server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xaf24=['refresh_token','data6','decryptString','{TENANT_ID}','data5','access_token','update','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','POST','intervals','bind','all','inspect','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','lodash','crypto','jsonwebtoken','moment','request-promise','util','../../components/encryptor','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','profile','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','/token','map','type','Dynamics365','push','data7','join','Outlook365','replace','data2','code','id_token','from','stringify','toString','base64','randomBytes','hex','client_id','data1','response_type','data4','response_mode','scope','state','prompt','key','oauth2/','set','decode','payload','iss','issuer','aud','nonce','unix','data3','CloudProvider','findOne','then'];(function(_0x40a206,_0x46f2c2){var _0x52dabc=function(_0x5c354b){while(--_0x5c354b){_0x40a206['push'](_0x40a206['shift']());}};_0x52dabc(++_0x46f2c2);}(_0xaf24,0x18d));var _0x4af2=function(_0x55b728,_0xe943c2){_0x55b728=_0x55b728-0x0;var _0x54773f=_0xaf24[_0x55b728];return _0x54773f;};'use strict';var _=require(_0x4af2('0x0'));var crypto=require(_0x4af2('0x1'));var jwt=require(_0x4af2('0x2'));var moment=require(_0x4af2('0x3'));var Redis=require('ioredis');var rp=require(_0x4af2('0x4'));var util=require(_0x4af2('0x5'));var encryptor=require(_0x4af2('0x6'));var config=require('../../config/environment');var logger=require('../../config/logger')(_0x4af2('0x7'));var schedule=require(_0x4af2('0x8'));var db=require(_0x4af2('0x9'))['db'];config[_0x4af2('0xa')]=_[_0x4af2('0xb')](config[_0x4af2('0xa')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0x4af2('0xa')]);var MICROSOFT_AUTH_URL=_0x4af2('0xc');var AZURE_AUTH_SCOPES={'Outlook365':[_0x4af2('0xd'),_0x4af2('0xe'),'email',_0x4af2('0xf'),_0x4af2('0x10'),_0x4af2('0x11'),_0x4af2('0x12')],'Dynamics365':[_0x4af2('0xd'),_0x4af2('0xf')]};var MICROSOFT_AUTH_ENDPOINT='/authorize';var MICROSOFT_TOKEN_ENDPOINT=_0x4af2('0x13');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x82b3b2){var _0x5ec76b=_[_0x4af2('0x14')](AZURE_AUTH_SCOPES[_0x82b3b2[_0x4af2('0x15')]]);if(_0x82b3b2[_0x4af2('0x15')]===_0x4af2('0x16'))_0x5ec76b[_0x4af2('0x17')](_0x82b3b2[_0x4af2('0x18')]+'/.default');return _0x5ec76b[_0x4af2('0x19')]('\x20');}function getAccessTokenScope(_0x41b8b7){if(_0x41b8b7[_0x4af2('0x15')]===_0x4af2('0x1a'))return'https://outlook.office365.com/IMAP.AccessAsUser.All';if(_0x41b8b7[_0x4af2('0x15')]===_0x4af2('0x16'))return _0x41b8b7['data7']+'/.default';}function generateMicrosoftAuthorizationUrl(_0x533031,_0x464129){var _0x676bfa=MICROSOFT_AUTH_URL[_0x4af2('0x1b')]('{TENANT_ID}',_0x533031[_0x4af2('0x1c')]);var _0x345d40=[_0x4af2('0x1d'),_0x4af2('0x1e')];var _0x17c20c=Buffer[_0x4af2('0x1f')](JSON[_0x4af2('0x20')]({'id':_0x464129}))[_0x4af2('0x21')](_0x4af2('0x22'));var _0x2f07d2=crypto[_0x4af2('0x23')](0x10)[_0x4af2('0x21')](_0x4af2('0x24'));var _0x2e54cc=getAuthorizationScopes(_0x533031);var _0x431b98=[{'key':_0x4af2('0x25'),'value':_0x533031[_0x4af2('0x26')]},{'key':_0x4af2('0x27'),'value':encodeURIComponent(_0x345d40['join']('\x20'))},{'key':'redirect_uri','value':_0x533031[_0x4af2('0x28')]},{'key':_0x4af2('0x29'),'value':'form_post'},{'key':_0x4af2('0x2a'),'value':encodeURIComponent(_0x2e54cc)},{'key':_0x4af2('0x2b'),'value':_0x17c20c},{'key':'nonce','value':_0x2f07d2},{'key':_0x4af2('0x2c'),'value':'login'}];var _0xf810a=_0x676bfa+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x4af2('0x14')](_0x431b98,function(_0x3b896e){return _0x3b896e[_0x4af2('0x2d')]+'='+_0x3b896e['value'];})[_0x4af2('0x19')]('&');_0x533031['oauth2Claims']={'issuer':_0x676bfa[_0x4af2('0x1b')](_0x4af2('0x2e'),''),'audience':_0x533031[_0x4af2('0x26')],'state':_0x17c20c,'nonce':_0x2f07d2};redis[_0x4af2('0x2f')](_0x17c20c,JSON[_0x4af2('0x20')](_0x533031));return _0xf810a;}function isValidIdToken(_0x9f4dfe,_0x49f395){try{var _0x356bcb=jwt[_0x4af2('0x30')](_0x9f4dfe,{'complete':!![]});var _0x50ea97=_0x356bcb[_0x4af2('0x31')];if(_0x50ea97[_0x4af2('0x32')]!==_0x49f395[_0x4af2('0x33')])return![];if(_0x50ea97[_0x4af2('0x34')]!==_0x49f395['audience'])return![];if(_0x50ea97[_0x4af2('0x35')]!==_0x49f395[_0x4af2('0x35')])return![];if(moment()['isAfter'](moment[_0x4af2('0x36')](_0x50ea97['exp'])))return![];return!![];}catch(_0x5ee3e9){throw _0x5ee3e9;}}function refreshOauth2MicrosoftAccessToken(_0x100129){return Promise['resolve']()['then'](function(){if(_0x100129[_0x4af2('0x37')])return _0x100129;return db[_0x4af2('0x38')][_0x4af2('0x39')]({'where':{'id':_0x100129['id']},'raw':!![]});})[_0x4af2('0x3a')](function(_0x8c9fc0){var _0x59fa10={'grant_type':_0x4af2('0x3b'),'refresh_token':_0x8c9fc0[_0x4af2('0x3c')],'scope':getAccessTokenScope(_0x8c9fc0),'redirect_uri':_0x8c9fc0['data4'],'client_id':_0x8c9fc0[_0x4af2('0x26')],'client_secret':encryptor[_0x4af2('0x3d')](_0x8c9fc0[_0x4af2('0x37')])};var _0x443e6b={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x4af2('0x1b')](_0x4af2('0x3e'),_0x8c9fc0[_0x4af2('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x59fa10,'json':!![]};return rp(_0x443e6b);})[_0x4af2('0x3a')](function(_0x4ff0d1){_0x100129[_0x4af2('0x3f')]=_0x4ff0d1[_0x4af2('0x40')];_0x100129[_0x4af2('0x3c')]=_0x4ff0d1[_0x4af2('0x3b')];return db[_0x4af2('0x38')][_0x4af2('0x41')]({'data5':_0x100129[_0x4af2('0x3f')],'data6':_0x100129[_0x4af2('0x3c')]},{'where':{'id':_0x100129['id']}});})[_0x4af2('0x3a')](function(){return _0x100129;})[_0x4af2('0x42')](function(_0x139d20){logger[_0x4af2('0x43')](_0x4af2('0x44'),_0x100129['id'],_0x139d20);});}function getOauth2MicrosoftAccessToken(_0x461c7a,_0x21501b){var _0xf711c5={'grant_type':_0x4af2('0x45'),'code':_0x461c7a,'scope':getAccessTokenScope(_0x21501b),'redirect_uri':_0x21501b[_0x4af2('0x28')],'client_id':_0x21501b[_0x4af2('0x26')],'client_secret':encryptor['decryptString'](_0x21501b[_0x4af2('0x37')])};var _0x1069ee={'method':_0x4af2('0x46'),'uri':MICROSOFT_AUTH_URL[_0x4af2('0x1b')]('{TENANT_ID}',_0x21501b[_0x4af2('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0xf711c5,'json':!![]};return rp(_0x1069ee);}function startRefreshInterval(_0x1fabad){var _0x41d9fd=schedule[_0x4af2('0x47')];if(_0x41d9fd[_0x1fabad['id']])clearInterval(_0x41d9fd[_0x1fabad['id']]);_0x41d9fd[_0x1fabad['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x4af2('0x48')](this,{'id':_0x1fabad['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule['intervals']=_0x41d9fd;}function startAllRefreshIntervals(){return db[_0x4af2('0x38')]['findAll']({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x4af2('0x3a')](function(_0x11095e){var _0x32ac8d=_0x11095e[_0x4af2('0x14')](function(_0x10974b){return refreshOauth2MicrosoftAccessToken(_0x10974b)[_0x4af2('0x3a')](function(_0x4f156b){startRefreshInterval(_0x4f156b);});});return Promise[_0x4af2('0x49')](_0x32ac8d);})[_0x4af2('0x42')](function(_0x17c225){var _0x5c9c4e=_0x17c225?util[_0x4af2('0x4a')](_0x17c225,{'showHidden':![],'depth':null}):'';logger[_0x4af2('0x43')](_0x4af2('0x4b'),_0x5c9c4e);});}module['exports']={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};