server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xc8e8=['https://outlook.office365.com/IMAP.AccessAsUser.All','/.default','replace','{TENANT_ID}','data2','code','id_token','from','stringify','base64','randomBytes','hex','client_id','data1','response_type','join','redirect_uri','data4','response_mode','form_post','state','nonce','prompt','login','map','key','value','oauth2Claims','oauth2/','set','payload','iss','issuer','isAfter','resolve','CloudProvider','findOne','then','refresh_token','data3','data5','access_token','data6','update','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','POST','intervals','bind','findAll','all','inspect','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','crypto','jsonwebtoken','moment','ioredis','request-promise','util','../../config/environment','../../config/logger','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','email','offline_access','https://outlook.office.com/POP.AccessAsUser.All','/authorize','/token','type','Dynamics365','data7'];(function(_0x243b59,_0x3f9495){var _0x3e1676=function(_0x354052){while(--_0x354052){_0x243b59['push'](_0x243b59['shift']());}};_0x3e1676(++_0x3f9495);}(_0xc8e8,0x173));var _0x8c8e=function(_0x151721,_0x20d5bc){_0x151721=_0x151721-0x0;var _0x2deaa7=_0xc8e8[_0x151721];return _0x2deaa7;};'use strict';var _=require(_0x8c8e('0x0'));var crypto=require(_0x8c8e('0x1'));var jwt=require(_0x8c8e('0x2'));var moment=require(_0x8c8e('0x3'));var Redis=require(_0x8c8e('0x4'));var rp=require(_0x8c8e('0x5'));var util=require(_0x8c8e('0x6'));var encryptor=require('../../components/encryptor');var config=require(_0x8c8e('0x7'));var logger=require(_0x8c8e('0x8'))(_0x8c8e('0x9'));var schedule=require(_0x8c8e('0xa'));var db=require(_0x8c8e('0xb'))['db'];config[_0x8c8e('0xc')]=_[_0x8c8e('0xd')](config[_0x8c8e('0xc')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0x8c8e('0xc')]);var MICROSOFT_AUTH_URL=_0x8c8e('0xe');var AZURE_AUTH_SCOPES={'Outlook365':[_0x8c8e('0xf'),'profile',_0x8c8e('0x10'),_0x8c8e('0x11'),'https://outlook.office365.com/IMAP.AccessAsUser.All',_0x8c8e('0x12'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0x8c8e('0xf'),_0x8c8e('0x11')]};var MICROSOFT_AUTH_ENDPOINT=_0x8c8e('0x13');var MICROSOFT_TOKEN_ENDPOINT=_0x8c8e('0x14');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x10f339){var _0x944541=_['map'](AZURE_AUTH_SCOPES[_0x10f339[_0x8c8e('0x15')]]);if(_0x10f339[_0x8c8e('0x15')]===_0x8c8e('0x16'))_0x944541['push'](_0x10f339[_0x8c8e('0x17')]+'/.default');return _0x944541['join']('\x20');}function getAccessTokenScope(_0x49865a){if(_0x49865a[_0x8c8e('0x15')]==='Outlook365')return _0x8c8e('0x18');if(_0x49865a['type']===_0x8c8e('0x16'))return _0x49865a[_0x8c8e('0x17')]+_0x8c8e('0x19');}function generateMicrosoftAuthorizationUrl(_0x399463,_0x27d870){var _0x34b999=MICROSOFT_AUTH_URL[_0x8c8e('0x1a')](_0x8c8e('0x1b'),_0x399463[_0x8c8e('0x1c')]);var _0xf504b2=[_0x8c8e('0x1d'),_0x8c8e('0x1e')];var _0x1fabe9=Buffer[_0x8c8e('0x1f')](JSON[_0x8c8e('0x20')]({'id':_0x27d870}))['toString'](_0x8c8e('0x21'));var _0x16d2d1=crypto[_0x8c8e('0x22')](0x10)['toString'](_0x8c8e('0x23'));var _0x8fb34=getAuthorizationScopes(_0x399463);var _0x445100=[{'key':_0x8c8e('0x24'),'value':_0x399463[_0x8c8e('0x25')]},{'key':_0x8c8e('0x26'),'value':encodeURIComponent(_0xf504b2[_0x8c8e('0x27')]('\x20'))},{'key':_0x8c8e('0x28'),'value':_0x399463[_0x8c8e('0x29')]},{'key':_0x8c8e('0x2a'),'value':_0x8c8e('0x2b')},{'key':'scope','value':encodeURIComponent(_0x8fb34)},{'key':_0x8c8e('0x2c'),'value':_0x1fabe9},{'key':_0x8c8e('0x2d'),'value':_0x16d2d1},{'key':_0x8c8e('0x2e'),'value':_0x8c8e('0x2f')}];var _0x162282=_0x34b999+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x8c8e('0x30')](_0x445100,function(_0x65d2fb){return _0x65d2fb[_0x8c8e('0x31')]+'='+_0x65d2fb[_0x8c8e('0x32')];})['join']('&');_0x399463[_0x8c8e('0x33')]={'issuer':_0x34b999['replace'](_0x8c8e('0x34'),''),'audience':_0x399463[_0x8c8e('0x25')],'state':_0x1fabe9,'nonce':_0x16d2d1};redis[_0x8c8e('0x35')](_0x1fabe9,JSON['stringify'](_0x399463));return _0x162282;}function isValidIdToken(_0xbedcec,_0x5ca882){try{var _0x1e07b5=jwt['decode'](_0xbedcec,{'complete':!![]});var _0x3b089d=_0x1e07b5[_0x8c8e('0x36')];if(_0x3b089d[_0x8c8e('0x37')]!==_0x5ca882[_0x8c8e('0x38')])return![];if(_0x3b089d['aud']!==_0x5ca882['audience'])return![];if(_0x3b089d['nonce']!==_0x5ca882['nonce'])return![];if(moment()[_0x8c8e('0x39')](moment['unix'](_0x3b089d['exp'])))return![];return!![];}catch(_0x1f87bf){throw _0x1f87bf;}}function refreshOauth2MicrosoftAccessToken(_0x3f3a21){return Promise[_0x8c8e('0x3a')]()['then'](function(){if(_0x3f3a21['data3'])return _0x3f3a21;return db[_0x8c8e('0x3b')][_0x8c8e('0x3c')]({'where':{'id':_0x3f3a21['id']},'raw':!![]});})[_0x8c8e('0x3d')](function(_0x491cac){var _0x8f6d04={'grant_type':_0x8c8e('0x3e'),'refresh_token':_0x491cac['data6'],'scope':getAccessTokenScope(_0x491cac),'redirect_uri':_0x491cac[_0x8c8e('0x29')],'client_id':_0x491cac[_0x8c8e('0x25')],'client_secret':encryptor['decryptString'](_0x491cac[_0x8c8e('0x3f')])};var _0x2e4276={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x8c8e('0x1a')]('{TENANT_ID}',_0x491cac['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x8f6d04,'json':!![]};return rp(_0x2e4276);})[_0x8c8e('0x3d')](function(_0x390ff8){_0x3f3a21[_0x8c8e('0x40')]=_0x390ff8[_0x8c8e('0x41')];_0x3f3a21[_0x8c8e('0x42')]=_0x390ff8[_0x8c8e('0x3e')];return db[_0x8c8e('0x3b')][_0x8c8e('0x43')]({'data5':_0x3f3a21[_0x8c8e('0x40')],'data6':_0x3f3a21[_0x8c8e('0x42')]},{'where':{'id':_0x3f3a21['id']}});})[_0x8c8e('0x3d')](function(){return _0x3f3a21;})[_0x8c8e('0x44')](function(_0x1f6923){logger[_0x8c8e('0x45')](_0x8c8e('0x46'),_0x3f3a21['id'],_0x1f6923);});}function getOauth2MicrosoftAccessToken(_0x26a264,_0x3441d1){var _0x5cb673={'grant_type':'authorization_code','code':_0x26a264,'scope':getAccessTokenScope(_0x3441d1),'redirect_uri':_0x3441d1[_0x8c8e('0x29')],'client_id':_0x3441d1[_0x8c8e('0x25')],'client_secret':encryptor['decryptString'](_0x3441d1[_0x8c8e('0x3f')])};var _0x20d38c={'method':_0x8c8e('0x47'),'uri':MICROSOFT_AUTH_URL[_0x8c8e('0x1a')](_0x8c8e('0x1b'),_0x3441d1[_0x8c8e('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x5cb673,'json':!![]};return rp(_0x20d38c);}function startRefreshInterval(_0x2f74ad){var _0x3e2c84=schedule[_0x8c8e('0x48')];if(_0x3e2c84[_0x2f74ad['id']])clearInterval(_0x3e2c84[_0x2f74ad['id']]);_0x3e2c84[_0x2f74ad['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x8c8e('0x49')](this,{'id':_0x2f74ad['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x8c8e('0x48')]=_0x3e2c84;}function startAllRefreshIntervals(){return db[_0x8c8e('0x3b')][_0x8c8e('0x4a')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x8c8e('0x3d')](function(_0x34bf1e){var _0x2e4d90=_0x34bf1e['map'](function(_0x36e7db){return refreshOauth2MicrosoftAccessToken(_0x36e7db)['then'](function(_0xe5d5b7){startRefreshInterval(_0xe5d5b7);});});return Promise[_0x8c8e('0x4b')](_0x2e4d90);})[_0x8c8e('0x44')](function(_0x39ed86){var _0x105e6c=_0x39ed86?util[_0x8c8e('0x4c')](_0x39ed86,{'showHidden':![],'depth':null}):'';logger[_0x8c8e('0x45')](_0x8c8e('0x4d'),_0x105e6c);});}module[_0x8c8e('0x4e')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};