server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x1071=['payload','iss','audience','isAfter','unix','resolve','then','data3','CloudProvider','findOne','refresh_token','data6','decryptString','access_token','update','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','POST','intervals','bind','findAll','all','inspect','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','crypto','jsonwebtoken','moment','ioredis','request-promise','../../components/encryptor','../../config/environment','../../config/logger','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','openid','/authorize','/token','Dynamics365','push','data7','join','type','Outlook365','/.default','replace','{TENANT_ID}','data2','code','id_token','from','base64','randomBytes','toString','hex','client_id','data1','response_type','redirect_uri','response_mode','form_post','scope','state','nonce','login','map','key','value','oauth2Claims','oauth2/','set','stringify','decode'];(function(_0x4066d1,_0xddaabe){var _0x4d38cd=function(_0x41f589){while(--_0x41f589){_0x4066d1['push'](_0x4066d1['shift']());}};_0x4d38cd(++_0xddaabe);}(_0x1071,0x1bf));var _0x1107=function(_0x19e35c,_0x29cd1e){_0x19e35c=_0x19e35c-0x0;var _0x3e1fe8=_0x1071[_0x19e35c];return _0x3e1fe8;};'use strict';var _=require(_0x1107('0x0'));var crypto=require(_0x1107('0x1'));var jwt=require(_0x1107('0x2'));var moment=require(_0x1107('0x3'));var Redis=require(_0x1107('0x4'));var rp=require(_0x1107('0x5'));var util=require('util');var encryptor=require(_0x1107('0x6'));var config=require(_0x1107('0x7'));var logger=require(_0x1107('0x8'))('api');var schedule=require(_0x1107('0x9'));var db=require(_0x1107('0xa'))['db'];config[_0x1107('0xb')]=_[_0x1107('0xc')](config[_0x1107('0xb')],{'host':_0x1107('0xd'),'port':0x18eb});var redis=new Redis(config[_0x1107('0xb')]);var MICROSOFT_AUTH_URL=_0x1107('0xe');var AZURE_AUTH_SCOPES={'Outlook365':['openid','profile',_0x1107('0xf'),_0x1107('0x10'),_0x1107('0x11'),'https://outlook.office.com/POP.AccessAsUser.All',_0x1107('0x12')],'Dynamics365':[_0x1107('0x13'),_0x1107('0x10')]};var MICROSOFT_AUTH_ENDPOINT=_0x1107('0x14');var MICROSOFT_TOKEN_ENDPOINT=_0x1107('0x15');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x270111){var _0xe79d24=_['map'](AZURE_AUTH_SCOPES[_0x270111['type']]);if(_0x270111['type']===_0x1107('0x16'))_0xe79d24[_0x1107('0x17')](_0x270111[_0x1107('0x18')]+'/.default');return _0xe79d24[_0x1107('0x19')]('\x20');}function getAccessTokenScope(_0x505aab){if(_0x505aab[_0x1107('0x1a')]===_0x1107('0x1b'))return _0x1107('0x11');if(_0x505aab[_0x1107('0x1a')]===_0x1107('0x16'))return _0x505aab[_0x1107('0x18')]+_0x1107('0x1c');}function generateMicrosoftAuthorizationUrl(_0xb681a,_0x39556a){var _0x2003cd=MICROSOFT_AUTH_URL[_0x1107('0x1d')](_0x1107('0x1e'),_0xb681a[_0x1107('0x1f')]);var _0x5db5ed=[_0x1107('0x20'),_0x1107('0x21')];var _0x1cc553=Buffer[_0x1107('0x22')](JSON['stringify']({'id':_0x39556a}))['toString'](_0x1107('0x23'));var _0x3d2e20=crypto[_0x1107('0x24')](0x10)[_0x1107('0x25')](_0x1107('0x26'));var _0x387a54=getAuthorizationScopes(_0xb681a);var _0x4aa4bf=[{'key':_0x1107('0x27'),'value':_0xb681a[_0x1107('0x28')]},{'key':_0x1107('0x29'),'value':encodeURIComponent(_0x5db5ed[_0x1107('0x19')]('\x20'))},{'key':_0x1107('0x2a'),'value':_0xb681a['data4']},{'key':_0x1107('0x2b'),'value':_0x1107('0x2c')},{'key':_0x1107('0x2d'),'value':encodeURIComponent(_0x387a54)},{'key':_0x1107('0x2e'),'value':_0x1cc553},{'key':_0x1107('0x2f'),'value':_0x3d2e20},{'key':'prompt','value':_0x1107('0x30')}];var _0x175eab=_0x2003cd+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x1107('0x31')](_0x4aa4bf,function(_0x2166e5){return _0x2166e5[_0x1107('0x32')]+'='+_0x2166e5[_0x1107('0x33')];})[_0x1107('0x19')]('&');_0xb681a[_0x1107('0x34')]={'issuer':_0x2003cd[_0x1107('0x1d')](_0x1107('0x35'),''),'audience':_0xb681a['data1'],'state':_0x1cc553,'nonce':_0x3d2e20};redis[_0x1107('0x36')](_0x1cc553,JSON[_0x1107('0x37')](_0xb681a));return _0x175eab;}function isValidIdToken(_0x4d0db0,_0x226d7d){try{var _0x365bd1=jwt[_0x1107('0x38')](_0x4d0db0,{'complete':!![]});var _0x1efe62=_0x365bd1[_0x1107('0x39')];if(_0x1efe62[_0x1107('0x3a')]!==_0x226d7d['issuer'])return![];if(_0x1efe62['aud']!==_0x226d7d[_0x1107('0x3b')])return![];if(_0x1efe62[_0x1107('0x2f')]!==_0x226d7d[_0x1107('0x2f')])return![];if(moment()[_0x1107('0x3c')](moment[_0x1107('0x3d')](_0x1efe62['exp'])))return![];return!![];}catch(_0x29f355){throw _0x29f355;}}function refreshOauth2MicrosoftAccessToken(_0x200f7c){return Promise[_0x1107('0x3e')]()[_0x1107('0x3f')](function(){if(_0x200f7c[_0x1107('0x40')])return _0x200f7c;return db[_0x1107('0x41')][_0x1107('0x42')]({'where':{'id':_0x200f7c['id']},'raw':!![]});})[_0x1107('0x3f')](function(_0xdbb40e){var _0x3955af={'grant_type':_0x1107('0x43'),'refresh_token':_0xdbb40e[_0x1107('0x44')],'scope':getAccessTokenScope(_0xdbb40e),'redirect_uri':_0xdbb40e['data4'],'client_id':_0xdbb40e[_0x1107('0x28')],'client_secret':encryptor[_0x1107('0x45')](_0xdbb40e[_0x1107('0x40')])};var _0x511fe4={'method':'POST','uri':MICROSOFT_AUTH_URL['replace'](_0x1107('0x1e'),_0xdbb40e[_0x1107('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x3955af,'json':!![]};return rp(_0x511fe4);})[_0x1107('0x3f')](function(_0x32f163){_0x200f7c['data5']=_0x32f163[_0x1107('0x46')];_0x200f7c[_0x1107('0x44')]=_0x32f163[_0x1107('0x43')];return db['CloudProvider'][_0x1107('0x47')]({'data5':_0x200f7c['data5'],'data6':_0x200f7c[_0x1107('0x44')]},{'where':{'id':_0x200f7c['id']}});})[_0x1107('0x3f')](function(){return _0x200f7c;})[_0x1107('0x48')](function(_0x14c12e){logger[_0x1107('0x49')](_0x1107('0x4a'),_0x200f7c['id'],_0x14c12e);});}function getOauth2MicrosoftAccessToken(_0x4f42be,_0x32fd90){var _0xf74519={'grant_type':_0x1107('0x4b'),'code':_0x4f42be,'scope':getAccessTokenScope(_0x32fd90),'redirect_uri':_0x32fd90['data4'],'client_id':_0x32fd90[_0x1107('0x28')],'client_secret':encryptor[_0x1107('0x45')](_0x32fd90[_0x1107('0x40')])};var _0x2dfe10={'method':_0x1107('0x4c'),'uri':MICROSOFT_AUTH_URL[_0x1107('0x1d')](_0x1107('0x1e'),_0x32fd90[_0x1107('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0xf74519,'json':!![]};return rp(_0x2dfe10);}function startRefreshInterval(_0xb9c36d){var _0x485e25=schedule[_0x1107('0x4d')];if(_0x485e25[_0xb9c36d['id']])clearInterval(_0x485e25[_0xb9c36d['id']]);_0x485e25[_0xb9c36d['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x1107('0x4e')](this,{'id':_0xb9c36d['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule['intervals']=_0x485e25;}function startAllRefreshIntervals(){return db[_0x1107('0x41')][_0x1107('0x4f')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x1107('0x3f')](function(_0x67ec11){var _0x5d1834=_0x67ec11[_0x1107('0x31')](function(_0xdc5a60){return refreshOauth2MicrosoftAccessToken(_0xdc5a60)['then'](function(_0x28a157){startRefreshInterval(_0x28a157);});});return Promise[_0x1107('0x50')](_0x5d1834);})[_0x1107('0x48')](function(_0x22d80a){var _0x3e6a64=_0x22d80a?util[_0x1107('0x51')](_0x22d80a,{'showHidden':![],'depth':null}):'';logger[_0x1107('0x49')](_0x1107('0x52'),_0x3e6a64);});}module[_0x1107('0x53')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};