RTL/controllers/authenticate.js

var ini = require('ini');
var path = require('path');
var fs = require('fs');
var rtl_config_path = path.normalize(__dirname + '/..') + '/RTL.conf';
const jwt = require("jsonwebtoken");
var upperCase = require('upper-case');
var atob = require('atob');

exports.authenticateUser = (req, res, next) => {
  password = atob(req.body.password);
  fs.readFile(rtl_config_path, 'utf8', function (err, data) {
    if (err) {
      console.log('RTL Config Reading Failed!');
      res.status(500).json({
        message: "RTL Config Reading Failed!",
        error: err
      });
    } else {
      var jsonRTLConfig = ini.parse(data);
      const nodeAuthType = jsonRTLConfig.Authentication.nodeAuthType;
      const macaroonPath = jsonRTLConfig.Authentication.macroonPath;
      const lndConfigPath = (undefined !== jsonRTLConfig.Authentication.lndConfigPath) ? jsonRTLConfig.Authentication.lndConfigPath : '';
      if(upperCase(nodeAuthType) === 'CUSTOM') {
        const rtlPass = jsonRTLConfig.Authentication.rtlPass;
        if (rtlPass === password) {
          var rpcUser = 'Custom_User';
          const token = jwt.sign(
            { user: rpcUser, lndConfigPath: lndConfigPath, macaroonPath: macaroonPath },
            'RTL_default_secret_it_can_be_changed_by_user',
            { expiresIn: "1h" }
          );
          res.status(200).json({
            token: token,
            expiresIn: 3600
          });
        } else {
          res.status(401).json({
            message: "Authentication Failed!",
            error: "Password Validation Failed!"
          });
        }
      } else {
        fs.readFile(lndConfigPath, 'utf8', function (err, data) {
          if (err) {
            console.log('LND Config Reading Failed!');
            res.status(500).json({
              message: "LND Config Reading Failed!",
              error: err
            });
          } else {
            const jsonLNDConfig = ini.parse(data);
            if (undefined !== jsonLNDConfig.Bitcoind && undefined !== jsonLNDConfig.Bitcoind['bitcoind.rpcpass']) {
              if (jsonLNDConfig.Bitcoind['bitcoind.rpcpass'] === password) {
                var rpcUser = (undefined !== jsonLNDConfig.Bitcoind['bitcoind.rpcuser']) ? jsonLNDConfig.Bitcoind['bitcoind.rpcuser'] : '';
                const token = jwt.sign(
                  { user: rpcUser, lndConfigPath: lndConfigPath, macaroonPath: macaroonPath },
                  'RTL_default_secret_it_can_be_changed_by_user',
                  { expiresIn: "1h" }
                );
                res.status(200).json({
                  token: token,
                  expiresIn: 3600
                });
              } else {
                res.status(401).json({
                  message: "Authentication Failed!",
                  error: "Password Validation Failed!"
                });
              }
            } else {
              res.status(401).json({
                message: "Authentication Failed!",
                error: "Password Not Found In LND Config!"
              });
            }
          }
        });
      }
    }
  })
};