server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x7754=['form_post','state','prompt','login','value','oauth2Claims','oauth2/','set','decode','payload','iss','issuer','aud','audience','nonce','exp','then','CloudProvider','refresh_token','data6','data1','data3','POST','replace','access_token','data5','authorization_code','decryptString','bind','intervals','findAll','all','catch','inspect','error','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','crypto','jsonwebtoken','moment','ioredis','request-promise','util','../../components/encryptor','../../config/environment','../../config/schedule/cloud-provider','../../mysqldb','defaults','redis','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','/authorize','/token','map','type','Dynamics365','push','data7','/.default','join','Outlook365','{TENANT_ID}','data2','code','id_token','from','stringify','toString','base64','randomBytes','hex','data4','response_mode'];(function(_0x41dfab,_0x4034a2){var _0x9a9b72=function(_0x3e7619){while(--_0x3e7619){_0x41dfab['push'](_0x41dfab['shift']());}};_0x9a9b72(++_0x4034a2);}(_0x7754,0xbf));var _0x4775=function(_0x1e6db3,_0x5643ac){_0x1e6db3=_0x1e6db3-0x0;var _0x1de886=_0x7754[_0x1e6db3];return _0x1de886;};'use strict';var _=require('lodash');var crypto=require(_0x4775('0x0'));var jwt=require(_0x4775('0x1'));var moment=require(_0x4775('0x2'));var Redis=require(_0x4775('0x3'));var rp=require(_0x4775('0x4'));var util=require(_0x4775('0x5'));var encryptor=require(_0x4775('0x6'));var config=require(_0x4775('0x7'));var logger=require('../../config/logger')('api');var schedule=require(_0x4775('0x8'));var db=require(_0x4775('0x9'))['db'];config['redis']=_[_0x4775('0xa')](config[_0x4775('0xb')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0x4775('0xb')]);var MICROSOFT_AUTH_URL=_0x4775('0xc');var AZURE_AUTH_SCOPES={'Outlook365':[_0x4775('0xd'),'profile',_0x4775('0xe'),_0x4775('0xf'),_0x4775('0x10'),_0x4775('0x11'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0x4775('0xd'),_0x4775('0xf')]};var MICROSOFT_AUTH_ENDPOINT=_0x4775('0x12');var MICROSOFT_TOKEN_ENDPOINT=_0x4775('0x13');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x5bbf62){var _0x583ece=_[_0x4775('0x14')](AZURE_AUTH_SCOPES[_0x5bbf62[_0x4775('0x15')]]);if(_0x5bbf62[_0x4775('0x15')]===_0x4775('0x16'))_0x583ece[_0x4775('0x17')](_0x5bbf62[_0x4775('0x18')]+_0x4775('0x19'));return _0x583ece[_0x4775('0x1a')]('\x20');}function getAccessTokenScope(_0x5db2db){if(_0x5db2db[_0x4775('0x15')]===_0x4775('0x1b'))return _0x4775('0x10');if(_0x5db2db[_0x4775('0x15')]===_0x4775('0x16'))return _0x5db2db[_0x4775('0x18')]+_0x4775('0x19');}function generateMicrosoftAuthorizationUrl(_0x421dd7,_0xb3daa9){var _0x17ec5f=MICROSOFT_AUTH_URL['replace'](_0x4775('0x1c'),_0x421dd7[_0x4775('0x1d')]);var _0x1de488=[_0x4775('0x1e'),_0x4775('0x1f')];var _0x1e5c07=Buffer[_0x4775('0x20')](JSON[_0x4775('0x21')]({'id':_0xb3daa9}))[_0x4775('0x22')](_0x4775('0x23'));var _0x2b293f=crypto[_0x4775('0x24')](0x10)[_0x4775('0x22')](_0x4775('0x25'));var _0x44745a=getAuthorizationScopes(_0x421dd7);var _0x1537eb=[{'key':'client_id','value':_0x421dd7['data1']},{'key':'response_type','value':encodeURIComponent(_0x1de488['join']('\x20'))},{'key':'redirect_uri','value':_0x421dd7[_0x4775('0x26')]},{'key':_0x4775('0x27'),'value':_0x4775('0x28')},{'key':'scope','value':encodeURIComponent(_0x44745a)},{'key':_0x4775('0x29'),'value':_0x1e5c07},{'key':'nonce','value':_0x2b293f},{'key':_0x4775('0x2a'),'value':_0x4775('0x2b')}];var _0x4fa538=_0x17ec5f+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x4775('0x14')](_0x1537eb,function(_0x52ab9c){return _0x52ab9c['key']+'='+_0x52ab9c[_0x4775('0x2c')];})[_0x4775('0x1a')]('&');_0x421dd7[_0x4775('0x2d')]={'issuer':_0x17ec5f['replace'](_0x4775('0x2e'),''),'audience':_0x421dd7['data1'],'state':_0x1e5c07,'nonce':_0x2b293f};redis[_0x4775('0x2f')](_0x1e5c07,JSON['stringify'](_0x421dd7));return _0x4fa538;}function isValidIdToken(_0x264e8a,_0x1700af){try{var _0x40fafd=jwt[_0x4775('0x30')](_0x264e8a,{'complete':!![]});var _0x497cf9=_0x40fafd[_0x4775('0x31')];if(_0x497cf9[_0x4775('0x32')]!==_0x1700af[_0x4775('0x33')])return![];if(_0x497cf9[_0x4775('0x34')]!==_0x1700af[_0x4775('0x35')])return![];if(_0x497cf9[_0x4775('0x36')]!==_0x1700af[_0x4775('0x36')])return![];if(moment()['isAfter'](moment['unix'](_0x497cf9[_0x4775('0x37')])))return![];return!![];}catch(_0x1c8c1d){throw _0x1c8c1d;}}function refreshOauth2MicrosoftAccessToken(_0x397293){return Promise['resolve']()[_0x4775('0x38')](function(){if(_0x397293['data3'])return _0x397293;return db[_0x4775('0x39')]['findOne']({'where':{'id':_0x397293['id']},'raw':!![]});})[_0x4775('0x38')](function(_0x536d6c){var _0x451a6e={'grant_type':_0x4775('0x3a'),'refresh_token':_0x536d6c[_0x4775('0x3b')],'scope':getAccessTokenScope(_0x536d6c),'redirect_uri':_0x536d6c['data4'],'client_id':_0x536d6c[_0x4775('0x3c')],'client_secret':encryptor['decryptString'](_0x536d6c[_0x4775('0x3d')])};var _0x517e98={'method':_0x4775('0x3e'),'uri':MICROSOFT_AUTH_URL[_0x4775('0x3f')](_0x4775('0x1c'),_0x536d6c['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x451a6e,'json':!![]};return rp(_0x517e98);})['then'](function(_0x21f23b){_0x397293['data5']=_0x21f23b[_0x4775('0x40')];_0x397293[_0x4775('0x3b')]=_0x21f23b[_0x4775('0x3a')];return db[_0x4775('0x39')]['update']({'data5':_0x397293[_0x4775('0x41')],'data6':_0x397293['data6']},{'where':{'id':_0x397293['id']}});})['then'](function(){return _0x397293;})['catch'](function(_0x512374){logger['error']('Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s',_0x397293['id'],_0x512374);});}function getOauth2MicrosoftAccessToken(_0x28cc42,_0x404fd3){var _0x2a15f5={'grant_type':_0x4775('0x42'),'code':_0x28cc42,'scope':getAccessTokenScope(_0x404fd3),'redirect_uri':_0x404fd3[_0x4775('0x26')],'client_id':_0x404fd3[_0x4775('0x3c')],'client_secret':encryptor[_0x4775('0x43')](_0x404fd3['data3'])};var _0xe18f94={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x4775('0x3f')](_0x4775('0x1c'),_0x404fd3['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x2a15f5,'json':!![]};return rp(_0xe18f94);}function startRefreshInterval(_0x5576dc){var _0xec9fb1=schedule['intervals'];if(_0xec9fb1[_0x5576dc['id']])clearInterval(_0xec9fb1[_0x5576dc['id']]);_0xec9fb1[_0x5576dc['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x4775('0x44')](this,{'id':_0x5576dc['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x4775('0x45')]=_0xec9fb1;}function startAllRefreshIntervals(){return db[_0x4775('0x39')][_0x4775('0x46')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x4775('0x38')](function(_0x92a5d7){var _0x3b46d3=_0x92a5d7[_0x4775('0x14')](function(_0x5dfe29){return refreshOauth2MicrosoftAccessToken(_0x5dfe29)[_0x4775('0x38')](function(_0x1d8de6){startRefreshInterval(_0x1d8de6);});});return Promise[_0x4775('0x47')](_0x3b46d3);})[_0x4775('0x48')](function(_0x5cd088){var _0x145e9f=_0x5cd088?util[_0x4775('0x49')](_0x5cd088,{'showHidden':![],'depth':null}):'';logger[_0x4775('0x4a')](_0x4775('0x4b'),_0x145e9f);});}module[_0x4775('0x4c')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};