server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xe0fe=['join','Outlook365','{TENANT_ID}','data2','code','stringify','toString','base64','hex','data1','response_type','redirect_uri','data4','response_mode','state','prompt','login','key','value','oauth2Claims','decode','iss','issuer','aud','audience','nonce','isAfter','unix','exp','resolve','data3','CloudProvider','findOne','then','data6','POST','data5','access_token','refresh_token','update','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','replace','intervals','bind','findAll','all','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','lodash','crypto','jsonwebtoken','moment','ioredis','request-promise','../../components/encryptor','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','profile','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','openid','/authorize','map','type','Dynamics365','push','data7','/.default'];(function(_0xd15aec,_0x46be26){var _0x461053=function(_0x267ca0){while(--_0x267ca0){_0xd15aec['push'](_0xd15aec['shift']());}};_0x461053(++_0x46be26);}(_0xe0fe,0x15e));var _0xee0f=function(_0x44eda0,_0x273ebb){_0x44eda0=_0x44eda0-0x0;var _0x10af93=_0xe0fe[_0x44eda0];return _0x10af93;};'use strict';var _=require(_0xee0f('0x0'));var crypto=require(_0xee0f('0x1'));var jwt=require(_0xee0f('0x2'));var moment=require(_0xee0f('0x3'));var Redis=require(_0xee0f('0x4'));var rp=require(_0xee0f('0x5'));var util=require('util');var encryptor=require(_0xee0f('0x6'));var config=require('../../config/environment');var logger=require('../../config/logger')(_0xee0f('0x7'));var schedule=require(_0xee0f('0x8'));var db=require(_0xee0f('0x9'))['db'];config[_0xee0f('0xa')]=_[_0xee0f('0xb')](config[_0xee0f('0xa')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0xee0f('0xa')]);var MICROSOFT_AUTH_URL=_0xee0f('0xc');var AZURE_AUTH_SCOPES={'Outlook365':['openid',_0xee0f('0xd'),'email',_0xee0f('0xe'),_0xee0f('0xf'),'https://outlook.office.com/POP.AccessAsUser.All',_0xee0f('0x10')],'Dynamics365':[_0xee0f('0x11'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0xee0f('0x12');var MICROSOFT_TOKEN_ENDPOINT='/token';var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x14b7ae){var _0xfdc564=_[_0xee0f('0x13')](AZURE_AUTH_SCOPES[_0x14b7ae[_0xee0f('0x14')]]);if(_0x14b7ae[_0xee0f('0x14')]===_0xee0f('0x15'))_0xfdc564[_0xee0f('0x16')](_0x14b7ae[_0xee0f('0x17')]+_0xee0f('0x18'));return _0xfdc564[_0xee0f('0x19')]('\x20');}function getAccessTokenScope(_0xdaf2fb){if(_0xdaf2fb[_0xee0f('0x14')]===_0xee0f('0x1a'))return _0xee0f('0xf');if(_0xdaf2fb[_0xee0f('0x14')]===_0xee0f('0x15'))return _0xdaf2fb[_0xee0f('0x17')]+_0xee0f('0x18');}function generateMicrosoftAuthorizationUrl(_0x460962,_0x2a5239){var _0x11370e=MICROSOFT_AUTH_URL['replace'](_0xee0f('0x1b'),_0x460962[_0xee0f('0x1c')]);var _0x12ce30=[_0xee0f('0x1d'),'id_token'];var _0x2b1ba6=Buffer['from'](JSON[_0xee0f('0x1e')]({'id':_0x2a5239}))[_0xee0f('0x1f')](_0xee0f('0x20'));var _0x40124e=crypto['randomBytes'](0x10)[_0xee0f('0x1f')](_0xee0f('0x21'));var _0x21a2c5=getAuthorizationScopes(_0x460962);var _0x293807=[{'key':'client_id','value':_0x460962[_0xee0f('0x22')]},{'key':_0xee0f('0x23'),'value':encodeURIComponent(_0x12ce30[_0xee0f('0x19')]('\x20'))},{'key':_0xee0f('0x24'),'value':_0x460962[_0xee0f('0x25')]},{'key':_0xee0f('0x26'),'value':'form_post'},{'key':'scope','value':encodeURIComponent(_0x21a2c5)},{'key':_0xee0f('0x27'),'value':_0x2b1ba6},{'key':'nonce','value':_0x40124e},{'key':_0xee0f('0x28'),'value':_0xee0f('0x29')}];var _0x4d07ac=_0x11370e+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0xee0f('0x13')](_0x293807,function(_0x208235){return _0x208235[_0xee0f('0x2a')]+'='+_0x208235[_0xee0f('0x2b')];})[_0xee0f('0x19')]('&');_0x460962[_0xee0f('0x2c')]={'issuer':_0x11370e['replace']('oauth2/',''),'audience':_0x460962['data1'],'state':_0x2b1ba6,'nonce':_0x40124e};redis['set'](_0x2b1ba6,JSON['stringify'](_0x460962));return _0x4d07ac;}function isValidIdToken(_0x17673b,_0x14efaa){try{var _0xaf66a6=jwt[_0xee0f('0x2d')](_0x17673b,{'complete':!![]});var _0x331d51=_0xaf66a6['payload'];if(_0x331d51[_0xee0f('0x2e')]!