer": "^6.0.3",
- "events": "^3.3.0",
- "process": "^0.11.10",
- "string_decoder": "^1.3.0"
- },
- "engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
- }
- },
- "node_modules/cross-spawn": {
- "version": "7.0.6",
- "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
- "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
- "license": "MIT",
- "dependencies": {
- "path-key": "^3.1.0",
- "shebang-command": "^2.0.0",
- "which": "^2.0.1"
- },
- "engines": {
- "node": ">= 8"
- }
- },
- "node_modules/debug": {
- "version": "2.6.9",
- "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
- "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
- "license": "MIT",
- "dependencies": {
- "ms": "2.0.0"
- }
- },
- "node_modules/define-data-property": {
- "version": "1.1.4",
- "resolved": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
- "integrity": "sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==",
- "license": "MIT",
- "dependencies": {
- "es-define-property": "^1.0.0",
- "es-errors": "^1.3.0",
- "gopd": "^1.0.1"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/depd": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
- "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/destroy": {
- "version": "1.2.0",
- "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
- "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8",
- "npm": "1.2.8000 || >= 1.4.16"
- }
- },
- "node_modules/dunder-proto": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
- "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
- "license": "MIT",
- "dependencies": {
- "call-bind-apply-helpers": "^1.0.1",
- "es-errors": "^1.3.0",
- "gopd": "^1.2.0"
- },
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/eastasianwidth": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
- "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
- "license": "MIT"
- },
- "node_modules/ee-first": {
- "version": "1.1.1",
- "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
- "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
- "license": "MIT"
- },
- "node_modules/emoji-regex": {
- "version": "9.2.2",
- "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
- "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==",
- "license": "MIT"
- },
- "node_modules/encodeurl": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
- "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/es-define-property": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
- "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/es-errors": {
- "version": "1.3.0",
- "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
- "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/es-object-atoms": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.0.0.tgz",
- "integrity": "sha512-MZ4iQ6JwHOBQjahnjwaC1ZtIBH+2ohjamzAO3oaHcXYup7qxjF2fixyH+Q71voWHeOkI2q/TnJao/KfXYIZWbw==",
- "license": "MIT",
- "dependencies": {
- "es-errors": "^1.3.0"
- },
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/escape-html": {
- "version": "1.0.3",
- "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
- "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
- "license": "MIT"
- },
- "node_modules/etag": {
- "version": "1.8.1",
- "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
- "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/event-target-shim": {
- "version": "5.0.1",
- "resolved": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz",
- "integrity": "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==",
- "license": "MIT",
- "engines": {
- "node": ">=6"
- }
- },
- "node_modules/events": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz",
- "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==",
- "license": "MIT",
- "engines": {
- "node": ">=0.8.x"
- }
- },
- "node_modules/express": {
- "version": "4.21.2",
- "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
- "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
- "license": "MIT",
- "dependencies": {
- "accepts": "~1.3.8",
- "array-flatten": "1.1.1",
- "body-parser": "1.20.3",
- "content-disposition": "0.5.4",
- "content-type": "~1.0.4",
- "cookie": "0.7.1",
- "cookie-signature": "1.0.6",
- "debug": "2.6.9",
- "depd": "2.0.0",
- "encodeurl": "~2.0.0",
- "escape-html": "~1.0.3",
- "etag": "~1.8.1",
- "finalhandler": "1.3.1",
- "fresh": "0.5.2",
- "http-errors": "2.0.0",
- "merge-descriptors": "1.0.3",
- "methods": "~1.1.2",
- "on-finished": "2.4.1",
- "parseurl": "~1.3.3",
- "path-to-regexp": "0.1.12",
- "proxy-addr": "~2.0.7",
- "qs": "6.13.0",
- "range-parser": "~1.2.1",
- "safe-buffer": "5.2.1",
- "send": "0.19.0",
- "serve-static": "1.16.2",
- "setprototypeof": "1.2.0",
- "statuses": "2.0.1",
- "type-is": "~1.6.18",
- "utils-merge": "1.0.1",
- "vary": "~1.1.2"
- },
- "engines": {
- "node": ">= 0.10.0"
- },
- "funding": {
- "type": "opencollective",
- "url": "https://opencollective.com/express"
- }
- },
- "node_modules/express-handlebars": {
- "version": "7.1.3",
- "resolved": "https://registry.npmjs.org/express-handlebars/-/express-handlebars-7.1.3.tgz",
- "integrity": "sha512-O0W4n14iQ8+iFIDdiMh9HRI2nbVQJ/h1qndlD1TXWxxcfbKjKoqJh+ti2tROkyx4C4VQrt0y3bANBQ5auQAiew==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "glob": "^10.4.2",
- "graceful-fs": "^4.2.11",
- "handlebars": "^4.7.8"
- },
- "engines": {
- "node": ">=v16"
- }
- },
- "node_modules/express-ws": {
- "version": "5.0.2",
- "resolved": "https://registry.npmjs.org/express-ws/-/express-ws-5.0.2.tgz",
- "integrity": "sha512-0uvmuk61O9HXgLhGl3QhNSEtRsQevtmbL94/eILaliEADZBHZOQUAiHFrGPrgsjikohyrmSG5g+sCfASTt0lkQ==",
- "license": "BSD-2-Clause",
- "dependencies": {
- "ws": "^7.4.6"
- },
- "engines": {
- "node": ">=4.5.0"
- },
- "peerDependencies": {
- "express": "^4.0.0 || ^5.0.0-alpha.1"
- }
- },
- "node_modules/express-ws/node_modules/ws": {
- "version": "7.5.10",
- "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.10.tgz",
- "integrity": "sha512-+dbF1tHwZpXcbOJdVOkzLDxZP1ailvSxM6ZweXTegylPny803bFhA+vqBYw4s31NSAk4S2Qz+AKXK9a4wkdjcQ==",
- "license": "MIT",
- "engines": {
- "node": ">=8.3.0"
- },
- "peerDependencies": {
- "bufferutil": "^4.0.1",
- "utf-8-validate": "^5.0.2"
- },
- "peerDependenciesMeta": {
- "bufferutil": {
- "optional": true
- },
- "utf-8-validate": {
- "optional": true
- }
- }
- },
- "node_modules/fast-fifo": {
- "version": "1.3.2",
- "resolved": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz",
- "integrity": "sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==",
- "license": "MIT"
- },
- "node_modules/fd-slicer": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz",
- "integrity": "sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==",
- "license": "MIT",
- "dependencies": {
- "pend": "~1.2.0"
- }
- },
- "node_modules/finalhandler": {
- "version": "1.3.1",
- "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz",
- "integrity": "sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==",
- "license": "MIT",
- "dependencies": {
- "debug": "2.6.9",
- "encodeurl": "~2.0.0",
- "escape-html": "~1.0.3",
- "on-finished": "2.4.1",
- "parseurl": "~1.3.3",
- "statuses": "2.0.1",
- "unpipe": "~1.0.0"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/for-each": {
- "version": "0.3.3",
- "resolved": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz",
- "integrity": "sha512-jqYfLp7mo9vIyQf8ykW2v7A+2N4QjeCeI5+Dz9XraiO1ign81wjiH7Fb9vSOWvQfNtmSa4H2RoQTrrXivdUZmw==",
- "license": "MIT",
- "dependencies": {
- "is-callable": "^1.1.3"
- }
- },
- "node_modules/foreground-child": {
- "version": "3.3.0",
- "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.0.tgz",
- "integrity": "sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==",
- "license": "ISC",
- "dependencies": {
- "cross-spawn": "^7.0.0",
- "signal-exit": "^4.0.1"
- },
- "engines": {
- "node": ">=14"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
- "node_modules/foreground-child/node_modules/signal-exit": {
- "version": "4.1.0",
- "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
- "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==",
- "license": "ISC",
- "engines": {
- "node": ">=14"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
- "node_modules/forwarded": {
- "version": "0.2.0",
- "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
- "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/fresh": {
- "version": "0.5.2",
- "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
- "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/function-bind": {
- "version": "1.1.2",
- "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
- "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
- "license": "MIT",
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/get-intrinsic": {
- "version": "1.2.6",
- "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.6.tgz",
- "integrity": "sha512-qxsEs+9A+u85HhllWJJFicJfPDhRmjzoYdl64aMWW9yRIJmSyxdn8IEkuIM530/7T+lv0TIHd8L6Q/ra0tEoeA==",
- "license": "MIT",
- "dependencies": {
- "call-bind-apply-helpers": "^1.0.1",
- "dunder-proto": "^1.0.0",
- "es-define-property": "^1.0.1",
- "es-errors": "^1.3.0",
- "es-object-atoms": "^1.0.0",
- "function-bind": "^1.1.2",
- "gopd": "^1.2.0",
- "has-symbols": "^1.1.0",
- "hasown": "^2.0.2",
- "math-intrinsics": "^1.0.0"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/glob": {
- "version": "10.4.5",
- "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz",
- "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==",
- "license": "ISC",
- "dependencies": {
- "foreground-child": "^3.1.0",
- "jackspeak": "^3.1.2",
- "minimatch": "^9.0.4",
- "minipass": "^7.1.2",
- "package-json-from-dist": "^1.0.0",
- "path-scurry": "^1.11.1"
- },
- "bin": {
- "glob": "dist/esm/bin.mjs"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
- "node_modules/gopd": {
- "version": "1.2.0",
- "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
- "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/graceful-fs": {
- "version": "4.2.11",
- "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
- "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
- "license": "ISC"
- },
- "node_modules/handlebars": {
- "version": "4.7.8",
- "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz",
- "integrity": "sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==",
- "license": "MIT",
- "dependencies": {
- "minimist": "^1.2.5",
- "neo-async": "^2.6.2",
- "source-map": "^0.6.1",
- "wordwrap": "^1.0.0"
- },
- "bin": {
- "handlebars": "bin/handlebars"
- },
- "engines": {
- "node": ">=0.4.7"
- },
- "optionalDependencies": {
- "uglify-js": "^3.1.4"
- }
- },
- "node_modules/has-property-descriptors": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz",
- "integrity": "sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==",
- "license": "MIT",
- "dependencies": {
- "es-define-property": "^1.0.0"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/has-symbols": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
- "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/has-tostringtag": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
- "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==",
- "license": "MIT",
- "dependencies": {
- "has-symbols": "^1.0.3"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/hasown": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
- "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
- "license": "MIT",
- "dependencies": {
- "function-bind": "^1.1.2"
- },
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/http-errors": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
- "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
- "license": "MIT",
- "dependencies": {
- "depd": "2.0.0",
- "inherits": "2.0.4",
- "setprototypeof": "1.2.0",
- "statuses": "2.0.1",
- "toidentifier": "1.0.1"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/iconv-lite": {
- "version": "0.4.24",
- "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
- "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
- "license": "MIT",
- "dependencies": {
- "safer-buffer": ">= 2.1.2 < 3"
- },
- "engines": {
- "node": ">=0.10.0"
- }
- },
- "node_modules/ieee754": {
- "version": "1.2.1",
- "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
- "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
- "funding": [
- {
- "type": "github",
- "url": "https://github.com/sponsors/feross"
- },
- {
- "type": "patreon",
- "url": "https://www.patreon.com/feross"
- },
- {
- "type": "consulting",
- "url": "https://feross.org/support"
- }
- ],
- "license": "BSD-3-Clause"
- },
- "node_modules/immediate": {
- "version": "3.0.6",
- "resolved": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz",
- "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
- "license": "MIT"
- },
- "node_modules/inherits": {
- "version": "2.0.4",
- "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
- "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
- "license": "ISC"
- },
- "node_modules/ipaddr.js": {
- "version": "1.9.1",
- "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
- "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.10"
- }
- },
- "node_modules/ipcheck": {
- "version": "0.1.0",
- "resolved": "https://registry.npmjs.org/ipcheck/-/ipcheck-0.1.0.tgz",
- "integrity": "sha512-NwhrmROU0iXKa+U1quGuQ+ag+K/1Bb5V/yh5Q4SylSu/LGymPZcWB7p4u7JgJH0qOR6cTLDO5VZlRbhoeekNzQ==",
- "license": "MIT"
- },
- "node_modules/is-arguments": {
- "version": "1.2.0",
- "resolved": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.2.0.tgz",
- "integrity": "sha512-7bVbi0huj/wrIAOzb8U1aszg9kdi3KN/CyU19CTI7tAoZYEZoL9yCDXpbXN+uPsuWnP02cyug1gleqq+TU+YCA==",
- "license": "MIT",
- "dependencies": {
- "call-bound": "^1.0.2",
- "has-tostringtag": "^1.0.2"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/is-callable": {
- "version": "1.2.7",
- "resolved": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz",
- "integrity": "sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/is-fullwidth-code-point": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
- "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/is-generator-function": {
- "version": "1.0.10",
- "resolved": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.10.tgz",
- "integrity": "sha512-jsEjy9l3yiXEQ+PsXdmBwEPcOxaXWLspKdplFUVI9vq1iZgIekeC0L167qeu86czQaxed3q/Uzuw0swL0irL8A==",
- "license": "MIT",
- "dependencies": {
- "has-tostringtag": "^1.0.0"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/is-stream": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
- "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- },
- "funding": {
- "url": "https://github.com/sponsors/sindresorhus"
- }
- },
- "node_modules/is-typed-array": {
- "version": "1.1.15",
- "resolved": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz",
- "integrity": "sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==",
- "license": "MIT",
- "dependencies": {
- "which-typed-array": "^1.1.16"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/isarray": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
- "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
- "license": "MIT"
- },
- "node_modules/isexe": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
- "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
- "license": "ISC"
- },
- "node_modules/jackspeak": {
- "version": "3.4.3",
- "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz",
- "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==",
- "license": "BlueOak-1.0.0",
- "dependencies": {
- "@isaacs/cliui": "^8.0.2"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- },
- "optionalDependencies": {
- "@pkgjs/parseargs": "^0.11.0"
- }
- },
- "node_modules/jackspeak/node_modules/@isaacs/cliui": {
- "version": "8.0.2",
- "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
- "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
- "license": "ISC",
- "dependencies": {
- "string-width": "^5.1.2",
- "string-width-cjs": "npm:string-width@^4.2.0",
- "strip-ansi": "^7.0.1",
- "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
- "wrap-ansi": "^8.1.0",
- "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
- },
- "engines": {
- "node": ">=12"
- }
- },
- "node_modules/jackspeak/node_modules/ansi-regex": {
- "version": "5.0.1",
- "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
- "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/jackspeak/node_modules/ansi-styles": {
- "version": "4.3.0",
- "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
- "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
- "license": "MIT",
- "dependencies": {
- "color-convert": "^2.0.1"
- },
- "engines": {
- "node": ">=8"
- },
- "funding": {
- "url": "https://github.com/chalk/ansi-styles?sponsor=1"
- }
- },
- "node_modules/jackspeak/node_modules/emoji-regex": {
- "version": "8.0.0",
- "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
- "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
- "license": "MIT"
- },
- "node_modules/jackspeak/node_modules/wrap-ansi-cjs": {
- "name": "wrap-ansi",
- "version": "7.0.0",
- "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
- "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
- "license": "MIT",
- "dependencies": {
- "ansi-styles": "^4.0.0",
- "string-width": "^4.1.0",
- "strip-ansi": "^6.0.0"
- },
- "engines": {
- "node": ">=10"
- },
- "funding": {
- "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
- }
- },
- "node_modules/jackspeak/node_modules/wrap-ansi-cjs/node_modules/string-width": {
- "version": "4.2.3",
- "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
- "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
- "license": "MIT",
- "dependencies": {
- "emoji-regex": "^8.0.0",
- "is-fullwidth-code-point": "^3.0.0",
- "strip-ansi": "^6.0.1"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/jackspeak/node_modules/wrap-ansi-cjs/node_modules/strip-ansi": {
- "version": "6.0.1",
- "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
- "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
- "license": "MIT",
- "dependencies": {
- "ansi-regex": "^5.0.1"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/keygrip": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/keygrip/-/keygrip-1.1.0.tgz",
- "integrity": "sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==",
- "license": "MIT",
- "dependencies": {
- "tsscmp": "1.0.6"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/lie": {
- "version": "3.1.1",
- "resolved": "https://registry.npmjs.org/lie/-/lie-3.1.1.tgz",
- "integrity": "sha512-RiNhHysUjhrDQntfYSfY4MU24coXXdEOgw9WGcKHNeEwffDYbF//u87M1EWaMGzuFoSbqW0C9C6lEEhDOAswfw==",
- "license": "MIT",
- "dependencies": {
- "immediate": "~3.0.5"
- }
- },
- "node_modules/localforage": {
- "version": "1.10.0",
- "resolved": "https://registry.npmjs.org/localforage/-/localforage-1.10.0.tgz",
- "integrity": "sha512-14/H1aX7hzBBmmh7sGPd+AOMkkIrHM3Z1PAyGgZigA1H1p5O5ANnMyWzvpAETtG68/dC4pC0ncy3+PPGzXZHPg==",
- "license": "Apache-2.0",
- "dependencies": {
- "lie": "3.1.1"
- }
- },
- "node_modules/lodash": {
- "version": "4.17.21",
- "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
- "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
- "license": "MIT"
- },
- "node_modules/lru-cache": {
- "version": "10.4.3",
- "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
- "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
- "license": "ISC"
- },
- "node_modules/math-intrinsics": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
- "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/media-typer": {
- "version": "0.3.0",
- "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
- "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/merge-descriptors": {
- "version": "1.0.3",
- "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
- "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
- "license": "MIT",
- "funding": {
- "url": "https://github.com/sponsors/sindresorhus"
- }
- },
- "node_modules/methods": {
- "version": "1.1.2",
- "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
- "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/mime": {
- "version": "1.6.0",
- "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
- "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
- "license": "MIT",
- "bin": {
- "mime": "cli.js"
- },
- "engines": {
- "node": ">=4"
- }
- },
- "node_modules/mime-db": {
- "version": "1.53.0",
- "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.53.0.tgz",
- "integrity": "sha512-oHlN/w+3MQ3rba9rqFr6V/ypF10LSkdwUysQL7GkXoTgIWeV+tcXGA852TBxH+gsh8UWoyhR1hKcoMJTuWflpg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/mime-types": {
- "version": "2.1.35",
- "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
- "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
- "license": "MIT",
- "dependencies": {
- "mime-db": "1.52.0"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/mime-types/node_modules/mime-db": {
- "version": "1.52.0",
- "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
- "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/minimatch": {
- "version": "9.0.5",
- "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
- "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
- "license": "ISC",
- "dependencies": {
- "brace-expansion": "^2.0.1"
- },
- "engines": {
- "node": ">=16 || 14 >=14.17"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
- "node_modules/minimist": {
- "version": "1.2.8",
- "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
- "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
- "license": "MIT",
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/minipass": {
- "version": "7.1.2",
- "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
- "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==",
- "license": "ISC",
- "engines": {
- "node": ">=16 || 14 >=14.17"
- }
- },
- "node_modules/ms": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
- "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
- "license": "MIT"
- },
- "node_modules/multiparty": {
- "version": "4.2.3",
- "resolved": "https://registry.npmjs.org/multiparty/-/multiparty-4.2.3.tgz",
- "integrity": "sha512-Ak6EUJZuhGS8hJ3c2fY6UW5MbkGUPMBEGd13djUzoY/BHqV/gTuFWtC6IuVA7A2+v3yjBS6c4or50xhzTQZImQ==",
- "license": "MIT",
- "dependencies": {
- "http-errors": "~1.8.1",
- "safe-buffer": "5.2.1",
- "uid-safe": "2.1.5"
- },
- "engines": {
- "node": ">= 0.10"
- }
- },
- "node_modules/multiparty/node_modules/depd": {
- "version": "1.1.2",
- "resolved": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz",
- "integrity": "sha512-7emPTl6Dpo6JRXOXjLRxck+FlLRX5847cLKEn00PLAgc3g2hTZZgr+e4c2v6QpSmLeFP3n5yUo7ft6avBK/5jQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/multiparty/node_modules/http-errors": {
- "version": "1.8.1",
- "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-1.8.1.tgz",
- "integrity": "sha512-Kpk9Sm7NmI+RHhnj6OIWDI1d6fIoFAtFt9RLaTMRlg/8w49juAStsrBgp0Dp4OdxdVbRIeKhtCUvoi/RuAhO4g==",
- "license": "MIT",
- "dependencies": {
- "depd": "~1.1.2",
- "inherits": "2.0.4",
- "setprototypeof": "1.2.0",
- "statuses": ">= 1.5.0 < 2",
- "toidentifier": "1.0.1"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/multiparty/node_modules/statuses": {
- "version": "1.5.0",
- "resolved": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz",
- "integrity": "sha512-OpZ3zP+jT1PI7I8nemJX4AKmAX070ZkYPVWV/AaKTJl+tXCTGyVdC1a4SL8RUQYEwk/f34ZX8UTykN68FwrqAA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/negotiator": {
- "version": "0.6.4",
- "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.4.tgz",
- "integrity": "sha512-myRT3DiWPHqho5PrJaIRyaMv2kgYf0mUVgBNOYMuCH5Ki1yEiQaf/ZJuQ62nvpc44wL5WDbTX7yGJi1Neevw8w==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/neo-async": {
- "version": "2.6.2",
- "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
- "integrity": "sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==",
- "license": "MIT"
- },
- "node_modules/node-forge": {
- "version": "1.3.1",
- "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.3.1.tgz",
- "integrity": "sha512-dPEtOeMvF9VMcYV/1Wb8CPoVAXtp6MKMlcbAt4ddqmGqUJ6fQZFXkNZNkNlfevtNkGtaSoXf/vNNNSvgrdXwtA==",
- "license": "(BSD-3-Clause OR GPL-2.0)",
- "engines": {
- "node": ">= 6.13.0"
- }
- },
- "node_modules/nofilter": {
- "version": "1.0.4",
- "resolved": "https://registry.npmjs.org/nofilter/-/nofilter-1.0.4.tgz",
- "integrity": "sha512-N8lidFp+fCz+TD51+haYdbDGrcBWwuHX40F5+z0qkUjMJ5Tp+rdSuAkMJ9N9eoolDlEVTf6u5icM+cNKkKW2mA==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/normalize-path": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
- "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==",
- "license": "MIT",
- "engines": {
- "node": ">=0.10.0"
- }
- },
- "node_modules/object-inspect": {
- "version": "1.13.3",
- "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.3.tgz",
- "integrity": "sha512-kDCGIbxkDSXE3euJZZXzc6to7fCrKHNI/hSRQnRuQ+BWjFNzZwiFF8fj/6o2t2G9/jTj8PSIYTfCLelLZEeRpA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/on-finished": {
- "version": "2.4.1",
- "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
- "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
- "license": "MIT",
- "dependencies": {
- "ee-first": "1.1.1"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/on-headers": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz",
