server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x9ac3=['localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','profile','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','/authorize','map','push','data7','join','type','Outlook365','Dynamics365','/.default','replace','{TENANT_ID}','data2','id_token','from','base64','toString','hex','client_id','data1','response_type','redirect_uri','nonce','prompt','login','key','oauth2Claims','oauth2/','set','stringify','decode','payload','issuer','isAfter','unix','then','data3','CloudProvider','findOne','refresh_token','data6','decryptString','POST','access_token','update','data5','catch','authorization_code','data4','intervals','bind','all','inspect','error','lodash','crypto','jsonwebtoken','moment','ioredis','request-promise','util','../../components/encryptor','../../config/environment','../../config/logger','api','../../config/schedule/cloud-provider','../../mysqldb','defaults','redis'];(function(_0x973ff9,_0x199e9f){var _0x3e42c0=function(_0xf472ed){while(--_0xf472ed){_0x973ff9['push'](_0x973ff9['shift']());}};_0x3e42c0(++_0x199e9f);}(_0x9ac3,0x11d));var _0x39ac=function(_0x2f32c4,_0x2597ba){_0x2f32c4=_0x2f32c4-0x0;var _0x95b5dc=_0x9ac3[_0x2f32c4];return _0x95b5dc;};'use strict';var _=require(_0x39ac('0x0'));var crypto=require(_0x39ac('0x1'));var jwt=require(_0x39ac('0x2'));var moment=require(_0x39ac('0x3'));var Redis=require(_0x39ac('0x4'));var rp=require(_0x39ac('0x5'));var util=require(_0x39ac('0x6'));var encryptor=require(_0x39ac('0x7'));var config=require(_0x39ac('0x8'));var logger=require(_0x39ac('0x9'))(_0x39ac('0xa'));var schedule=require(_0x39ac('0xb'));var db=require(_0x39ac('0xc'))['db'];config['redis']=_[_0x39ac('0xd')](config[_0x39ac('0xe')],{'host':_0x39ac('0xf'),'port':0x18eb});var redis=new Redis(config[_0x39ac('0xe')]);var MICROSOFT_AUTH_URL=_0x39ac('0x10');var AZURE_AUTH_SCOPES={'Outlook365':[_0x39ac('0x11'),_0x39ac('0x12'),'email',_0x39ac('0x13'),_0x39ac('0x14'),_0x39ac('0x15'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0x39ac('0x11'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0x39ac('0x16');var MICROSOFT_TOKEN_ENDPOINT='/token';var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x18aaf5){var _0x27ecbf=_[_0x39ac('0x17')](AZURE_AUTH_SCOPES[_0x18aaf5['type']]);if(_0x18aaf5['type']==='Dynamics365')_0x27ecbf[_0x39ac('0x18')](_0x18aaf5[_0x39ac('0x19')]+'/.default');return _0x27ecbf[_0x39ac('0x1a')]('\x20');}function getAccessTokenScope(_0x17f4c8){if(_0x17f4c8[_0x39ac('0x1b')]===_0x39ac('0x1c'))return _0x39ac('0x14');if(_0x17f4c8[_0x39ac('0x1b')]===_0x39ac('0x1d'))return _0x17f4c8[_0x39ac('0x19')]+_0x39ac('0x1e');}function generateMicrosoftAuthorizationUrl(_0xeb4f45,_0x54d4c9){var _0x1bcb21=MICROSOFT_AUTH_URL[_0x39ac('0x1f')](_0x39ac('0x20'),_0xeb4f45[_0x39ac('0x21')]);var _0x1d4546=['code',_0x39ac('0x22')];var _0x3b9cad=Buffer[_0x39ac('0x23')](JSON['stringify']({'id':_0x54d4c9}))['toString'](_0x39ac('0x24'));var _0xe02cd3=crypto['randomBytes'](0x10)[_0x39ac('0x25')](_0x39ac('0x26'));var _0x34f487=getAuthorizationScopes(_0xeb4f45);var _0x202cc3=[{'key':_0x39ac('0x27'),'value':_0xeb4f45[_0x39ac('0x28')]},{'key':_0x39ac('0x29'),'value':encodeURIComponent(_0x1d4546[_0x39ac('0x1a')]('\x20'))},{'key':_0x39ac('0x2a'),'value':_0xeb4f45['data4']},{'key':'response_mode','value':'form_post'},{'key':'scope','value':encodeURIComponent(_0x34f487)},{'key':'state','value':_0x3b9cad},{'key':_0x39ac('0x2b'),'value':_0xe02cd3},{'key':_0x39ac('0x2c'),'value':_0x39ac('0x2d')}];var _0x214de3=_0x1bcb21+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x39ac('0x17')](_0x202cc3,function(_0x4bc610){return _0x4bc610[_0x39ac('0x2e')]+'='+_0x4bc610['value'];})[_0x39ac('0x1a')]('&');_0xeb4f45[_0x39ac('0x2f')]={'issuer':_0x1bcb21['replace'](_0x39ac('0x30'),''),'audience':_0xeb4f45['data1'],'state':_0x3b9cad,'nonce':_0xe02cd3};redis[_0x39ac('0x31')](_0x3b9cad,JSON[_0x39ac('0x32')](_0xeb4f45));return _0x214de3;}function isValidIdToken(_0x63e2a2,_0x20b444){try{var _0x1a43cc=jwt[_0x39ac('0x33')](_0x63e2a2,{'complete':!![]});var _0xf5a6f5=_0x1a43cc[_0x39ac('0x34')];if(_0xf5a6f5['iss']!