server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x9102=['../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','openid','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','/token','map','type','Dynamics365','push','data7','join','Outlook365','/.default','replace','{TENANT_ID}','data2','id_token','from','stringify','toString','randomBytes','data1','redirect_uri','data4','response_mode','form_post','scope','state','nonce','key','value','oauth2Claims','oauth2/','set','decode','payload','iss','issuer','aud','audience','isAfter','exp','then','data3','CloudProvider','findOne','refresh_token','decryptString','POST','access_token','data6','update','data5','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','intervals','findAll','all','inspect','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','jsonwebtoken','moment','ioredis','request-promise','util','../../components/encryptor','../../config/environment','../../config/logger','api'];(function(_0x37f02e,_0x24e12d){var _0x546b92=function(_0x410325){while(--_0x410325){_0x37f02e['push'](_0x37f02e['shift']());}};_0x546b92(++_0x24e12d);}(_0x9102,0x1d0));var _0x2910=function(_0x3fb030,_0x12aebe){_0x3fb030=_0x3fb030-0x0;var _0xd6899b=_0x9102[_0x3fb030];return _0xd6899b;};'use strict';var _=require(_0x2910('0x0'));var crypto=require('crypto');var jwt=require(_0x2910('0x1'));var moment=require(_0x2910('0x2'));var Redis=require(_0x2910('0x3'));var rp=require(_0x2910('0x4'));var util=require(_0x2910('0x5'));var encryptor=require(_0x2910('0x6'));var config=require(_0x2910('0x7'));var logger=require(_0x2910('0x8'))(_0x2910('0x9'));var schedule=require(_0x2910('0xa'));var db=require(_0x2910('0xb'))['db'];config[_0x2910('0xc')]=_[_0x2910('0xd')](config[_0x2910('0xc')],{'host':'localhost','port':0x18eb});var redis=new Redis(config['redis']);var MICROSOFT_AUTH_URL='https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0';var AZURE_AUTH_SCOPES={'Outlook365':[_0x2910('0xe'),'profile',_0x2910('0xf'),_0x2910('0x10'),_0x2910('0x11'),_0x2910('0x12'),_0x2910('0x13')],'Dynamics365':[_0x2910('0xe'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT='/authorize';var MICROSOFT_TOKEN_ENDPOINT=_0x2910('0x14');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0xba08df){var _0x3a5cce=_[_0x2910('0x15')](AZURE_AUTH_SCOPES[_0xba08df[_0x2910('0x16')]]);if(_0xba08df[_0x2910('0x16')]===_0x2910('0x17'))_0x3a5cce[_0x2910('0x18')](_0xba08df[_0x2910('0x19')]+'/.default');return _0x3a5cce[_0x2910('0x1a')]('\x20');}function getAccessTokenScope(_0x3226ac){if(_0x3226ac[_0x2910('0x16')]===_0x2910('0x1b'))return _0x2910('0x11');if(_0x3226ac[_0x2910('0x16')]===_0x2910('0x17'))return _0x3226ac[_0x2910('0x19')]+_0x2910('0x1c');}function generateMicrosoftAuthorizationUrl(_0x2635ca,_0x5d43a9){var _0x45afb6=MICROSOFT_AUTH_URL[_0x2910('0x1d')](_0x2910('0x1e'),_0x2635ca[_0x2910('0x1f')]);var _0x4f1dae=['code',_0x2910('0x20')];var _0x27166b=Buffer[_0x2910('0x21')](JSON[_0x2910('0x22')]({'id':_0x5d43a9}))[_0x2910('0x23')]('base64');var _0x474389=crypto[_0x2910('0x24')](0x10)['toString']('hex');var _0x7c7305=getAuthorizationScopes(_0x2635ca);var _0x3b7c64=[{'key':'client_id','value':_0x2635ca[_0x2910('0x25')]},{'key':'response_type','value':encodeURIComponent(_0x4f1dae[_0x2910('0x1a')]('\x20'))},{'key':_0x2910('0x26'),'value':_0x2635ca[_0x2910('0x27')]},{'key':_0x2910('0x28'),'value':_0x2910('0x29')},{'key':_0x2910('0x2a'),'value':encodeURIComponent(_0x7c7305)},{'key':_0x2910('0x2b'),'value':_0x27166b},{'key':_0x2910('0x2c'),'value':_0x474389},{'key':'prompt','value':'login'}];var _0xee4db0=_0x45afb6+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x2910('0x15')](_0x3b7c64,function(_0x5762ac){return _0x5762ac[_0x2910('0x2d')]+'='+_0x5762ac[_0x2910('0x2e')];})[_0x2910('0x1a')]('&');_0x2635ca[_0x2910('0x2f')]={'issuer':_0x45afb6['replace'](_0x2910('0x30'),''),'audience':_0x2635ca[_0x2910('0x25')],'state':_0x27166b,'nonce':_0x474389};redis[_0x2910('0x31')](_0x27166b,JSON['stringify'](_0x2635ca));return _0xee4db0;}function isValidIdToken(_0x2fb4d5,_0x5d66c4){try{var _0x3e741f=jwt[_0x2910('0x32')](_0x2fb4d5,{'complete':!![]});var _0x4266e8=_0x3e741f[_0x2910('0x33')];if(_0x4266e8[_0x2910('0x34')]!==_0x5d66c4[_0x2910('0x35')])return![];if(_0x4266e8[_0x2910('0x36')]!==_0x5d66c4[_0x2910('0x37')])return![];if(_0x4266e8[_0x2910('0x2c')]!==_0x5d66c4[_0x2910('0x2c')])return![];if(moment()[_0x2910('0x38')](moment['unix'](_0x4266e8[_0x2910('0x39')])))return![];return!![];}catch(_0x501beb){throw _0x501beb;}}function refreshOauth2MicrosoftAccessToken(_0xfea6d1){return Promise['resolve']()[_0x2910('0x3a')](function(){if(_0xfea6d1[_0x2910('0x3b')])return _0xfea6d1;return db[_0x2910('0x3c')][_0x2910('0x3d')]({'where':{'id':_0xfea6d1['id']},'raw':!![]});})[_0x2910('0x3a')](function(_0xb03895){var _0x1a1d7e={'grant_type':_0x2910('0x3e'),'refresh_token':_0xb03895['data6'],'scope':getAccessTokenScope(_0xb03895),'redirect_uri':_0xb03895[_0x2910('0x27')],'client_id':_0xb03895['data1'],'client_secret':encryptor[_0x2910('0x3f')](_0xb03895[_0x2910('0x3b')])};var _0x1b09f9={'method':_0x2910('0x40'),'uri':MICROSOFT_AUTH_URL[_0x2910('0x1d')](_0x2910('0x1e'),_0xb03895[_0x2910('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x1a1d7e,'json':!![]};return rp(_0x1b09f9);})[_0x2910('0x3a')](function(_0x3ba86c){_0xfea6d1['data5']=_0x3ba86c[_0x2910('0x41')];_0xfea6d1[_0x2910('0x42')]=_0x3ba86c[_0x2910('0x3e')];return db[_0x2910('0x3c')][_0x2910('0x43')]({'data5':_0xfea6d1[_0x2910('0x44')],'data6':_0xfea6d1[_0x2910('0x42')]},{'where':{'id':_0xfea6d1['id']}});})['then'](function(){return _0xfea6d1;})[_0x2910('0x45')](function(_0x4ae807){logger[_0x2910('0x46')](_0x2910('0x47'),_0xfea6d1['id'],_0x4ae807);});}function getOauth2MicrosoftAccessToken(_0x28da69,_0x5ececd){var _0x9db847={'grant_type':_0x2910('0x48'),'code':_0x28da69,'scope':getAccessTokenScope(_0x5ececd),'redirect_uri':_0x5ececd[_0x2910('0x27')],'client_id':_0x5ececd[_0x2910('0x25')],'client_secret':encryptor[_0x2910('0x3f')](_0x5ececd[_0x2910('0x3b')])};var _0xfaa521={'method':_0x2910('0x40'),'uri':MICROSOFT_AUTH_URL['replace'](_0x2910('0x1e'),_0x5ececd[_0x2910('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x9db847,'json':!![]};return rp(_0xfaa521);}function startRefreshInterval(_0x4f146a){var _0x3de4ee=schedule[_0x2910('0x49')];if(_0x3de4ee[_0x4f146a['id']])clearInterval(_0x3de4ee[_0x4f146a['id']]);_0x3de4ee[_0x4f146a['id']]=setInterval(refreshOauth2MicrosoftAccessToken['bind'](this,{'id':_0x4f146a['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule['intervals']=_0x3de4ee;}function startAllRefreshIntervals(){return db[_0x2910('0x3c')][_0x2910('0x4a')]({'where':{'data6':{'$ne':null}},'raw':!![]})['then'](function(_0x5885e8){var _0x6de008=_0x5885e8[_0x2910('0x15')](function(_0x1b09e4){return refreshOauth2MicrosoftAccessToken(_0x1b09e4)[_0x2910('0x3a')](function(_0x29ebed){startRefreshInterval(_0x29ebed);});});return Promise[_0x2910('0x4b')](_0x6de008);})[_0x2910('0x45')](function(_0x19a65c){var _0x2027a9=_0x19a65c?util[_0x2910('0x4c')](_0x19a65c,{'showHidden':![],'depth':null}):'';logger[_0x2910('0x46')](_0x2910('0x4d'),_0x2027a9);});}module[_0x2910('0x4e')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};