- "integrity": "sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/package-json-from-dist": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
- "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==",
- "license": "BlueOak-1.0.0"
- },
- "node_modules/parseurl": {
- "version": "1.3.3",
- "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
- "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/path-key": {
- "version": "3.1.1",
- "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
- "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/path-scurry": {
- "version": "1.11.1",
- "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
- "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==",
- "license": "BlueOak-1.0.0",
- "dependencies": {
- "lru-cache": "^10.2.0",
- "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
- },
- "engines": {
- "node": ">=16 || 14 >=14.18"
- },
- "funding": {
- "url": "https://github.com/sponsors/isaacs"
- }
- },
- "node_modules/path-to-regexp": {
- "version": "0.1.12",
- "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
- "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
- "license": "MIT"
- },
- "node_modules/pend": {
- "version": "1.2.0",
- "resolved": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz",
- "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==",
- "license": "MIT"
- },
- "node_modules/possible-typed-array-names": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.0.0.tgz",
- "integrity": "sha512-d7Uw+eZoloe0EHDIYoe+bQ5WXnGMOpmiZFTuMWCwpjzzkL2nTjcKiAk4hh8TjnGye2TwWOk3UXucZ+3rbmBa8Q==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/process": {
- "version": "0.11.10",
- "resolved": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
- "integrity": "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6.0"
- }
- },
- "node_modules/process-nextick-args": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
- "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
- "license": "MIT"
- },
- "node_modules/proxy-addr": {
- "version": "2.0.7",
- "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
- "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
- "license": "MIT",
- "dependencies": {
- "forwarded": "0.2.0",
- "ipaddr.js": "1.9.1"
- },
- "engines": {
- "node": ">= 0.10"
- }
- },
- "node_modules/qs": {
- "version": "6.13.0",
- "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
- "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
- "license": "BSD-3-Clause",
- "dependencies": {
- "side-channel": "^1.0.6"
- },
- "engines": {
- "node": ">=0.6"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/queue-tick": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/queue-tick/-/queue-tick-1.0.1.tgz",
- "integrity": "sha512-kJt5qhMxoszgU/62PLP1CJytzd2NKetjSRnyuj31fDd3Rlcz3fzlFdFLD1SItunPwyqEOkca6GbV612BWfaBag==",
- "license": "MIT"
- },
- "node_modules/random-bytes": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz",
- "integrity": "sha512-iv7LhNVO047HzYR3InF6pUcUsPQiHTM1Qal51DcGSuZFBil1aBBWG5eHPNek7bvILMaYJ/8RU1e8w1AMdHmLQQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/range-parser": {
- "version": "1.2.1",
- "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
- "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/raw-body": {
- "version": "2.5.2",
- "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
- "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
- "license": "MIT",
- "dependencies": {
- "bytes": "3.1.2",
- "http-errors": "2.0.0",
- "iconv-lite": "0.4.24",
- "unpipe": "1.0.0"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/safe-buffer": {
- "version": "5.2.1",
- "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
- "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
- "funding": [
- {
- "type": "github",
- "url": "https://github.com/sponsors/feross"
- },
- {
- "type": "patreon",
- "url": "https://www.patreon.com/feross"
- },
- {
- "type": "consulting",
- "url": "https://feross.org/support"
- }
- ],
- "license": "MIT"
- },
- "node_modules/safer-buffer": {
- "version": "2.1.2",
- "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
- "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
- "license": "MIT"
- },
- "node_modules/send": {
- "version": "0.19.0",
- "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz",
- "integrity": "sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==",
- "license": "MIT",
- "dependencies": {
- "debug": "2.6.9",
- "depd": "2.0.0",
- "destroy": "1.2.0",
- "encodeurl": "~1.0.2",
- "escape-html": "~1.0.3",
- "etag": "~1.8.1",
- "fresh": "0.5.2",
- "http-errors": "2.0.0",
- "mime": "1.6.0",
- "ms": "2.1.3",
- "on-finished": "2.4.1",
- "range-parser": "~1.2.1",
- "statuses": "2.0.1"
- },
- "engines": {
- "node": ">= 0.8.0"
- }
- },
- "node_modules/send/node_modules/encodeurl": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
- "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/send/node_modules/ms": {
- "version": "2.1.3",
- "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
- "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
- "license": "MIT"
- },
- "node_modules/serve-static": {
- "version": "1.16.2",
- "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz",
- "integrity": "sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==",
- "license": "MIT",
- "dependencies": {
- "encodeurl": "~2.0.0",
- "escape-html": "~1.0.3",
- "parseurl": "~1.3.3",
- "send": "0.19.0"
- },
- "engines": {
- "node": ">= 0.8.0"
- }
- },
- "node_modules/set-function-length": {
- "version": "1.2.2",
- "resolved": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz",
- "integrity": "sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==",
- "license": "MIT",
- "dependencies": {
- "define-data-property": "^1.1.4",
- "es-errors": "^1.3.0",
- "function-bind": "^1.1.2",
- "get-intrinsic": "^1.2.4",
- "gopd": "^1.0.1",
- "has-property-descriptors": "^1.0.2"
- },
- "engines": {
- "node": ">= 0.4"
- }
- },
- "node_modules/setprototypeof": {
- "version": "1.2.0",
- "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
- "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
- "license": "ISC"
- },
- "node_modules/shebang-command": {
- "version": "2.0.0",
- "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
- "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
- "license": "MIT",
- "dependencies": {
- "shebang-regex": "^3.0.0"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/shebang-regex": {
- "version": "3.0.0",
- "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
- "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/side-channel": {
- "version": "1.1.0",
- "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
- "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
- "license": "MIT",
- "dependencies": {
- "es-errors": "^1.3.0",
- "object-inspect": "^1.13.3",
- "side-channel-list": "^1.0.0",
- "side-channel-map": "^1.0.1",
- "side-channel-weakmap": "^1.0.2"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/side-channel-list": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
- "integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
- "license": "MIT",
- "dependencies": {
- "es-errors": "^1.3.0",
- "object-inspect": "^1.13.3"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/side-channel-map": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
- "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
- "license": "MIT",
- "dependencies": {
- "call-bound": "^1.0.2",
- "es-errors": "^1.3.0",
- "get-intrinsic": "^1.2.5",
- "object-inspect": "^1.13.3"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/side-channel-weakmap": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
- "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
- "license": "MIT",
- "dependencies": {
- "call-bound": "^1.0.2",
- "es-errors": "^1.3.0",
- "get-intrinsic": "^1.2.5",
- "object-inspect": "^1.13.3",
- "side-channel-map": "^1.0.1"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/source-map": {
- "version": "0.6.1",
- "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
- "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
- "license": "BSD-3-Clause",
- "engines": {
- "node": ">=0.10.0"
- }
- },
- "node_modules/statuses": {
- "version": "2.0.1",
- "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
- "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/streamx": {
- "version": "2.21.1",
- "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.21.1.tgz",
- "integrity": "sha512-PhP9wUnFLa+91CPy3N6tiQsK+gnYyUNuk15S3YG/zjYE7RuPeCjJngqnzpC31ow0lzBHQ+QGO4cNJnd0djYUsw==",
- "license": "MIT",
- "dependencies": {
- "fast-fifo": "^1.3.2",
- "queue-tick": "^1.0.1",
- "text-decoder": "^1.1.0"
- },
- "optionalDependencies": {
- "bare-events": "^2.2.0"
- }
- },
- "node_modules/string_decoder": {
- "version": "1.3.0",
- "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
- "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
- "license": "MIT",
- "dependencies": {
- "safe-buffer": "~5.2.0"
- }
- },
- "node_modules/string-width": {
- "version": "5.1.2",
- "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
- "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
- "license": "MIT",
- "dependencies": {
- "eastasianwidth": "^0.2.0",
- "emoji-regex": "^9.2.2",
- "strip-ansi": "^7.0.1"
- },
- "engines": {
- "node": ">=12"
- },
- "funding": {
- "url": "https://github.com/sponsors/sindresorhus"
- }
- },
- "node_modules/string-width-cjs": {
- "name": "string-width",
- "version": "4.2.3",
- "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
- "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
- "license": "MIT",
- "dependencies": {
- "emoji-regex": "^8.0.0",
- "is-fullwidth-code-point": "^3.0.0",
- "strip-ansi": "^6.0.1"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/string-width-cjs/node_modules/ansi-regex": {
- "version": "5.0.1",
- "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
- "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/string-width-cjs/node_modules/emoji-regex": {
- "version": "8.0.0",
- "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
- "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
- "license": "MIT"
- },
- "node_modules/string-width-cjs/node_modules/strip-ansi": {
- "version": "6.0.1",
- "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
- "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
- "license": "MIT",
- "dependencies": {
- "ansi-regex": "^5.0.1"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/strip-ansi": {
- "version": "7.1.0",
- "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
- "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
- "license": "MIT",
- "dependencies": {
- "ansi-regex": "^6.0.1"
- },
- "engines": {
- "node": ">=12"
- },
- "funding": {
- "url": "https://github.com/chalk/strip-ansi?sponsor=1"
- }
- },
- "node_modules/strip-ansi-cjs": {
- "name": "strip-ansi",
- "version": "6.0.1",
- "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
- "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
- "license": "MIT",
- "dependencies": {
- "ansi-regex": "^5.0.1"
- },
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/strip-ansi-cjs/node_modules/ansi-regex": {
- "version": "5.0.1",
- "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
- "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
- "license": "MIT",
- "engines": {
- "node": ">=8"
- }
- },
- "node_modules/tar-stream": {
- "version": "3.1.7",
- "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-3.1.7.tgz",
- "integrity": "sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ==",
- "license": "MIT",
- "dependencies": {
- "b4a": "^1.6.4",
- "fast-fifo": "^1.2.0",
- "streamx": "^2.15.0"
- }
- },
- "node_modules/text-decoder": {
- "version": "1.2.3",
- "resolved": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.3.tgz",
- "integrity": "sha512-3/o9z3X0X0fTupwsYvR03pJ/DjWuqqrfwBgTQzdWDiQSm9KitAyz/9WqsT2JQW7KV2m+bC2ol/zqpW37NHxLaA==",
- "license": "Apache-2.0",
- "dependencies": {
- "b4a": "^1.6.4"
- }
- },
- "node_modules/toidentifier": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
- "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
- "license": "MIT",
- "engines": {
- "node": ">=0.6"
- }
- },
- "node_modules/tsscmp": {
- "version": "1.0.6",
- "resolved": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.6.tgz",
- "integrity": "sha512-LxhtAkPDTkVCMQjt2h6eBVY28KCjikZqZfMcC15YBeNjkgUpdCfBu5HoiOTDu86v6smE8yOjyEktJ8hlbANHQA==",
- "license": "MIT",
- "engines": {
- "node": ">=0.6.x"
- }
- },
- "node_modules/type-is": {
- "version": "1.6.18",
- "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
- "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
- "license": "MIT",
- "dependencies": {
- "media-typer": "0.3.0",
- "mime-types": "~2.1.24"
- },
- "engines": {
- "node": ">= 0.6"
- }
- },
- "node_modules/ua-parser-js": {
- "version": "1.0.39",
- "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.39.tgz",
- "integrity": "sha512-k24RCVWlEcjkdOxYmVJgeD/0a1TiSpqLg+ZalVGV9lsnr4yqu0w7tX/x2xX6G4zpkgQnRf89lxuZ1wsbjXM8lw==",
- "funding": [
- {
- "type": "opencollective",
- "url": "https://opencollective.com/ua-parser-js"
- },
- {
- "type": "paypal",
- "url": "https://paypal.me/faisalman"
- },
- {
- "type": "github",
- "url": "https://github.com/sponsors/faisalman"
- }
- ],
- "license": "MIT",
- "bin": {
- "ua-parser-js": "script/cli.js"
- },
- "engines": {
- "node": "*"
- }
- },
- "node_modules/uglify-js": {
- "version": "3.19.3",
- "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz",
- "integrity": "sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==",
- "license": "BSD-2-Clause",
- "optional": true,
- "bin": {
- "uglifyjs": "bin/uglifyjs"
- },
- "engines": {
- "node": ">=0.8.0"
- }
- },
- "node_modules/uid-safe": {
- "version": "2.1.5",
- "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz",
- "integrity": "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==",
- "license": "MIT",
- "dependencies": {
- "random-bytes": "~1.0.0"
- },
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/unpipe": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
- "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/util": {
- "version": "0.12.5",
- "resolved": "https://registry.npmjs.org/util/-/util-0.12.5.tgz",
- "integrity": "sha512-kZf/K6hEIrWHI6XqOFUiiMa+79wE/D8Q+NCNAWclkyg3b4d2k7s0QGepNjiABc+aR3N1PAyHL7p6UcLY6LmrnA==",
- "license": "MIT",
- "dependencies": {
- "inherits": "^2.0.3",
- "is-arguments": "^1.0.4",
- "is-generator-function": "^1.0.7",
- "is-typed-array": "^1.1.3",
- "which-typed-array": "^1.1.2"
- }
- },
- "node_modules/util-deprecate": {
- "version": "1.0.2",
- "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
- "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
- "license": "MIT"
- },
- "node_modules/utils-merge": {
- "version": "1.0.1",
- "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
- "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.4.0"
- }
- },
- "node_modules/vary": {
- "version": "1.1.2",
- "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
- "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
- "license": "MIT",
- "engines": {
- "node": ">= 0.8"
- }
- },
- "node_modules/which": {
- "version": "2.0.2",
- "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
- "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
- "license": "ISC",
- "dependencies": {
- "isexe": "^2.0.0"
- },
- "bin": {
- "node-which": "bin/node-which"
- },
- "engines": {
- "node": ">= 8"
- }
- },
- "node_modules/which-typed-array": {
- "version": "1.1.18",
- "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.18.tgz",
- "integrity": "sha512-qEcY+KJYlWyLH9vNbsr6/5j59AXk5ni5aakf8ldzBvGde6Iz4sxZGkJyWSAueTG7QhOvNRYb1lDdFmL5Td0QKA==",
- "license": "MIT",
- "dependencies": {
- "available-typed-arrays": "^1.0.7",
- "call-bind": "^1.0.8",
- "call-bound": "^1.0.3",
- "for-each": "^0.3.3",
- "gopd": "^1.2.0",
- "has-tostringtag": "^1.0.2"
- },
- "engines": {
- "node": ">= 0.4"
- },
- "funding": {
- "url": "https://github.com/sponsors/ljharb"
- }
- },
- "node_modules/wordwrap": {
- "version": "1.0.0",
- "resolved": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
- "integrity": "sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==",
- "license": "MIT"
- },
- "node_modules/wrap-ansi": {
- "version": "8.1.0",
- "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
- "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
- "license": "MIT",
- "dependencies": {
- "ansi-styles": "^6.1.0",
- "string-width": "^5.0.1",
- "strip-ansi": "^7.0.1"
- },
- "engines": {
- "node": ">=12"
- },
- "funding": {
- "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
- }
- },
- "node_modules/ws": {
- "version": "8.18.0",
- "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
- "integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
- "license": "MIT",
- "engines": {
- "node": ">=10.0.0"
- },
- "peerDependencies": {
- "bufferutil": "^4.0.1",
- "utf-8-validate": ">=5.0.2"
- },
- "peerDependenciesMeta": {
- "bufferutil": {
- "optional": true
- },
- "utf-8-validate": {
- "optional": true
- }
- }
- },
- "node_modules/yauzl": {
- "version": "2.10.0",
- "resolved": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz",
- "integrity": "sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==",
- "license": "MIT",
- "dependencies": {
- "buffer-crc32": "~0.2.3",
- "fd-slicer": "~1.1.0"
- }
- },
- "node_modules/yauzl/node_modules/buffer-crc32": {
- "version": "0.2.13",
- "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
- "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==",
- "license": "MIT",
- "engines": {
- "node": "*"
- }
- },
- "node_modules/zip-stream": {
- "version": "6.0.1",
- "resolved": "https://registry.npmjs.org/zip-stream/-/zip-stream-6.0.1.tgz",
- "integrity": "sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA==",
- "license": "MIT",
- "dependencies": {
- "archiver-utils": "^5.0.0",
- "compress-commons": "^6.0.2",
- "readable-stream": "^4.0.0"
- },
- "engines": {
- "node": ">= 14"
- }
- },
- "node_modules/zip-stream/node_modules/compress-commons": {
- "version": "6.0.2",
- "resolved": "https://registry.npmjs.org/compress-commons/-/compress-commons-6.0.2.tgz",
- "integrity": "sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg==",
- "license": "MIT",
- "dependencies": {
- "crc-32": "^1.2.0",
- "crc32-stream": "^6.0.0",
- "is-stream": "^2.0.1",
- "normalize-path": "^3.0.0",
- "readable-stream": "^4.0.0"
- },
- "engines": {
- "node": ">= 14"
- }
- },
- "node_modules/zip-stream/node_modules/readable-stream": {
- "version": "4.6.0",
- "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.6.0.tgz",
- "integrity": "sha512-cbAdYt0VcnpN2Bekq7PU+k363ZRsPwJoEEJOEtSJQlJXzwaxt3FIo/uL+KeDSGIjJqtkwyge4KQgD2S2kd+CQw==",
- "license": "MIT",
- "dependencies": {
- "abort-controller": "^3.0.0",
- "buffer": "^6.0.3",
- "events": "^3.3.0",
- "process": "^0.11.10",
- "string_decoder": "^1.3.0"
- },
- "engines": {
- "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
- }
- }
- }
-}
diff --git a/package.json b/package.json
index 78cd22bb..41a23901 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
{
"name": "meshcentral",
- "version": "1.1.42",
+ "version": "1.0.44",
"keywords": [
"Remote Device Management",
"Remote Device Monitoring",
@@ -37,25 +37,24 @@
"sample-config-advanced.json"
],
"dependencies": {
- "@seald-io/nedb": "4.0.4",
- "archiver": "7.0.1",
- "body-parser": "1.20.3",
- "cbor": "5.2.0",
- "compression": "1.7.5",
- "cookie-session": "2.1.0",
- "express": "4.21.2",
- "express-handlebars": "7.1.3",
- "express-ws": "5.0.2",
- "ipcheck": "0.1.0",
- "minimist": "1.2.8",
- "multiparty": "4.2.3",
- "node-forge": "1.3.1",
- "ua-parser-js": "1.0.39",
- "ws": "8.18.0",
- "yauzl": "2.10.0"
+ "archiver": "^5.3.1",
+ "body-parser": "^1.19.0",
+ "cbor": "~5.2.0",
+ "compression": "^1.7.4",
+ "cookie-session": "^1.4.0",
+ "express": "^4.17.0",
+ "express-handlebars": "^5.3.5",
+ "express-ws": "^4.0.0",
+ "ipcheck": "^0.1.0",
+ "minimist": "^1.2.5",
+ "multiparty": "^4.2.1",
+ "@yetzt/nedb": "^1.8.0",
+ "node-forge": "^1.0.0",
+ "ws": "^5.2.3",
+ "yauzl": "^2.10.0"
},
"engines": {
- "node": ">=16.0.0"
+ "node": ">=10.0.0"
},
"repository": {
"type": "git",
diff --git a/pluginHandler.js b/pluginHandler.js
index 47c2a42d..83138a4c 100644
--- a/pluginHandler.js
+++ b/pluginHandler.js
@@ -139,7 +139,7 @@ module.exports.pluginHandler = function (parent) {
try {
obj.plugins[p][hookName](...args);
} catch (e) {
- console.log("Error occurred while running plugin hook " + p + ':' + hookName, e);
+ console.log("Error ocurred while running plugin hook" + p + ':' + hookName + ' (' + e + ')');
}
}
}
@@ -205,7 +205,7 @@ module.exports.pluginHandler = function (parent) {
panel[p].header = obj.plugins[p].on_device_header();
panel[p].content = obj.plugins[p].on_device_page();
} catch (e) {
- console.log("Error occurred while getting plugin views " + p + ':' + ' (' + e + ')');
+ console.log("Error ocurred while getting plugin views " + p + ':' + ' (' + e + ')');
}
}
}
@@ -364,7 +364,7 @@ module.exports.pluginHandler = function (parent) {
if (force_url != null) dl_url = force_url;
var url = require('url');
var q = url.parse(dl_url, true);
- var http = (q.protocol == "http:") ? require('http') : require('https');
+ var http = (q.protocol == "http") ? require('http') : require('https');
var opts = {
path: q.pathname,
host: q.hostname,
@@ -409,13 +409,7 @@ module.exports.pluginHandler = function (parent) {
zipfile.openReadStream(entry, function (err, readStream) {
if (err) throw err;
readStream.on('end', function () { zipfile.readEntry(); });
- if (process.platform == 'win32') {
- readStream.pipe(obj.fs.createWriteStream(filePath));
- } else {
- var fileMode = (entry.externalFileAttributes >> 16) & 0x0fff;
- if( fileMode <= 0 ) fileMode = 0o644;
- readStream.pipe(obj.fs.createWriteStream(filePath, { mode: fileMode }));
- }
+ readStream.pipe(obj.fs.createWriteStream(filePath));
});
}
});
@@ -457,7 +451,7 @@ module.exports.pluginHandler = function (parent) {
if (plugin.versionHistoryUrl == null) reject("No version history available for this plugin.");
var url = require('url');
var q = url.parse(plugin.versionHistoryUrl, true);
- var http = (q.protocol == 'http:') ? require('http') : require('https');
+ var http = (q.protocol == 'http') ? require('http') : require('https');
var opts = {
path: q.pathname,
host: q.hostname,
@@ -541,4 +535,4 @@ module.exports.pluginHandler = function (parent) {
}
}
return obj;
-};
+};
\ No newline at end of file
diff --git a/plugin_development.md b/plugin_development.md
new file mode 100644
index 00000000..f93066fe
--- /dev/null
+++ b/plugin_development.md
@@ -0,0 +1,92 @@
+# Plugin Development
+
+## Overview
+
+## Anatomy of a plugin:
+
+ - plugin_name/
+ -- config.json
+ -- plugin_name.js
+ -- modules_meshcore/ // optional
+ --- plugin_name.js // optional
+
+## Plugin Configuration File
+A valid JSON object within a file named `config.json` in the root folder of your project. An example:
+
+ {
+ "name": "Plugin Name",
+ "shortName": "plugin_name",
+ "version": "0.0.0",
+ "author": "Author Name",
+ "description": "Short Description of the plugin",
+ "hasAdminPanel": false,
+ "homepage": "https://www.example.com",
+ "changelogUrl": "https://raw.githubusercontent.com/User/Project/master/changelog.md",
+ "configUrl": "https://raw.githubusercontent.com/User/Project/master/config.json",
+ "downloadUrl": "https://github.com/User/Project/archive/master.zip",
+ "repository": {
+ "type": "git",
+ "url": "https://github.com/User/Project.git"
+ },
+ "versionHistoryUrl": "https://api.github.com/repos/User/Project/tags",
+ "meshCentralCompat": ">0.4.3"
+ }
+
+## Configuration File Properties
+| Field | Required | Type | Description
+|--|--|--|--|
+| name | Yes | string | a human-readable name for the plugin
+| shortName | Yes | string | an alphanumeric, unique short identifier for the plugin (will be used to access your functions throughout the project
+| version | Yes | string | the current version of the plugin
+| author | No | string | the author's name
+| description | Yes | string | a short, human-readable description of what the plugin does
+| hasAdminPanel | Yes | boolean | `true` or `false`, indicates whether or not the plugin will offer its own administrative interface
+| homepage | Yes | string | the URL of the projects homepage
+| changelogUrl | Yes | string | the URL to the changelog of the project
+| configUrl | Yes | string | the URL to the config.json of the project
+| downloadUrl | Yes | string | the URL to a ZIP of the project (used for installation/upgrades)
+| repository | Yes | JSON object | contains the following attributes
+| repository.type | Yes | string | valid values are `git` and in the future, `npm` will also be supported in the future
+| repository.url | Yes | string | the URL to the project's repository
+| versionHistoryUrl | No | string | the URL to the project's versions/tags
+| meshCentralCompat | Yes | string | the minimum version string of required compatibility with the MeshCentral server, can be formatted as "0.1.2-c" or ">=0.1.2-c". Currently only supports minimum version, not full semantic checking.
+
+## Plugin Hooks
