@ -3,7 +3,6 @@ const bcrypt = require('bcrypt');
const crypto = require ( 'crypto' ) ;
const { CipherSeed } = require ( 'aezeed' ) ;
const iocane = require ( "iocane" ) ;
const compose = require ( "docker-compose" ) ;
const diskLogic = require ( 'logic/disk.js' ) ;
const lndApiService = require ( 'services/lndApi.js' ) ;
const bashService = require ( 'services/bash.js' ) ;
@ -46,81 +45,37 @@ const setSystemPassword = async password => {
await diskLogic . writeSignalFile ( 'change-password' ) ;
}
// Change the device and lnd password.
// Change the dashboard and system password.
async function changePassword ( currentPassword , newPassword , jwt ) {
resetChangePasswordStatus ( ) ;
changePasswordStatus . percent = 1 ; // eslint-disable-line no-magic-numbers
// restart lnd
try {
await compose . restartOne ( 'lnd' , { cwd : constants . DOCKER_COMPOSE_DIRECTORY } ) ;
} catch ( error ) {
throw new Error ( 'Unable to change password as lnd wouldn\'t restart' ) ;
}
changePasswordStatus . percent = 40 ; // eslint-disable-line no-magic-numbers
let complete = false ;
let attempt = 0 ;
const MAX_ATTEMPTS = 20 ;
do {
try {
attempt ++ ;
// call lnapi to change password
changePasswordStatus . percent = 60 + attempt ; // eslint-disable-line no-magic-numbers
await lndApiService . changePassword ( currentPassword , newPassword , jwt ) ;
// update user file
const user = await diskLogic . readUserFile ( ) ;
const credentials = hashCredentials ( SYSTEM_USER , newPassword ) ;
// re-encrypt seed with new password
const decryptedSeed = await iocane . createSession ( ) . decrypt ( user . seed , currentPassword ) ;
const encryptedSeed = await iocane . createSession ( ) . encrypt ( decryptedSeed , newPassword ) ;
// update user file
await diskLogic . writeUserFile ( { ... user , password : credentials . password , seed : encryptedSeed } ) ;
// update system password
await setSystemPassword ( newPassword ) ;
complete = true ;
// update user file
const user = await diskLogic . readUserFile ( ) ;
const credentials = hashCredentials ( SYSTEM_USER , newPassword ) ;
// cache the password for later use
cachePassword ( newPassword ) ;
// re-encrypt seed with new password
const decryptedSeed = await iocane . createSession ( ) . decrypt ( user . seed , currentPassword ) ;
const encryptedSeed = await iocane . createSession ( ) . encrypt ( decryptedSeed , newPassword ) ;
changePasswordStatus . percent = 100 ;
} catch ( error ) {
// update user file
await diskLogic . writeUserFile ( { ... user , password : credentials . password , seed : encryptedSeed } ) ;
// wait for lnd to boot up
if ( error . response . status === constants . STATUS_CODES . BAD_GATEWAY ) {
await sleepSeconds ( 1 ) ;
// update system password
await setSystemPassword ( newPassword ) ;
// user supplied incorrect credentials
} else if ( error . response . status === constants . STATUS_CODES . FORBIDDEN ) {
changePasswordStatus . unauthorized = true ;
changePasswordStatus . percent = 100 ;
complete = true ;
// unknown error occurred
} else {
changePasswordStatus . error = true ;
changePasswordStatus . percent = 100 ;
throw error ;
}
}
} while ( ! complete && attempt < MAX_ATTEMPTS && ! changePasswordStatus . unauthorized && ! changePasswordStatus . error ) ;
if ( ! complete && attempt === MAX_ATTEMPTS ) {
changePasswordStatus . error = true ;
changePasswordStatus . percent = 100 ;
// cache the password for later use
cachePassword ( newPassword ) ;
} catch ( error ) {
changePasswordStatus . percent = 100 ;
changePasswordStatus . error = true ;
throw new Error ( 'Unable to change password' ) ;
throw new Error ( 'Unable to change password' ) ;
}
}
function getChangePasswordStatus ( ) {
@ -160,6 +115,23 @@ async function deriveUmbrelSeed(user) {
return diskLogic . writeUmbrelSeedFile ( umbrelSeed ) ;
}
// Sets the LND password to a hardcoded password if it's locked so we can
// auto unlock it in future
async function removeLndPasswordIfLocked ( currentPassword , jwt ) {
const lndStatus = await lndApiService . getStatus ( ) ;
if ( ! lndStatus . data . unlocked ) {
console . log ( 'LND is locked on login, attempting to change password...' ) ;
try {
await lndApiService . changePassword ( currentPassword , constants . LND_WALLET_PASSWORD , jwt ) ;
console . log ( 'Sucessfully changed LND password!' ) ;
} catch ( e ) {
console . log ( 'Failed to change LND password!' ) ;
}
}
}
// Log the user into the device. Caches the password if login is successful. Then returns jwt.
async function login ( user ) {
try {
@ -169,15 +141,17 @@ async function login(user) {
// cachePassword(user.plainTextPassword);
cachePassword ( user . password ) ;
//unlock lnd wallet
// await lndApiService.unlock(user.plainTextPassword, jwt);
deriveUmbrelSeed ( user )
// This is only needed temporarily to update hardcoded passwords
// on existing users without requiring them to change their password
setSystemPassword ( user . password ) ;
// This is only needed temporarily to remove the user set LND wallet
// password for old users and change it to a hardcoded one so we can
// auto unlock it in the future.
removeLndPasswordIfLocked ( user . password , jwt ) ;
return { jwt : jwt } ;
} catch ( error ) {
@ -260,7 +234,7 @@ async function register(user, seed) {
//initialize lnd wallet
try {
await lndApiService . initializeWallet ( user . plainTextPassword , seed , jwt ) ;
await lndApiService . initializeWallet ( constants . LND_WALLET_PASSWORD , seed , jwt ) ;
} catch ( error ) {
await diskLogic . deleteUserFile ( ) ;
throw new NodeError ( error . response . data ) ;
GitHub