server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x521a=['request-promise','util','../../components/encryptor','../../config/logger','api','../../config/schedule/cloud-provider','defaults','redis','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','profile','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','/authorize','/token','map','type','Dynamics365','push','data7','/.default','Outlook365','{TENANT_ID}','data2','id_token','stringify','toString','base64','randomBytes','hex','client_id','data4','response_mode','form_post','scope','nonce','login','value','replace','data1','set','decode','payload','aud','isAfter','exp','resolve','then','CloudProvider','findOne','refresh_token','POST','data5','access_token','data6','update','catch','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','decryptString','data3','intervals','bind','findAll','all','inspect','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','crypto','jsonwebtoken','moment','ioredis'];(function(_0x279d37,_0x14de3f){var _0x530173=function(_0x37fc79){while(--_0x37fc79){_0x279d37['push'](_0x279d37['shift']());}};_0x530173(++_0x14de3f);}(_0x521a,0x1c3));var _0xa521=function(_0x221e0d,_0x384d06){_0x221e0d=_0x221e0d-0x0;var _0x41bcb7=_0x521a[_0x221e0d];return _0x41bcb7;};'use strict';var _=require(_0xa521('0x0'));var crypto=require(_0xa521('0x1'));var jwt=require(_0xa521('0x2'));var moment=require(_0xa521('0x3'));var Redis=require(_0xa521('0x4'));var rp=require(_0xa521('0x5'));var util=require(_0xa521('0x6'));var encryptor=require(_0xa521('0x7'));var config=require('../../config/environment');var logger=require(_0xa521('0x8'))(_0xa521('0x9'));var schedule=require(_0xa521('0xa'));var db=require('../../mysqldb')['db'];config['redis']=_[_0xa521('0xb')](config['redis'],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0xa521('0xc')]);var MICROSOFT_AUTH_URL=_0xa521('0xd');var AZURE_AUTH_SCOPES={'Outlook365':[_0xa521('0xe'),_0xa521('0xf'),_0xa521('0x10'),_0xa521('0x11'),_0xa521('0x12'),_0xa521('0x13'),_0xa521('0x14')],'Dynamics365':['openid','offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0xa521('0x15');var MICROSOFT_TOKEN_ENDPOINT=_0xa521('0x16');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x378eb4){var _0x413d2d=_[_0xa521('0x17')](AZURE_AUTH_SCOPES[_0x378eb4[_0xa521('0x18')]]);if(_0x378eb4[_0xa521('0x18')]===_0xa521('0x19'))_0x413d2d[_0xa521('0x1a')](_0x378eb4[_0xa521('0x1b')]+_0xa521('0x1c'));return _0x413d2d['join']('\x20');}function getAccessTokenScope(_0x30d932){if(_0x30d932[_0xa521('0x18')]===_0xa521('0x1d'))return _0xa521('0x12');if(_0x30d932[_0xa521('0x18')]==='Dynamics365')return _0x30d932[_0xa521('0x1b')]+'/.default';}function generateMicrosoftAuthorizationUrl(_0x549d51,_0x13b5d6){var _0x562ab3=MICROSOFT_AUTH_URL['replace'](_0xa521('0x1e'),_0x549d51[_0xa521('0x1f')]);var _0x17bc41=['code',_0xa521('0x20')];var _0x282185=Buffer['from'](JSON[_0xa521('0x21')]({'id':_0x13b5d6}))[_0xa521('0x22')](_0xa521('0x23'));var _0x587956=crypto[_0xa521('0x24')](0x10)['toString'](_0xa521('0x25'));var _0x5b8c8b=getAuthorizationScopes(_0x549d51);var _0x170bec=[{'key':_0xa521('0x26'),'value':_0x549d51['data1']},{'key':'response_type','value':encodeURIComponent(_0x17bc41['join']('\x20'))},{'key':'redirect_uri','value':_0x549d51[_0xa521('0x27')]},{'key':_0xa521('0x28'),'value':_0xa521('0x29')},{'key':_0xa521('0x2a'),'value':encodeURIComponent(_0x5b8c8b)},{'key':'state','value':_0x282185},{'key':_0xa521('0x2b'),'value':_0x587956},{'key':'prompt','value':_0xa521('0x2c')}];var _0x55dc64=_0x562ab3+MICROSOFT_AUTH_ENDPOINT+'?'