+These are separated into the following categories depending on the type of functionality the plugin should offer.
+
+- Web UI, to modify the MeshCentral admin interface
+- Back End, to modify core functionality of the server and communicate with the Web UI layer as well as the Mesh Agent (Node) layer to send commands and data
+- Mesh Agent (Node), to introduce functionality to each agent
+
+### Web UI Hooks
+`onDeviceRefreshEnd`: called when a device is selected in the MeshCentral web interface
+`registerPluginTab`: callable when a device is selected in the MeshCentral web interface to register a new tab for plugin data, if required. Accepts an object, or function that returns an object, with the following properties: { tabId: "yourShortNameHere", tabTitle: "Your Display Name"}. A tab and div with the associated ID and title will be created for your use
+`onDesktopDisconnect`: called when a remote desktop session is disconnected
+`onWebUIStartupEnd`: called when the page has loaded for the first time after a login / refresh
+`goPageStart`: called before page changes take effect. Passes 2 arguments ( : int, : Event)
+`goPageEnd`: called after page changes take effect. Passes 2 arguments ( : int, : Event)
+
+#### Exports
+Any function can be exported to the Web UI layer by adding the name of the function to an `exports` array in the plugin object.
+
+### Back End Hooks
+`server_startup`: called once when the server starts (or when the plugin is first installed)
+`hook_agentCoreIsStable`: called once when an agent initially checks in
+`hook_processAgentData`: called each time an agent transmits data back to the server
+`hook_userLoggedIn`: called when a user has logged into the web interface
+
+### Mesh Agent
+Use of the optional file `plugin_name.js` in the optional folder `modules_meshcore` will include the file in the default meshcore file sent to each endpoint. This is useful to add functionality on each of the endpoints.
+
+## Structure
+Much of MeshCentral revolves around returning objects for your structures, and plugins are no different. Within your plugin you can traverse all the way up to the web server and MeshCentral Server classes to access all the functionality those layers provide. This is done by passing the current object to newly created objects, and assigning that reference to a `parent` variable within that object.
+
+
+## Versioning
+Versioning your plugin correctly and consistently is essential to ensure users of your plugin are prompted to upgrade when it is available. Semantic versioning is recommended.
+
+## Changelog
+A changelog is highly recommended so that your users know what's changed since their last version.
+
+## Sample Plugin
+[MeshCentral-Sample](https://github.com/ryanblenis/MeshCentral-Sample) is a simple plugin that, upon disconnecting from remote desktop, prompts the user to enter a manual event (note), pre-filled in with the date and timestamp.
diff --git a/public/commander-de.htm b/public/commander-de.htm
index 91a57400..c618010f 100644
--- a/public/commander-de.htm
+++ b/public/commander-de.htm
@@ -12,106 +12,105 @@ function ObjectToStringEx2(b,c){var a="";if(0!=b&&(!b||null==b))return"(Null)";i
function ObjectToString2(b){return ObjectToStringEx2(b,0)}function hex2rstr(b){if("string"!=typeof b||0==b.length)return"";var c="";b=(""+b).match(/../g);for(var a;a=b.shift();)c+=String.fromCharCode("0x"+a);return c}function char2hex(b){return(b+256).toString(16).substr(-2).toUpperCase()}function rstr2hex(b){var c="",a;for(a=0;a>9)-1);b("DEV_FLOPPY",d);break;case 176:if(null==g.cdrom||0==g.cdrom.size)return g.SendCommandEndResponse(0,2,c,58,0),-1;null!=g.cdrom&&(d=(g.cdrom.size>>11)-1);b("DEV_CDDVD",d);break;default:return b("SCSI Internal error 4",c),-1}b("SCSI: READ_CAPACITY2",c,F);g.SendDataToHost(F,!0,IntToStr(d)+String.fromCharCode(0,0,176==c?8:2,0),u&1);break;case 40:F=ReadInt(d,2);d=ReadShort(d,7);b("SCSI: READ_10",
-c,F,d);a(c,F,d,u);break;case 42:case 46:F=ReadInt(d,2);d=ReadShort(d,7);b("SCSI: WRITE_10",c,F,d);g.SendGetDataFromHost(c,512*d);break;case 67:F=ReadShort(d,7);var H=d.charCodeAt(1)&2,N=d.charCodeAt(2)&7;0==N&&(N=d.charCodeAt(9)>>6);b("SCSI: READ_TOC, dev="+c+", buflen="+F+", msf="+H+", format="+N);switch(c){case 160:return g.SendCommandEndResponse(1,5,c,32,0),-1;case 176:break;default:return b("SCSI Internal error 9",c),-1}1==N?g.SendDataToHost(c,!0,String.fromCharCode(0,10,1,1,0,20,1,0,0,0,0,0),
-u&1):0==N&&(H?g.SendDataToHost(c,!0,String.fromCharCode(0,18,1,1,0,20,1,0,0,0,2,0,0,20,170,0,0,0,52,19),u&1):g.SendDataToHost(c,!0,String.fromCharCode(0,18,1,1,0,20,1,0,0,0,0,0,0,20,170,0,0,0,0,0),u&1));break;case 70:var N=2!=d.charCodeAt(1),v=ReadShort(d,2);F=ReadShort(d,7);b("SCSI: GET_CONFIGURATION",c,N,v,F);if(0==F)return g.SendDataToHost(c,!0,IntToStr(60)+IntToStr(8),u&1),-1;H=IntToStr(8);0==v&&(H+=m);if(1==v||N&&1>v)H+=k;if(2==v||N&&2>v)H+=h;if(3==v||N&&3>v)H+=r;if(16==v||N&&16>v)H+=K;if(30==
-v||N&&30>v)H+=B;if(256==v||N&&256>v)H+=x;if(261==v||N&&261>v)H+=A;H=IntToStr(H.length)+H;H.length>F&&(H=H.substring(0,F));g.SendDataToHost(c,!0,H,u&1);return-1;case 74:b("SCSI: GET_EVENT_STATUS_NOTIFICATION",c,d.charCodeAt(1),d.charCodeAt(4),d.charCodeAt(9));if(1!=d.charCodeAt(1)&&16!=d.charCodeAt(4)){b("SCSI ERROR");g.SendCommandEndResponse(1,5,c,38,1);break}d=0;160==c&&null!=g.floppy?d=2:176==c&&null!=g.cdrom&&(d=2);g.SendDataToHost(c,!0,String.fromCharCode(0,d,128,0),u&1);break;case 76:g.SendCommand(81,
-IntToStrX(0)+IntToStrX(0)+IntToStrX(0)+String.fromCharCode(135,80,3,0,0,0,176,81,5,32,0),!0);break;case 81:return b("SCSI READ_DISC_INFO",c),g.SendCommandEndResponse(0,5,c,32,0),-1;case 85:return b("SCSI ERROR: MODE_SELECT_10",c),g.SendCommandEndResponse(1,5,c,32,0),-1;case 90:b("SCSI: MODE_SENSE_10",c,d.charCodeAt(2)&63);F=ReadShort(d,7);H=null;if(0==F)return g.SendDataToHost(c,!0,IntToStr(60)+IntToStr(8),u&1),-1;F=0;160==c?null!=g.floppy&&(F=g.floppy.size>>9):null!=g.cdrom&&(F=g.cdrom.size>>11);
-switch(d.charCodeAt(2)&63){case 1:H=160==c?2880>=F?y:R:z;break;case 5:160==c&&(H=2880>=F?p:n);break;case 63:H=160==c?2880>=F?q:l:D;break;case 26:176==c&&(H=e);break;case 29:176==c&&(H=C);break;case 42:176==c&&(H=w)}null==H?g.SendCommandEndResponse(0,5,c,32,0):g.SendDataToHost(c,!0,H,u&1);break;case 81:g.SendDataToHost(c,!0,E,u&1);break;case 172:g.SendDataToHost(c,!0,O,u&1);break;default:return b("IDER: Unknown SCSI command",d.charCodeAt(0)),g.SendCommandEndResponse(0,5,c,32,0),-1}return 0}function a(a,
-b,x,e){var c=null,y=0;160==a&&(c=g.floppy,null!=g.floppy&&(y=g.floppy.size>>9));176==a&&(c=g.cdrom,null!=g.cdrom&&(y=g.cdrom.size>>11));if(0>x||b+x>y)return g.SendCommandEndResponse(1,5,a,33,0),0;if(0==x)return g.SendCommandEndResponse(1,0,a,0,0),0;null!=c&&(g.sectorStats&&g.sectorStats(1,160==a?0:1,y,b,x),160==a?(b<<=9,x<<=9):(b<<=11,x<<=11),null!==u?H.push({media:c,dev:a,lba:b,len:x,fr:e}):(u=c,T=a,P=b,F=x,d(e)))}function d(a){var b=F,x=P;F>g.iderinfo.readbfr&&(b=g.iderinfo.readbfr);F-=b;P+=b;var e=
-new FileReader;e.onload=function(){var b=this.result;"object"==typeof b&&(b=new Uint8Array(b),b=String.fromCharCode.apply(null,b));g.SendDataToHost(T,0==F,b,a&1);0>9:0),g.sectorStats(0,1,g.cdrom?g.cdrom.size>>11:0))};g.Stop=function(){b("IDER-Stop");g.parent.Stop()};g.ProcessData=function(a){g.bytesFromAmt+=a.length;g.acc+=a;null!=v&&
-v.write("IDERRECV: "+rstr2hex(a)+"\r\n");for(b("IDER-ProcessData",g.acc.length,rstr2hex(g.acc));;){a=g.ProcessDataEx();if(0==a)break;if(g.inSequence!=ReadIntX(g.acc,4)){b("ERROR: Out of sequence",g.inSequence,ReadIntX(g.acc,4));g.Stop();break}g.inSequence++;g.acc=g.acc.substring(a)}};g.SendCommand=function(a,x,e,c){null==x&&(x="");e=50>8,0,e?180:181,0,2,0,c&255,c>>8,a,88,133,0,3,0,0,0,a,80,0,0,0,0,0,0)+x,b,e):g.SendCommand(84,
-String.fromCharCode(0,x.length&255,x.length>>8,0,e?180:181,0,2,0,c&255,c>>8,a,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0)+x,b,e)};g.SendGetDataFromHost=function(a,b){g.SendCommand(82,String.fromCharCode(0,b&255,b>>8,0,181,0,0,0,b&255,b>>8,a,88,0,0,0,0,0,0,0,0,0,0,0),!1)};g.SendDisableEnableFeatures=function(a,b){null==b&&(b="");g.SendCommand(72,String.fromCharCode(a)+b)};g.ProcessDataEx=function(){if(8>g.acc.length)return 0;switch(g.acc.charCodeAt(0)){case 65:if(30>g.acc.length)break;var a=g.acc.charCodeAt(29);
-if(g.acc.length<30+a)break;g.iderinfo={};g.iderinfo.major=g.acc.charCodeAt(8);g.iderinfo.minor=g.acc.charCodeAt(9);g.iderinfo.fwmajor=g.acc.charCodeAt(10);g.iderinfo.fwminor=g.acc.charCodeAt(11);g.iderinfo.readbfr=ReadShortX(g.acc,16);g.iderinfo.writebfr=ReadShortX(g.acc,18);g.iderinfo.proto=g.acc.charCodeAt(21);g.iderinfo.iana=ReadIntX(g.acc,25);b(g.iderinfo);0!=g.iderinfo.proto&&(b("Unknown proto",g.iderinfo.proto),g.Stop());8192g.acc.length)break;a=g.acc.charCodeAt(8);null===u?(g.SendCommand(71),b("RESETOCCURED1",a)):(N=!0,b("RESETOCCURED2",
-a));return 9;case 73:if(13>g.acc.length)break;var a=g.acc.charCodeAt(8),x=ReadIntX(g.acc,9);b("STATUS_DATA",a,x);switch(a){case 1:x&1&&(0==g.iderStart?g.SendDisableEnableFeatures(3,IntToStrX(9)):1==g.iderStart?g.SendDisableEnableFeatures(3,IntToStrX(17)):2==g.iderStart&&g.SendDisableEnableFeatures(3,IntToStrX(25)));break;case 2:g.enabled=x&2?!0:!1;b("IDER Status: "+g.enabled);break;case 3:1!=x&&b("Register toggle failure")}return 13;case 74:if(11>g.acc.length)break;b("IDER: ABORT",g.acc.charCodeAt(8));
-return 11;case 75:return 8;case 80:if(28>g.acc.length)break;var a=g.acc.charCodeAt(14)&16?176:160,x=g.acc.charCodeAt(14),e=g.acc.substring(16,28),y=g.acc.charCodeAt(9);b("SCSI_CMD",a,rstr2hex(e),y,x);c(a,e,y,x);return 28;case 83:if(14>g.acc.length)break;a=ReadShortX(g.acc,9);if(g.acc.length<14+a)break;b("SCSI_WRITE, len = "+(14+a));g.SendCommand(81,String.fromCharCode(0,0,0,0,0,0,0,0,0,0,0,0,135,112,3,0,0,0,160,81,7,39,0),!0);return 14+a;default:b("Unknown IDER command",g.acc[0]),g.Stop()}return 0};
-var H=[],N=!1,u=null,T,P,F;return g},CreateAmtRemoteServerIder=function(){function b(){urlvars&&urlvars.idertrace&&console.log.apply(console,[].concat($jscomp.arrayFromArguments(arguments)))}var c={protocol:4,iderStart:0,floppy:null,cdrom:null,state:0,onStateChanged:null,m:{sectorStats:null,onDialogPrompt:null,dialogPrompt:function(a){c.socket.send(JSON.stringify({action:"dialogResponse",args:a}))},bytesToAmt:0,bytesFromAmt:0,server:!0,Stop:function(){c.Stop()}},xxStateChange:function(a){if(c.state!=
-a&&(b("SIDER-StateChange",a),c.state=a,null!=c.onStateChanged))c.onStateChanged(c,c.state)},Start:function(a,d,g,v,n){b("SIDER-Start",a,d,g,v,n);c.host=a;c.port=d;c.user=g;c.pass=v;c.connectstate=0;c.socket=new WebSocket(window.location.protocol.replace("http","ws")+"//"+window.location.host+window.location.pathname.substring(0,window.location.pathname.lastIndexOf("/"))+"/webider.ashx?host="+a+"&port="+d+"&tls="+n+("*"==g?"&serverauth=1":"")+("undefined"===typeof v?"&serverauth=1&user="+g:"")+"&tls1only="+
-c.tlsv1only);c.socket.onopen=c.xxOnSocketConnected;c.socket.onmessage=c.xxOnMessage;c.socket.onclose=c.xxOnSocketClosed;c.xxStateChange(1)},Stop:function(){b("SIDER-Stop");null!=c.socket&&(c.socket.close(),c.socket=null);c.xxStateChange(0)},xxOnSocketConnected:function(){c.xxStateChange(2);c.socket.send(JSON.stringify({action:"start"}))},xxOnMessage:function(a){var b=null;try{b=JSON.parse(a.data)}catch(g){}if(null!=b&&"string"==typeof b.action)switch(b.action){case "dialog":if(null!=c.m.onDialogPrompt)c.m.onDialogPrompt(c,
-b.args,b.buttons);break;case "state":2==b.state&&c.xxStateChange(3);break;case "stats":c.m.bytesToAmt=b.toAmt;c.m.bytesFromAmt=b.fromAmt;c.m.sectorStats&&c.m.sectorStats(b.mode,b.dev,b.total,b.start,b.len);break;case "error":console.log("IDER Error: "+";Floppy disk image does not exist;Invalid floppy disk image;Unable to open floppy disk image;CDROM disk image does not exist;Invalid CDROM disk image;Unable to open CDROM disk image;Can't perform IDER with no disk images".split(";")[b.code]);break;
-default:console.log("Unknown Server IDER action: "+b.action),breal}},xxOnSocketClosed:function(){c.Stop()}};return c},CreateWsmanComm=function(b,c,a,d,g){function v(a){return a.split(",").reduce(function(a,b){a.ic?a.st[a.st.length-1]+=","+b:a.st.push(b);0==b.split('"').length%2&&(a.ic=!a.ic);return a},{st:[],ic:!1}).st}function n(a){a="00000000"+a.toString(16);return a.substring(a.length-8)}function l(){e.socketState=2;e.socketParseState=0;e.socketAccumulator="";e.socketHeader=null;e.socketData="";
-for(i in e.pendingAjaxCall)e.sendRequest(e.pendingAjaxCall[i][0],e.pendingAjaxCall[i][3],e.pendingAjaxCall[i][4])}function p(a){var b=e.socketAccumulator;a=new Uint8Array(a.data);a=String.fromCharCode.apply(null,a);for(e.socketAccumulator=b+a;;){if(0==e.socketParseState){b=e.socketAccumulator.indexOf("\r\n\r\n");if(0>b)break;e.socketHeader=e.socketAccumulator.substring(0,b).split("\r\n");if(null==e.amtVersion)for(var c in e.socketHeader)0==e.socketHeader[c].indexOf("Server: Intel(R) Active Management Technology ")&&
+var CreateAmtRemoteIder=function(){function b(){urlvars&&urlvars.idertrace&&console.log(arguments)}function c(c,d,D,G){switch(d.charCodeAt(0)){case 0:b("SCSI: TEST_UNIT_READY",c);switch(c){case 160:if(null==g.floppy)return g.SendCommandEndResponse(1,2,c,58,0),-1;if(0==g.floppyReady)return g.floppyReady=!0,g.SendCommandEndResponse(1,6,c,40,0),-1;break;case 176:if(null==g.cdrom)return g.SendCommandEndResponse(1,2,c,58,0),-1;if(0==g.cdromReady)return g.cdromReady=!0,g.SendCommandEndResponse(1,6,c,40,
+0),-1;break;default:return b("SCSI Internal error 3",c),-1}g.SendCommandEndResponse(1,0,c,0,0);break;case 8:G=((d.charCodeAt(1)&31)<<16)+(d.charCodeAt(2)<<8)+d.charCodeAt(3);d=d.charCodeAt(4);0==d&&(d=256);b("SCSI: READ_6",c,G,d);a(c,G,d,D);break;case 10:return G=((d.charCodeAt(1)&31)<<16)+(d.charCodeAt(2)<<8)+d.charCodeAt(3),d=d.charCodeAt(4),0==d&&(d=256),b("SCSI: WRITE_6",c,G,d),g.SendCommandEndResponse(1,2,c,58,0),-1;case 26:b("SCSI: MODE_SENSE_6",c);if(63==d.charCodeAt(2)&&0==d.charCodeAt(3)){G=
+d=0;switch(c){case 160:if(null==g.floppy)return g.SendCommandEndResponse(1,2,c,58,0),-1;d=0;G=128;break;case 176:if(null==g.cdrom)return g.SendCommandEndResponse(1,2,c,58,0),-1;d=5;G=128;break;default:return b("SCSI Internal error 6",c),-1}g.SendDataToHost(c,!0,String.fromCharCode(0,d,G,0),D&1);return}g.SendCommandEndResponse(1,5,c,36,0);break;case 27:g.SendCommandEndResponse(1,0,c);break;case 30:b("SCSI: ALLOW_MEDIUM_REMOVAL",c);if(160==c&&null==g.floppy||176==c&&null==g.cdrom)return g.SendCommandEndResponse(1,
+2,c,58,0),-1;g.SendCommandEndResponse(1,0,c,0,0);break;case 35:b("SCSI: READ_FORMAT_CAPACITIES",c);G=ReadShort(d,7);switch(c){case 160:if(null==g.floppy||0==g.floppy.size)return g.SendCommandEndResponse(0,5,c,36,0),-1;break;case 176:if(null==g.cdrom||0==g.cdrom.size)return g.SendCommandEndResponse(0,5,c,36,0),-1;break;default:return b("SCSI Internal error 4",c),-1}g.SendDataToHost(c,!0,IntToStr(8)+String.fromCharCode(0,0,11,64,2,0,2,0),D&1);break;case 37:b("SCSI: READ_CAPACITY",c);d=0;switch(c){case 160:if(null==
+g.floppy||0==g.floppy.size)return g.SendCommandEndResponse(0,2,c,58,0),-1;null!=g.floppy&&(d=(g.floppy.size>>9)-1);b("DEV_FLOPPY",d);break;case 176:if(null==g.cdrom||0==g.cdrom.size)return g.SendCommandEndResponse(0,2,c,58,0),-1;null!=g.cdrom&&(d=(g.cdrom.size>>11)-1);b("DEV_CDDVD",d);break;default:return b("SCSI Internal error 4",c),-1}b("SCSI: READ_CAPACITY2",c,G);g.SendDataToHost(G,!0,IntToStr(d)+String.fromCharCode(0,0,176==c?8:2,0),D&1);break;case 40:G=ReadInt(d,2);d=ReadShort(d,7);b("SCSI: READ_10",
+c,G,d);a(c,G,d,D);break;case 42:case 46:G=ReadInt(d,2);d=ReadShort(d,7);b("SCSI: WRITE_10",c,G,d);g.SendGetDataFromHost(c,512*d);break;case 67:G=ReadShort(d,7);var q=d.charCodeAt(1)&2,J=d.charCodeAt(2)&7;0==J&&(J=d.charCodeAt(9)>>6);b("SCSI: READ_TOC, dev="+c+", buflen="+G+", msf="+q+", format="+J);switch(c){case 160:return g.SendCommandEndResponse(1,5,c,32,0),-1;case 176:break;default:return b("SCSI Internal error 9",c),-1}1==J?g.SendDataToHost(c,!0,String.fromCharCode(0,10,1,1,0,20,1,0,0,0,0,0),
+D&1):0==J&&(q?g.SendDataToHost(c,!0,String.fromCharCode(0,18,1,1,0,20,1,0,0,0,2,0,0,20,170,0,0,0,52,19),D&1):g.SendDataToHost(c,!0,String.fromCharCode(0,18,1,1,0,20,1,0,0,0,0,0,0,20,170,0,0,0,0,0),D&1));break;case 70:var J=2!=d.charCodeAt(1),P=ReadShort(d,2);G=ReadShort(d,7);b("SCSI: GET_CONFIGURATION",c,J,P,G);if(0==G)return g.SendDataToHost(c,!0,IntToStr(60)+IntToStr(8),D&1),-1;q=IntToStr(8);0==P&&(q+=m);if(1==P||J&&1>P)q+=l;if(2==P||J&&2>P)q+=h;if(3==P||J&&3>P)q+=r;if(16==P||J&&16>P)q+=O;if(30==
+P||J&&30>P)q+=C;if(256==P||J&&256>P)q+=x;if(261==P||J&&261>P)q+=z;q=IntToStr(q.length)+q;q.length>G&&(q=q.substring(0,G));g.SendDataToHost(c,!0,q,D&1);return-1;case 74:b("SCSI: GET_EVENT_STATUS_NOTIFICATION",c,d.charCodeAt(1),d.charCodeAt(4),d.charCodeAt(9));if(1!=d.charCodeAt(1)&&16!=d.charCodeAt(4)){b("SCSI ERROR");g.SendCommandEndResponse(1,5,c,38,1);break}d=0;160==c&&null!=g.floppy?d=2:176==c&&null!=g.cdrom&&(d=2);g.SendDataToHost(c,!0,String.fromCharCode(0,d,128,0),D&1);break;case 76:g.SendCommand(81,
+IntToStrX(0)+IntToStrX(0)+IntToStrX(0)+String.fromCharCode(135,80,3,0,0,0,176,81,5,32,0),!0);break;case 81:return b("SCSI READ_DISC_INFO",c),g.SendCommandEndResponse(0,5,c,32,0),-1;case 85:return b("SCSI ERROR: MODE_SELECT_10",c),g.SendCommandEndResponse(1,5,c,32,0),-1;case 90:b("SCSI: MODE_SENSE_10",c,d.charCodeAt(2)&63);G=ReadShort(d,7);q=null;if(0==G)return g.SendDataToHost(c,!0,IntToStr(60)+IntToStr(8),D&1),-1;G=0;160==c?null!=g.floppy&&(G=g.floppy.size>>9):null!=g.cdrom&&(G=g.cdrom.size>>11);
+switch(d.charCodeAt(2)&63){case 1:q=160==c?2880>=G?A:R:y;break;case 5:160==c&&(q=2880>=G?p:n);break;case 63:q=160==c?2880>=G?v:k:E;break;case 26:176==c&&(q=e);break;case 29:176==c&&(q=B);break;case 42:176==c&&(q=w)}null==q?g.SendCommandEndResponse(0,5,c,32,0):g.SendDataToHost(c,!0,q,D&1);break;default:return b("IDER: Unknown SCSI command",d.charCodeAt(0)),g.SendCommandEndResponse(0,5,c,32,0),-1}return 0}function a(a,b,x,e){var c=null,A=0;160==a&&(c=g.floppy,null!=g.floppy&&(A=g.floppy.size>>9));176==
+a&&(c=g.cdrom,null!=g.cdrom&&(A=g.cdrom.size>>11));if(0>x||b+x>A)return g.SendCommandEndResponse(1,5,a,33,0),0;if(0==x)return g.SendCommandEndResponse(1,0,a,0,0),0;null!=c&&(g.sectorStats&&g.sectorStats(1,160==a?0:1,A,b,x),160==a?(b<<=9,x<<=9):(b<<=11,x<<=11),null!==J?D.push({media:c,dev:a,lba:b,len:x,fr:e}):(J=c,P=a,q=b,N=x,d(e)))}function d(a){var b=N,x=q;N>g.iderinfo.readbfr&&(b=g.iderinfo.readbfr);N-=b;q+=b;var e=new FileReader;e.onload=function(){var b=this.result;"object"==typeof b&&(b=new Uint8Array(b),
+b=String.fromCharCode.apply(null,b));g.SendDataToHost(P,0==N,b,a&1);0>9:0),g.sectorStats(0,1,g.cdrom?g.cdrom.size>>11:0))};g.Stop=function(){b("IDER-Stop");g.parent.Stop()};g.ProcessData=function(a){g.bytesFromAmt+=a.length;g.acc+=a;null!=u&&u.write("IDERRECV: "+rstr2hex(a)+"\r\n");for(b("IDER-ProcessData",g.acc.length,rstr2hex(g.acc));;){a=g.ProcessDataEx();if(0==a)break;if(g.inSequence!=ReadIntX(g.acc,4)){b("ERROR: Out of sequence",g.inSequence,ReadIntX(g.acc,4));g.Stop();break}g.inSequence++;
+g.acc=g.acc.substring(a)}};g.SendCommand=function(a,x,e,c){null==x&&(x="");e=50>8,0,e?180:181,0,2,0,c&255,c>>8,a,88,133,0,3,0,0,0,a,80,0,0,0,0,0,0)+x,b,e):g.SendCommand(84,String.fromCharCode(0,x.length&255,x.length>>8,0,e?180:181,0,2,0,c&255,c>>8,a,88,0,0,0,0,0,0,0,0,0,0,0,0,0,0)+x,b,e)};g.SendGetDataFromHost=function(a,b){g.SendCommand(82,String.fromCharCode(0,b&255,b>>8,0,181,0,0,0,b&255,b>>8,a,88,0,0,0,0,0,0,0,0,0,0,0),
+!1)};g.SendDisableEnableFeatures=function(a,b){null==b&&(b="");g.SendCommand(72,String.fromCharCode(a)+b)};g.ProcessDataEx=function(){if(8>g.acc.length)return 0;switch(g.acc.charCodeAt(0)){case 65:if(30>g.acc.length)break;var a=g.acc.charCodeAt(29);if(g.acc.length<30+a)break;g.iderinfo={};g.iderinfo.major=g.acc.charCodeAt(8);g.iderinfo.minor=g.acc.charCodeAt(9);g.iderinfo.fwmajor=g.acc.charCodeAt(10);g.iderinfo.fwminor=g.acc.charCodeAt(11);g.iderinfo.readbfr=ReadShortX(g.acc,16);g.iderinfo.writebfr=
+ReadShortX(g.acc,18);g.iderinfo.proto=g.acc.charCodeAt(21);g.iderinfo.iana=ReadIntX(g.acc,25);b(g.iderinfo);0!=g.iderinfo.proto&&(b("Unknown proto",g.iderinfo.proto),g.Stop());8192g.acc.length)break;a=g.acc.charCodeAt(8);null===J?(g.SendCommand(71),b("RESETOCCURED1",a)):(G=!0,b("RESETOCCURED2",a));return 9;case 73:if(13>g.acc.length)break;var a=g.acc.charCodeAt(8),x=ReadIntX(g.acc,9);b("STATUS_DATA",a,x);switch(a){case 1:x&1&&(0==g.iderStart?g.SendDisableEnableFeatures(3,IntToStrX(9)):1==g.iderStart?g.SendDisableEnableFeatures(3,IntToStrX(17)):
+2==g.iderStart&&g.SendDisableEnableFeatures(3,IntToStrX(25)));break;case 2:g.enabled=x&2?!0:!1;b("IDER Status: "+g.enabled);break;case 3:1!=x&&b("Register toggle failure")}return 13;case 74:if(11>g.acc.length)break;b("IDER: ABORT",g.acc.charCodeAt(8));return 11;case 75:return 8;case 80:if(28>g.acc.length)break;var a=g.acc.charCodeAt(14)&16?176:160,x=g.acc.charCodeAt(14),e=g.acc.substring(16,28),A=g.acc.charCodeAt(9);b("SCSI_CMD",a,rstr2hex(e),A,x);c(a,e,A,x);return 28;case 83:if(14>g.acc.length)break;
+a=ReadShortX(g.acc,9);if(g.acc.length<14+a)break;b("SCSI_WRITE, len = "+(14+a));g.SendCommand(81,String.fromCharCode(0,0,0,0,0,0,0,0,0,0,0,0,135,112,3,0,0,0,160,81,7,39,0),!0);return 14+a;default:b("Unknown IDER command",g.acc[0]),g.Stop()}return 0};var D=[],G=!1,J=null,P,q,N;return g},CreateAmtRemoteServerIder=function(){function b(){urlvars&&urlvars.idertrace&&console.log.apply(console,[].concat($jscomp.arrayFromArguments(arguments)))}var c={protocol:4,iderStart:0,floppy:null,cdrom:null,state:0,
+onStateChanged:null,m:{sectorStats:null,onDialogPrompt:null,dialogPrompt:function(a){c.socket.send(JSON.stringify({action:"dialogResponse",args:a}))},bytesToAmt:0,bytesFromAmt:0,server:!0,Stop:function(){c.Stop()}},xxStateChange:function(a){if(c.state!=a&&(b("SIDER-StateChange",a),c.state=a,null!=c.onStateChanged))c.onStateChanged(c,c.state)},Start:function(a,d,g,u,n){b("SIDER-Start",a,d,g,u,n);c.host=a;c.port=d;c.user=g;c.pass=u;c.connectstate=0;c.socket=new WebSocket(window.location.protocol.replace("http",
+"ws")+"//"+window.location.host+window.location.pathname.substring(0,window.location.pathname.lastIndexOf("/"))+"/webider.ashx?host="+a+"&port="+d+"&tls="+n+("*"==g?"&serverauth=1":"")+("undefined"===typeof u?"&serverauth=1&user="+g:"")+"&tls1only="+c.tlsv1only);c.socket.onopen=c.xxOnSocketConnected;c.socket.onmessage=c.xxOnMessage;c.socket.onclose=c.xxOnSocketClosed;c.xxStateChange(1)},Stop:function(){b("SIDER-Stop");null!=c.socket&&(c.socket.close(),c.socket=null);c.xxStateChange(0)},xxOnSocketConnected:function(){c.xxStateChange(2);
+c.socket.send(JSON.stringify({action:"start"}))},xxOnMessage:function(a){var b=null;try{b=JSON.parse(a.data)}catch(g){}if(null!=b&&"string"==typeof b.action)switch(b.action){case "dialog":if(null!=c.m.onDialogPrompt)c.m.onDialogPrompt(c,b.args,b.buttons);break;case "state":2==b.state&&c.xxStateChange(3);break;case "stats":c.m.bytesToAmt=b.toAmt;c.m.bytesFromAmt=b.fromAmt;c.m.sectorStats&&c.m.sectorStats(b.mode,b.dev,b.total,b.start,b.len);break;case "error":console.log("IDER Error: "+";Floppy disk image does not exist;Invalid floppy disk image;Unable to open floppy disk image;CDROM disk image does not exist;Invalid CDROM disk image;Unable to open CDROM disk image;Can't perform IDER with no disk images".split(";")[b.code]);
+break;default:console.log("Unknown Server IDER action: "+b.action),breal}},xxOnSocketClosed:function(){c.Stop()}};return c},CreateWsmanComm=function(b,c,a,d,g){function u(a){return a.split(",").reduce(function(a,b){a.ic?a.st[a.st.length-1]+=","+b:a.st.push(b);0==b.split('"').length%2&&(a.ic=!a.ic);return a},{st:[],ic:!1}).st}function n(a){a="00000000"+a.toString(16);return a.substring(a.length-8)}function k(){e.socketState=2;e.socketParseState=0;e.socketAccumulator="";e.socketHeader=null;e.socketData=
+"";for(i in e.pendingAjaxCall)e.sendRequest(e.pendingAjaxCall[i][0],e.pendingAjaxCall[i][3],e.pendingAjaxCall[i][4])}function p(a){var b=e.socketAccumulator;a=new Uint8Array(a.data);a=String.fromCharCode.apply(null,a);for(e.socketAccumulator=b+a;;){if(0==e.socketParseState){b=e.socketAccumulator.indexOf("\r\n\r\n");if(0>b)break;e.socketHeader=e.socketAccumulator.substring(0,b).split("\r\n");if(null==e.amtVersion)for(var c in e.socketHeader)0==e.socketHeader[c].indexOf("Server: Intel(R) Active Management Technology ")&&
(e.amtVersion=e.socketHeader[c].substring(46));e.socketAccumulator=e.socketAccumulator.substring(b+4);e.socketParseState=1;e.socketData="";e.socketXHeader={Directive:e.socketHeader[0].split(" ")};for(c in e.socketHeader)0!=c&&(b=e.socketHeader[c].indexOf(":"),e.socketXHeader[e.socketHeader[c].substring(0,b).toLowerCase()]=e.socketHeader[c].substring(b+2))}if(1==e.socketParseState){b=-1;if(void 0==e.socketXHeader.connection||"close"!=e.socketXHeader.connection.toLowerCase()||void 0!=e.socketXHeader["transfer-encoding"]&&
"chunked"==e.socketXHeader["transfer-encoding"].toLowerCase())if(void 0!=e.socketXHeader["content-length"]){b=parseInt(e.socketXHeader["content-length"]);if(e.socketAccumulator.lengthp)break;b=parseInt(e.socketAccumulator.substring(0,p),16);if(isNaN(b)){e.websocket&&e.websocket.close();break}if(e.socketAccumulator.length++e.authcounter){if(e.challengeParams=e.parseDigest(p["www-authenticate"]),null!=e.challengeParams.qop){b=e.challengeParams.qop.split(",");a=void 0;for(a in b)b[a]=b[a].trim();0<=b.indexOf("auth-int")?
