server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x3a39=['nonce','prompt','login','value','oauth2Claims','oauth2/','decode','payload','iss','issuer','audience','unix','resolve','then','data3','findOne','refresh_token','decryptString','POST','data2','data5','access_token','CloudProvider','update','data6','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','intervals','bind','findAll','all','catch','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','jsonwebtoken','moment','ioredis','request-promise','util','../../components/encryptor','../../config/logger','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','/authorize','/token','map','type','push','data7','/.default','join','Outlook365','Dynamics365','replace','{TENANT_ID}','code','id_token','from','stringify','toString','base64','randomBytes','hex','client_id','data1','response_type','redirect_uri','data4','response_mode','form_post','scope','state'];(function(_0x1f0658,_0x1e59e4){var _0x54edd3=function(_0x3d143f){while(--_0x3d143f){_0x1f0658['push'](_0x1f0658['shift']());}};_0x54edd3(++_0x1e59e4);}(_0x3a39,0x1cc));var _0x93a3=function(_0x465a0c,_0x19d4d5){_0x465a0c=_0x465a0c-0x0;var _0x1e202e=_0x3a39[_0x465a0c];return _0x1e202e;};'use strict';var _=require(_0x93a3('0x0'));var crypto=require('crypto');var jwt=require(_0x93a3('0x1'));var moment=require(_0x93a3('0x2'));var Redis=require(_0x93a3('0x3'));var rp=require(_0x93a3('0x4'));var util=require(_0x93a3('0x5'));var encryptor=require(_0x93a3('0x6'));var config=require('../../config/environment');var logger=require(_0x93a3('0x7'))(_0x93a3('0x8'));var schedule=require(_0x93a3('0x9'));var db=require(_0x93a3('0xa'))['db'];config[_0x93a3('0xb')]=_[_0x93a3('0xc')](config[_0x93a3('0xb')],{'host':_0x93a3('0xd'),'port':0x18eb});var redis=new Redis(config[_0x93a3('0xb')]);var MICROSOFT_AUTH_URL=_0x93a3('0xe');var AZURE_AUTH_SCOPES={'Outlook365':[_0x93a3('0xf'),'profile',_0x93a3('0x10'),_0x93a3('0x11'),_0x93a3('0x12'),_0x93a3('0x13'),_0x93a3('0x14')],'Dynamics365':[_0x93a3('0xf'),_0x93a3('0x11')]};var MICROSOFT_AUTH_ENDPOINT=_0x93a3('0x15');var MICROSOFT_TOKEN_ENDPOINT=_0x93a3('0x16');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x5aad7c){var _0x15b8cc=_[_0x93a3('0x17')](AZURE_AUTH_SCOPES[_0x5aad7c[_0x93a3('0x18')]]);if(_0x5aad7c[_0x93a3('0x18')]==='Dynamics365')_0x15b8cc[_0x93a3('0x19')](_0x5aad7c[_0x93a3('0x1a')]+_0x93a3('0x1b'));return _0x15b8cc[_0x93a3('0x1c')]('\x20');}function getAccessTokenScope(_0xee7e70){if(_0xee7e70[_0x93a3('0x18')]===_0x93a3('0x1d'))return _0x93a3('0x12');if(_0xee7e70[_0x93a3('0x18')]===_0x93a3('0x1e'))return _0xee7e70[_0x93a3('0x1a')]+_0x93a3('0x1b');}function generateMicrosoftAuthorizationUrl(_0x423184,_0xdda8a5){var _0x578f65=MICROSOFT_AUTH_URL[_0x93a3('0x1f')](_0x93a3('0x20'),_0x423184['data2']);var _0x4e8566=[_0x93a3('0x21'),_0x93a3('0x22')];var _0x199968=Buffer[_0x93a3('0x23')](JSON[_0x93a3('0x24')]({'id':_0xdda8a5}))[_0x93a3('0x25')](_0x93a3('0x26'));var _0x3f9c85=crypto[_0x93a3('0x27')](0x10)[_0x93a3('0x25')](_0x93a3('0x28'));var _0x5136d8=getAuthorizationScopes(_0x423184);var _0xe0e07a=[{'key':_0x93a3('0x29'),'value':_0x423184[_0x93a3('0x2a')]},{'key':_0x93a3('0x2b'),'value':encodeURIComponent(_0x4e8566[_0x93a3('0x1c')]('\x20'))},{'key':_0x93a3('0x2c'),'value':_0x423184[_0x93a3('0x2d')]},{'key':_0x93a3('0x2e'),'value':_0x93a3('0x2f')},{'key':_0x93a3('0x30'),'value':encodeURIComponent(_0x5136d8)},{'key':_0x93a3('0x31'),'value':_0x199968},{'key':_0x93a3('0x32'),'value':_0x3f9c85},{'key':_0x93a3('0x33'),'value':_0x93a3('0x34')}];var _0x5a40fa=_0x578f65+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x93a3('0x17')](_0xe0e07a,function(_0x3903a4){return _0x3903a4['key']+'='+_0x3903a4[_0x93a3('0x35')];})[_0x93a3('0x1c')]('&');_0x423184[_0x93a3('0x36')]={'issuer':_0x578f65['replace'](_0x93a3('0x37'),''),'audience':_0x423184[_0x93a3('0x2a')],'state':_0x199968,'nonce':_0x3f9c85};redis['set'](_0x199968,JSON[_0x93a3('0x24')](_0x423184));return _0x5a40fa;}function isValidIdToken(_0x47060d,_0x48aa98){try{var _0x1f2f88=jwt[_0x93a3('0x38')](_0x47060d,{'complete':!![]});var _0x4c4ddf=_0x1f2f88[_0x93a3('0x39')];if(_0x4c4ddf[_0x93a3('0x3a')]!==_0x48aa98[_0x93a3('0x3b')])return![];if(_0x4c4ddf['aud']!==_0x48aa98[_0x93a3('0x3c')])return![];if(_0x4c4ddf[_0x93a3('0x32')]!==_0x48aa98['nonce'])return![];if(moment()['isAfter'](moment[_0x93a3('0x3d')](_0x4c4ddf['exp'])))return![];return!![];}catch(_0x12577a){throw _0x12577a;}}function refreshOauth2MicrosoftAccessToken(_0x120edb){return Promise[_0x93a3('0x3e')]()[_0x93a3('0x3f')](function(){if(_0x120edb[_0x93a3('0x40')])return _0x120edb;return db['CloudProvider'][_0x93a3('0x41')]({'where':{'id':_0x120edb['id']},'raw':!![]});})[_0x93a3('0x3f')](function(_0x1b7dea){var _0x33b4db={'grant_type':_0x93a3('0x42'),'refresh_token':_0x1b7dea['data6'],'scope':getAccessTokenScope(_0x1b7dea),'redirect_uri':_0x1b7dea[_0x93a3('0x2d')],'client_id':_0x1b7dea[_0x93a3('0x2a')],'client_secret':encryptor[_0x93a3('0x43')](_0x1b7dea[_0x93a3('0x40')])};var _0x512281={'method':_0x93a3('0x44'),'uri':MICROSOFT_AUTH_URL[_0x93a3('0x1f')](_0x93a3('0x20'),_0x1b7dea[_0x93a3('0x45')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x33b4db,'json':!![]};return rp(_0x512281);})[_0x93a3('0x3f')](function(_0x21401d){_0x120edb[_0x93a3('0x46')]=_0x21401d[_0x93a3('0x47')];_0x120edb['data6']=_0x21401d[_0x93a3('0x42')];return db[_0x93a3('0x48')][_0x93a3('0x49')]({'data5':_0x120edb[_0x93a3('0x46')],'data6':_0x120edb[_0x93a3('0x4a')]},{'where':{'id':_0x120edb['id']}});})[_0x93a3('0x3f')](function(){return _0x120edb;})['catch'](function(_0x311236){logger[_0x93a3('0x4b')](_0x93a3('0x4c'),_0x120edb['id'],_0x311236);});}function getOauth2MicrosoftAccessToken(_0xa461ac,_0x21aaa9){var _0x26ee0f={'grant_type':_0x93a3('0x4d'),'code':_0xa461ac,'scope':getAccessTokenScope(_0x21aaa9),'redirect_uri':_0x21aaa9['data4'],'client_id':_0x21aaa9[_0x93a3('0x2a')],'client_secret':encryptor[_0x93a3('0x43')](_0x21aaa9[_0x93a3('0x40')])};var _0x350766={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x93a3('0x1f')]('{TENANT_ID}',_0x21aaa9[_0x93a3('0x45')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x26ee0f,'json':!![]};return rp(_0x350766);}function startRefreshInterval(_0x20ffbf){var _0x2da939=schedule[_0x93a3('0x4e')];if(_0x2da939[_0x20ffbf['id']])clearInterval(_0x2da939[_0x20ffbf['id']]);_0x2da939[_0x20ffbf['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x93a3('0x4f')](this,{'id':_0x20ffbf['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule['intervals']=_0x2da939;}function startAllRefreshIntervals(){return db[_0x93a3('0x48')][_0x93a3('0x50')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x93a3('0x3f')](function(_0x23d9f1){var _0x5ce0e8=_0x23d9f1[_0x93a3('0x17')](function(_0x28c148){return refreshOauth2MicrosoftAccessToken(_0x28c148)[_0x93a3('0x3f')](function(_0x1a8cdc){startRefreshInterval(_0x1a8cdc);});});return Promise[_0x93a3('0x51')](_0x5ce0e8);})[_0x93a3('0x52')](function(_0x443bef){var _0x3235aa=_0x443bef?util['inspect'](_0x443bef,{'showHidden':![],'depth':null}):'';logger[_0x93a3('0x4b')](_0x93a3('0x53'),_0x3235aa);});}module[_0x93a3('0x54')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};