==_0x20b444[_0x39ac('0x35')])return![];if(_0xf5a6f5['aud']!==_0x20b444['audience'])return![];if(_0xf5a6f5['nonce']!==_0x20b444['nonce'])return![];if(moment()[_0x39ac('0x36')](moment[_0x39ac('0x37')](_0xf5a6f5['exp'])))return![];return!![];}catch(_0x1cd634){throw _0x1cd634;}}function refreshOauth2MicrosoftAccessToken(_0x1b677b){return Promise['resolve']()[_0x39ac('0x38')](function(){if(_0x1b677b[_0x39ac('0x39')])return _0x1b677b;return db[_0x39ac('0x3a')][_0x39ac('0x3b')]({'where':{'id':_0x1b677b['id']},'raw':!![]});})[_0x39ac('0x38')](function(_0x25e084){var _0x5be8a1={'grant_type':_0x39ac('0x3c'),'refresh_token':_0x25e084[_0x39ac('0x3d')],'scope':getAccessTokenScope(_0x25e084),'redirect_uri':_0x25e084['data4'],'client_id':_0x25e084[_0x39ac('0x28')],'client_secret':encryptor[_0x39ac('0x3e')](_0x25e084['data3'])};var _0x48d1b5={'method':_0x39ac('0x3f'),'uri':MICROSOFT_AUTH_URL[_0x39ac('0x1f')](_0x39ac('0x20'),_0x25e084[_0x39ac('0x21')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x5be8a1,'json':!![]};return rp(_0x48d1b5);})[_0x39ac('0x38')](function(_0x270571){_0x1b677b['data5']=_0x270571[_0x39ac('0x40')];_0x1b677b['data6']=_0x270571[_0x39ac('0x3c')];return db[_0x39ac('0x3a')][_0x39ac('0x41')]({'data5':_0x1b677b[_0x39ac('0x42')],'data6':_0x1b677b[_0x39ac('0x3d')]},{'where':{'id':_0x1b677b['id']}});})[_0x39ac('0x38')](function(){return _0x1b677b;})[_0x39ac('0x43')](function(_0x59d3f5){logger['error']('Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s',_0x1b677b['id'],_0x59d3f5);});}function getOauth2MicrosoftAccessToken(_0x5bcdf6,_0x5ead7b){var _0x1d8e0f={'grant_type':_0x39ac('0x44'),'code':_0x5bcdf6,'scope':getAccessTokenScope(_0x5ead7b),'redirect_uri':_0x5ead7b[_0x39ac('0x45')],'client_id':_0x5ead7b[_0x39ac('0x28')],'client_secret':encryptor[_0x39ac('0x3e')](_0x5ead7b['data3'])};var _0x716329={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x39ac('0x1f')]('{TENANT_ID}',_0x5ead7b['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x1d8e0f,'json':!![]};return rp(_0x716329);}function startRefreshInterval(_0x541655){var _0x5a03a3=schedule[_0x39ac('0x46')];if(_0x5a03a3[_0x541655['id']])clearInterval(_0x5a03a3[_0x541655['id']]);_0x5a03a3[_0x541655['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x39ac('0x47')](this,{'id':_0x541655['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x39ac('0x46')]=_0x5a03a3;}function startAllRefreshIntervals(){return db['CloudProvider']['findAll']({'where':{'data6':{'$ne':null}},'raw':!![]})['then'](function(_0x59b353){var _0x5c7cc5=_0x59b353[_0x39ac('0x17')](function(_0x6f710b){return refreshOauth2MicrosoftAccessToken(_0x6f710b)[_0x39ac('0x38')](function(_0x47d26b){startRefreshInterval(_0x47d26b);});});return Promise[_0x39ac('0x48')](_0x5c7cc5);})[_0x39ac('0x43')](function(_0x454372){var _0x24c2b9=_0x454372?util[_0x39ac('0x49')](_0x454372,{'showHidden':![],'depth':null}):'';logger[_0x39ac('0x4a')]('[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s',_0x24c2b9);});}module['exports']={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};