-e.challengeParams.qop="auth-int":e.challengeParams.qop="auth"}}else p=e.pendingAjaxCall.shift(),e.authcounter=0,e.ActiveAjaxCount--,e.gotNextMessages(b,"success",{status:a},p),e.PerformNextAjax();e.socketParseState=0;e.socketHeader=null}}}}function q(a){0==e.inDataCount&&(e.tlsv1only=1-e.tlsv1only);e.socketState=0;null!=e.socket&&(e.socket.close(),e.socket=null);if(0=
e.MaxActiveAjaxCount||0==e.PendingAjax.length)){var a=e.PendingAjax.shift();e.PerformAjaxEx(a[0],a[1],a[2],a[3],a[4]);e.PerformNextAjax()}};e.PerformAjaxEx=function(a,b,c,p,d){if(0!=e.FailAllError)e.gotNextMessagesError({status:e.FailAllError},"error",null,[a,b,c,p,d]);else return a||(a=""),urlvars&&urlvars.wsmantrace&&console.log("WSMAN-SEND("+a.length+"): "+a),e.ActiveAjaxCount++,e.PerformAjaxExNodeJS(a,b,c,p,d)};e.pendingAjaxCall=[];e.PerformAjaxExNodeJS=function(a,b,c,p,d){e.PerformAjaxExNodeJS2(a,
b,c,p,d,5)};e.PerformAjaxExNodeJS2=function(a,b,c,p,d,h){0>=h||0!=e.FailAllError?(e.ActiveAjaxCount--,999!=e.FailAllError&&e.gotNextMessages(null,"error",{status:0==e.FailAllError?408:e.FailAllError},[a,b,c,p,d]),e.PerformNextAjax()):(e.pendingAjaxCall.push([a,b,c,p,d,h]),0==e.socketState?e.xxConnectHttpSocket():2==e.socketState&&e.sendRequest(a,p,d))};e.sendRequest=function(a,b,c){b=b?b:"/wsman";c=c?c:"POST";var p=c+" "+b+" HTTP/1.1\r\n";if(null!=e.challengeParams){e.digestRealm=e.challengeParams.realm;
if(e.digestRealmMatch&&e.digestRealm!=e.digestRealmMatch){e.FailAllError=997;e.CancelAllQueries(997);return}var d=Math.random().toString(36).substring(7);c=hex_md5(hex_md5(e.user+":"+e.challengeParams.realm+":"+e.pass)+":"+e.challengeParams.nonce+":"+n(e.noncecounter)+":"+d+":"+e.challengeParams.qop+":"+hex_md5(c+":"+b+("auth-int"==e.challengeParams.qop?":"+hex_md5(a):"")));p+="Authorization: "+e.renderDigest({username:e.user,realm:e.challengeParams.realm,nonce:e.challengeParams.nonce,uri:b,qop:e.challengeParams.qop,
-response:c,nc:n(e.noncecounter++),cnonce:d})+"\r\n"}a=p+="Host: "+e.host+":"+e.port+"\r\nContent-Length: "+a.length+"\r\n\r\n"+a;if(2==e.socketState&&null!=e.socket&&e.socket.readyState==WebSocket.OPEN){b=new Uint8Array(a.length);for(p=0;pn.byteLength)return;switch(n[1]){case 0:if(13>n.byteLength)return;b=n[12];if(n.byteLength<13+b)return;d.directSend(new Uint8Array([19,0,0,0,0,0,0,0,
-0]));b=13+b;break;default:d.Stop(1)}break;case 20:if(9>n.byteLength)return;b=(new DataView(d.acc)).getUint32(5,!0);if(n.byteLength<9+b)return;var l=n[1],c=n[4],p=[];for(i=0;iw;w++)C+="abcdef0123456789".charAt(Math.floor(16*Math.random()));w="";4==c&&(e=n[q],e=a(new Uint8Array(n.buffer.slice(q+1,q+1+e))),w="00000002:"+C+":"+e+":");n=hex_md5(hex_md5(d.user+":"+l+":"+d.pass)+":"+p+":"+w+hex_md5("POST:"+d.authuri));q=d.user.length+l.length+p.length+d.authuri.length+C.length+8+n.length+7;4==c&&(q+=e.length+1);n=String.fromCharCode(19,0,0,0,c)+IntToStrX(q)+String.fromCharCode(d.user.length)+d.user+String.fromCharCode(l.length)+l+String.fromCharCode(p.length)+
-p+String.fromCharCode(d.authuri.length)+d.authuri+String.fromCharCode(C.length)+C+String.fromCharCode(8)+"00000002"+String.fromCharCode(n.length)+n;4==c&&(n+=String.fromCharCode(e.length)+e);d.xxSend(n)}break;case 33:if(23>n.byteLength)break;b=23;d.xxSend(String.fromCharCode(39,0,0,0)+IntToStrX(d.amtsequence++)+String.fromCharCode(0,0,27,0,0,0));1==d.protocol&&(d.amtkeepalivetimer=setInterval(d.xxSendAmtKeepAlive,2E3));d.connectstate=1;d.xxStateChange(3);break;case 41:if(10>n.byteLength)break;b=10;
-break;case 42:if(10>n.byteLength)break;c=10+(n[9]<<8)+n[8];if(n.byteLengthn.byteLength)break;b=8;break;case 65:if(8>n.byteLength)break;d.connectstate=1;d.m.Start();8n.byteLength)return;b=(new DataView(d.acc)).getUint32(5,!0);if(n.byteLength<9+b)return;var k=n[1],c=n[4],p=[];for(i=0;iw;w++)B+="abcdef0123456789".charAt(Math.floor(16*Math.random()));w="";4==c&&(e=n[v],e=a(new Uint8Array(n.buffer.slice(v+1,v+1+e))),w="00000002:"+B+":"+e+":");n=hex_md5(hex_md5(d.user+":"+k+":"+d.pass)+":"+p+":"+w+hex_md5("POST:"+d.authuri));v=d.user.length+k.length+p.length+d.authuri.length+B.length+8+n.length+7;4==c&&(v+=e.length+1);n=String.fromCharCode(19,0,0,0,c)+IntToStrX(v)+String.fromCharCode(d.user.length)+d.user+String.fromCharCode(k.length)+
+k+String.fromCharCode(p.length)+p+String.fromCharCode(d.authuri.length)+d.authuri+String.fromCharCode(B.length)+B+String.fromCharCode(8)+"00000002"+String.fromCharCode(n.length)+n;4==c&&(n+=String.fromCharCode(e.length)+e);d.xxSend(n)}break;case 33:if(23>n.byteLength)break;b=23;d.xxSend(String.fromCharCode(39,0,0,0)+IntToStrX(d.amtsequence++)+String.fromCharCode(0,0,27,0,0,0));1==d.protocol&&(d.amtkeepalivetimer=setInterval(d.xxSendAmtKeepAlive,2E3));d.connectstate=1;d.xxStateChange(3);break;case 41:if(10>
+n.byteLength)break;b=10;break;case 42:if(10>n.byteLength)break;c=10+(n[9]<<8)+n[8];if(n.byteLengthn.byteLength)break;b=8;break;case 65:if(8>n.byteLength)break;d.connectstate=1;d.m.Start();8'+a.InstanceID+"";
-var b="",c;for(c in a)if(a.hasOwnProperty(c)){b+='';if(a[c].ReferenceParameters){var b=b+"",b=b+(""+a[c].Address+""+a[c].ReferenceParameters.ResourceURI+""),p=a[c].ReferenceParameters.SelectorSet.Selector;if(Array.isArray(p))for(var d=0;d"+p[d].Value+"";else b+=""+p.Value+"";
-b+=""}else b+=a[c];b+=""}return b+""}var q={NextMessageId:1,Address:"/wsman"};q.comm=CreateWsmanComm(b,c,a,d,g,v);q.PerformAjax=function(a,b,c,p,d){null==d&&(d="");q.comm.PerformAjax('"+a,function(a,c,e){var p=q.ParseWsman(a);if(null==a||p&&null!=p||200!=c){if(200!=c){null==p&&(p={Header:{}});p.Header.HttpError=c;try{p.Header.WsmanError=p.Body.Reason.Text.Value}catch(d){}}b(q,p.Header.ResourceURI,p,c,e)}else b(q,null,{Header:{HttpError:c}},601,e)},c,p)};q.CancelAllQueries=function(a){q.comm.CancelAllQueries(a)};q.GetNameFromUrl=function(a){var b=a.lastIndexOf("/");return-1==b?a:a.substring(b+1)};q.ExecSubscribe=function(a,b,c,d,m,k,h,g,l,B){var x="",A="";
-g="";null!=l&&null!=B&&(x='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken'+l+''+
-B+"",A='');null!=g&&(g=""+g+"");"PushWithAck"==b?b="dmtf.org/wbem/wsman/1/wsman/PushWithAck":"Push"==b&&(b="xmlsoap.org/ws/2004/08/eventing/DeliveryModes/Push");a="http://schemas.xmlsoap.org/ws/2004/08/eventing/Subscribe"+q.Address+
-""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous"+p(h)+x+''+c+""+g+""+A+"";q.PerformAjax(a+"",d,m,k,'xmlns:e="http://schemas.xmlsoap.org/ws/2004/08/eventing" xmlns:m="http://x.com"')};q.ExecUnSubscribe=
-function(a,b,c,d,m){a="http://schemas.xmlsoap.org/ws/2004/08/eventing/Unsubscribe"+q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous"+p(m)+"";q.PerformAjax(a+"",b,c,d,'xmlns:e="http://schemas.xmlsoap.org/ws/2004/08/eventing"')};q.ExecPut=function(a,b,c,d,m,k){k="http://schemas.xmlsoap.org/ws/2004/09/transfer/Put"+
-q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60.000S"+p(k)+"";if(a&&null!=b){var h=q.GetNameFromUrl(a);a="';for(var g in b)if(b.hasOwnProperty(g)&&0!==g.indexOf("__")&&0!==g.indexOf("@")&&null!=b[g]&&"function"!==typeof b[g])if("object"===typeof b[g]&&
-b[g].ReferenceParameters){a+=""+b[g].Address+""+b[g].ReferenceParameters.ResourceURI+"";var K=b[g].ReferenceParameters.SelectorSet.Selector;if(Array.isArray(K))for(var B=0;B"+K[B].Value+"";else a+=""+K.Value+"";a+=""}else if(Array.isArray(b[g]))for(B=0;B"+b[g][B].toString()+"";else a+=""+b[g].toString()+"";b=a+("")}else b="";q.PerformAjax(k+b+"",c,d,m)};q.ExecCreate=function(a,b,c,d,m,k){var h=q.GetNameFromUrl(a);a="http://schemas.xmlsoap.org/ws/2004/09/transfer/Create"+q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
-p(k)+"';for(var g in b)a+=""+b[g]+"";q.PerformAjax(a+"",c,d,m)};q.ExecDelete=function(a,b,c,d,m){a="http://schemas.xmlsoap.org/ws/2004/09/transfer/Delete"+q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
-p(b)+"";q.PerformAjax(a,c,d,m)};q.ExecGet=function(a,b,c,p){q.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/transfer/Get"+q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S",b,c,p)};q.ExecMethod=function(a,b,c,p,d,k,
-h){var g="",l;for(l in c)if(null!=c[l])if(Array.isArray(c[l]))for(var B in c[l])g+=""+c[l][B]+"";else g+=""+c[l]+"";q.ExecMethodXml(a,b,g,p,d,k,h)};q.ExecMethodXml=function(a,b,c,d,m,k,h){q.PerformAjax(a+"/"+b+""+q.Address+""+a+""+q.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
-p(h)+"'+c+"",d,m,k)};q.ExecEnum=function(a,b,c,p){q.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/enumeration/Enumerate"+q.Address+""+a+""+q.NextMessageId++ +'http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S',
-b,c,p)};q.ExecPull=function(a,b,c,p,d){q.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/enumeration/Pull"+q.Address+""+a+""+q.NextMessageId++ +'http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S'+b+"",
-c,p,d)};q.ParseWsman=function(a){if(null==a)return null;var b={Header:{}};try{if(!a.childNodes){var c=a;if(window.DOMParser)a=(new DOMParser).parseFromString(c,"text/xml");else{var p=new ActiveXObject("Microsoft.XMLDOM");p.async=!1;p.loadXML(c);a=p}}var d=a.getElementsByTagName("Header")[0],k;d||(d=a.getElementsByTagName("a:Header")[0]);if(!d)return null;for(c=0;c=e.MaxActiveEnumsCount||0==e.PendingEnums.length?c():(a=e.PendingEnums.shift(),
-e.Enum(a[0],a[1],a[2]),g(0))}function v(a){a.names.length<=a.current?a.callback(e,a.name,a.responses,200,a.tag):(e.wsman.ExecGet(e.CompleteName(a.names[a.current]),function(b,c,p,d){null==p||200!=d?a.callback(e,a.name,null,d,a.tag):(a.responses[p.Header.Method]=p,v(a))},a.pri),a.current++);c()}function n(a,b,c,p,d){if(200!=p||"0"!=c.Body.ReturnValue)d[0](e,null,d[2]);else e.AMT_MessageLog_GetRecords(c.Body.IterationIdentifier,390,l,d)}function l(a,b,c,d,z){if(200!=d||"0"!=c.Body.ReturnValue)z[0](e,
-null,z[2]);else{var h,m,g;b=z[2];d=new Date;var r=c.Body.RecordArray;"string"===typeof r&&(c.Body.RecordArray=[c.Body.RecordArray]);for(h in r){a=null;try{a=window.atob(r[h])}catch(q){}if(null!=a&&(m=ReadIntX(a,0),0m)){g={DeviceAddress:a.charCodeAt(4),EventSensorType:a.charCodeAt(5),EventType:a.charCodeAt(6),EventOffset:a.charCodeAt(7),EventSourceType:a.charCodeAt(8),EventSeverity:a.charCodeAt(9),SensorNumber:a.charCodeAt(10),Entity:a.charCodeAt(11),EntityInstance:a.charCodeAt(12),
-EventData:[],Time:new Date(1E3*(m+60*d.getTimezoneOffset()))};for(m=13;21>m;m++)g.EventData.push(a.charCodeAt(m));g.EntityStr=k[g.Entity];g.Desc=p(g.EventSensorType,g.EventOffset,g.EventData,g.Entity);g.EntityStr||(g.EntityStr="Unknown");b.push(g)}}if(1!=c.Body.NoMoreRecords)e.AMT_MessageLog_GetRecords(c.Body.IterationIdentifier,390,l,[z[0],b,z[2]]);else z[0](e,b,z[2])}}function p(a,b,c,p){if(15==a){if(235==c[0])return"Ung\u00fcltige Daten";if(0==b)return D[c[1]];if(3==b){if(170==c[0]&&48==c[1])return format("AMT One Click Recovery: {0}",
-r[c[2]]);if(170==c[0]&&64==c[1]){if(1==c[2])return"Got an error erasing Device SSD";if(2==c[2])return"Erasing Device TPM is not supported";if(3==c[2])return"Reached Max Counter"}else return"OEM Specific Firmware Error event"}else if(5==b){if(170==c[0]&&48==c[1])return 1==c[2]?format("AMT One Click Recovery: CSME Boot Option {0}:{1} added successfully",c[3],K[c[3]]):7>c[2]?format("AMT One Click Recovery: {0}",h[c[2]]):format("AMT One Click Recovery: Unknown progress event {0}",c[2]);if(170==c[0]&&
+-1;d.acc=null;null!=d.socket&&(d.socket.close(),d.socket=null);null!=d.amtkeepalivetimer&&(clearInterval(d.amtkeepalivetimer),d.amtkeepalivetimer=null)};return d},WsmanStackCreateService=function(b,c,a,d,g,u){function n(a){for(var b,c={},p=0;p'+a.InstanceID+"";
+var b="",c;for(c in a)if(a.hasOwnProperty(c)){b+='';if(a[c].ReferenceParameters){var b=b+"",b=b+(""+a[c].Address+""+a[c].ReferenceParameters.ResourceURI+""),p=a[c].ReferenceParameters.SelectorSet.Selector;if(Array.isArray(p))for(var d=0;d"+p[d].Value+"";else b+=""+p.Value+"";
+b+=""}else b+=a[c];b+=""}return b+""}var v={NextMessageId:1,Address:"/wsman"};v.comm=CreateWsmanComm(b,c,a,d,g,u);v.PerformAjax=function(a,b,c,p,d){null==d&&(d="");v.comm.PerformAjax('"+a,function(a,c,e){var p=v.ParseWsman(a);if(null==a||p&&null!=p||200!=c){if(200!=c){null==p&&(p={Header:{}});p.Header.HttpError=c;try{p.Header.WsmanError=p.Body.Reason.Text.Value}catch(d){}}b(v,p.Header.ResourceURI,p,c,e)}else b(v,null,{Header:{HttpError:c}},601,e)},c,p)};v.CancelAllQueries=function(a){v.comm.CancelAllQueries(a)};v.GetNameFromUrl=function(a){var b=a.lastIndexOf("/");return-1==b?a:a.substring(b+1)};v.ExecSubscribe=function(a,b,c,d,m,l,h,r,g,k){var x="",z="";
+r="";null!=g&&null!=k&&(x='http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken'+g+''+
+k+"",z='');null!=r&&(r=""+r+"");"PushWithAck"==b?b="dmtf.org/wbem/wsman/1/wsman/PushWithAck":"Push"==b&&(b="xmlsoap.org/ws/2004/08/eventing/DeliveryModes/Push");a="http://schemas.xmlsoap.org/ws/2004/08/eventing/Subscribe"+v.Address+
+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous"+p(h)+x+''+c+""+r+""+z+"";v.PerformAjax(a+"",d,m,l,'xmlns:e="http://schemas.xmlsoap.org/ws/2004/08/eventing" xmlns:m="http://x.com"')};v.ExecUnSubscribe=
+function(a,b,c,d,m){a="http://schemas.xmlsoap.org/ws/2004/08/eventing/Unsubscribe"+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous"+p(m)+"";v.PerformAjax(a+"",b,c,d,'xmlns:e="http://schemas.xmlsoap.org/ws/2004/08/eventing"')};v.ExecPut=function(a,b,c,d,m,l){l="http://schemas.xmlsoap.org/ws/2004/09/transfer/Put"+
+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60.000S"+p(l)+"";if(a&&null!=b){var h=v.GetNameFromUrl(a);a="';for(var r in b)if(b.hasOwnProperty(r)&&0!==r.indexOf("__")&&0!==r.indexOf("@")&&null!=b[r]&&"function"!==typeof b[r])if("object"===typeof b[r]&&
+b[r].ReferenceParameters){a+=""+b[r].Address+""+b[r].ReferenceParameters.ResourceURI+"";var g=b[r].ReferenceParameters.SelectorSet.Selector;if(Array.isArray(g))for(var C=0;C"+g[C].Value+"";else a+=""+g.Value+"";a+=""}else if(Array.isArray(b[r]))for(C=0;C"+b[r][C].toString()+"";else a+=""+b[r].toString()+"";b=a+("")}else b="";v.PerformAjax(l+b+"",c,d,m)};v.ExecCreate=function(a,b,c,d,m,l){var h=v.GetNameFromUrl(a);a="http://schemas.xmlsoap.org/ws/2004/09/transfer/Create"+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
+p(l)+"';for(var g in b)a+=""+b[g]+"";v.PerformAjax(a+"",c,d,m)};v.ExecDelete=function(a,b,c,d,m){a="http://schemas.xmlsoap.org/ws/2004/09/transfer/Delete"+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
+p(b)+"";v.PerformAjax(a,c,d,m)};v.ExecGet=function(a,b,c,p){v.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/transfer/Get"+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S",b,c,p)};v.ExecMethod=function(a,b,c,p,d,l,
+h){var g="",k;for(k in c)if(null!=c[k])if(Array.isArray(c[k]))for(var C in c[k])g+=""+c[k][C]+"";else g+=""+c[k]+"";v.ExecMethodXml(a,b,g,p,d,l,h)};v.ExecMethodXml=function(a,b,c,d,m,l,h){v.PerformAjax(a+"/"+b+""+v.Address+""+a+""+v.NextMessageId++ +"http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S"+
+p(h)+"'+c+"",d,m,l)};v.ExecEnum=function(a,b,c,p){v.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/enumeration/Enumerate"+v.Address+""+a+""+v.NextMessageId++ +'http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S',
+b,c,p)};v.ExecPull=function(a,b,c,p,d){v.PerformAjax("http://schemas.xmlsoap.org/ws/2004/09/enumeration/Pull"+v.Address+""+a+""+v.NextMessageId++ +'http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymousPT60S'+b+"",
+c,p,d)};v.ParseWsman=function(a){if(null==a)return null;var b={Header:{}};try{if(!a.childNodes){var c=a;if(window.DOMParser)a=(new DOMParser).parseFromString(c,"text/xml");else{var p=new ActiveXObject("Microsoft.XMLDOM");p.async=!1;p.loadXML(c);a=p}}var d=a.getElementsByTagName("Header")[0],l;d||(d=a.getElementsByTagName("a:Header")[0]);if(!d)return null;for(c=0;c=e.MaxActiveEnumsCount||0==e.PendingEnums.length?c():(a=e.PendingEnums.shift(),
+e.Enum(a[0],a[1],a[2]),g(0))}function u(a){a.names.length<=a.current?a.callback(e,a.name,a.responses,200,a.tag):(e.wsman.ExecGet(e.CompleteName(a.names[a.current]),function(b,c,p,d){null==p||200!=d?a.callback(e,a.name,null,d,a.tag):(a.responses[p.Header.Method]=p,u(a))},a.pri),a.current++);c()}function n(a,b,c,p,d){if(200!=p||"0"!=c.Body.ReturnValue)d[0](e,null,d[2]);else e.AMT_MessageLog_GetRecords(c.Body.IterationIdentifier,390,k,d)}function k(a,b,c,d,y){if(200!=d||"0"!=c.Body.ReturnValue)y[0](e,
+null,y[2]);else{var h,m,g;b=y[2];d=new Date;var r=c.Body.RecordArray;"string"===typeof r&&(c.Body.RecordArray=[c.Body.RecordArray]);for(h in r){a=null;try{a=window.atob(r[h])}catch(q){}if(null!=a&&(m=ReadIntX(a,0),0m)){g={DeviceAddress:a.charCodeAt(4),EventSensorType:a.charCodeAt(5),EventType:a.charCodeAt(6),EventOffset:a.charCodeAt(7),EventSourceType:a.charCodeAt(8),EventSeverity:a.charCodeAt(9),SensorNumber:a.charCodeAt(10),Entity:a.charCodeAt(11),EntityInstance:a.charCodeAt(12),
+EventData:[],Time:new Date(1E3*(m+60*d.getTimezoneOffset()))};for(m=13;21>m;m++)g.EventData.push(a.charCodeAt(m));g.EntityStr=l[g.Entity];g.Desc=p(g.EventSensorType,g.EventOffset,g.EventData,g.Entity);g.EntityStr||(g.EntityStr="Unknown");b.push(g)}}if(1!=c.Body.NoMoreRecords)e.AMT_MessageLog_GetRecords(c.Body.IterationIdentifier,390,k,[y[0],b,y[2]]);else y[0](e,b,y[2])}}function p(a,b,c,p){if(15==a){if(235==c[0])return"Ung\u00fcltige Daten";if(0==b)return E[c[1]];if(3==b){if(170==c[0]&&48==c[1])return format("AMT One Click Recovery: {0}",
+r[c[2]]);if(170==c[0]&&64==c[1]){if(1==c[2])return"Got an error erasing Device SSD";if(2==c[2])return"Erasing Device TPM is not supported";if(3==c[2])return"Reached Max Counter"}else return"OEM Specific Firmware Error event"}else if(5==b){if(170==c[0]&&48==c[1])return 1==c[2]?format("AMT One Click Recovery: CSME Boot Option {0}:{1} added successfully",c[3],O[c[3]]):7>c[2]?format("AMT One Click Recovery: {0}",h[c[2]]):format("AMT One Click Recovery: Unknown progress event {0}",c[2]);if(170==c[0]&&
64==c[1]){if(1==c[2]){if(2==c[3])return"Started erasing Device SSD";if(3==c[3])return"Started erasing Device TPM";if(5==c[3])return"Started erasing Device BIOS Reload of Golden Config"}if(2==c[2]){if(2==c[3])return"Erasing Device SSD ended successfully";if(3==c[3])return"Erasing Device TPM ended successfully";if(5==c[3])return"Erasing Device BIOS Reload of Golden Config ended successfully"}if(3==c[2])return"Beginning Platform Erase";if(4==c[2])return"Clear Reserved Parameters";if(5==c[2])return"All setting decremented"}else return"OEM Specific Firmware Progress event"}else return m[c[1]]}if(18==
a&&170==c[0])return"Agent Watchdog"+char2hex(c[4])+char2hex(c[3])+char2hex(c[2])+char2hex(c[1])+"-"+char2hex(c[6])+char2hex(c[5])+"-... gewechselt zu"+e.WatchdogCurrentStates[c[7]];if(5==a&&0==b)return"Fall Eindringen";if(192==a&&0==b&&170==c[0]&&48==c[1]){if(0==c[2])return"Eine Remote-Serial-Over-LAN-Sitzung wurde eingerichtet.";if(1==c[2])return"Remote Serial Over LAN-Sitzung beendet. Die Benutzersteuerung wurde wiederhergestellt.";if(2==c[2])return"Eine Remote-IDE-Umleitungssitzung wurde eingerichtet.";
if(3==c[2])return"Remote-IDE-Umleitungssitzung beendet. Die Benutzersteuerung wurde wiederhergestellt."}if(36==a)return a=(c[1]<<24)+(c[2]<<16)+(c[3]<<8)+c[4],b="#"+c[0],170==c[0]&&(b="verdrahtet"),4294967293==a?"Alle empfangenen Paketfilter wurden abgeglichen"+b+" Schnittstelle.":4294967292==a?"Alle ausgehenden Paketfilter wurden abgeglichen"+b+" Schnittstelle.":4294967290==a?"Der gef\u00e4lschte Paketfilter wurde angepasst"+b+" Schnittstelle.":"Filter"+a+" wurde auf abgestimmt"+b+" Schnittstelle.";
if(192==a)return 0==c[2]?"Sicherheitsrichtlinie aufgerufen. Ein Teil oder der gesamte Netzwerkverkehr (TX) wurde gestoppt.":2==c[2]?"Sicherheitsrichtlinie aufgerufen. Ein Teil oder der gesamte Netzwerkverkehr (RX) wurde gestoppt.":"Sicherheitsrichtlinie aufgerufen.";if(193==a){if(170==c[0]&&48==c[1]&&0==c[2]&&0==c[3])return"Benutzeranforderung f\u00fcr Remoteverbindung.";if(170==c[0]&&32==c[1]&&3==c[2]&&1==c[3])return"EAC-Fehler: Versuchen Sie, die Haltung zu ermitteln, w\u00e4hrend NAC in Intel AMT deaktiviert ist.";
if(170==c[0]&&32==c[1]&&4==c[2]&&0==c[3])return"HWA-Fehler: Allgemeiner Fehler"}return 6==a?"Authentifizierung fehlgeschlagen"+(c[1]+(c[2]<<8))+" mal. Das System wird m\u00f6glicherweise angegriffen.":30==a?"Keine bootf\u00e4higen Medien":32==a?"Betriebssystemsperre oder Stromunterbrechung":35==a?64==c[0]?"BIOS POST (Power On Self-Test) Watchdog Timeout.":"Systemstartfehler":37==a?"Die Systemfirmware wurde gestartet (mindestens eine CPU wird ordnungsgem\u00e4\u00df ausgef\u00fchrt).":"Unbekannter Sensortyp #"+
-a}function q(a,b,c,p,d){if(200!=p)d[0](e,[],p);else{var h,k,m=d[1],g=new Date,r;if(0Lokal",h=5);3==b.InitiatorType&&(b.Initiator="KVM-Standardport",h=5);r=ReadInt(a,h);b.Time=new Date(1E3*(r+60*g.getTimezoneOffset()));h+=4;b.MCLocationType=a.charCodeAt(h++);r=a.charCodeAt(h++);b.NetAddress=a.substring(h,h+r);h+=r;r=a.charCodeAt(h++);b.Ex=a.substring(h,h+r);b.ExStr=e.GetAuditLogExtendedDataStr(100*
-b.AuditAppID+b.EventID,b.Ex);m.push(b)}if(c.Body.TotalRecordCount>m.length)e.AMT_AuditLog_ReadRecords(m.length+1,q,[d[0],m]);else d[0](e,m,p)}}var e={};e.wsman=b;e.pfx=["http://intel.com/wbem/wscim/1/amt-schema/1/","http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/","http://intel.com/wbem/wscim/1/ips-schema/1/"];e.PendingEnums=[];e.PendingBatchOperations=0;e.ActiveEnumsCount=0;e.MaxActiveEnumsCount=1;e.onProcessChanged=null;var C=0,w=0;e.GetPendingActions=function(){return 2*e.PendingEnums.length+
-e.ActiveEnumsCount+e.wsman.comm.PendingAjax.length+e.wsman.comm.ActiveAjaxCount+e.PendingBatchOperations};e.Subscribe=function(a,b,p,d,z,h,k,m,g,r){e.wsman.ExecSubscribe(e.CompleteName(a),b,p,function(b,p,y,A){c();d(e,a,y,A,z)},0,h,k,m,g,r);c()};e.UnSubscribe=function(a,b,p,d,z){e.wsman.ExecUnSubscribe(e.CompleteName(a),function(d,z,h,k){c();b(e,a,h,k,p)},0,d,z);c()};e.Get=function(a,b,p,d){e.wsman.ExecGet(e.CompleteName(a),function(d,h,k,m){c();b(e,a,k,m,p)},0,d);c()};e.Put=function(a,b,p,d,z,h){e.wsman.ExecPut(e.CompleteName(a),