==_0x14efaa[_0xee0f('0x2f')])return![];if(_0x331d51[_0xee0f('0x30')]!==_0x14efaa[_0xee0f('0x31')])return![];if(_0x331d51[_0xee0f('0x32')]!==_0x14efaa[_0xee0f('0x32')])return![];if(moment()[_0xee0f('0x33')](moment[_0xee0f('0x34')](_0x331d51[_0xee0f('0x35')])))return![];return!![];}catch(_0x2e3777){throw _0x2e3777;}}function refreshOauth2MicrosoftAccessToken(_0x2b472b){return Promise[_0xee0f('0x36')]()['then'](function(){if(_0x2b472b[_0xee0f('0x37')])return _0x2b472b;return db[_0xee0f('0x38')][_0xee0f('0x39')]({'where':{'id':_0x2b472b['id']},'raw':!![]});})[_0xee0f('0x3a')](function(_0x371757){var _0x5ef8eb={'grant_type':'refresh_token','refresh_token':_0x371757[_0xee0f('0x3b')],'scope':getAccessTokenScope(_0x371757),'redirect_uri':_0x371757[_0xee0f('0x25')],'client_id':_0x371757[_0xee0f('0x22')],'client_secret':encryptor['decryptString'](_0x371757[_0xee0f('0x37')])};var _0x3d04c9={'method':_0xee0f('0x3c'),'uri':MICROSOFT_AUTH_URL['replace'](_0xee0f('0x1b'),_0x371757['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x5ef8eb,'json':!![]};return rp(_0x3d04c9);})[_0xee0f('0x3a')](function(_0x414655){_0x2b472b[_0xee0f('0x3d')]=_0x414655[_0xee0f('0x3e')];_0x2b472b[_0xee0f('0x3b')]=_0x414655[_0xee0f('0x3f')];return db['CloudProvider'][_0xee0f('0x40')]({'data5':_0x2b472b[_0xee0f('0x3d')],'data6':_0x2b472b[_0xee0f('0x3b')]},{'where':{'id':_0x2b472b['id']}});})['then'](function(){return _0x2b472b;})[_0xee0f('0x41')](function(_0x4ed41a){logger[_0xee0f('0x42')](_0xee0f('0x43'),_0x2b472b['id'],_0x4ed41a);});}function getOauth2MicrosoftAccessToken(_0x5844e5,_0x129f79){var _0x4c57cf={'grant_type':_0xee0f('0x44'),'code':_0x5844e5,'scope':getAccessTokenScope(_0x129f79),'redirect_uri':_0x129f79[_0xee0f('0x25')],'client_id':_0x129f79[_0xee0f('0x22')],'client_secret':encryptor['decryptString'](_0x129f79[_0xee0f('0x37')])};var _0xc56bc4={'method':_0xee0f('0x3c'),'uri':MICROSOFT_AUTH_URL[_0xee0f('0x45')]('{TENANT_ID}',_0x129f79[_0xee0f('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x4c57cf,'json':!![]};return rp(_0xc56bc4);}function startRefreshInterval(_0x57bd70){var _0x214893=schedule[_0xee0f('0x46')];if(_0x214893[_0x57bd70['id']])clearInterval(_0x214893[_0x57bd70['id']]);_0x214893[_0x57bd70['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0xee0f('0x47')](this,{'id':_0x57bd70['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0xee0f('0x46')]=_0x214893;}function startAllRefreshIntervals(){return db[_0xee0f('0x38')][_0xee0f('0x48')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0xee0f('0x3a')](function(_0x20b1be){var _0x3b81c4=_0x20b1be[_0xee0f('0x13')](function(_0x991437){return refreshOauth2MicrosoftAccessToken(_0x991437)[_0xee0f('0x3a')](function(_0x535ea3){startRefreshInterval(_0x535ea3);});});return Promise[_0xee0f('0x49')](_0x3b81c4);})[_0xee0f('0x41')](function(_0x4bd78e){var _0x32d3da=_0x4bd78e?util['inspect'](_0x4bd78e,{'showHidden':![],'depth':null}):'';logger[_0xee0f('0x42')](_0xee0f('0x4a'),_0x32d3da);});}module['exports']={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};