server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0xf426=['data7','/.default','join','Outlook365','Dynamics365','replace','data2','id_token','from','stringify','toString','base64','randomBytes','client_id','data1','redirect_uri','response_mode','scope','state','nonce','login','key','oauth2Claims','set','decode','payload','iss','aud','audience','isAfter','unix','exp','resolve','then','data3','CloudProvider','refresh_token','data6','data4','decryptString','{TENANT_ID}','data5','access_token','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','POST','intervals','findAll','all','catch','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','request-promise','../../components/encryptor','../../config/environment','../../config/logger','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','email','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','openid','/token','map','type','push'];(function(_0x4ccbe2,_0x11eacf){var _0x134525=function(_0x5c9da9){while(--_0x5c9da9){_0x4ccbe2['push'](_0x4ccbe2['shift']());}};_0x134525(++_0x11eacf);}(_0xf426,0x1a1));var _0x6f42=function(_0x65a0db,_0x55c5a0){_0x65a0db=_0x65a0db-0x0;var _0x987620=_0xf426[_0x65a0db];return _0x987620;};'use strict';var _=require(_0x6f42('0x0'));var crypto=require('crypto');var jwt=require('jsonwebtoken');var moment=require('moment');var Redis=require('ioredis');var rp=require(_0x6f42('0x1'));var util=require('util');var encryptor=require(_0x6f42('0x2'));var config=require(_0x6f42('0x3'));var logger=require(_0x6f42('0x4'))(_0x6f42('0x5'));var schedule=require(_0x6f42('0x6'));var db=require(_0x6f42('0x7'))['db'];config[_0x6f42('0x8')]=_[_0x6f42('0x9')](config['redis'],{'host':_0x6f42('0xa'),'port':0x18eb});var redis=new Redis(config[_0x6f42('0x8')]);var MICROSOFT_AUTH_URL=_0x6f42('0xb');var AZURE_AUTH_SCOPES={'Outlook365':['openid','profile',_0x6f42('0xc'),'offline_access',_0x6f42('0xd'),_0x6f42('0xe'),_0x6f42('0xf')],'Dynamics365':[_0x6f42('0x10'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT='/authorize';var MICROSOFT_TOKEN_ENDPOINT=_0x6f42('0x11');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0xd76454){var _0x56df64=_[_0x6f42('0x12')](AZURE_AUTH_SCOPES[_0xd76454[_0x6f42('0x13')]]);if(_0xd76454['type']==='Dynamics365')_0x56df64[_0x6f42('0x14')](_0xd76454[_0x6f42('0x15')]+_0x6f42('0x16'));return _0x56df64[_0x6f42('0x17')]('\x20');}function getAccessTokenScope(_0x3abffa){if(_0x3abffa[_0x6f42('0x13')]===_0x6f42('0x18'))return _0x6f42('0xd');if(_0x3abffa[_0x6f42('0x13')]===_0x6f42('0x19'))return _0x3abffa[_0x6f42('0x15')]+_0x6f42('0x16');}function generateMicrosoftAuthorizationUrl(_0x39cab0,_0x1a38a9){var _0x588f3e=MICROSOFT_AUTH_URL[_0x6f42('0x1a')]('{TENANT_ID}',_0x39cab0[_0x6f42('0x1b')]);var _0x4a12ef=['code',_0x6f42('0x1c')];var _0x5b994e=Buffer[_0x6f42('0x1d')](JSON[_0x6f42('0x1e')]({'id':_0x1a38a9}))[_0x6f42('0x1f')](_0x6f42('0x20'));var _0x21aab2=crypto[_0x6f42('0x21')](0x10)[_0x6f42('0x1f')]('hex');var _0x1b1469=getAuthorizationScopes(_0x39cab0);var _0x1036a5=[{'key':_0x6f42('0x22'),'value':_0x39cab0[_0x6f42('0x23')]},{'key':'response_type','value':encodeURIComponent(_0x4a12ef[_0x6f42('0x17')]('\x20'))},{'key':_0x6f42('0x24'),'value':_0x39cab0['data4']},{'key':_0x6f42('0x25'),'value':'form_post'},{'key':_0x6f42('0x26'),'value':encodeURIComponent(_0x1b1469)},{'key':_0x6f42('0x27'),'value':_0x5b994e},{'key':_0x6f42('0x28'),'value':_0x21aab2},{'key':'prompt','value':_0x6f42('0x29')}];var _0x964ea3=_0x588f3e+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x6f42('0x12')](_0x1036a5,function(_0xf9f553){return _0xf9f553[_0x6f42('0x2a')]+'='+_0xf9f553['value'];})[_0x6f42('0x17')]('&');_0x39cab0[_0x6f42('0x2b')]={'issuer':_0x588f3e[_0x6f42('0x1a')]('oauth2/',''),'audience':_0x39cab0[_0x6f42('0x23')],'state':_0x5b994e,'nonce':_0x21aab2};redis[_0x6f42('0x2c')](_0x5b994e,JSON['stringify'](_0x39cab0));return _0x964ea3;}function isValidIdToken(_0x4de54f,_0x4f0a6a){try{var _0x25310c=jwt[_0x6f42('0x2d')](_0x4de54f,{'complete':!![]});var _0x1d143b=_0x25310c[_0x6f42('0x2e')];if(_0x1d143b[_0x6f42('0x2f')]!