-b,function(b,z,A,h){c();p(e,a,A,h,d)},0,z,h);c()};e.Create=function(a,b,p,d,z){e.wsman.ExecCreate(e.CompleteName(a),b,function(b,z,A,h){c();p(e,a,A,h,d)},0,z);c()};e.Delete=function(a,b,p,d,z){e.wsman.ExecDelete(e.CompleteName(a),b,function(b,z,A,h){c();p(e,a,A,h,d)},0,z);c()};e.Exec=function(a,b,p,d,z,h,k){e.wsman.ExecMethod(e.CompleteName(a),b,p,function(b,p,y,A){c();d(e,a,e.CompleteExecResponse(y),A,z)},0,h,k);c()};e.ExecWithXml=function(a,b,p,d,z,h,k){e.wsman.ExecMethodXml(e.CompleteName(a),b,
-execArgumentsToXml(p),function(b,p,y,A){c();d(e,a,e.CompleteExecResponse(y),A,z)},0,h,k);c()};e.Enum=function(b,p,d,h){e.ActiveEnumsCountm.length)e.AMT_AuditLog_ReadRecords(m.length+1,v,[d[0],m]);else d[0](e,m,p)}}var e={};e.wsman=b;e.pfx=["http://intel.com/wbem/wscim/1/amt-schema/1/","http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/","http://intel.com/wbem/wscim/1/ips-schema/1/"];e.PendingEnums=[];e.PendingBatchOperations=0;e.ActiveEnumsCount=0;e.MaxActiveEnumsCount=1;e.onProcessChanged=null;var B=0,w=0;e.GetPendingActions=function(){return 2*e.PendingEnums.length+
+e.ActiveEnumsCount+e.wsman.comm.PendingAjax.length+e.wsman.comm.ActiveAjaxCount+e.PendingBatchOperations};e.Subscribe=function(a,b,p,d,y,h,l,m,g,r){e.wsman.ExecSubscribe(e.CompleteName(a),b,p,function(b,p,A,z){c();d(e,a,A,z,y)},0,h,l,m,g,r);c()};e.UnSubscribe=function(a,b,p,d,y){e.wsman.ExecUnSubscribe(e.CompleteName(a),function(d,y,h,l){c();b(e,a,h,l,p)},0,d,y);c()};e.Get=function(a,b,p,d){e.wsman.ExecGet(e.CompleteName(a),function(d,h,l,m){c();b(e,a,l,m,p)},0,d);c()};e.Put=function(a,b,p,d,y,h){e.wsman.ExecPut(e.CompleteName(a),
+b,function(b,y,z,h){c();p(e,a,z,h,d)},0,y,h);c()};e.Create=function(a,b,p,d,y){e.wsman.ExecCreate(e.CompleteName(a),b,function(b,y,z,h){c();p(e,a,z,h,d)},0,y);c()};e.Delete=function(a,b,p,d,y){e.wsman.ExecDelete(e.CompleteName(a),b,function(b,y,z,h){c();p(e,a,z,h,d)},0,y);c()};e.Exec=function(a,b,p,d,y,h,l){e.wsman.ExecMethod(e.CompleteName(a),b,p,function(b,p,A,z){c();d(e,a,e.CompleteExecResponse(A),z,y)},0,h,l);c()};e.ExecWithXml=function(a,b,p,d,y,h,l){e.wsman.ExecMethodXml(e.CompleteName(a),b,
+execArgumentsToXml(p),function(b,p,A,z){c();d(e,a,e.CompleteExecResponse(A),z,y)},0,h,l);c()};e.Enum=function(b,p,d,h){e.ActiveEnumsCounthttp://schemas.xmlsoap.org/ws/2004/08/addressinghttp://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ComputerSystemCIM_ComputerSystemManagedSystem',
null,null,b)};e.RequestOSPowerStateChange=function(a,b){e.IPS_PowerManagementService_RequestOSPowerSavingStateChange(a,'http://schemas.xmlsoap.org/ws/2004/08/addressinghttp://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ComputerSystemCIM_ComputerSystemManagedSystem',
null,null,b)};e.SetBootConfigRole=function(a,b){e.CIM_BootService_SetBootConfigRole('http://schemas.xmlsoap.org/ws/2004/08/addressinghttp://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_BootConfigSettingIntel(r) AMT: Boot Configuration 0',
a,b)};e.CancelAllQueries=function(a){e.wsman.CancelAllQueries(a)};e.AMT_AgentPresenceWatchdog_RegisterAgent=function(a){e.Exec("AMT_AgentPresenceWatchdog","RegisterAgent",{},a)};e.AMT_AgentPresenceWatchdog_AssertPresence=function(a,b){e.Exec("AMT_AgentPresenceWatchdog","AssertPresence",{SequenceNumber:a},b)};e.AMT_AgentPresenceWatchdog_AssertShutdown=function(a,b){e.Exec("AMT_AgentPresenceWatchdog","AssertShutdown",{SequenceNumber:a},b)};e.AMT_AgentPresenceWatchdog_AddAction=function(a,b,c,p,d,h,
-k,m,g){e.Exec("AMT_AgentPresenceWatchdog","AddAction",{OldState:a,NewState:b,EventOnTransition:c,ActionSd:p,ActionEac:d},h,k,m,g)};e.AMT_AgentPresenceWatchdog_DeleteAllActions=function(a,b,c,p){e.Exec("AMT_AgentPresenceWatchdog","DeleteAllActions",{},a,b,c,p)};e.AMT_AgentPresenceWatchdogAction_GetActionEac=function(a){e.Exec("AMT_AgentPresenceWatchdogAction","GetActionEac",{},a)};e.AMT_AgentPresenceWatchdogVA_RegisterAgent=function(a){e.Exec("AMT_AgentPresenceWatchdogVA","RegisterAgent",{},a)};e.AMT_AgentPresenceWatchdogVA_AssertPresence=
+l,m,g){e.Exec("AMT_AgentPresenceWatchdog","AddAction",{OldState:a,NewState:b,EventOnTransition:c,ActionSd:p,ActionEac:d},h,l,m,g)};e.AMT_AgentPresenceWatchdog_DeleteAllActions=function(a,b,c,p){e.Exec("AMT_AgentPresenceWatchdog","DeleteAllActions",{},a,b,c,p)};e.AMT_AgentPresenceWatchdogAction_GetActionEac=function(a){e.Exec("AMT_AgentPresenceWatchdogAction","GetActionEac",{},a)};e.AMT_AgentPresenceWatchdogVA_RegisterAgent=function(a){e.Exec("AMT_AgentPresenceWatchdogVA","RegisterAgent",{},a)};e.AMT_AgentPresenceWatchdogVA_AssertPresence=
function(a,b){e.Exec("AMT_AgentPresenceWatchdogVA","AssertPresence",{SequenceNumber:a},b)};e.AMT_AgentPresenceWatchdogVA_AssertShutdown=function(a,b){e.Exec("AMT_AgentPresenceWatchdogVA","AssertShutdown",{SequenceNumber:a},b)};e.AMT_AgentPresenceWatchdogVA_AddAction=function(a,b,c,p,d,h){e.Exec("AMT_AgentPresenceWatchdogVA","AddAction",{OldState:a,NewState:b,EventOnTransition:c,ActionSd:p,ActionEac:d},h)};e.AMT_AgentPresenceWatchdogVA_DeleteAllActions=function(a,b){e.Exec("AMT_AgentPresenceWatchdogVA",
"DeleteAllActions",{_method_dummy:a},b)};e.AMT_AuditLog_ClearLog=function(a){e.Exec("AMT_AuditLog","ClearLog",{},a)};e.AMT_AuditLog_RequestStateChange=function(a,b,c){e.Exec("AMT_AuditLog","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.AMT_AuditLog_ReadRecords=function(a,b,c){e.Exec("AMT_AuditLog","ReadRecords",{StartIndex:a},b,c)};e.AMT_AuditLog_SetAuditLock=function(a,b,c,p){e.Exec("AMT_AuditLog","SetAuditLock",{LockTimeoutInSeconds:a,Flag:b,Handle:c},p)};e.AMT_AuditLog_ExportAuditLogSignature=
function(a,b){e.Exec("AMT_AuditLog","ExportAuditLogSignature",{SigningMechanism:a},b)};e.AMT_AuditLog_SetSigningKeyMaterial=function(a,b,c,p,d){e.Exec("AMT_AuditLog","SetSigningKeyMaterial",{SigningMechanismType:a,SigningKey:b,LengthOfCertificates:c,Certificates:p},d)};e.AMT_AuditPolicyRule_SetAuditPolicy=function(a,b,c,p,d){e.Exec("AMT_AuditPolicyRule","SetAuditPolicy",{Enable:a,AuditedAppID:b,EventID:c,PolicyType:p},d)};e.AMT_AuditPolicyRule_SetAuditPolicyBulk=function(a,b,c,p,d){e.Exec("AMT_AuditPolicyRule",
"SetAuditPolicyBulk",{Enable:a,AuditedAppID:b,EventID:c,PolicyType:p},d)};e.AMT_AuthorizationService_AddUserAclEntryEx=function(a,b,c,p,d,h){e.Exec("AMT_AuthorizationService","AddUserAclEntryEx",{DigestUsername:a,DigestPassword:b,KerberosUserSid:c,AccessPermission:p,Realms:d},h)};e.AMT_AuthorizationService_EnumerateUserAclEntries=function(a,b){e.Exec("AMT_AuthorizationService","EnumerateUserAclEntries",{StartIndex:a},b)};e.AMT_AuthorizationService_GetUserAclEntryEx=function(a,b,c){e.Exec("AMT_AuthorizationService",
-"GetUserAclEntryEx",{Handle:a},b,c)};e.AMT_AuthorizationService_UpdateUserAclEntryEx=function(a,b,c,p,d,h,k){e.Exec("AMT_AuthorizationService","UpdateUserAclEntryEx",{Handle:a,DigestUsername:b,DigestPassword:c,KerberosUserSid:p,AccessPermission:d,Realms:h},k)};e.AMT_AuthorizationService_RemoveUserAclEntry=function(a,b){e.Exec("AMT_AuthorizationService","RemoveUserAclEntry",{Handle:a},b)};e.AMT_AuthorizationService_SetAdminAclEntryEx=function(a,b,c){e.Exec("AMT_AuthorizationService","SetAdminAclEntryEx",
+"GetUserAclEntryEx",{Handle:a},b,c)};e.AMT_AuthorizationService_UpdateUserAclEntryEx=function(a,b,c,p,d,h,l){e.Exec("AMT_AuthorizationService","UpdateUserAclEntryEx",{Handle:a,DigestUsername:b,DigestPassword:c,KerberosUserSid:p,AccessPermission:d,Realms:h},l)};e.AMT_AuthorizationService_RemoveUserAclEntry=function(a,b){e.Exec("AMT_AuthorizationService","RemoveUserAclEntry",{Handle:a},b)};e.AMT_AuthorizationService_SetAdminAclEntryEx=function(a,b,c){e.Exec("AMT_AuthorizationService","SetAdminAclEntryEx",
{Username:a,DigestPassword:b},c)};e.AMT_AuthorizationService_GetAdminAclEntry=function(a){e.Exec("AMT_AuthorizationService","GetAdminAclEntry",{},a)};e.AMT_AuthorizationService_GetAdminAclEntryStatus=function(a){e.Exec("AMT_AuthorizationService","GetAdminAclEntryStatus",{},a)};e.AMT_AuthorizationService_GetAdminNetAclEntryStatus=function(a){e.Exec("AMT_AuthorizationService","GetAdminNetAclEntryStatus",{},a)};e.AMT_AuthorizationService_SetAclEnabledState=function(a,b,c,p){e.Exec("AMT_AuthorizationService",
"SetAclEnabledState",{Handle:a,Enabled:b},c,p)};e.AMT_AuthorizationService_GetAclEnabledState=function(a,b,c){e.Exec("AMT_AuthorizationService","GetAclEnabledState",{Handle:a},b,c)};e.AMT_EndpointAccessControlService_RequestStateChange=function(a,b,c){e.Exec("AMT_EndpointAccessControlService","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.AMT_EndpointAccessControlService_GetPosture=function(a,b){e.Exec("AMT_EndpointAccessControlService","GetPosture",{PostureType:a},b)};e.AMT_EndpointAccessControlService_GetPostureHash=
function(a,b){e.Exec("AMT_EndpointAccessControlService","GetPostureHash",{PostureType:a},b)};e.AMT_EndpointAccessControlService_UpdatePostureState=function(a,b){e.Exec("AMT_EndpointAccessControlService","UpdatePostureState",{UpdateType:a},b)};e.AMT_EndpointAccessControlService_GetEacOptions=function(a){e.Exec("AMT_EndpointAccessControlService","GetEacOptions",{},a)};e.AMT_EndpointAccessControlService_SetEacOptions=function(a,b,c){e.Exec("AMT_EndpointAccessControlService","SetEacOptions",{EacVendors:a,
@@ -121,8 +120,8 @@ b)};e.AMT_MessageLog_CancelIteration=function(a,b){e.Exec("AMT_MessageLog","Canc
b,c){e.Exec("AMT_MessageLog","GetRecord",{IterationIdentifier:a,PositionToNext:b},c)};e.AMT_MessageLog_PositionAtRecord=function(a,b,c,p){e.Exec("AMT_MessageLog","PositionAtRecord",{IterationIdentifier:a,MoveAbsolute:b,RecordNumber:c},p)};e.AMT_MessageLog_PositionToFirstRecord=function(a,b){e.Exec("AMT_MessageLog","PositionToFirstRecord",{},a,b)};e.AMT_MessageLog_FreezeLog=function(a,b){e.Exec("AMT_MessageLog","FreezeLog",{Freeze:a},b)};e.AMT_PublicKeyManagementService_AddCRL=function(a,b,c){e.Exec("AMT_PublicKeyManagementService",
"AddCRL",{Url:a,SerialNumbers:b},c)};e.AMT_PublicKeyManagementService_ResetCRLList=function(a,b){e.Exec("AMT_PublicKeyManagementService","ResetCRLList",{_method_dummy:a},b)};e.AMT_PublicKeyManagementService_AddCertificate=function(a,b){e.Exec("AMT_PublicKeyManagementService","AddCertificate",{CertificateBlob:a},b)};e.AMT_PublicKeyManagementService_AddTrustedRootCertificate=function(a,b){e.Exec("AMT_PublicKeyManagementService","AddTrustedRootCertificate",{CertificateBlob:a},b)};e.AMT_PublicKeyManagementService_AddKey=
function(a,b){e.Exec("AMT_PublicKeyManagementService","AddKey",{KeyBlob:a},b)};e.AMT_PublicKeyManagementService_GeneratePKCS10Request=function(a,b,c,p){e.Exec("AMT_PublicKeyManagementService","GeneratePKCS10Request",{KeyPair:a,DNName:b,Usage:c},p)};e.AMT_PublicKeyManagementService_GeneratePKCS10RequestEx=function(a,b,c,p){e.Exec("AMT_PublicKeyManagementService","GeneratePKCS10RequestEx",{KeyPair:a,SigningAlgorithm:b,NullSignedCertificateRequest:c},p)};e.AMT_PublicKeyManagementService_GenerateKeyPair=
-function(a,b,c){e.Exec("AMT_PublicKeyManagementService","GenerateKeyPair",{KeyAlgorithm:a,KeyLength:b},c)};e.AMT_RedirectionService_RequestStateChange=function(a,b){e.Exec("AMT_RedirectionService","RequestStateChange",{RequestedState:a},b)};e.AMT_RedirectionService_TerminateSession=function(a,b){e.Exec("AMT_RedirectionService","TerminateSession",{SessionType:a},b)};e.AMT_RemoteAccessService_AddMpServer=function(a,b,c,p,d,h,k,m,g){e.Exec("AMT_RemoteAccessService","AddMpServer",{AccessInfo:a,InfoFormat:b,
-Port:c,AuthMethod:p,Certificate:d,Username:h,Password:k,CN:m},g)};e.AMT_RemoteAccessService_AddRemoteAccessPolicyRule=function(a,b,c,p,d,h){e.Exec("AMT_RemoteAccessService","AddRemoteAccessPolicyRule",{Trigger:a,TunnelLifeTime:b,ExtendedData:c,MpServer:p,InternalMpServer:d},h)};e.AMT_RemoteAccessService_CloseRemoteAccessConnection=function(a,b){e.Exec("AMT_RemoteAccessService","CloseRemoteAccessConnection",{_method_dummy:a},b)};e.AMT_SetupAndConfigurationService_CommitChanges=function(a,b){e.Exec("AMT_SetupAndConfigurationService",
+function(a,b,c){e.Exec("AMT_PublicKeyManagementService","GenerateKeyPair",{KeyAlgorithm:a,KeyLength:b},c)};e.AMT_RedirectionService_RequestStateChange=function(a,b){e.Exec("AMT_RedirectionService","RequestStateChange",{RequestedState:a},b)};e.AMT_RedirectionService_TerminateSession=function(a,b){e.Exec("AMT_RedirectionService","TerminateSession",{SessionType:a},b)};e.AMT_RemoteAccessService_AddMpServer=function(a,b,c,p,d,h,l,m,g){e.Exec("AMT_RemoteAccessService","AddMpServer",{AccessInfo:a,InfoFormat:b,
+Port:c,AuthMethod:p,Certificate:d,Username:h,Password:l,CN:m},g)};e.AMT_RemoteAccessService_AddRemoteAccessPolicyRule=function(a,b,c,p,d,h){e.Exec("AMT_RemoteAccessService","AddRemoteAccessPolicyRule",{Trigger:a,TunnelLifeTime:b,ExtendedData:c,MpServer:p,InternalMpServer:d},h)};e.AMT_RemoteAccessService_CloseRemoteAccessConnection=function(a,b){e.Exec("AMT_RemoteAccessService","CloseRemoteAccessConnection",{_method_dummy:a},b)};e.AMT_SetupAndConfigurationService_CommitChanges=function(a,b){e.Exec("AMT_SetupAndConfigurationService",
"CommitChanges",{_method_dummy:a},b)};e.AMT_SetupAndConfigurationService_Unprovision=function(a,b){e.Exec("AMT_SetupAndConfigurationService","Unprovision",{ProvisioningMode:a},b)};e.AMT_SetupAndConfigurationService_PartialUnprovision=function(a,b){e.Exec("AMT_SetupAndConfigurationService","PartialUnprovision",{_method_dummy:a},b)};e.AMT_SetupAndConfigurationService_ResetFlashWearOutProtection=function(a,b){e.Exec("AMT_SetupAndConfigurationService","ResetFlashWearOutProtection",{_method_dummy:a},b)};
e.AMT_SetupAndConfigurationService_ExtendProvisioningPeriod=function(a,b){e.Exec("AMT_SetupAndConfigurationService","ExtendProvisioningPeriod",{Duration:a},b)};e.AMT_SetupAndConfigurationService_SetMEBxPassword=function(a,b){e.Exec("AMT_SetupAndConfigurationService","SetMEBxPassword",{Password:a},b)};e.AMT_SetupAndConfigurationService_SetTLSPSK=function(a,b,c){e.Exec("AMT_SetupAndConfigurationService","SetTLSPSK",{PID:a,PPS:b},c)};e.AMT_SetupAndConfigurationService_GetProvisioningAuditRecord=function(a){e.Exec("AMT_SetupAndConfigurationService",
"GetProvisioningAuditRecord",{},a)};e.AMT_SetupAndConfigurationService_GetUuid=function(a){e.Exec("AMT_SetupAndConfigurationService","GetUuid",{},a)};e.AMT_SetupAndConfigurationService_GetUnprovisionBlockingComponents=function(a){e.Exec("AMT_SetupAndConfigurationService","GetUnprovisionBlockingComponents",{},a)};e.AMT_SetupAndConfigurationService_GetProvisioningAuditRecordV2=function(a){e.Exec("AMT_SetupAndConfigurationService","GetProvisioningAuditRecordV2",{},a)};e.AMT_SystemDefensePolicy_GetTimeout=
@@ -143,8 +142,8 @@ c)};e.CIM_Sensor_Reset=function(a){e.Exec("CIM_Sensor","Reset",{},a)};e.CIM_Sens
{},a)};e.CIM_Sensor_RequestStateChange=function(a,b,c){e.Exec("CIM_Sensor","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.CIM_StatisticalData_ResetSelectedStats=function(a,b){e.Exec("CIM_StatisticalData","ResetSelectedStats",{SelectedStatistics:a},b)};e.CIM_Watchdog_KeepAlive=function(a){e.Exec("CIM_Watchdog","KeepAlive",{},a)};e.CIM_Watchdog_SetPowerState=function(a,b,c){e.Exec("CIM_Watchdog","SetPowerState",{PowerState:a,Time:b},c)};e.CIM_Watchdog_Reset=function(a){e.Exec("CIM_Watchdog",
"Reset",{},a)};e.CIM_Watchdog_EnableDevice=function(a,b){e.Exec("CIM_Watchdog","EnableDevice",{Enabled:a},b)};e.CIM_Watchdog_OnlineDevice=function(a,b){e.Exec("CIM_Watchdog","OnlineDevice",{Online:a},b)};e.CIM_Watchdog_QuiesceDevice=function(a,b){e.Exec("CIM_Watchdog","QuiesceDevice",{Quiesce:a},b)};e.CIM_Watchdog_SaveProperties=function(a){e.Exec("CIM_Watchdog","SaveProperties",{},a)};e.CIM_Watchdog_RestoreProperties=function(a){e.Exec("CIM_Watchdog","RestoreProperties",{},a)};e.CIM_Watchdog_RequestStateChange=
function(a,b,c){e.Exec("CIM_Watchdog","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.CIM_WiFiPort_SetPowerState=function(a,b,c){e.Exec("CIM_WiFiPort","SetPowerState",{PowerState:a,Time:b},c)};e.CIM_WiFiPort_Reset=function(a){e.Exec("CIM_WiFiPort","Reset",{},a)};e.CIM_WiFiPort_EnableDevice=function(a,b){e.Exec("CIM_WiFiPort","EnableDevice",{Enabled:a},b)};e.CIM_WiFiPort_OnlineDevice=function(a,b){e.Exec("CIM_WiFiPort","OnlineDevice",{Online:a},b)};e.CIM_WiFiPort_QuiesceDevice=function(a,
-b){e.Exec("CIM_WiFiPort","QuiesceDevice",{Quiesce:a},b)};e.CIM_WiFiPort_SaveProperties=function(a){e.Exec("CIM_WiFiPort","SaveProperties",{},a)};e.CIM_WiFiPort_RestoreProperties=function(a){e.Exec("CIM_WiFiPort","RestoreProperties",{},a)};e.CIM_WiFiPort_RequestStateChange=function(a,b,c){e.Exec("CIM_WiFiPort","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.IPS_HostBasedSetupService_Setup=function(a,b,c,p,d,h,k){e.Exec("IPS_HostBasedSetupService","Setup",{NetAdminPassEncryptionType:a,
-NetworkAdminPassword:b,McNonce:c,Certificate:p,SigningAlgorithm:d,DigitalSignature:h},k)};e.IPS_HostBasedSetupService_AddNextCertInChain=function(a,b,c,p){e.Exec("IPS_HostBasedSetupService","AddNextCertInChain",{NextCertificate:a,IsLeafCertificate:b,IsRootCertificate:c},p)};e.IPS_HostBasedSetupService_AdminSetup=function(a,b,c,p,d,h){e.Exec("IPS_HostBasedSetupService","AdminSetup",{NetAdminPassEncryptionType:a,NetworkAdminPassword:b,McNonce:c,SigningAlgorithm:p,DigitalSignature:d},h)};e.IPS_HostBasedSetupService_UpgradeClientToAdmin=
+b){e.Exec("CIM_WiFiPort","QuiesceDevice",{Quiesce:a},b)};e.CIM_WiFiPort_SaveProperties=function(a){e.Exec("CIM_WiFiPort","SaveProperties",{},a)};e.CIM_WiFiPort_RestoreProperties=function(a){e.Exec("CIM_WiFiPort","RestoreProperties",{},a)};e.CIM_WiFiPort_RequestStateChange=function(a,b,c){e.Exec("CIM_WiFiPort","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.IPS_HostBasedSetupService_Setup=function(a,b,c,p,d,h,l){e.Exec("IPS_HostBasedSetupService","Setup",{NetAdminPassEncryptionType:a,
+NetworkAdminPassword:b,McNonce:c,Certificate:p,SigningAlgorithm:d,DigitalSignature:h},l)};e.IPS_HostBasedSetupService_AddNextCertInChain=function(a,b,c,p){e.Exec("IPS_HostBasedSetupService","AddNextCertInChain",{NextCertificate:a,IsLeafCertificate:b,IsRootCertificate:c},p)};e.IPS_HostBasedSetupService_AdminSetup=function(a,b,c,p,d,h){e.Exec("IPS_HostBasedSetupService","AdminSetup",{NetAdminPassEncryptionType:a,NetworkAdminPassword:b,McNonce:c,SigningAlgorithm:p,DigitalSignature:d},h)};e.IPS_HostBasedSetupService_UpgradeClientToAdmin=
function(a,b,c,p){e.Exec("IPS_HostBasedSetupService","UpgradeClientToAdmin",{McNonce:a,SigningAlgorithm:b,DigitalSignature:c},p)};e.IPS_HostBasedSetupService_DisableClientControlMode=function(a,b){e.Exec("IPS_HostBasedSetupService","DisableClientControlMode",{_method_dummy:a},b)};e.IPS_KVMRedirectionSettingData_TerminateSession=function(a){e.Exec("IPS_KVMRedirectionSettingData","TerminateSession",{},a)};e.IPS_KVMRedirectionSettingData_DataChannelRead=function(a){e.Exec("IPS_KVMRedirectionSettingData",
"DataChannelRead",{},a)};e.IPS_KVMRedirectionSettingData_DataChannelWrite=function(a,b){e.Exec("IPS_KVMRedirectionSettingData","DataChannelWrite",{DataMessage:a},b)};e.IPS_OptInService_StartOptIn=function(a){e.Exec("IPS_OptInService","StartOptIn",{},a)};e.IPS_OptInService_CancelOptIn=function(a){e.Exec("IPS_OptInService","CancelOptIn",{},a)};e.IPS_OptInService_SendOptInCode=function(a,b){e.Exec("IPS_OptInService","SendOptInCode",{OptInCode:a},b)};e.IPS_OptInService_StartService=function(a){e.Exec("IPS_OptInService",
"StartService",{},a)};e.IPS_OptInService_StopService=function(a){e.Exec("IPS_OptInService","StopService",{},a)};e.IPS_OptInService_RequestStateChange=function(a,b,c){e.Exec("IPS_OptInService","RequestStateChange",{RequestedState:a,TimeoutPeriod:b},c)};e.IPS_PowerManagementService_RequestOSPowerSavingStateChange=function(a,b,c,p,d){e.Exec("IPS_PowerManagementService","RequestOSPowerSavingStateChange",{OSPowerSavingState:a,ManagedElement:b,Time:c,TimeoutPeriod:p},d,0,1)};e.IPS_ProvisioningRecordLog_RequestStateChange=
@@ -154,12 +153,12 @@ TimeoutPeriod:b},c)};e.IPS_HTTPProxyService_AddProxyAccessPoint=function(a,b,c,p
30:"REQUEST_UNEXPECTED",31:"INVALID_TABLE_TYPE",32:"INVALID_PROVISIONING_STATE",33:"UNSUPPORTED_OBJECT",34:"INVALID_TIME",35:"INVALID_INDEX",36:"INVALID_PARAMETER",37:"INVALID_NETMASK",38:"FLASH_WRITE_LIMIT_EXCEEDED",39:"INVALID_IMAGE_LENGTH",40:"INVALID_IMAGE_SIGNATURE",41:"PROPOSE_ANOTHER_VERSION",42:"INVALID_PID_FORMAT",43:"INVALID_PPS_FORMAT",44:"BIST_COMMAND_BLOCKED",45:"CONNECTION_FAILED",46:"CONNECTION_TOO_MANY",47:"RNG_GENERATION_IN_PROGRESS",48:"RNG_NOT_READY",49:"CERTIFICATE_NOT_READY",
1024:"DISABLED_BY_POLICY",2048:"NETWORK_IF_ERROR_BASE",2049:"UNSUPPORTED_OEM_NUMBER",2050:"UNSUPPORTED_BOOT_OPTION",2051:"INVALID_COMMAND",2052:"INVALID_SPECIAL_COMMAND",2053:"INVALID_HANDLE",2054:"INVALID_PASSWORD",2055:"INVALID_REALM",2056:"STORAGE_ACL_ENTRY_IN_USE",2057:"DATA_MISSING",2058:"DUPLICATE",2059:"EVENTLOG_FROZEN",2060:"PKI_MISSING_KEYS",2061:"PKI_GENERATING_KEYS",2062:"INVALID_KEY",2063:"INVALID_CERT",2064:"CERT_KEY_NOT_MATCH",2065:"MAX_KERB_DOMAIN_REACHED",2066:"UNSUPPORTED",2067:"INVALID_PRIORITY",
2068:"NOT_FOUND",2069:"INVALID_CREDENTIALS",2070:"INVALID_PASSPHRASE",2072:"NO_ASSOCIATION",2075:"AUDIT_FAIL",2076:"BLOCKING_COMPONENT",2081:"USER_CONSENT_REQUIRED",4096:"APP_INTERNAL_ERROR",4097:"NOT_INITIALIZED",4098:"LIB_VERSION_UNSUPPORTED",4099:"INVALID_PARAM",4100:"RESOURCES",4101:"HARDWARE_ACCESS_ERROR",4102:"REQUESTOR_NOT_REGISTERED",4103:"NETWORK_ERROR",4104:"PARAM_BUFFER_TOO_SHORT",4105:"COM_NOT_INITIALIZED_IN_THREAD",4106:"URL_REQUIRED"};e.GetMessageLog=function(a,b){e.AMT_MessageLog_PositionToFirstRecord(n,
-[a,b,[]])};var D="Nicht spezifiziert. ; Kein Systemspeicher ist physisch im System installiert. ; Kein verwendbarer Systemspeicher, der gesamte installierte Speicher hat einen nicht behebbaren Fehler. ; Nicht behebbarer Festplatten- / ATAPI / IDE-Ger\u00e4tefehler. ; Nicht behebbarer Systemplatinenfehler. ; Nicht behebbare Diskette Subsystemfehler. ; Nicht behebbarer Festplattencontrollerfehler. ; Nicht behebbarer PS / 2- oder USB-Tastaturfehler. ; Wechselmedium nicht gefunden. ; Nicht behebbarer Videocontrollerfehler. ; Kein Videoger\u00e4t erkannt. ; Firmware (BIOS) -ROM-Besch\u00e4digung erkannt. ; Nicht \u00fcbereinstimmende CPU-Spannung (Prozessoren mit derselben Versorgung haben nicht \u00fcbereinstimmende Spannungsanforderungen) ; Fehler bei der Anpassung der CPU-Geschwindigkeit".split(";"),