+_['map'](_0x170bec,function(_0xebd53){return _0xebd53['key']+'='+_0xebd53[_0xa521('0x2d')];})['join']('&');_0x549d51['oauth2Claims']={'issuer':_0x562ab3[_0xa521('0x2e')]('oauth2/',''),'audience':_0x549d51[_0xa521('0x2f')],'state':_0x282185,'nonce':_0x587956};redis[_0xa521('0x30')](_0x282185,JSON['stringify'](_0x549d51));return _0x55dc64;}function isValidIdToken(_0x2a0321,_0x2a0496){try{var _0x3aaa31=jwt[_0xa521('0x31')](_0x2a0321,{'complete':!![]});var _0x10644d=_0x3aaa31[_0xa521('0x32')];if(_0x10644d['iss']!==_0x2a0496['issuer'])return![];if(_0x10644d[_0xa521('0x33')]!==_0x2a0496['audience'])return![];if(_0x10644d[_0xa521('0x2b')]!==_0x2a0496[_0xa521('0x2b')])return![];if(moment()[_0xa521('0x34')](moment['unix'](_0x10644d[_0xa521('0x35')])))return![];return!![];}catch(_0x18853f){throw _0x18853f;}}function refreshOauth2MicrosoftAccessToken(_0x4c42a9){return Promise[_0xa521('0x36')]()[_0xa521('0x37')](function(){if(_0x4c42a9['data3'])return _0x4c42a9;return db[_0xa521('0x38')][_0xa521('0x39')]({'where':{'id':_0x4c42a9['id']},'raw':!![]});})[_0xa521('0x37')](function(_0x1759a0){var _0x361565={'grant_type':_0xa521('0x3a'),'refresh_token':_0x1759a0['data6'],'scope':getAccessTokenScope(_0x1759a0),'redirect_uri':_0x1759a0[_0xa521('0x27')],'client_id':_0x1759a0[_0xa521('0x2f')],'client_secret':encryptor['decryptString'](_0x1759a0['data3'])};var _0x211e65={'method':_0xa521('0x3b'),'uri':MICROSOFT_AUTH_URL[_0xa521('0x2e')](_0xa521('0x1e'),_0x1759a0[_0xa521('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x361565,'json':!![]};return rp(_0x211e65);})[_0xa521('0x37')](function(_0x405a39){_0x4c42a9[_0xa521('0x3c')]=_0x405a39[_0xa521('0x3d')];_0x4c42a9[_0xa521('0x3e')]=_0x405a39[_0xa521('0x3a')];return db[_0xa521('0x38')][_0xa521('0x3f')]({'data5':_0x4c42a9[_0xa521('0x3c')],'data6':_0x4c42a9[_0xa521('0x3e')]},{'where':{'id':_0x4c42a9['id']}});})['then'](function(){return _0x4c42a9;})[_0xa521('0x40')](function(_0x173cb1){logger[_0xa521('0x41')](_0xa521('0x42'),_0x4c42a9['id'],_0x173cb1);});}function getOauth2MicrosoftAccessToken(_0x65f8c6,_0x39b6a4){var _0x35a23c={'grant_type':'authorization_code','code':_0x65f8c6,'scope':getAccessTokenScope(_0x39b6a4),'redirect_uri':_0x39b6a4[_0xa521('0x27')],'client_id':_0x39b6a4[_0xa521('0x2f')],'client_secret':encryptor[_0xa521('0x43')](_0x39b6a4[_0xa521('0x44')])};var _0x4d5f65={'method':_0xa521('0x3b'),'uri':MICROSOFT_AUTH_URL['replace'](_0xa521('0x1e'),_0x39b6a4[_0xa521('0x1f')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x35a23c,'json':!![]};return rp(_0x4d5f65);}function startRefreshInterval(_0x3deb76){var _0x3eb5a1=schedule[_0xa521('0x45')];if(_0x3eb5a1[_0x3deb76['id']])clearInterval(_0x3eb5a1[_0x3deb76['id']]);_0x3eb5a1[_0x3deb76['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0xa521('0x46')](this,{'id':_0x3deb76['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0xa521('0x45')]=_0x3eb5a1;}function startAllRefreshIntervals(){return db[_0xa521('0x38')][_0xa521('0x47')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0xa521('0x37')](function(_0xa79ad9){var _0x8ddf48=_0xa79ad9[_0xa521('0x17')](function(_0x43f8d2){return refreshOauth2MicrosoftAccessToken(_0x43f8d2)['then'](function(_0x26166a){startRefreshInterval(_0x26166a);});});return Promise[_0xa521('0x48')](_0x8ddf48);})[_0xa521('0x40')](function(_0x2082cf){var _0xc0ef93=_0x2082cf?util[_0xa521('0x49')](_0x2082cf,{'showHidden':![],'depth':null}):'';logger['error'](_0xa521('0x4a'),_0xc0ef93);});}module[_0xa521('0x4b')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};