==_0x4f0a6a['issuer'])return![];if(_0x1d143b[_0x6f42('0x30')]!==_0x4f0a6a[_0x6f42('0x31')])return![];if(_0x1d143b['nonce']!==_0x4f0a6a[_0x6f42('0x28')])return![];if(moment()[_0x6f42('0x32')](moment[_0x6f42('0x33')](_0x1d143b[_0x6f42('0x34')])))return![];return!![];}catch(_0x5d828e){throw _0x5d828e;}}function refreshOauth2MicrosoftAccessToken(_0x1177b0){return Promise[_0x6f42('0x35')]()[_0x6f42('0x36')](function(){if(_0x1177b0[_0x6f42('0x37')])return _0x1177b0;return db[_0x6f42('0x38')]['findOne']({'where':{'id':_0x1177b0['id']},'raw':!![]});})['then'](function(_0x2d0a38){var _0x20b783={'grant_type':_0x6f42('0x39'),'refresh_token':_0x2d0a38[_0x6f42('0x3a')],'scope':getAccessTokenScope(_0x2d0a38),'redirect_uri':_0x2d0a38[_0x6f42('0x3b')],'client_id':_0x2d0a38['data1'],'client_secret':encryptor[_0x6f42('0x3c')](_0x2d0a38[_0x6f42('0x37')])};var _0x44f6ed={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x6f42('0x1a')](_0x6f42('0x3d'),_0x2d0a38[_0x6f42('0x1b')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x20b783,'json':!![]};return rp(_0x44f6ed);})[_0x6f42('0x36')](function(_0x111dbd){_0x1177b0[_0x6f42('0x3e')]=_0x111dbd[_0x6f42('0x3f')];_0x1177b0['data6']=_0x111dbd[_0x6f42('0x39')];return db[_0x6f42('0x38')]['update']({'data5':_0x1177b0[_0x6f42('0x3e')],'data6':_0x1177b0[_0x6f42('0x3a')]},{'where':{'id':_0x1177b0['id']}});})['then'](function(){return _0x1177b0;})['catch'](function(_0x41c308){logger[_0x6f42('0x40')](_0x6f42('0x41'),_0x1177b0['id'],_0x41c308);});}function getOauth2MicrosoftAccessToken(_0x36cd43,_0x2cb2dc){var _0x135934={'grant_type':'authorization_code','code':_0x36cd43,'scope':getAccessTokenScope(_0x2cb2dc),'redirect_uri':_0x2cb2dc['data4'],'client_id':_0x2cb2dc[_0x6f42('0x23')],'client_secret':encryptor[_0x6f42('0x3c')](_0x2cb2dc[_0x6f42('0x37')])};var _0x2ed499={'method':_0x6f42('0x42'),'uri':MICROSOFT_AUTH_URL[_0x6f42('0x1a')](_0x6f42('0x3d'),_0x2cb2dc[_0x6f42('0x1b')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x135934,'json':!![]};return rp(_0x2ed499);}function startRefreshInterval(_0x201447){var _0x5335fc=schedule[_0x6f42('0x43')];if(_0x5335fc[_0x201447['id']])clearInterval(_0x5335fc[_0x201447['id']]);_0x5335fc[_0x201447['id']]=setInterval(refreshOauth2MicrosoftAccessToken['bind'](this,{'id':_0x201447['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x6f42('0x43')]=_0x5335fc;}function startAllRefreshIntervals(){return db[_0x6f42('0x38')][_0x6f42('0x44')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x6f42('0x36')](function(_0x1a6389){var _0x169f9d=_0x1a6389[_0x6f42('0x12')](function(_0x1b62f1){return refreshOauth2MicrosoftAccessToken(_0x1b62f1)[_0x6f42('0x36')](function(_0x58e9eb){startRefreshInterval(_0x58e9eb);});});return Promise[_0x6f42('0x45')](_0x169f9d);})[_0x6f42('0x46')](function(_0x45a9ef){var _0x5aa087=_0x45a9ef?util['inspect'](_0x45a9ef,{'showHidden':![],'depth':null}):'';logger[_0x6f42('0x40')](_0x6f42('0x47'),_0x5aa087);});}module[_0x6f42('0x48')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};