+[a,b,[]])};var E="Nicht spezifiziert. ; Kein Systemspeicher ist physisch im System installiert. ; Kein verwendbarer Systemspeicher, der gesamte installierte Speicher hat einen nicht behebbaren Fehler. ; Nicht behebbarer Festplatten- / ATAPI / IDE-Ger\u00e4tefehler. ; Nicht behebbarer Systemplatinenfehler. ; Nicht behebbare Diskette Subsystemfehler. ; Nicht behebbarer Festplattencontrollerfehler. ; Nicht behebbarer PS / 2- oder USB-Tastaturfehler. ; Wechselmedium nicht gefunden. ; Nicht behebbarer Videocontrollerfehler. ; Kein Videoger\u00e4t erkannt. ; Firmware (BIOS) -ROM-Besch\u00e4digung erkannt. ; Nicht \u00fcbereinstimmende CPU-Spannung (Prozessoren mit derselben Versorgung haben nicht \u00fcbereinstimmende Spannungsanforderungen) ; Fehler bei der Anpassung der CPU-Geschwindigkeit".split(";"),
m="Unspecified.;Memory initialization.;Starting hard-disk initialization and test;Secondary processor(s) initialization;User authentication;Entering BIOS setup;USB resource configuration;PCI resource configuration;Option ROM initialization;Video initialization;Cache initialization;SM Bus initialization;Keyboard controller initialization;Embedded controller/management controller initialization;Docking station attachment;Enabling docking station;Docking station ejection;Disabling docking station;Calling operating system wake-up vector;Starting operating system boot process;Baseboard or motherboard initialization;reserved;Floppy initialization;Keyboard test;Pointing device test;Primary processor initialization".split(";"),
-k="Nicht spezifiziert ; Andere ; Unbekannt ; Prozessor ; Festplatte ; Peripherieger\u00e4t ; Systemverwaltungsmodul ; Systemplatine ; Speichermodul ; Prozessormodul ; Stromversorgung ; Karte hinzuf\u00fcgen ; Frontplatine ; R\u00fcckwandplatine ; Stromversorgungsplatine ; Antriebsr\u00fcckwandplatine ; Systeminterne Erweiterung Karte ; Andere Systemplatine ; Prozessorkarte ; Netzteil ; Leistungsmodul ; Energieverwaltungskarte ; Geh\u00e4use-R\u00fcckwandplatine ; Systemgeh\u00e4use ; Untergeh\u00e4use ; Andere Geh\u00e4useplatine ; Festplattenschacht ; Peripheriefachschacht ; Ger\u00e4teschacht ; L\u00fcfterk\u00fchlung ; K\u00fchleinheit ; Kabelverbindung ; Speicherger\u00e4t ; Systemverwaltungssoftware ; BIOS ; Intel (r) ME ; Systembus ; Gruppe ; Intel (r) ME ; Externe Umgebung ; Batterie ; Verarbeitungsblatt ; Konnektivit\u00e4tsschalter ; Prozessor / Speichermodul ; E / A-Modul ; Prozessor-E / A-Modul ; Firmware des Management-Controllers ; IPMI-Kanal ; PCI-Bus ; PCI-Express-Bus ; SCSI-Bus ; SATA / SAS-Bus ; Prozessor-Front-Side-Bus".split(";");
+l="Nicht spezifiziert ; Andere ; Unbekannt ; Prozessor ; Festplatte ; Peripherieger\u00e4t ; Systemverwaltungsmodul ; Systemplatine ; Speichermodul ; Prozessormodul ; Stromversorgung ; Karte hinzuf\u00fcgen ; Frontplatine ; R\u00fcckwandplatine ; Stromversorgungsplatine ; Antriebsr\u00fcckwandplatine ; Systeminterne Erweiterung Karte ; Andere Systemplatine ; Prozessorkarte ; Netzteil ; Leistungsmodul ; Energieverwaltungskarte ; Geh\u00e4use-R\u00fcckwandplatine ; Systemgeh\u00e4use ; Untergeh\u00e4use ; Andere Geh\u00e4useplatine ; Festplattenschacht ; Peripheriefachschacht ; Ger\u00e4teschacht ; L\u00fcfterk\u00fchlung ; K\u00fchleinheit ; Kabelverbindung ; Speicherger\u00e4t ; Systemverwaltungssoftware ; BIOS ; Intel (r) ME ; Systembus ; Gruppe ; Intel (r) ME ; Externe Umgebung ; Batterie ; Verarbeitungsblatt ; Konnektivit\u00e4tsschalter ; Prozessor / Speichermodul ; E / A-Modul ; Prozessor-E / A-Modul ; Firmware des Management-Controllers ; IPMI-Kanal ; PCI-Bus ; PCI-Express-Bus ; SCSI-Bus ; SATA / SAS-Bus ; Prozessor-Front-Side-Bus".split(";");
e.RealmNames=";; Umleitung ;; Hardware-Asset ; Fernbedienung ; Speicher ; Event Manager ; Speicheradministrator ; Agentenpr\u00e4senz Lokal ; Agentenpr\u00e4senz Remote ; Leistungsschalter ; Netzwerkzeit ; Allgemeine Informationen ; Firmware-Aktualisierung ; EIT ; LocalUN ; Endpunktzugriffskontrolle ; Endpunktzugriffskontrolle Admin ; Ereignisprotokollleser ; \u00dcberwachungsprotokoll ; ACL-Bereich ;;; Lokales System".split(";");e.WatchdogCurrentStates={1:"Nicht angefangen",2:"Gestoppt",4:"Laufen",
-8:"Abgelaufen",16:"Suspendiert"};var h="Boot parameters received from CSME;CSME Boot Option % added successfully;HTTPS URI name resolved;HTTPS connected successfully;HTTPSBoot download is completed;Attempt to boot;Exit boot services".split(";"),r=";No network connection available;Name resolution of URI failed;Connect to URI failed;OEM app not found at local URI;HTTPS TLS Auth failed;HTTPS Digest Auth failed;Verified boot failed (bad image);HTTPS Boot File not found".split(";"),K={1:"",2:"HTTPS",4:"Local PBA",
-8:"WinRE"},B={16:"Sicherheitsadministrator",17:"RCO",18:"Umleitungsmanager",19:"Firmware Update Manager",20:"Sicherheits\u00fcberwachungsprotokoll",21:"Netzwerkzeit",22:"Netzwerkadministration",23:"Speicherverwaltung",24:"Event Manager",25:"Leistungsschalter-Manager",26:"Agent Presence Manager",27:"Drahtlose Konfiguration",28:"EAC",29:"KVM",30:"Benutzer-Opt-In-Ereignisse",32:"Bildschirmausblendung",33:"Watchdog-Ereignisse",1600:"Bereitstellung gestartet",1601:"Bereitstellung abgeschlossen",1602:"ACL-Eintrag hinzugef\u00fcgt",
+8:"Abgelaufen",16:"Suspendiert"};var h="Boot parameters received from CSME;CSME Boot Option % added successfully;HTTPS URI name resolved;HTTPS connected successfully;HTTPSBoot download is completed;Attempt to boot;Exit boot services".split(";"),r=";No network connection available;Name resolution of URI failed;Connect to URI failed;OEM app not found at local URI;HTTPS TLS Auth failed;HTTPS Digest Auth failed;Verified boot failed (bad image);HTTPS Boot File not found".split(";"),O={1:"",2:"HTTPS",4:"Local PBA",
+8:"WinRE"},C={16:"Sicherheitsadministrator",17:"RCO",18:"Umleitungsmanager",19:"Firmware Update Manager",20:"Sicherheits\u00fcberwachungsprotokoll",21:"Netzwerkzeit",22:"Netzwerkadministration",23:"Speicherverwaltung",24:"Event Manager",25:"Leistungsschalter-Manager",26:"Agent Presence Manager",27:"Drahtlose Konfiguration",28:"EAC",29:"KVM",30:"Benutzer-Opt-In-Ereignisse",32:"Bildschirmausblendung",33:"Watchdog-Ereignisse",1600:"Bereitstellung gestartet",1601:"Bereitstellung abgeschlossen",1602:"ACL-Eintrag hinzugef\u00fcgt",
1603:"ACL-Eintrag ge\u00e4ndert",1604:"ACL-Eintrag entfernt",1605:"ACL-Zugriff mit ung\u00fcltigen Anmeldeinformationen",1606:"ACL-Eingangsstatus",1607:"TLS-Status ge\u00e4ndert",1608:"TLS Server Certificate Set",1609:"TLS-Serverzertifikat entfernen",1610:"TLS Trusted Root Certificate hinzugef\u00fcgt",1611:"TLS Trusted Root Certificate entfernt",1612:"TLS Preshared Key Set",1613:"Kerberos-Einstellungen ge\u00e4ndert",1614:"Kerberos-Hauptschl\u00fcssel ge\u00e4ndert",1615:"Blitzverschlei\u00dfz\u00e4hler zur\u00fcckgesetzt",
1616:"Netzteil ge\u00e4ndert",1617:"Stellen Sie den Realm-Authentifizierungsmodus ein",1618:"Aktualisieren Sie den Client auf den Admin-Steuerungsmodus",1619:"Unprovisioning gestartet",1700:"Power Up durchgef\u00fchrt",1701:"Power Down durchgef\u00fchrt",1702:"Aus- und Wiedereinschalten",1703:"Reset durchgef\u00fchrt",1704:"Legen Sie die Startoptionen fest",1705:"Remote graceful power down initiated",1706:"Remote graceful reset initiated",1707:"Remote Standby initiated",1708:"Remote Hiberate initiated",
1709:"Remote NMI initiated",1800:"IDER-Sitzung ge\u00f6ffnet",1801:"IDER-Sitzung geschlossen",1802:"IDER aktiviert",1803:"IDER deaktiviert",1804:"SoL-Sitzung er\u00f6ffnet",1805:"SoL-Sitzung geschlossen",1806:"SoL aktiviert",1807:"SoL deaktiviert",1808:"KVM-Sitzung gestartet",1809:"KVM-Sitzung beendet",1810:"KVM aktiviert",1811:"KVM deaktiviert",1812:"Das VNC-Passwort ist dreimal fehlgeschlagen",1900:"Firmware aktualisiert",1901:"Firmware-Aktualisierung fehlgeschlagen",2E3:"Sicherheits\u00fcberwachungsprotokoll gel\u00f6scht",
@@ -169,17 +168,17 @@ e.RealmNames=";; Umleitung ;; Hardware-Asset ; Fernbedienung ; Speicher ; Event
2900:"KVM-Anmeldung aktiviert",2901:"KVM-Anmeldung deaktiviert",2902:"KVM-Passwort ge\u00e4ndert",2903:"KVM-Zustimmung erfolgreich",2904:"KVM-Zustimmung fehlgeschlagen",3E3:"\u00c4nderung der Opt-In-Richtlinie",3001:"Einwilligungscode-Ereignis senden",3002:"Starten Sie das blockierte Opt-In-Ereignis",3301:"A user has modified the Watchdog Action settings",3302:"A user has modified a Watchdog to add, remove, or alter the Watchdog Action connected to it"};e.GetAuditLogExtendedDataStr=function(a,b){if((1602==
a||1604==a)&&0==b.charCodeAt(0))return b.substring(2,2+b.charCodeAt(1));if(1603==a)return 0==b.charCodeAt(1)?b.substring(3):null;if(1605==a)return["Ung\u00fcltiger ME-Zugriff","Ung\u00fcltiger MEBx-Zugriff"][b.charCodeAt(0)];if(1606==a){var c=["Behindert","aktiviert"][b.charCodeAt(0)];0==b.charCodeAt(1)&&(c+=","+b.substring(3));return c}return 1607==a?"Fernbedienung"+["NoAuth","ServerAuth","MutualAuth"][b.charCodeAt(0)]+", Lokal"+["NoAuth","ServerAuth","MutualAuth"][b.charCodeAt(1)]:1617==a?e.RealmNames[ReadInt(b,
0)]+","+["NoAuth","Auth","Behindert"][b.charCodeAt(4)]:1619==a?["BIOS","MEBx","Lokale MEI","Lokaler WSMAN","Remote-WSAMN"][b.charCodeAt(0)]:1900==a?"Von"+ReadShort(b,0)+"."+ReadShort(b,2)+"."+ReadShort(b,4)+"."+ReadShort(b,6)+" zu"+ReadShort(b,8)+"."+ReadShort(b,10)+"."+ReadShort(b,12)+"."+ReadShort(b,14):2100==a?(c=new Date,c.setTime(1E3*ReadInt(b,0)+6E4*(new Date).getTimezoneOffset()),c.toLocaleString()):3E3==a?"Von"+["Keiner","KVM","Alle"][b.charCodeAt(0)]+" zu"+["Keiner","KVM","Alle"][b.charCodeAt(1)]:
-3001==a?["Erfolg","3 mal fehlgeschlagen"][b.charCodeAt(0)]:null};e.GetAuditLog=function(a){e.AMT_AuditLog_ReadRecords(1,q,[a,[]])};return e}function hex_md5(b){null==b&&(b="");return forge.md.md5.create().update(b).digest().toHex()}function rstr_md5(b){return hex2rstr(hex_md5(b))}function execArgumentsToXml(b){if(void 0===b||null===b)return null;var c="",a;for(a in b){var d=b[a];d&&(c="reference"===d.__parameterType?c+referenceToXml(a,d):c+instanceToXml(a,d))}return c}
-function instanceToXml(b,c){if(void 0===c||null===c)return null;var a=!!c.__namespace,d=a?"",v;for(v in c)c.hasOwnProperty(v)&&0!==v.indexOf("__")&&("function"===typeof c[v]||Array.isArray(c[v])||("object"===typeof c[v]?console.error("only convert one level down..."):a+=d+v+">"+c[v].toString()+g+v+">"));return a+("")}
+3001==a?["Erfolg","3 mal fehlgeschlagen"][b.charCodeAt(0)]:null};e.GetAuditLog=function(a){e.AMT_AuditLog_ReadRecords(1,v,[a,[]])};return e}function hex_md5(b){null==b&&(b="");return forge.md.md5.create().update(b).digest().toHex()}function rstr_md5(b){return hex2rstr(hex_md5(b))}function execArgumentsToXml(b){if(void 0===b||null===b)return null;var c="",a;for(a in b){var d=b[a];d&&(c="reference"===d.__parameterType?c+referenceToXml(a,d):c+instanceToXml(a,d))}return c}
+function instanceToXml(b,c){if(void 0===c||null===c)return null;var a=!!c.__namespace,d=a?"",u;for(u in c)c.hasOwnProperty(u)&&0!==u.indexOf("__")&&("function"===typeof c[u]||Array.isArray(c[u])||("object"===typeof c[u]?console.error("only convert one level down..."):a+=d+u+">"+c[u].toString()+g+u+">"));return a+("")}
function referenceToXml(b,c){if(void 0===c||null===c)return null;var a="/wsman"+c.__resourceUri+"",d;for(d in c)c.hasOwnProperty(d)&&0!==d.indexOf("__")&&("function"===typeof c[d]||"object"===typeof c[d]||Array.isArray(c[d])||(a+=''+c[d].toString()+""));return a+("")}
function GetSidString(b){for(var c="S-"+b.charCodeAt(0)+"-"+b.charCodeAt(7),a=2;ab.length||"s"!=b[0]&&"S"!=b[0])return null;for(var c=1;cc&&(a+="0");a+=c.toString(16)}return a};e.DataBuffer.prototype.toString=function(a){var b=new Uint8Array(this.data,this.read,this.length());a=a||"utf8";if("binary"===a||"raw"===a)return e.binary.raw.encode(b);if("hex"===a)return e.binary.hex.encode(b);if("base64"===a)return e.binary.base64.encode(b);if("utf8"===a)return e.text.utf8.decode(b);if("utf16"===a)return e.text.utf16.decode(b);throw Error("Invalid encoding: "+a);};e.createBuffer=function(a,b){void 0!==a&&"utf8"===
-(b||"raw")&&(a=e.encodeUtf8(a));return new e.ByteBuffer(a)};e.fillString=function(a,b){for(var c="";0>>=1,0>24&255)+String.fromCharCode(a>>16&255)+String.fromCharCode(a>>8&255)+String.fromCharCode(a&255)};var d=[62,-1,-1,-1,63,52,53,54,55,56,57,58,59,60,61,-1,-1,-1,64,-1,-1,-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,-1,-1,-1,-1,-1,-1,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51];e.encode64=function(a,b){for(var c="",p="",e,d,h,k=0;k>2),c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((e&3)<<4|d>>4),isNaN(d)?c+="==":(c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((d&15)<<2|h>>6),c+=isNaN(h)?"=":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(h&63)),b&&c.length>b&&(p+=c.substr(0,b)+"\r\n",c=c.substr(b));return p+
-c};e.decode64=function(a){a=a.replace(/[^A-Za-z0-9\+\/\=]/g,"");for(var b="",c,p,e,h,k=0;k>4),64!==e&&(b+=String.fromCharCode((p&15)<<4|e>>2),64!==h&&(b+=String.fromCharCode((e&3)<<6|h)));return b};e.encodeUtf8=function(a){return unescape(encodeURIComponent(a))};e.decodeUtf8=function(a){return decodeURIComponent(escape(a))};e.binary={raw:{},hex:{},base64:{}};
+(b||"raw")&&(a=e.encodeUtf8(a));return new e.ByteBuffer(a)};e.fillString=function(a,b){for(var c="";0>>=1,0>24&255)+String.fromCharCode(a>>16&255)+String.fromCharCode(a>>8&255)+String.fromCharCode(a&255)};var d=[62,-1,-1,-1,63,52,53,54,55,56,57,58,59,60,61,-1,-1,-1,64,-1,-1,-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,-1,-1,-1,-1,-1,-1,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51];e.encode64=function(a,b){for(var c="",p="",e,d,h,l=0;l>2),c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((e&3)<<4|d>>4),isNaN(d)?c+="==":(c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((d&15)<<2|h>>6),c+=isNaN(h)?"=":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(h&63)),b&&c.length>b&&(p+=c.substr(0,b)+"\r\n",c=c.substr(b));return p+
+c};e.decode64=function(a){a=a.replace(/[^A-Za-z0-9\+\/\=]/g,"");for(var b="",c,p,e,h,l=0;l>4),64!==e&&(b+=String.fromCharCode((p&15)<<4|e>>2),64!==h&&(b+=String.fromCharCode((e&3)<<6|h)));return b};e.encodeUtf8=function(a){return unescape(encodeURIComponent(a))};e.decodeUtf8=function(a){return decodeURIComponent(escape(a))};e.binary={raw:{},hex:{},base64:{}};
e.binary.raw.encode=function(a){return String.fromCharCode.apply(null,a)};e.binary.raw.decode=function(a,b,c){var p=b;p||(p=new Uint8Array(a.length));for(var e=c=c||0,d=0;d>2),c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((e&3)<<4|d>>4),isNaN(d)?c+="==":(c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((d&15)<<2|h>>6),c+=isNaN(h)?"=":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(h&63)),b&&c.length>b&&(p+=c.substr(0,
-b)+"\r\n",c=c.substr(b));return p+c};e.binary.base64.decode=function(a,b,c){var p=b;p||(p=new Uint8Array(3*Math.ceil(a.length/4)));a=a.replace(/[^A-Za-z0-9\+\/\=]/g,"");c=c||0;for(var e,h,k,m,g=0,r=c;g>4,64!==k&&(p[r++]=(h&15)<<4|k>>2,64!==m&&(p[r++]=(k&3)<<6|m));return b?r-c:p.subarray(0,r)};e.text={utf8:{},utf16:{}};e.text.utf8.encode=function(a,b,c){a=e.encodeUtf8(a);
-var p=b;p||(p=new Uint8Array(a.length));for(var d=c=c||0,h=0;h>2),c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((e&3)<<4|d>>4),isNaN(d)?c+="==":(c+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt((d&15)<<2|h>>6),c+=isNaN(h)?"=":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(h&63)),b&&c.length>b&&(p+=c.substr(0,
+b)+"\r\n",c=c.substr(b));return p+c};e.binary.base64.decode=function(a,b,c){var p=b;p||(p=new Uint8Array(3*Math.ceil(a.length/4)));a=a.replace(/[^A-Za-z0-9\+\/\=]/g,"");c=c||0;for(var e,h,l,m,g=0,r=c;g>4,64!==l&&(p[r++]=(h&15)<<4|l>>2,64!==m&&(p[r++]=(l&3)<<6|m));return b?r-c:p.subarray(0,r)};e.text={utf8:{},utf16:{}};e.text.utf8.encode=function(a,b,c){a=e.encodeUtf8(a);
+var p=b;p||(p=new Uint8Array(a.length));for(var d=c=c||0,h=0;h");break;case "%":d.push("%");break;default:d.push("<#"+
c+"?>")}d.push(a.substring(p));return d.join("")};e.formatNumber=function(a,b,c,p){var e=isNaN(b=Math.abs(b))?2:b;b=void 0===c?",":c;p=void 0===p?".":p;c=0>a?"-":"";var d=parseInt(a=Math.abs(+a||0).toFixed(e),10)+"",h=3d;++d)if(a[d]&&0!==a[d].length){var h=e.hexToBytes(a[d]);2>h.length&&p.putByte(0);p.putBytes(h)}else p.fillWithByte(0,c),c=0;return p.getBytes()};e.bytesToIP=function(a){return 4===a.length?e.bytesToIPv4(a):16===a.length?e.bytesToIPv6(a):null};e.bytesToIPv4=function(a){if(4!==a.length)return null;for(var b=[],c=0;cc[p].end-c[p].start&&(p=c.length-1)):c.push({start:m,end:m})}b.push(h)}0k.st&&e.ste.st&&k.stc[p].end-c[p].start&&(p=c.length-1)):c.push({start:m,end:m})}b.push(h)}0l.st&&e.ste.st&&l.stthis.blockSize<<2)return!1;a.truncate(c);return!0};w.cbc=function(a){a=a||{};this.name="CBC";this.cipher=a.cipher;this.blockSize=a.blockSize||16;this._ints=this.blockSize/4;this._inBlock=Array(this._ints);
@@ -248,27 +247,27 @@ if(0=this.blockSize)for(var d=0;d=this.blockSize)for(var g=0;g<
-this._ints;++g)b.putInt32(a.getInt32()^this._outBlock[g]);else{var q=(this.blockSize-p)%this.blockSize;0=this.blockSize){for(var g=0;gd;++d)a[d/32|0]&1<<31-d%32&&(c[0]^=p[0],c[1]^=p[1],c[2]^=p[2],c[3]^=p[3]),this.pow(p,p);return c};w.gcm.prototype.pow=function(a,b){for(var c=a[3]&1,p=3;0>>1|(a[p-1]&1)<<31;b[0]=a[0]>>>1;c&&(b[0]^=this._R)};w.gcm.prototype.tableMultiply=function(a){for(var b=
+this._ints;++g)b.putInt32(a.getInt32()^this._outBlock[g]);else{var v=(this.blockSize-p)%this.blockSize;0=this.blockSize){for(var g=0;gd;++d)a[d/32|0]&1<<31-d%32&&(c[0]^=p[0],c[1]^=p[1],c[2]^=p[2],c[3]^=p[3]),this.pow(p,p);return c};w.gcm.prototype.pow=function(a,b){for(var c=a[3]&1,p=3;0>>1|(a[p-1]&1)<<31;b[0]=a[0]>>>1;c&&(b[0]^=this._R)};w.gcm.prototype.tableMultiply=function(a){for(var b=
[0,0,0,0],c=0;32>c;++c){var p=this._m[c][a[c/8|0]>>>4*(7-c%8)&15];b[0]^=p[0];b[1]^=p[1];b[2]^=p[2];b[3]^=p[3]}return b};w.gcm.prototype.ghash=function(a,b,c){b[0]^=c[0];b[1]^=c[1];b[2]^=c[2];b[3]^=c[3];return this.tableMultiply(b)};w.gcm.prototype.generateHashTable=function(a,b){for(var c=8/b,p=4*c,c=16*c,d=Array(c),e=0;e>>1,d=Array(c);d[p]=a.slice(0);for(var e=p>>>1;0>=1;for(e=2;eb;++b)a[b]=b<<1,a[b+128]=b+128<<1^283;h=Array(256);r=Array(256);B=Array(4);x=Array(4);for(b=0;4>b;++b)B[b]=Array(256),x[b]=Array(256);for(var c=0,p=0,e,g,k,q,u,b=0;256>b;++b){q=p^p<<1^p<<2^p<<3^p<<4;q=q>>8^q&255^99;h[c]=q;r[q]=c;u=a[q];e=a[c];g=a[e];k=a[g];u^=u<<24^q<<16^q<<8^q;g=(e^g^k)<<24^(c^
-k)<<16^(c^g^k)<<8^c^e^k;for(var w=0;4>w;++w)B[w][c]=u,x[w][q]=g,u=u<<24|u>>>8,g=g<<24|g>>>8;0===c?c=p=1:(c=e^a[a[a[e^k]]],p^=a[a[p]])}}function g(a,b){for(var c=a.slice(0),p,d=1,e=c.length,m=k*(e+6+1),q=e;q>>16&255]<<24^h[p>>>8&255]<<16^h[p&255]<<8^h[p>>>24]^K[d]<<24,d++):6>>24]<<24^h[p>>>16&255]<<16^h[p>>>8&255]<<8^h[p&255]),c[q]=c[q-e]^p;if(b){for(var d=x[0],e=x[1],r=x[2],w=x[3],l=c.slice(0),m=c.length,q=0,F=m-k;q>>24]]^e[h[p>>>16&255]]^r[h[p>>>8&255]]^w[h[p&255]];c=l}return c}function w(a,b,c,p){var d=a.length/4-1,e,g,k,m,q;p?(e=x[0],g=x[1],k=x[2],m=x[3],q=r):(e=B[0],g=B[1],k=B[2],m=B[3],q=h);var w,l,C,L,D,K;w=b[0]^a[0];l=b[p?3:1]^a[1];C=b[2]^a[2];b=b[p?1:3]^a[3];for(var n=3,v=1;v>>24]^g[l>>>16&255]^k[C>>>8&255]^m[b&255]^a[++n],D=e[l>>>24]^g[C>>>16&255]^k[b>>>8&255]^m[w&255]^a[++n],K=e[C>>>24]^
-g[b>>>16&255]^k[w>>>8&255]^m[l&255]^a[++n],b=e[b>>>24]^g[w>>>16&255]^k[l>>>8&255]^m[C&255]^a[++n],w=L,l=D,C=K;c[0]=q[w>>>24]<<24^q[l>>>16&255]<<16^q[C>>>8&255]<<8^q[b&255]^a[++n];c[p?3:1]=q[l>>>24]<<24^q[C>>>16&255]<<16^q[b>>>8&255]<<8^q[w&255]^a[++n];c[2]=q[C>>>24]<<24^q[b>>>16&255]<<16^q[w>>>8&255]<<8^q[l&255]^a[++n];c[p?1:3]=q[b>>>24]<<24^q[w>>>16&255]<<16^q[l>>>8&255]<<8^q[C&255]^a[++n]}function l(b){b=b||{};var c="AES-"+(b.mode||"CBC").toUpperCase(),d;d=b.decrypt?a.cipher.createDecipher(c,b.key):
-a.cipher.createCipher(c,b.key);var e=d.start;d.start=function(b,c){var h=null;c instanceof a.util.ByteBuffer&&(h=c,c={});c=c||{};c.output=h;c.iv=b;e.call(d,c)};return d}a.aes=a.aes||{};a.aes.startEncrypting=function(a,b,c,p){a=l({key:a,output:c,decrypt:!1,mode:p});a.start(b);return a};a.aes.createEncryptionCipher=function(a,b){return l({key:a,output:null,decrypt:!1,mode:b})};a.aes.startDecrypting=function(a,b,c,p){a=l({key:a,output:c,decrypt:!0,mode:p});a.start(b);return a};a.aes.createDecryptionCipher=
-function(a,b){return l({key:a,output:null,decrypt:!0,mode:b})};a.aes.Algorithm=function(a,b){m||d();var c=this;c.name=a;c.mode=new b({blockSize:16,cipher:{encrypt:function(a,b){return w(c._w,a,b,!1)},decrypt:function(a,b){return w(c._w,a,b,!0)}}});c._init=!1};a.aes.Algorithm.prototype.initialize=function(b){if(!this._init){var c=b.key,d;if("string"===typeof c&&(16===c.length||24===c.length||32===c.length))c=a.util.createBuffer(c);else if(a.util.isArray(c)&&(16===c.length||24===c.length||32===c.length)){d=
+p=c>>>1,d=Array(c);d[p]=a.slice(0);for(var e=p>>>1;0>=1;for(e=2;eb;++b)a[b]=b<<1,a[b+128]=b+128<<1^283;h=Array(256);r=Array(256);C=Array(4);x=Array(4);for(b=0;4>b;++b)C[b]=Array(256),x[b]=Array(256);for(var c=0,p=0,e,l,g,v,q,b=0;256>b;++b){v=p^p<<1^p<<2^p<<3^p<<4;v=v>>8^v&255^99;h[c]=v;r[v]=c;q=a[v];e=a[c];l=a[e];g=a[l];q^=q<<24^v<<16^v<<8^v;l=(e^l^g)<<24^(c^
+g)<<16^(c^l^g)<<8^c^e^g;for(var w=0;4>w;++w)C[w][c]=q,x[w][v]=l,q=q<<24|q>>>8,l=l<<24|l>>>8;0===c?c=p=1:(c=e^a[a[a[e^g]]],p^=a[a[p]])}}function g(a,b){for(var c=a.slice(0),p,d=1,e=c.length,m=l*(e+6+1),r=e;r>>16&255]<<24^h[p>>>8&255]<<16^h[p&255]<<8^h[p>>>24]^O[d]<<24,d++):6>>24]<<24^h[p>>>16&255]<<16^h[p>>>8&255]<<8^h[p&255]),c[r]=c[r-e]^p;if(b){for(var d=x[0],e=x[1],v=x[2],w=x[3],k=c.slice(0),m=c.length,r=0,L=m-l;r>>24]]^e[h[p>>>16&255]]^v[h[p>>>8&255]]^w[h[p&255]];c=k}return c}function w(a,b,c,p){var d=a.length/4-1,e,l,g,m,v;p?(e=x[0],l=x[1],g=x[2],m=x[3],v=r):(e=C[0],l=C[1],g=C[2],m=C[3],v=h);var w,k,B,K,E,O;w=b[0]^a[0];k=b[p?3:1]^a[1];B=b[2]^a[2];b=b[p?1:3]^a[3];for(var n=3,u=1;u>>24]^l[k>>>16&255]^g[B>>>8&255]^m[b&255]^a[++n],E=e[k>>>24]^l[B>>>16&255]^g[b>>>8&255]^m[w&255]^a[++n],O=e[B>>>24]^
+l[b>>>16&255]^g[w>>>8&255]^m[k&255]^a[++n],b=e[b>>>24]^l[w>>>16&255]^g[k>>>8&255]^m[B&255]^a[++n],w=K,k=E,B=O;c[0]=v[w>>>24]<<24^v[k>>>16&255]<<16^v[B>>>8&255]<<8^v[b&255]^a[++n];c[p?3:1]=v[k>>>24]<<24^v[B>>>16&255]<<16^v[b>>>8&255]<<8^v[w&255]^a[++n];c[2]=v[B>>>24]<<24^v[b>>>16&255]<<16^v[w>>>8&255]<<8^v[k&255]^a[++n];c[p?1:3]=v[b>>>24]<<24^v[w>>>16&255]<<16^v[k>>>8&255]<<8^v[B&255]^a[++n]}function k(b){b=b||{};var c="AES-"+(b.mode||"CBC").toUpperCase(),d;d=b.decrypt?a.cipher.createDecipher(c,b.key):
