server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xd474=['exports','crypto','jsonwebtoken','moment','ioredis','util','../../components/encryptor','../../config/environment','../../config/logger','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','profile','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','openid','/authorize','/token','map','type','push','/.default','join','Dynamics365','data7','replace','{TENANT_ID}','data2','code','id_token','stringify','toString','base64','hex','client_id','data1','response_type','redirect_uri','data4','response_mode','scope','state','nonce','login','key','oauth2Claims','oauth2/','set','decode','payload','aud','audience','isAfter','exp','resolve','then','refresh_token','data6','decryptString','access_token','CloudProvider','update','catch','error','authorization_code','data3','POST','intervals','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s'];(function(_0x1c71ef,_0x565714){var _0x395d3a=function(_0x33a6ff){while(--_0x33a6ff){_0x1c71ef['push'](_0x1c71ef['shift']());}};_0x395d3a(++_0x565714);}(_0xd474,0x125));var _0x4d47=function(_0x354a8e,_0x23f6ea){_0x354a8e=_0x354a8e-0x0;var _0x30f96e=_0xd474[_0x354a8e];return _0x30f96e;};'use strict';var _=require('lodash');var crypto=require(_0x4d47('0x0'));var jwt=require(_0x4d47('0x1'));var moment=require(_0x4d47('0x2'));var Redis=require(_0x4d47('0x3'));var rp=require('request-promise');var util=require(_0x4d47('0x4'));var encryptor=require(_0x4d47('0x5'));var config=require(_0x4d47('0x6'));var logger=require(_0x4d47('0x7'))('api');var schedule=require(_0x4d47('0x8'));var db=require(_0x4d47('0x9'))['db'];config[_0x4d47('0xa')]=_[_0x4d47('0xb')](config[_0x4d47('0xa')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0x4d47('0xa')]);var MICROSOFT_AUTH_URL=_0x4d47('0xc');var AZURE_AUTH_SCOPES={'Outlook365':['openid',_0x4d47('0xd'),_0x4d47('0xe'),_0x4d47('0xf'),_0x4d47('0x10'),'https://outlook.office.com/POP.AccessAsUser.All',_0x4d47('0x11')],'Dynamics365':[_0x4d47('0x12'),_0x4d47('0xf')]};var MICROSOFT_AUTH_ENDPOINT=_0x4d47('0x13');var MICROSOFT_TOKEN_ENDPOINT=_0x4d47('0x14');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x4b1af7){var _0x339695=_[_0x4d47('0x15')](AZURE_AUTH_SCOPES[_0x4b1af7[_0x4d47('0x16')]]);if(_0x4b1af7[_0x4d47('0x16')]==='Dynamics365')_0x339695[_0x4d47('0x17')](_0x4b1af7['data7']+_0x4d47('0x18'));return _0x339695[_0x4d47('0x19')]('\x20');}function getAccessTokenScope(_0xeb54d2){if(_0xeb54d2['type']==='Outlook365')return _0x4d47('0x10');if(_0xeb54d2[_0x4d47('0x16')]===_0x4d47('0x1a'))return _0xeb54d2[_0x4d47('0x1b')]+_0x4d47('0x18');}function generateMicrosoftAuthorizationUrl(_0x450468,_0x5ebc71){var _0x325c45=MICROSOFT_AUTH_URL[_0x4d47('0x1c')](_0x4d47('0x1d'),_0x450468[_0x4d47('0x1e')]);var _0x5a0997=[_0x4d47('0x1f'),_0x4d47('0x20')];var _0x5c63eb=Buffer['from'](JSON[_0x4d47('0x21')]({'id':_0x5ebc71}))[_0x4d47('0x22')](_0x4d47('0x23'));var _0x2cace0=crypto['randomBytes'](0x10)[_0x4d47('0x22')](_0x4d47('0x24'));var _0x3952b7=getAuthorizationScopes(_0x450468);var _0xbb44a0=[{'key':_0x4d47('0x25'),'value':_0x450468[_0x4d47('0x26')]},{'key':_0x4d47('0x27'),'value':encodeURIComponent(_0x5a0997[_0x4d47('0x19')]('\x20'))},{'key':_0x4d47('0x28'),'value':_0x450468[_0x4d47('0x29')]},{'key':_0x4d47('0x2a'),'value':'form_post'},{'key':_0x4d47('0x2b'),'value':encodeURIComponent(_0x3952b7)},{'key':_0x4d47('0x2c'),'value':_0x5c63eb},{'key':_0x4d47('0x2d'),'value':_0x2cace0},{'key':'prompt','value':_0x4d47('0x2e')}];var _0x4636d7=_0x325c45+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x4d47('0x15')](_0xbb44a0,function(_0x56a1a0){return _0x56a1a0[_0x4d47('0x2f')]+'='+_0x56a1a0['value'];})[_0x4d47('0x19')]('&');_0x450468[_0x4d47('0x30')]={'issuer':_0x325c45['replace'](_0x4d47('0x31'),''),'audience':_0x450468[_0x4d47('0x26')],'state':_0x5c63eb,'nonce':_0x2cace0};redis[_0x4d47('0x32')](_0x5c63eb,JSON[_0x4d47('0x21')](_0x450468));return _0x4636d7;}function isValidIdToken(_0x2a05a3,_0x5b581b){try{var _0x63c270=jwt[_0x4d47('0x33')](_0x2a05a3,{'complete':!![]});var _0xbeefe9=_0x63c270[_0x4d47('0x34')];if(_0xbeefe9['iss']!==_0x5b581b['issuer'])return![];if(_0xbeefe9[_0x4d47('0x35')]!==_0x5b581b[_0x4d47('0x36')])return![];if(_0xbeefe9[_0x4d47('0x2d')]!==_0x5b581b['nonce'])return![];if(moment()[_0x4d47('0x37')](moment['unix'](_0xbeefe9[_0x4d47('0x38')])))return![];return!![];}catch(_0x1d4007){throw _0x1d4007;}}function refreshOauth2MicrosoftAccessToken(_0x361dcb){return Promise[_0x4d47('0x39')]()[_0x4d47('0x3a')](function(){if(_0x361dcb['data3'])return _0x361dcb;return db['CloudProvider']['findOne']({'where':{'id':_0x361dcb['id']},'raw':!![]});})[_0x4d47('0x3a')](function(_0x2e1c88){var _0x4e7bcd={'grant_type':_0x4d47('0x3b'),'refresh_token':_0x2e1c88[_0x4d47('0x3c')],'scope':getAccessTokenScope(_0x2e1c88),'redirect_uri':_0x2e1c88[_0x4d47('0x29')],'client_id':_0x2e1c88[_0x4d47('0x26')],'client_secret':encryptor[_0x4d47('0x3d')](_0x2e1c88['data3'])};var _0x1950c8={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x4d47('0x1c')]('{TENANT_ID}',_0x2e1c88[_0x4d47('0x1e')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x4e7bcd,'json':!![]};return rp(_0x1950c8);})[_0x4d47('0x3a')](function(_0x254455){_0x361dcb['data5']=_0x254455[_0x4d47('0x3e')];_0x361dcb['data6']=_0x254455[_0x4d47('0x3b')];return db[_0x4d47('0x3f')][_0x4d47('0x40')]({'data5':_0x361dcb['data5'],'data6':_0x361dcb[_0x4d47('0x3c')]},{'where':{'id':_0x361dcb['id']}});})[_0x4d47('0x3a')](function(){return _0x361dcb;})[_0x4d47('0x41')](function(_0x2858b6){logger[_0x4d47('0x42')]('Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s',_0x361dcb['id'],_0x2858b6);});}function getOauth2MicrosoftAccessToken(_0x3ed79f,_0x858bb9){var _0x231cc6={'grant_type':_0x4d47('0x43'),'code':_0x3ed79f,'scope':getAccessTokenScope(_0x858bb9),'redirect_uri':_0x858bb9[_0x4d47('0x29')],'client_id':_0x858bb9[_0x4d47('0x26')],'client_secret':encryptor[_0x4d47('0x3d')](_0x858bb9[_0x4d47('0x44')])};var _0x373d70={'method':_0x4d47('0x45'),'uri':MICROSOFT_AUTH_URL[_0x4d47('0x1c')](_0x4d47('0x1d'),_0x858bb9['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x231cc6,'json':!![]};return rp(_0x373d70);}function startRefreshInterval(_0x40cf0f){var _0x5ac5af=schedule['intervals'];if(_0x5ac5af[_0x40cf0f['id']])clearInterval(_0x5ac5af[_0x40cf0f['id']]);_0x5ac5af[_0x40cf0f['id']]=setInterval(refreshOauth2MicrosoftAccessToken['bind'](this,{'id':_0x40cf0f['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x4d47('0x46')]=_0x5ac5af;}function startAllRefreshIntervals(){return db[_0x4d47('0x3f')]['findAll']({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x4d47('0x3a')](function(_0x157288){var _0x4334d9=_0x157288[_0x4d47('0x15')](function(_0x34cf07){return refreshOauth2MicrosoftAccessToken(_0x34cf07)[_0x4d47('0x3a')](function(_0x2b1150){startRefreshInterval(_0x2b1150);});});return Promise['all'](_0x4334d9);})['catch'](function(_0x46bb93){var _0x5a8683=_0x46bb93?util['inspect'](_0x46bb93,{'showHidden':![],'depth':null}):'';logger[_0x4d47('0x42')](_0x4d47('0x47'),_0x5a8683);});}module[_0x4d47('0x48')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};