+a.cipher.createCipher(c,b.key);var e=d.start;d.start=function(b,c){var h=null;c instanceof a.util.ByteBuffer&&(h=c,c={});c=c||{};c.output=h;c.iv=b;e.call(d,c)};return d}a.aes=a.aes||{};a.aes.startEncrypting=function(a,b,c,p){a=k({key:a,output:c,decrypt:!1,mode:p});a.start(b);return a};a.aes.createEncryptionCipher=function(a,b){return k({key:a,output:null,decrypt:!1,mode:b})};a.aes.startDecrypting=function(a,b,c,p){a=k({key:a,output:c,decrypt:!0,mode:p});a.start(b);return a};a.aes.createDecryptionCipher=
+function(a,b){return k({key:a,output:null,decrypt:!0,mode:b})};a.aes.Algorithm=function(a,b){m||d();var c=this;c.name=a;c.mode=new b({blockSize:16,cipher:{encrypt:function(a,b){return w(c._w,a,b,!1)},decrypt:function(a,b){return w(c._w,a,b,!0)}}});c._init=!1};a.aes.Algorithm.prototype.initialize=function(b){if(!this._init){var c=b.key,d;if("string"===typeof c&&(16===c.length||24===c.length||32===c.length))c=a.util.createBuffer(c);else if(a.util.isArray(c)&&(16===c.length||24===c.length||32===c.length)){d=
c;for(var c=a.util.createBuffer(),e=0;e>>=2,e=0;eb.length()){var m=Error("Too few bytes to parse DER.");m.bytes=b.length();throw m;}var k=b.getByte(),m=k&192,h=k&31,r=d(b);if(b.length()b.length()){var m=Error("Too few bytes to parse DER.");m.bytes=b.length();throw m;}var l=b.getByte(),m=l&192,h=l&31,r=d(b);if(b.length()=g.length())d.putByte(g.length()&127);else{h=g.length();b="";do b+=String.fromCharCode(h&255),h>>>=8;while(0>>=7,d||(g|=128),e.push(g),d=!1;while(0c[a].length&&(b+="0"),b+=c[a];return b+"Z"};c.dateToGeneralizedTime=function(a){if("string"===
+return d};c.oidToDer=function(b){b=b.split(".");var c=a.util.createBuffer();c.putByte(40*parseInt(b[0],10)+parseInt(b[1],10));for(var d,e,h,g,v=2;v>>=7,d||(g|=128),e.push(g),d=!1;while(0c[a].length&&(b+="0"),b+=c[a];return b+"Z"};c.dateToGeneralizedTime=function(a){if("string"===
typeof a)return a;var b="",c=[];c.push(""+a.getUTCFullYear());c.push(""+(a.getUTCMonth()+1));c.push(""+a.getUTCDate());c.push(""+a.getUTCHours());c.push(""+a.getUTCMinutes());c.push(""+a.getUTCSeconds());for(a=0;ac[a].length&&(b+="0"),b+=c[a];return b+"Z"};c.integerToDer=function(b){var c=a.util.createBuffer();if(-128<=b&&128>b)return c.putSignedInt(b,8);if(-32768<=b&&32768>b)return c.putSignedInt(b,16);if(-8388608<=b&&8388608>b)return c.putSignedInt(b,24);if(-2147483648<=b&&2147483648>
b)return c.putSignedInt(b,32);c=Error("Integer too large; max is 32-bits.");c.integer=b;throw c;};c.derToInteger=function(b){"string"===typeof b&&(b=a.util.createBuffer(b));var c=8*b.length();if(32b;++b)k[b]=Math.floor(4294967296*
-Math.abs(Math.sin(b+1)));h=!0}function d(a,b,c){for(var e,p,h,g,z,E,q,l=c.length();64<=l;){p=a.h0;h=a.h1;g=a.h2;z=a.h3;for(q=0;16>q;++q)b[q]=c.getInt32Le(),e=z^h&(g^z),e=p+e+k[q]+b[q],E=m[q],p=z,z=g,g=h,h+=e<>>32-E;for(;32>q;++q)e=g^z&(h^g),e=p+e+k[q]+b[n[q]],E=m[q],p=z,z=g,g=h,h+=e<>>32-E;for(;48>q;++q)e=h^g^z,e=p+e+k[q]+b[n[q]],E=m[q],p=z,z=g,g=h,h+=e<>>32-E;for(;64>q;++q)e=g^(h|~z),e=p+e+k[q]+b[n[q]],E=m[q],p=z,z=g,g=h,h+=e<>>32-E;a.h0=a.h0+p|0;a.h1=a.h1+h|0;a.h2=a.h2+g|0;a.h3=
-a.h3+z|0;l-=64}}var g=a.md5=a.md5||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.md5=a.md.algorithms.md5=g;g.create=function(){h||c();var b=null,g=a.util.createBuffer(),k=Array(16),m={algorithm:"md5",blockLength:64,digestLength:16,messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){m.messageLength=0;m.fullMessageLength=m.messageLength64=[];for(var c=m.messageLengthSize/4,d=0;d>>0,q>>>0],z=m.fullMessageLength.length-1;0<=z;--z)m.fullMessageLength[z]+=q[1],q[1]=q[0]+(m.fullMessageLength[z]/4294967296>>>0),m.fullMessageLength[z]>>>=0,q[0]=q[1]/4294967296>>>0;g.putBytes(c);d(b,k,g);(2048>>0,c.putInt32Le(h>>>0);h={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3};d(h,k,c);c=a.util.createBuffer();c.putInt32Le(h.h0);c.putInt32Le(h.h1);c.putInt32Le(h.h2);c.putInt32Le(h.h3);return c};return m};var l=null,n=null,m=null,k=null,h=!1}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=
-!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.md5)return c.md5;c.defined.md5=!0;for(var q=0;qw;++w)e=d.getInt32(),b[w]=e,y=l^g&(q^l),e=(p<<5|p>>>27)+y+A+1518500249+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;for(;20>w;++w)e=b[w-3]^b[w-8]^b[w-14]^b[w-16],e=e<<1|e>>>31,b[w]=e,y=l^g&(q^l),e=(p<<5|p>>>27)+y+A+1518500249+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;for(;32>
-w;++w)e=b[w-3]^b[w-8]^b[w-14]^b[w-16],e=e<<1|e>>>31,b[w]=e,y=g^q^l,e=(p<<5|p>>>27)+y+A+1859775393+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;for(;40>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,y=g^q^l,e=(p<<5|p>>>27)+y+A+1859775393+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;for(;60>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,y=g&q|l&(g^q),e=(p<<5|p>>>27)+y+A+2400959708+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;for(;80>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,y=g^q^l,e=(p<<5|p>>>
-27)+y+A+3395469782+e,A=l,l=q,q=g<<30|g>>>2,g=p,p=e;a.h0=a.h0+p|0;a.h1=a.h1+g|0;a.h2=a.h2+q|0;a.h3=a.h3+l|0;a.h4=a.h4+A|0;z-=64}}var d=a.sha1=a.sha1||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha1=a.md.algorithms.sha1=d;d.create=function(){l||(g=String.fromCharCode(128),g+=a.util.fillString(String.fromCharCode(0),64),l=!0);var b=null,d=a.util.createBuffer(),e=Array(80),h={algorithm:"sha1",blockLength:64,digestLength:20,messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){h.messageLength=
-0;h.fullMessageLength=h.messageLength64=[];for(var c=h.messageLengthSize/4,e=0;e>>0,w>>>0],x=h.fullMessageLength.length-1;0<=x;--x)h.fullMessageLength[x]+=w[1],w[1]=w[0]+(h.fullMessageLength[x]/4294967296>>>0),h.fullMessageLength[x]>>>=
-0,w[0]=w[1]/4294967296>>>0;d.putBytes(g);c(b,e,d);(2048>>0,x+=B,l.putInt32(x>>>0),x=w;w={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3,
-h4:b.h4};c(w,e,l);l=a.util.createBuffer();l.putInt32(w.h0);l.putInt32(w.h1);l.putInt32(w.h2);l.putInt32(w.h3);l.putInt32(w.h4);return l};return h};var g=null,l=!1}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.sha1)return c.sha1;c.defined.sha1=
-!0;for(var q=0;ql;++l)b[l]=d.getInt32();
-for(;64>l;++l)e=b[l-2],e=(e>>>17|e<<15)^(e>>>19|e<<13)^e>>>10,p=b[l-15],p=(p>>>7|p<<25)^(p>>>18|p<<14)^p>>>3,b[l]=e+b[l-7]+p+b[l-16]|0;y=a.h0;w=a.h1;z=a.h2;E=a.h3;O=a.h4;H=a.h5;C=a.h6;u=a.h7;for(l=0;64>l;++l)e=(O>>>6|O<<26)^(O>>>11|O<<21)^(O>>>25|O<<7),g=C^O&(H^C),p=(y>>>2|y<<30)^(y>>>13|y<<19)^(y>>>22|y<<10),q=y&w|z&(y^w),e=u+e+g+n[l]+b[l],p+=q,u=C,C=H,H=O,O=E+e|0,E=z,z=w,w=y,y=e+p|0;a.h0=a.h0+y|0;a.h1=a.h1+w|0;a.h2=a.h2+z|0;a.h3=a.h3+E|0;a.h4=a.h4+O|0;a.h5=a.h5+H|0;a.h6=a.h6+C|0;a.h7=a.h7+u|0;v-=
-64}}var d=a.sha256=a.sha256||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha256=a.md.algorithms.sha256=d;d.create=function(){l||(g=String.fromCharCode(128),g+=a.util.fillString(String.fromCharCode(0),64),n=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,
-2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],l=!0);var b=null,d=a.util.createBuffer(),e=Array(64),r={algorithm:"sha256",blockLength:64,digestLength:32,
-messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){r.messageLength=0;r.fullMessageLength=r.messageLength64=[];for(var c=r.messageLengthSize/4,e=0;e>>0,x>>>0],w=r.fullMessageLength.length-
-1;0<=w;--w)r.fullMessageLength[w]+=x[1],x[1]=x[0]+(r.fullMessageLength[w]/4294967296>>>0),r.fullMessageLength[w]>>>=0,x[0]=x[1]/4294967296>>>0;d.putBytes(g);c(b,e,d);(2048>>0,A+=x,l.putInt32(A>>>0),A=w;w={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3,h4:b.h4,h5:b.h5,h6:b.h6,h7:b.h7};c(w,e,l);l=a.util.createBuffer();l.putInt32(w.h0);l.putInt32(w.h1);l.putInt32(w.h2);l.putInt32(w.h3);l.putInt32(w.h4);l.putInt32(w.h5);l.putInt32(w.h6);l.putInt32(w.h7);return l};return r};var g=null,l=!1,n=null}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge=
-{}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.sha256)return c.sha256;c.defined.sha256=!0;for(var q=0;qS;++S)b[S][0]=d.getInt32()>>>0,b[S][1]=d.getInt32()>>>0;for(;80>S;++S)q=b[S-2],w=q[0],q=q[1],e=((w>>>19|q<<13)^(q>>>29|w<<3)^w>>>6)>>>0,p=((w<<13|q>>>19)^(q<<3|w>>>29)^(w<<26|q>>>6))>>>0,q=b[S-15],w=q[0],q=q[1],g=((w>>>1|q<<31)^(w>>>8|q<<24)^w>>>7)>>>0,k=((w<<31|q>>>1)^(w<<24|q>>>8)^(w<<25|q>>>7))>>>0,w=b[S-7],C=b[S-
-16],q=p+w[1]+k+C[1],b[S][0]=e+w[0]+g+C[0]+(q/4294967296>>>0)>>>0,b[S][1]=q>>>0;w=a[0][0];C=a[0][1];u=a[1][0];n=a[1][1];v=a[2][0];F=a[2][1];Y=a[3][0];L=a[3][1];D=a[4][0];V=a[4][1];J=a[5][0];aa=a[5][1];ba=a[6][0];W=a[6][1];I=a[7][0];G=a[7][1];for(S=0;80>S;++S)e=((D>>>14|V<<18)^(D>>>18|V<<14)^(V>>>9|D<<23))>>>0,q=((D<<18|V>>>14)^(D<<14|V>>>18)^(V<<23|D>>>9))>>>0,p=(ba^D&(J^ba))>>>0,z=(W^V&(aa^W))>>>0,g=((w>>>28|C<<4)^(C>>>2|w<<30)^(C>>>7|w<<25))>>>0,k=((w<<4|C>>>28)^(C<<30|w>>>2)^(C<<25|w>>>7))>>>0,
-E=(w&u|v&(w^u))>>>0,l=(C&n|F&(C^n))>>>0,q=G+q+z+m[S][1]+b[S][1],e=I+e+p+m[S][0]+b[S][0]+(q/4294967296>>>0)>>>0,p=q>>>0,q=k+l,g=g+E+(q/4294967296>>>0)>>>0,k=q>>>0,I=ba,G=W,ba=J,W=aa,J=D,aa=V,q=L+p,D=Y+e+(q/4294967296>>>0)>>>0,V=q>>>0,Y=v,L=F,v=u,F=n,u=w,n=C,q=p+k,w=e+g+(q/4294967296>>>0)>>>0,C=q>>>0;q=a[0][1]+C;a[0][0]=a[0][0]+w+(q/4294967296>>>0)>>>0;a[0][1]=q>>>0;q=a[1][1]+n;a[1][0]=a[1][0]+u+(q/4294967296>>>0)>>>0;a[1][1]=q>>>0;q=a[2][1]+F;a[2][0]=a[2][0]+v+(q/4294967296>>>0)>>>0;a[2][1]=q>>>0;
-q=a[3][1]+L;a[3][0]=a[3][0]+Y+(q/4294967296>>>0)>>>0;a[3][1]=q>>>0;q=a[4][1]+V;a[4][0]=a[4][0]+D+(q/4294967296>>>0)>>>0;a[4][1]=q>>>0;q=a[5][1]+aa;a[5][0]=a[5][0]+J+(q/4294967296>>>0)>>>0;a[5][1]=q>>>0;q=a[6][1]+W;a[6][0]=a[6][0]+ba+(q/4294967296>>>0)>>>0;a[6][1]=q>>>0;q=a[7][1]+G;a[7][0]=a[7][0]+I+(q/4294967296>>>0)>>>0;a[7][1]=q>>>0;Z-=128}}var d=a.sha512=a.sha512||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha512=a.md.algorithms.sha512=d;var g=a.sha384=a.sha512.sha384=a.sha512.sha384||
-{};g.create=function(){return d.create("SHA-384")};a.md.sha384=a.md.algorithms.sha384=g;a.sha512.sha256=a.sha512.sha256||{create:function(){return d.create("SHA-512/256")}};a.md["sha512/256"]=a.md.algorithms["sha512/256"]=a.sha512.sha256;a.sha512.sha224=a.sha512.sha224||{create:function(){return d.create("SHA-512/224")}};a.md["sha512/224"]=a.md.algorithms["sha512/224"]=a.sha512.sha224;d.create=function(b){n||(l=String.fromCharCode(128),l+=a.util.fillString(String.fromCharCode(0),128),m=[[1116352408,
+'", got "'+b.tagClass+'"'),b.type!==d.type&&g.push("["+d.name+'] Expected type "'+d.type+'", got "'+b.type+'"'));else if(b.constructed===d.constructed||"undefined"===typeof d.constructed){h=!0;if(d.value&&a.util.isArray(d.value))for(var r=0,k=0;h&&kb;++b)l[b]=Math.floor(4294967296*
+Math.abs(Math.sin(b+1)));h=!0}function d(a,b,c){for(var e,p,h,g,y,D,v,k=c.length();64<=k;){p=a.h0;h=a.h1;g=a.h2;y=a.h3;for(v=0;16>v;++v)b[v]=c.getInt32Le(),e=y^h&(g^y),e=p+e+l[v]+b[v],D=m[v],p=y,y=g,g=h,h+=e<>>32-D;for(;32>v;++v)e=g^y&(h^g),e=p+e+l[v]+b[n[v]],D=m[v],p=y,y=g,g=h,h+=e<>>32-D;for(;48>v;++v)e=h^g^y,e=p+e+l[v]+b[n[v]],D=m[v],p=y,y=g,g=h,h+=e<>>32-D;for(;64>v;++v)e=g^(h|~y),e=p+e+l[v]+b[n[v]],D=m[v],p=y,y=g,g=h,h+=e<>>32-D;a.h0=a.h0+p|0;a.h1=a.h1+h|0;a.h2=a.h2+g|0;a.h3=
+a.h3+y|0;k-=64}}var g=a.md5=a.md5||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.md5=a.md.algorithms.md5=g;g.create=function(){h||c();var b=null,g=a.util.createBuffer(),l=Array(16),m={algorithm:"md5",blockLength:64,digestLength:16,messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){m.messageLength=0;m.fullMessageLength=m.messageLength64=[];for(var c=m.messageLengthSize/4,d=0;d>>0,v>>>0],y=m.fullMessageLength.length-1;0<=y;--y)m.fullMessageLength[y]+=v[1],v[1]=v[0]+(m.fullMessageLength[y]/4294967296>>>0),m.fullMessageLength[y]>>>=0,v[0]=v[1]/4294967296>>>0;g.putBytes(c);d(b,l,g);(2048>>0,c.putInt32Le(h>>>0);h={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3};d(h,l,c);c=a.util.createBuffer();c.putInt32Le(h.h0);c.putInt32Le(h.h1);c.putInt32Le(h.h2);c.putInt32Le(h.h3);return c};return m};var k=null,n=null,m=null,l=null,h=!1}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=
+!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var u,n=function(a,c){c.exports=function(c){var g=u.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.md5)return c.md5;c.defined.md5=!0;for(var v=0;vw;++w)e=d.getInt32(),b[w]=e,A=k^g&(v^k),e=(p<<5|p>>>27)+A+z+1518500249+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;for(;20>w;++w)e=b[w-3]^b[w-8]^b[w-14]^b[w-16],e=e<<1|e>>>31,b[w]=e,A=k^g&(v^k),e=(p<<5|p>>>27)+A+z+1518500249+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;for(;32>
+w;++w)e=b[w-3]^b[w-8]^b[w-14]^b[w-16],e=e<<1|e>>>31,b[w]=e,A=g^v^k,e=(p<<5|p>>>27)+A+z+1859775393+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;for(;40>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,A=g^v^k,e=(p<<5|p>>>27)+A+z+1859775393+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;for(;60>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,A=g&v|k&(g^v),e=(p<<5|p>>>27)+A+z+2400959708+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;for(;80>w;++w)e=b[w-6]^b[w-16]^b[w-28]^b[w-32],e=e<<2|e>>>30,b[w]=e,A=g^v^k,e=(p<<5|p>>>
+27)+A+z+3395469782+e,z=k,k=v,v=g<<30|g>>>2,g=p,p=e;a.h0=a.h0+p|0;a.h1=a.h1+g|0;a.h2=a.h2+v|0;a.h3=a.h3+k|0;a.h4=a.h4+z|0;y-=64}}var d=a.sha1=a.sha1||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha1=a.md.algorithms.sha1=d;d.create=function(){k||(g=String.fromCharCode(128),g+=a.util.fillString(String.fromCharCode(0),64),k=!0);var b=null,d=a.util.createBuffer(),e=Array(80),h={algorithm:"sha1",blockLength:64,digestLength:20,messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){h.messageLength=
+0;h.fullMessageLength=h.messageLength64=[];for(var c=h.messageLengthSize/4,e=0;e>>0,w>>>0],x=h.fullMessageLength.length-1;0<=x;--x)h.fullMessageLength[x]+=w[1],w[1]=w[0]+(h.fullMessageLength[x]/4294967296>>>0),h.fullMessageLength[x]>>>=
+0,w[0]=w[1]/4294967296>>>0;d.putBytes(g);c(b,e,d);(2048>>0,x+=C,k.putInt32(x>>>0),x=w;w={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3,
+h4:b.h4};c(w,e,k);k=a.util.createBuffer();k.putInt32(w.h0);k.putInt32(w.h1);k.putInt32(w.h2);k.putInt32(w.h3);k.putInt32(w.h4);return k};return h};var g=null,k=!1}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var u,n=function(a,c){c.exports=function(c){var g=u.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.sha1)return c.sha1;c.defined.sha1=
+!0;for(var v=0;vk;++k)b[k]=d.getInt32();
+for(;64>k;++k)e=b[k-2],e=(e>>>17|e<<15)^(e>>>19|e<<13)^e>>>10,p=b[k-15],p=(p>>>7|p<<25)^(p>>>18|p<<14)^p>>>3,b[k]=e+b[k-7]+p+b[k-16]|0;A=a.h0;w=a.h1;y=a.h2;D=a.h3;G=a.h4;J=a.h5;B=a.h6;q=a.h7;for(k=0;64>k;++k)e=(G>>>6|G<<26)^(G>>>11|G<<21)^(G>>>25|G<<7),g=B^G&(J^B),p=(A>>>2|A<<30)^(A>>>13|A<<19)^(A>>>22|A<<10),v=A&w|y&(A^w),e=q+e+g+n[k]+b[k],p+=v,q=B,B=J,J=G,G=D+e|0,D=y,y=w,w=A,A=e+p|0;a.h0=a.h0+A|0;a.h1=a.h1+w|0;a.h2=a.h2+y|0;a.h3=a.h3+D|0;a.h4=a.h4+G|0;a.h5=a.h5+J|0;a.h6=a.h6+B|0;a.h7=a.h7+q|0;u-=
+64}}var d=a.sha256=a.sha256||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha256=a.md.algorithms.sha256=d;d.create=function(){k||(g=String.fromCharCode(128),g+=a.util.fillString(String.fromCharCode(0),64),n=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,
+2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],k=!0);var b=null,d=a.util.createBuffer(),e=Array(64),r={algorithm:"sha256",blockLength:64,digestLength:32,
+messageLength:0,fullMessageLength:null,messageLengthSize:8,start:function(){r.messageLength=0;r.fullMessageLength=r.messageLength64=[];for(var c=r.messageLengthSize/4,e=0;e>>0,x>>>0],w=r.fullMessageLength.length-
+1;0<=w;--w)r.fullMessageLength[w]+=x[1],x[1]=x[0]+(r.fullMessageLength[w]/4294967296>>>0),r.fullMessageLength[w]>>>=0,x[0]=x[1]/4294967296>>>0;d.putBytes(g);c(b,e,d);(2048>>0,z+=x,k.putInt32(z>>>0),z=w;w={h0:b.h0,h1:b.h1,h2:b.h2,h3:b.h3,h4:b.h4,h5:b.h5,h6:b.h6,h7:b.h7};c(w,e,k);k=a.util.createBuffer();k.putInt32(w.h0);k.putInt32(w.h1);k.putInt32(w.h2);k.putInt32(w.h3);k.putInt32(w.h4);k.putInt32(w.h5);k.putInt32(w.h6);k.putInt32(w.h7);return k};return r};var g=null,k=!1,n=null}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge=
+{}),b(forge);var u,n=function(a,c){c.exports=function(c){var g=u.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.sha256)return c.sha256;c.defined.sha256=!0;for(var v=0;vS;++S)b[S][0]=d.getInt32()>>>0,b[S][1]=d.getInt32()>>>0;for(;80>S;++S)k=b[S-2],w=k[0],k=k[1],e=((w>>>19|k<<13)^(k>>>29|w<<3)^w>>>6)>>>0,p=((w<<13|k>>>19)^(k<<3|w>>>29)^(w<<26|k>>>6))>>>0,k=b[S-15],w=k[0],k=k[1],g=((w>>>1|k<<31)^(w>>>8|k<<24)^w>>>7)>>>0,l=((w<<31|k>>>1)^(w<<24|k>>>8)^(w<<25|k>>>7))>>>0,w=b[S-7],B=b[S-
+16],k=p+w[1]+l+B[1],b[S][0]=e+w[0]+g+B[0]+(k/4294967296>>>0)>>>0,b[S][1]=k>>>0;w=a[0][0];B=a[0][1];q=a[1][0];n=a[1][1];u=a[2][0];L=a[2][1];Y=a[3][0];K=a[3][1];E=a[4][0];V=a[4][1];I=a[5][0];aa=a[5][1];ba=a[6][0];W=a[6][1];H=a[7][0];F=a[7][1];for(S=0;80>S;++S)e=((E>>>14|V<<18)^(E>>>18|V<<14)^(V>>>9|E<<23))>>>0,k=((E<<18|V>>>14)^(E<<14|V>>>18)^(V<<23|E>>>9))>>>0,p=(ba^E&(I^ba))>>>0,y=(W^V&(aa^W))>>>0,g=((w>>>28|B<<4)^(B>>>2|w<<30)^(B>>>7|w<<25))>>>0,l=((w<<4|B>>>28)^(B<<30|w>>>2)^(B<<25|w>>>7))>>>0,
+D=(w&q|u&(w^q))>>>0,v=(B&n|L&(B^n))>>>0,k=F+k+y+m[S][1]+b[S][1],e=H+e+p+m[S][0]+b[S][0]+(k/4294967296>>>0)>>>0,p=k>>>0,k=l+v,g=g+D+(k/4294967296>>>0)>>>0,l=k>>>0,H=ba,F=W,ba=I,W=aa,I=E,aa=V,k=K+p,E=Y+e+(k/4294967296>>>0)>>>0,V=k>>>0,Y=u,K=L,u=q,L=n,q=w,n=B,k=p+l,w=e+g+(k/4294967296>>>0)>>>0,B=k>>>0;k=a[0][1]+B;a[0][0]=a[0][0]+w+(k/4294967296>>>0)>>>0;a[0][1]=k>>>0;k=a[1][1]+n;a[1][0]=a[1][0]+q+(k/4294967296>>>0)>>>0;a[1][1]=k>>>0;k=a[2][1]+L;a[2][0]=a[2][0]+u+(k/4294967296>>>0)>>>0;a[2][1]=k>>>0;
+k=a[3][1]+K;a[3][0]=a[3][0]+Y+(k/4294967296>>>0)>>>0;a[3][1]=k>>>0;k=a[4][1]+V;a[4][0]=a[4][0]+E+(k/4294967296>>>0)>>>0;a[4][1]=k>>>0;k=a[5][1]+aa;a[5][0]=a[5][0]+I+(k/4294967296>>>0)>>>0;a[5][1]=k>>>0;k=a[6][1]+W;a[6][0]=a[6][0]+ba+(k/4294967296>>>0)>>>0;a[6][1]=k>>>0;k=a[7][1]+F;a[7][0]=a[7][0]+H+(k/4294967296>>>0)>>>0;a[7][1]=k>>>0;Z-=128}}var d=a.sha512=a.sha512||{};a.md=a.md||{};a.md.algorithms=a.md.algorithms||{};a.md.sha512=a.md.algorithms.sha512=d;var g=a.sha384=a.sha512.sha384=a.sha512.sha384||
+{};g.create=function(){return d.create("SHA-384")};a.md.sha384=a.md.algorithms.sha384=g;a.sha512.sha256=a.sha512.sha256||{create:function(){return d.create("SHA-512/256")}};a.md["sha512/256"]=a.md.algorithms["sha512/256"]=a.sha512.sha256;a.sha512.sha224=a.sha512.sha224||{create:function(){return d.create("SHA-512/224")}};a.md["sha512/224"]=a.md.algorithms["sha512/224"]=a.sha512.sha224;d.create=function(b){n||(k=String.fromCharCode(128),k+=a.util.fillString(String.fromCharCode(0),128),m=[[1116352408,
3609767458],[1899447441,602891725],[3049323471,3964484399],[3921009573,2173295548],[961987163,4081628472],[1508970993,3053834265],[2453635748,2937671579],[2870763221,3664609560],[3624381080,2734883394],[310598401,1164996542],[607225278,1323610764],[1426881987,3590304994],[1925078388,4068182383],[2162078206,991336113],[2614888103,633803317],[3248222580,3479774868],[3835390401,2666613458],[4022224774,944711139],[264347078,2341262773],[604807628,2007800933],[770255983,1495990901],[1249150122,1856431235],
[1555081692,3175218132],[1996064986,2198950837],[2554220882,3999719339],[2821834349,766784016],[2952996808,2566594879],[3210313671,3203337956],[3336571891,1034457026],[3584528711,2466948901],[113926993,3758326383],[338241895,168717936],[666307205,1188179964],[773529912,1546045734],[1294757372,1522805485],[1396182291,2643833823],[1695183700,2343527390],[1986661051,1014477480],[2177026350,1206759142],[2456956037,344077627],[2730485921,1290863460],[2820302411,3158454273],[3259730800,3505952657],[3345764771,
106217008],[3516065817,3606008344],[3600352804,1432725776],[4094571909,1467031594],[275423344,851169720],[430227734,3100823752],[506948616,1363258195],[659060556,3750685593],[883997877,3785050280],[958139571,3318307427],[1322822218,3812723403],[1537002063,2003034995],[1747873779,3602036899],[1955562222,1575990012],[2024104815,1125592928],[2227730452,2716904306],[2361852424,442776044],[2428436474,593698344],[2756734187,3733110249],[3204031479,2999351573],[3329325298,3815920427],[3391569614,3928383900],
-[3515267271,566280711],[3940187606,3454069534],[4118630271,4000239992],[116418474,1914138554],[174292421,2731055270],[289380356,3203993006],[460393269,320620315],[685471733,587496836],[852142971,1086792851],[1017036298,365543100],[1126000580,2618297676],[1288033470,3409855158],[1501505948,4234509866],[1607167915,987167468],[1816402316,1246189591]],k={"SHA-512":[[1779033703,4089235720],[3144134277,2227873595],[1013904242,4271175723],[2773480762,1595750129],[1359893119,2917565137],[2600822924,725511199],
+[3515267271,566280711],[3940187606,3454069534],[4118630271,4000239992],[116418474,1914138554],[174292421,2731055270],[289380356,3203993006],[460393269,320620315],[685471733,587496836],[852142971,1086792851],[1017036298,365543100],[1126000580,2618297676],[1288033470,3409855158],[1501505948,4234509866],[1607167915,987167468],[1816402316,1246189591]],l={"SHA-512":[[1779033703,4089235720],[3144134277,2227873595],[1013904242,4271175723],[2773480762,1595750129],[1359893119,2917565137],[2600822924,725511199],
[528734635,4215389547],[1541459225,327033209]],"SHA-384":[[3418070365,3238371032],[1654270250,914150663],[2438529370,812702999],[355462360,4144912697],[1731405415,4290775857],[2394180231,1750603025],[3675008525,1694076839],[1203062813,3204075428]],"SHA-512/256":[[573645204,4230739756],[2673172387,3360449730],[596883563,1867755857],[2520282905,1497426621],[2519219938,2827943907],[3193839141,1401305490],[721525244,746961066],[246885852,2177182882]],"SHA-512/224":[[2352822216,424955298],[1944164710,
-2312950998],[502970286,855612546],[1738396948,1479516111],[258812777,2077511080],[2011393907,79989058],[1067287976,1780299464],[286451373,2446758561]]},n=!0);"undefined"===typeof b&&(b="SHA-512");if(!(b in k))throw Error("Invalid SHA-512 algorithm: "+b);for(var d=k[b],e=null,g=a.util.createBuffer(),x=Array(80),A=0;80>A;++A)x[A]=Array(2);var y={algorithm:b.replace("-","").toLowerCase(),blockLength:128,digestLength:64,messageLength:0,fullMessageLength:null,messageLengthSize:16,start:function(){y.messageLength=
-0;y.fullMessageLength=y.messageLength128=[];for(var b=y.messageLengthSize/4,c=0;c>>0,h>>>0],k=y.fullMessageLength.length-1;0<=k;--k)y.fullMessageLength[k]+=h[1],h[1]=h[0]+(y.fullMessageLength[k]/4294967296>>>0),y.fullMessageLength[k]>>>=0,h[0]=
-h[1]/4294967296>>>0;g.putBytes(b);c(e,x,g);(2048>>0,m+=k,d.putInt32(m>>>0),m=z;z=Array(e.length);for(r=0;rb.blockLength&&(b.start(),b.update(m.bytes()),m=b.digest());c=a.util.createBuffer();d=a.util.createBuffer();l=m.length();for(h=0;hz;++z)x[z]=Array(2);var A={algorithm:b.replace("-","").toLowerCase(),blockLength:128,digestLength:64,messageLength:0,fullMessageLength:null,messageLengthSize:16,start:function(){A.messageLength=
+0;A.fullMessageLength=A.messageLength128=[];for(var b=A.messageLengthSize/4,c=0;c>>0,h>>>0],l=A.fullMessageLength.length-1;0<=l;--l)A.fullMessageLength[l]+=h[1],h[1]=h[0]+(A.fullMessageLength[l]/4294967296>>>0),A.fullMessageLength[l]>>>=0,h[0]=
+h[1]/4294967296>>>0;g.putBytes(b);c(e,x,g);(2048>>0,m+=l,d.putInt32(m>>>0),m=y;y=Array(e.length);for(r=0;rb.blockLength&&(b.start(),b.update(m.bytes()),m=b.digest());c=a.util.createBuffer();d=a.util.createBuffer();k=m.length();for(h=0;h>>4^q)&252645135;q^=b;g^=b<<4;b=(g>>>16^q)&65535;q^=b;g^=b<<16;b=(q>>>2^g)&858993459;g^=b;q^=b<<2;b=(q>>>8^g)&16711935;g^=b;q^=b<<8;b=(g>>>1^q)&1431655765;for(var q=q^b,g=g^b<<1,g=g<<1|g>>>31,q=q<<1|q>>>31,H=0;H>>4|q<<28)^a[T+1];b=g;
-g=q;q=b^(n[P>>>24&63]|k[P>>>16&63]|r[P>>>8&63]|B[P&63]|l[F>>>24&63]|m[F>>>16&63]|h[F>>>8&63]|v[F&63])}b=g;g=q;q=b}g=g>>>1|g<<31;q=q>>>1|q<<31;b=(g>>>1^q)&1431655765;q^=b;g^=b<<1;b=(q>>>8^g)&16711935;g^=b;q^=b<<8;b=(q>>>2^g)&858993459;g^=b;q^=b<<2;b=(g>>>16^q)&65535;q^=b;g^=b<<16;b=(g>>>4^q)&252645135;c[0]=g^b<<4;c[1]=q^b}function g(b){b=b||{};var c="DES-"+(b.mode||"CBC").toUpperCase(),d;d=b.decrypt?a.cipher.createDecipher(c,b.key):a.cipher.createCipher(c,b.key);var e=d.start;d.start=function(b,c){var g=
+e=/([\x21-\x7e]+):\s*([\x21-\x7e\s^:]+)/,g=/\r?\n/,h;;){h=d.exec(b);if(!h)break;var k={type:h[1],procType:null,contentDomain:null,dekInfo:null,headers:[],body:a.util.decode64(h[3])};c.push(k);if(h[2]){for(var v=h[2].split(g),C=0;h&&C>>4^v)&252645135;v^=b;g^=b<<4;b=(g>>>16^v)&65535;v^=b;g^=b<<16;b=(v>>>2^g)&858993459;g^=b;v^=b<<2;b=(v>>>8^g)&16711935;g^=b;v^=b<<8;b=(g>>>1^v)&1431655765;for(var v=v^b,g=g^b<<1,g=g<<1|g>>>31,v=v<<1|v>>>31,J=0;J>>4|v<<28)^a[N+1];b=g;
+g=v;v=b^(n[U>>>24&63]|l[U>>>16&63]|r[U>>>8&63]|C[U&63]|k[L>>>24&63]|m[L>>>16&63]|h[L>>>8&63]|u[L&63])}b=g;g=v;v=b}g=g>>>1|g<<31;v=v>>>1|v<<31;b=(g>>>1^v)&1431655765;v^=b;g^=b<<1;b=(v>>>8^g)&16711935;g^=b;v^=b<<8;b=(v>>>2^g)&858993459;g^=b;v^=b<<2;b=(g>>>16^v)&65535;v^=b;g^=b<<16;b=(g>>>4^v)&252645135;c[0]=g^b<<4;c[1]=v^b}function g(b){b=b||{};var c="DES-"+(b.mode||"CBC").toUpperCase(),d;d=b.decrypt?a.cipher.createDecipher(c,b.key):a.cipher.createCipher(c,b.key);var e=d.start;d.start=function(b,c){var g=
null;c instanceof a.util.ByteBuffer&&(g=c,c={});c=c||{};c.output=g;c.iv=b;e.call(d,c)};return d}a.des=a.des||{};a.des.startEncrypting=function(a,b,c,d){a=g({key:a,output:c,decrypt:!1,mode:d||(null===b?"ECB":"CBC")});a.start(b);return a};a.des.createEncryptionCipher=function(a,b){return g({key:a,output:null,decrypt:!1,mode:b})};a.des.startDecrypting=function(a,b,c,d){a=g({key:a,output:c,decrypt:!0,mode:d||(null===b?"ECB":"CBC")});a.start(b);return a};a.des.createDecryptionCipher=function(a,b){return g({key:a,
output:null,decrypt:!0,mode:b})};a.des.Algorithm=function(a,b){var c=this;c.name=a;c.mode=new b({blockSize:8,cipher:{encrypt:function(a,b){return d(c._keys,a,b,!1)},decrypt:function(a,b){return d(c._keys,a,b,!0)}}});c._init=!1};a.des.Algorithm.prototype.initialize=function(b){if(!this._init){b=a.util.createBuffer(b.key);if(0===this.name.indexOf("3DES")&&24!==b.length())throw Error("Invalid Triple-DES key size: "+8*b.length());for(var c=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,
516,536871424,536871428,66048,66052,536936960,536936964],d=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],e=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],g=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],h=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],
-k=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],q=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],m=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],l=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],r=[0,268435456,8,268435464,0,268435456,
-8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],w=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],F=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],B=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],L=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],n=8>>4^G)&252645135;G^=D;I^=D<<4;D=(G>>>-16^I)&65535;I^=D;G^=D<<-16;D=(I>>>2^G)&858993459;G^=D;I^=D<<2;D=(G>>>-16^I)&65535;I^=D;G^=D<<-16;D=(I>>>1^G)&1431655765;G^=D;I^=D<<1;D=(G>>>8^I)&16711935;I^=D;G^=D<<8;D=(I>>>1^G)&1431655765;G^=D;I^=D<<1;D=I<<8|G>>>20&240;for(var I=G<<24|G<<8&16711680|G>>>8&65280|G>>>24&240,G=D,S=0;S>>26,G=G<<2|G>>>26):(I=I<<1|I>>>27,G=G<<1|G>>>27);
-var I=I&-15,G=G&-15,Z=c[I>>>28]|d[I>>>24&15]|e[I>>>20&15]|g[I>>>16&15]|h[I>>>12&15]|k[I>>>8&15]|q[I>>>4&15],ca=m[G>>>28]|l[G>>>24&15]|r[G>>>20&15]|w[G>>>16&15]|F[G>>>12&15]|B[G>>>8&15]|L[G>>>4&15];D=(ca>>>16^Z)&65535;C[K++]=Z^D;C[K++]=ca^D<<16}}this._keys=C;this._init=!0}};c("DES-ECB",a.cipher.modes.ecb);c("DES-CBC",a.cipher.modes.cbc);c("DES-CFB",a.cipher.modes.cfb);c("DES-OFB",a.cipher.modes.ofb);c("DES-CTR",a.cipher.modes.ctr);c("3DES-ECB",a.cipher.modes.ecb);c("3DES-CBC",a.cipher.modes.cbc);c("3DES-CFB",
-a.cipher.modes.cfb);c("3DES-OFB",a.cipher.modes.ofb);c("3DES-CTR",a.cipher.modes.ctr);var l=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,
+l=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],k=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],m=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],v=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],r=[0,268435456,8,268435464,0,268435456,
+8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],w=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],L=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],C=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],K=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],n=8>>4^F)&252645135;F^=E;H^=E<<4;E=(F>>>-16^H)&65535;H^=E;F^=E<<-16;E=(H>>>2^F)&858993459;F^=E;H^=E<<2;E=(F>>>-16^H)&65535;H^=E;F^=E<<-16;E=(H>>>1^F)&1431655765;F^=E;H^=E<<1;E=(F>>>8^H)&16711935;H^=E;F^=E<<8;E=(H>>>1^F)&1431655765;F^=E;H^=E<<1;E=H<<8|F>>>20&240;for(var H=F<<24|F<<8&16711680|F>>>8&65280|F>>>24&240,F=E,S=0;S>>26,F=F<<2|F>>>26):(H=H<<1|H>>>27,F=F<<1|F>>>27);
+var H=H&-15,F=F&-15,Z=c[H>>>28]|d[H>>>24&15]|e[H>>>20&15]|g[H>>>16&15]|h[H>>>12&15]|l[H>>>8&15]|k[H>>>4&15],ca=m[F>>>28]|v[F>>>24&15]|r[F>>>20&15]|w[F>>>16&15]|L[F>>>12&15]|C[F>>>8&15]|K[F>>>4&15];E=(ca>>>16^Z)&65535;B[O++]=Z^E;B[O++]=ca^E<<16}}this._keys=B;this._init=!0}};c("DES-ECB",a.cipher.modes.ecb);c("DES-CBC",a.cipher.modes.cbc);c("DES-CFB",a.cipher.modes.cfb);c("DES-OFB",a.cipher.modes.ofb);c("DES-CTR",a.cipher.modes.ctr);c("3DES-ECB",a.cipher.modes.ecb);c("3DES-CBC",a.cipher.modes.cbc);c("3DES-CFB",
+a.cipher.modes.cfb);c("3DES-OFB",a.cipher.modes.ofb);c("3DES-CTR",a.cipher.modes.ctr);var k=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,
0,65540,66560,0,16842756],n=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,
-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],m=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,
-8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],k=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,
+8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],l=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,
524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,
524288,0,1074266112,34078976,1073742080],r=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,
-4194320,536887312,0,541081600,536870912,4194320,536887312],v=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,
-67108866,67110912,2048,2097154],B=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,
-268435456,268701696]}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.des)return c.des;c.defined.des=!0;for(var q=0;qA)return q(null,z);n.start(null,
-null);n.update(c);n.update(a.util.int32ToBytes(N));E=H=n.digest().getBytes();u=2;B()}function B(){if(u<=d)return n.start(null,null),n.update(H),O=n.digest().getBytes(),E=a.util.xorBytes(E,O,x),H=O,++u,a.util.setImmediate(B);z+=N4294967295*x){b=Error("Derived key is too long.");
-if(q)return q(b);throw b;}var A=Math.ceil(k/x),y=k-(A-1)*x,n=a.hmac.create();n.start(h,b);var z="",E,O,H;if(!q){for(var N=1;N<=A;++N){n.start(null,null);n.update(c);n.update(a.util.int32ToBytes(N));E=H=n.digest().getBytes();for(var u=2;u<=d;++u)n.start(null,null),n.update(H),O=n.digest().getBytes(),E=a.util.xorBytes(E,O,x),H=O;z+=Nc;++c)b=31===b?2147483648:b<<2,0===b%k.reseeds&&(a.update(k.pools[c].digest().getBytes()),k.pools[c].start());b=a.digest().getBytes();a.start();a.update(b);a=a.digest().getBytes();k.key=k.plugin.formatKey(b);k.seed=k.plugin.formatSeed(a);k.reseeds=4294967295===k.reseeds?0:k.reseeds+1;k.generated=0}function g(b){var c=null;if("undefined"!==typeof window){var d=window.crypto||window.msCrypto;d&&d.getRandomValues&&(c=function(a){return d.getRandomValues(a)})}var e=
-a.util.createBuffer();if(c)for(;e.length()>16),h+=(c&32767)<<16,h+=c>>15,h=(h&2147483647)+(h>>31),c=h&4294967295,h=0;3>h;++h)k=c>>>(h<<3),k^=Math.floor(256*Math.random()),
-e.putByte(String.fromCharCode(k&255));return e.getBytes(b)}var k={plugin:b,key:null,seed:null,time:null,reseeds:0,generated:0};b=b.md;for(var h=Array(32),q=0;32>q;++q)h[q]=b.create();k.pools=h;k.pool=0;k.generate=function(b,d){function e(l){if(l)return d(l);if(m.length()>=b)return d(null,m.getBytes(b));1048575>d&255);k.collect(c)};k.registerWorker=function(a){a===self?k.seedFile=function(a,b){function c(a){a=a.data;a.forge&&a.forge.prng&&(self.removeEventListener("message",c),b(a.forge.prng.err,a.forge.prng.bytes))}self.addEventListener("message",c);self.postMessage({forge:{prng:{needed:a}}})}:a.addEventListener("message",function(b){b=b.data;b.forge&&b.forge.prng&&k.seedFile(b.forge.prng.needed,function(b,c){a.postMessage({forge:{prng:{err:b,bytes:c}}})})})};
-return k}}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.prng)return c.prng;c.defined.prng=!0;for(var q=0;qz)return k(null,y);n.start(null,
+null);n.update(c);n.update(a.util.int32ToBytes(P));D=J=n.digest().getBytes();q=2;C()}function C(){if(q<=d)return n.start(null,null),n.update(J),G=n.digest().getBytes(),D=a.util.xorBytes(D,G,x),J=G,++q,a.util.setImmediate(C);y+=P4294967295*x){b=Error("Derived key is too long.");
+if(k)return k(b);throw b;}var z=Math.ceil(l/x),A=l-(z-1)*x,n=a.hmac.create();n.start(h,b);var y="",D,G,J;if(!k){for(var P=1;P<=z;++P){n.start(null,null);n.update(c);n.update(a.util.int32ToBytes(P));D=J=n.digest().getBytes();for(var q=2;q<=d;++q)n.start(null,null),n.update(J),G=n.digest().getBytes(),D=a.util.xorBytes(D,G,x),J=G;y+=Pc;++c)b=31===b?2147483648:b<<2,0===b%l.reseeds&&(a.update(l.pools[c].digest().getBytes()),l.pools[c].start());b=a.digest().getBytes();a.start();a.update(b);a=a.digest().getBytes();l.key=l.plugin.formatKey(b);l.seed=l.plugin.formatSeed(a);l.reseeds=4294967295===l.reseeds?0:l.reseeds+1;l.generated=0}function g(b){var c=null;if("undefined"!==typeof window){var d=window.crypto||window.msCrypto;d&&d.getRandomValues&&(c=function(a){return d.getRandomValues(a)})}var e=
+a.util.createBuffer();if(c)for(;e.length()>16),h+=(c&32767)<<16,h+=c>>15,h=(h&2147483647)+(h>>31),c=h&4294967295,h=0;3>h;++h)l=c>>>(h<<3),l^=Math.floor(256*Math.random()),
+e.putByte(String.fromCharCode(l&255));return e.getBytes(b)}var l={plugin:b,key:null,seed:null,time:null,reseeds:0,generated:0};b=b.md;for(var h=Array(32),k=0;32>k;++k)h[k]=b.create();l.pools=h;l.pool=0;l.generate=function(b,d){function e(v){if(v)return d(v);if(m.length()>=b)return d(null,m.getBytes(b));1048575>d&255);l.collect(c)};l.registerWorker=function(a){a===self?l.seedFile=function(a,b){function c(a){a=a.data;a.forge&&a.forge.prng&&(self.removeEventListener("message",c),b(a.forge.prng.err,a.forge.prng.bytes))}self.addEventListener("message",c);self.postMessage({forge:{prng:{needed:a}}})}:a.addEventListener("message",function(b){b=b.data;b.forge&&b.forge.prng&&l.seedFile(b.forge.prng.needed,function(b,c){a.postMessage({forge:{prng:{err:b,bytes:c}}})})})};
+return l}}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var u,n=function(a,c){c.exports=function(c){var g=u.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||{};if(c.defined.prng)return c.prng;c.defined.prng=!0;for(var k=0;k>(h&7),n;for(n=g;128>n;n++)e.putByte(c[e.at(n-
-1)+e.at(n-g)&255]);e.setAt(128-l,c[e.at(128-l)&h]);for(n=127-l;0<=n;n--)e.setAt(n,c[e.at(n+1)^e.at(n+l)]);return e};var g=function(b,c,g){var k=!1,h=null,q=null,l=null,n,x,A,y,v=[];b=a.rc2.expandKey(b,c);for(A=0;64>A;A++)v.push(b.getInt16Le());g?(n=function(a){for(A=0;4>A;A++){a[A]+=v[y]+(a[(A+3)%4]&a[(A+2)%4])+(~a[(A+3)%4]&a[(A+1)%4]);var b=a[A],c=d[A];a[A]=b<>16-c;y++}},x=function(a){for(A=0;4>A;A++)a[A]+=v[a[(A+3)%4]&63]}):(n=function(a){for(A=3;0<=A;A--){var b=a[A],c=d[A];a[A]=
-(b&65535)>>c|b<<16-c&65535;a[A]-=v[y]+(a[(A+3)%4]&a[(A+2)%4])+(~a[(A+3)%4]&a[(A+1)%4]);y--}},x=function(a){for(A=3;0<=A;A--)a[A]-=v[a[(A+3)%4]&63]});var z=null;return z={start:function(b,c){b&&"string"===typeof b&&(b=a.util.createBuffer(b));k=!1;h=a.util.createBuffer();q=c||new a.util.createBuffer;l=b;z.output=q},update:function(a){for(k||h.putBuffer(a);8<=h.length();){a=[[5,n],[1,x],[6,n],[1,x],[5,n]];var b=[];for(A=0;4>A;A++){var c=h.getInt16Le();null!==l&&(g?c^=l.getInt16Le():l.putInt16Le(c));
-b.push(c&65535)}y=g?0:63;for(c=0;cA;A++)null!==l&&(g?l.putInt16Le(b[A]):b[A]^=l.getInt16Le()),q.putInt16Le(b[A])}},finish:function(a){var b=!0;if(g)if(a)b=a(8,h,!g);else{var c=8===h.length()?8:8-h.length();h.fillWithByte(c,c)}b&&(k=!0,z.update());!g&&(b=0===h.length())&&(a?b=a(8,q,!g):(a=q.length(),c=q.at(a-1),c>a?b=!1:q.truncate(c)));return b}}};a.rc2.startEncrypting=function(b,c,d){b=a.rc2.createEncryptionCipher(b,128);b.start(c,d);return b};
-a.rc2.createEncryptionCipher=function(a,b){return g(a,b,!0)};a.rc2.startDecrypting=function(b,c,d){b=a.rc2.createDecryptionCipher(b,128);b.start(c,d);return b};a.rc2.createDecryptionCipher=function(a,b){return g(a,b,!1)}}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var v,n=function(a,c){c.exports=function(c){var g=v.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||
-{};if(c.defined.rc2)return c.rc2;c.defined.rc2=!0;for(var q=0;q>=15;0<=--p;){var h=this.data[a]&32767,z=this.data[a++]>>15,k=b*h+z*g,h=g*h+((k&32767)<<15)+c.data[d]+(e&1073741823);e=(h>>>30)+(k>>>15)+b*z+(e>>>30);c.data[d++]=h&1073741823}return e}function n(a,b,
-c,d,e,g){var p=b&16383;for(b>>=14;0<=--g;){var h=this.data[a]&16383,z=this.data[a++]>>14,k=b*h+z*p,h=p*h+((k&16383)<<14)+c.data[d]+e;e=(h>>28)+(k>>14)+b*z;c.data[d++]=h&268435455}return e}function m(a,b){var c=N[a.charCodeAt(b)];return null==c?-1:c}function k(a){var b=d();b.fromInt(a);return b}function h(a){var b=1,c;0!=(c=a>>>16)&&(a=c,b+=16);0!=(c=a>>8)&&(a=c,b+=8);0!=(c=a>>4)&&(a=c,b+=4);0!=(c=a>>2)&&(a=c,b+=2);0!=a>>1&&(b+=1);return b}function r(a){this.m=a}function v(a){this.m=a;this.mp=a.invDigit();
-this.mpl=this.mp&32767;this.mph=this.mp>>15;this.um=(1<=u;++u)N[H++]=u;H=97;for(u=10;36>u;++u)N[H++]=u;H=65;for(u=10;36>u;++u)N[H++]=u;r.prototype.convert=function(a){return 0>a.s||0<=a.compareTo(this.m)?a.mod(this.m):a};r.prototype.revert=function(a){return a};r.prototype.reduce=
-function(a){a.divRemTo(this.m,null,a)};r.prototype.mulTo=function(a,b,c){a.multiplyTo(b,c);this.reduce(c)};r.prototype.sqrTo=function(a,b){a.squareTo(b);this.reduce(b)};v.prototype.convert=function(a){var b=d();a.abs().dlShiftTo(this.m.t,b);b.divRemTo(this.m,null,b);0>a.s&&0>15)*this.mpl&this.um)<<15)&a.DM,c=b+this.m.t;for(a.data[c]+=this.m.am(0,d,a,b,0,this.m.t);a.data[c]>=a.DV;)a.data[c]-=a.DV,a.data[++c]++}a.clamp();a.drShiftTo(this.m.t,a);0<=a.compareTo(this.m)&&a.subTo(this.m,a)};v.prototype.mulTo=function(a,b,c){a.multiplyTo(b,c);this.reduce(c)};v.prototype.sqrTo=function(a,b){a.squareTo(b);this.reduce(b)};c.prototype.copyTo=function(a){for(var b=this.t-1;0<=b;--b)a.data[b]=this.data[b];a.t=this.t;a.s=this.s};
+175,80,161,244,112,57,153,124,58,133,35,184,180,122,252,2,54,91,37,85,151,49,45,93,250,152,227,138,146,174,5,223,41,16,103,108,186,201,211,0,230,207,225,158,168,44,99,22,1,63,88,226,137,169,13,56,52,27,171,51,255,176,187,72,12,95,185,177,205,46,197,243,219,71,229,165,156,119,10,166,32,104,254,127,193,173],d=[1,2,3,5];a.rc2=a.rc2||{};a.rc2.expandKey=function(b,d){"string"===typeof b&&(b=a.util.createBuffer(b));d=d||128;var e=b,g=b.length(),h=d,k=Math.ceil(h/8),h=255>>(h&7),n;for(n=g;128>n;n++)e.putByte(c[e.at(n-
+1)+e.at(n-g)&255]);e.setAt(128-k,c[e.at(128-k)&h]);for(n=127-k;0<=n;n--)e.setAt(n,c[e.at(n+1)^e.at(n+k)]);return e};var g=function(b,c,g){var l=!1,h=null,k=null,v=null,n,x,z,A,B=[];b=a.rc2.expandKey(b,c);for(z=0;64>z;z++)B.push(b.getInt16Le());g?(n=function(a){for(z=0;4>z;z++){a[z]+=B[A]+(a[(z+3)%4]&a[(z+2)%4])+(~a[(z+3)%4]&a[(z+1)%4]);var b=a[z],c=d[z];a[z]=b<>16-c;A++}},x=function(a){for(z=0;4>z;z++)a[z]+=B[a[(z+3)%4]&63]}):(n=function(a){for(z=3;0<=z;z--){var b=a[z],c=d[z];a[z]=
+(b&65535)>>c|b<<16-c&65535;a[z]-=B[A]+(a[(z+3)%4]&a[(z+2)%4])+(~a[(z+3)%4]&a[(z+1)%4]);A--}},x=function(a){for(z=3;0<=z;z--)a[z]-=B[a[(z+3)%4]&63]});var y=null;return y={start:function(b,c){b&&"string"===typeof b&&(b=a.util.createBuffer(b));l=!1;h=a.util.createBuffer();k=c||new a.util.createBuffer;v=b;y.output=k},update:function(a){for(l||h.putBuffer(a);8<=h.length();){a=[[5,n],[1,x],[6,n],[1,x],[5,n]];var b=[];for(z=0;4>z;z++){var c=h.getInt16Le();null!==v&&(g?c^=v.getInt16Le():v.putInt16Le(c));
+b.push(c&65535)}A=g?0:63;for(c=0;cz;z++)null!==v&&(g?v.putInt16Le(b[z]):b[z]^=v.getInt16Le()),k.putInt16Le(b[z])}},finish:function(a){var b=!0;if(g)if(a)b=a(8,h,!g);else{var c=8===h.length()?8:8-h.length();h.fillWithByte(c,c)}b&&(l=!0,y.update());!g&&(b=0===h.length())&&(a?b=a(8,k,!g):(a=k.length(),c=k.at(a-1),c>a?b=!1:k.truncate(c)));return b}}};a.rc2.startEncrypting=function(b,c,d){b=a.rc2.createEncryptionCipher(b,128);b.start(c,d);return b};
+a.rc2.createEncryptionCipher=function(a,b){return g(a,b,!0)};a.rc2.startDecrypting=function(b,c,d){b=a.rc2.createDecryptionCipher(b,128);b.start(c,d);return b};a.rc2.createDecryptionCipher=function(a,b){return g(a,b,!1)}}if("function"!==typeof a)if("object"===typeof module&&module.exports){var g=!0;a=function(a,b){b(c,module)}}else return"undefined"===typeof forge&&(forge={}),b(forge);var u,n=function(a,c){c.exports=function(c){var g=u.map(function(b){return a(b)}).concat(b);c=c||{};c.defined=c.defined||
+{};if(c.defined.rc2)return c.rc2;c.defined.rc2=!0;for(var k=0;k>=15;0<=--p;){var h=this.data[a]&32767,y=this.data[a++]>>15,l=b*h+y*g,h=g*h+((l&32767)<<15)+c.data[d]+(e&1073741823);e=(h>>>30)+(l>>>15)+b*y+(e>>>30);c.data[d++]=h&1073741823}return e}function n(a,b,
+c,d,e,p){var g=b&16383;for(b>>=14;0<=--p;){var h=this.data[a]&16383,y=this.data[a++]>>14,l=b*h+y*g,h=g*h+((l&16383)<<14)+c.data[d]+e;e=(h>>28)+(l>>14)+b*y;c.data[d++]=h&268435455}return e}function m(a,b){var c=P[a.charCodeAt(b)];return null==c?-1:c}function l(a){var b=d();b.fromInt(a);return b}function h(a){var b=1,c;0!=(c=a>>>16)&&(a=c,b+=16);0!=(c=a>>8)&&(a=c,b+=8);0!=(c=a>>4)&&(a=c,b+=4);0!=(c=a>>2)&&(a=c,b+=2);0!=a>>1&&(b+=1);return b}function r(a){this.m=a}function u(a){this.m=a;this.mp=a.invDigit();
+this.mpl=this.mp&32767;this.mph=this.mp>>15;this.um=(1<=q;++q)P[J++]=q;J=97;for(q=10;36>q;++q)P[J++]=q;J=65;for(q=10;36>q;++q)P[J++]=q;r.prototype.convert=function(a){return 0>a.s||0<=a.compareTo(this.m)?a.mod(this.m):a};r.prototype.revert=function(a){return a};r.prototype.reduce=
+function(a){a.divRemTo(this.m,null,a)};r.prototype.mulTo=function(a,b,c){a.multiplyTo(b,c);this.reduce(c)};r.prototype.sqrTo=function(a,b){a.squareTo(b);this.reduce(b)};u.prototype.convert=function(a){var b=d();a.abs().dlShiftTo(this.m.t,b);b.divRemTo(this.m,null,b);0>a.s&&0>15)*this.mpl&this.um)<<15)&a.DM,c=b+this.m.t;for(a.data[c]+=this.m.am(0,d,a,b,0,this.m.t);a.data[c]>=a.DV;)a.data[c]-=a.DV,a.data[++c]++}a.clamp();a.drShiftTo(this.m.t,a);0<=a.compareTo(this.m)&&a.subTo(this.m,a)};u.prototype.mulTo=function(a,b,c){a.multiplyTo(b,c);this.reduce(c)};u.prototype.sqrTo=function(a,b){a.squareTo(b);this.reduce(b)};c.prototype.copyTo=function(a){for(var b=this.t-1;0<=b;--b)a.data[b]=this.data[b];a.t=this.t;a.s=this.s};
c.prototype.fromInt=function(a){this.t=1;this.s=0>a?-1:0;0a?this.data[0]=a+this.DV:this.t=0};c.prototype.fromString=function(a,b){var d;if(16==b)d=4;else if(8==b)d=3;else if(256==b)d=8;else if(2==b)d=1;else if(32==b)d=5;else if(4==b)d=2;else{this.fromRadix(a,b);return}this.s=this.t=0;for(var e=a.length,p=!1,g=0;0<=--e;){var h=8==d?a[e]&255:m(a,e);0>h?"-"==a.charAt(e)&&(p=!0):(p=!1,0==g?this.data[this.t++]=h:g+d>this.DB?(this.data[this.t-1]|=(h&(1<>this.DB-g):this.data[this.t-1]|=h<=this.DB&&(g-=this.DB))}8==d&&0!=(a[0]&128)&&(this.s=-1,0>d|p,p=(this.data[h]&e)<=this.t)b.t=0;else{var d=a%this.DB,e=this.DB-d,g=(1<>d;for(var p=
-c+1;p>d;0>=this.DB;if(a.t>=this.DB;d+=this.s}else{for(d+=this.s;c>=this.DB;d-=a.s}b.s=0>d?-1:0;-1>d?b.data[c++]=this.DV+d:0=b.DV&&(a.data[c+b.t]-=b.DV,a.data[c+b.t+1]=1)}0=p.t)){var z=this.abs();if(z.t>this.F2:0),u=this.FV/E,E=(1<m&&c.ZERO.subTo(g,g)}}}};c.prototype.invDigit=function(){if(1>this.t)return 0;var a=this.data[0];if(0==(a&1))return 0;var b=a&3,b=b*(2-
-(a&15)*b)&15,b=b*(2-(a&255)*b)&255,b=b*(2-((a&65535)*b&65535))&65535,b=b*(2-a*b%this.DV)%this.DV;return 0a)return c.ONE;var g=d(),p=d(),z=b.convert(this),k=h(a)-1;for(z.copyTo(g);0<=--k;)if(b.sqrTo(g,p),0<(a&1<this.s)return"-"+this.negate().toString(a);if(16==a)a=
-4;else if(8==a)a=3;else if(2==a)a=1;else if(32==a)a=5;else if(4==a)a=2;else return this.toRadix(a);var b=(1<