server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x92c6=['oauth2/','data1','set','decode','payload','iss','aud','audience','isAfter','unix','exp','resolve','then','CloudProvider','findOne','refresh_token','data6','decryptString','data2','access_token','update','catch','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','data3','POST','intervals','bind','findAll','error','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','request-promise','util','../../components/encryptor','../../config/environment','api','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','profile','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','openid','/authorize','/token','map','type','Dynamics365','push','data7','/.default','join','Outlook365','replace','{TENANT_ID}','code','from','stringify','toString','base64','randomBytes','hex','client_id','response_type','redirect_uri','data4','response_mode','form_post','scope','state','nonce','login','key','value','oauth2Claims'];(function(_0x4c8f99,_0x5511fa){var _0x14b98b=function(_0x258c33){while(--_0x258c33){_0x4c8f99['push'](_0x4c8f99['shift']());}};_0x14b98b(++_0x5511fa);}(_0x92c6,0x72));var _0x692c=function(_0x222659,_0x130f73){_0x222659=_0x222659-0x0;var _0x372310=_0x92c6[_0x222659];return _0x372310;};'use strict';var _=require(_0x692c('0x0'));var crypto=require('crypto');var jwt=require('jsonwebtoken');var moment=require('moment');var Redis=require('ioredis');var rp=require(_0x692c('0x1'));var util=require(_0x692c('0x2'));var encryptor=require(_0x692c('0x3'));var config=require(_0x692c('0x4'));var logger=require('../../config/logger')(_0x692c('0x5'));var schedule=require(_0x692c('0x6'));var db=require(_0x692c('0x7'))['db'];config[_0x692c('0x8')]=_[_0x692c('0x9')](config[_0x692c('0x8')],{'host':_0x692c('0xa'),'port':0x18eb});var redis=new Redis(config[_0x692c('0x8')]);var MICROSOFT_AUTH_URL=_0x692c('0xb');var AZURE_AUTH_SCOPES={'Outlook365':['openid',_0x692c('0xc'),_0x692c('0xd'),_0x692c('0xe'),_0x692c('0xf'),_0x692c('0x10'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0x692c('0x11'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0x692c('0x12');var MICROSOFT_TOKEN_ENDPOINT=_0x692c('0x13');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x2b647b){var _0x3e1096=_[_0x692c('0x14')](AZURE_AUTH_SCOPES[_0x2b647b[_0x692c('0x15')]]);if(_0x2b647b[_0x692c('0x15')]===_0x692c('0x16'))_0x3e1096[_0x692c('0x17')](_0x2b647b[_0x692c('0x18')]+_0x692c('0x19'));return _0x3e1096[_0x692c('0x1a')]('\x20');}function getAccessTokenScope(_0x861e3c){if(_0x861e3c[_0x692c('0x15')]===_0x692c('0x1b'))return _0x692c('0xf');if(_0x861e3c[_0x692c('0x15')]===_0x692c('0x16'))return _0x861e3c[_0x692c('0x18')]+'/.default';}function generateMicrosoftAuthorizationUrl(_0x39e599,_0x38431b){var _0x155a31=MICROSOFT_AUTH_URL[_0x692c('0x1c')](_0x692c('0x1d'),_0x39e599['data2']);var _0x8c5d33=[_0x692c('0x1e'),'id_token'];var _0x3e10b6=Buffer[_0x692c('0x1f')](JSON[_0x692c('0x20')]({'id':_0x38431b}))[_0x692c('0x21')](_0x692c('0x22'));var _0x1e8373=crypto[_0x692c('0x23')](0x10)[_0x692c('0x21')](_0x692c('0x24'));var _0x139df2=getAuthorizationScopes(_0x39e599);var _0x8605dd=[{'key':_0x692c('0x25'),'value':_0x39e599['data1']},{'key':_0x692c('0x26'),'value':encodeURIComponent(_0x8c5d33['join']('\x20'))},{'key':_0x692c('0x27'),'value':_0x39e599[_0x692c('0x28')]},{'key':_0x692c('0x29'),'value':_0x692c('0x2a')},{'key':_0x692c('0x2b'),'value':encodeURIComponent(_0x139df2)},{'key':_0x692c('0x2c'),'value':_0x3e10b6},{'key':_0x692c('0x2d'),'value':_0x1e8373},{'key':'prompt','value':_0x692c('0x2e')}];var _0x48fade=_0x155a31+MICROSOFT_AUTH_ENDPOINT+'?'+_['map'](_0x8605dd,function(_0x49e333){return _0x49e333[_0x692c('0x2f')]+'='+_0x49e333[_0x692c('0x30')];})[_0x692c('0x1a')]('&');_0x39e599[_0x692c('0x31')]={'issuer':_0x155a31['replace'](_0x692c('0x32'),''),'audience':_0x39e599[_0x692c('0x33')],'state':_0x3e10b6,'nonce':_0x1e8373};redis[_0x692c('0x34')](_0x3e10b6,JSON['stringify'](_0x39e599));return _0x48fade;}function isValidIdToken(_0x4e361d,_0x418912){try{var _0x56b4c7=jwt[_0x692c('0x35')](_0x4e361d,{'complete':!![]});var _0x81de91=_0x56b4c7[_0x692c('0x36')];if(_0x81de91[_0x692c('0x37')]!==_0x418912['issuer'])return![];if(_0x81de91[_0x692c('0x38')]!==_0x418912[_0x692c('0x39')])return![];if(_0x81de91[_0x692c('0x2d')]!==_0x418912[_0x692c('0x2d')])return![];if(moment()[_0x692c('0x3a')](moment[_0x692c('0x3b')](_0x81de91[_0x692c('0x3c')])))return![];return!![];}catch(_0x3c18b9){throw _0x3c18b9;}}function refreshOauth2MicrosoftAccessToken(_0x39ea88){return Promise[_0x692c('0x3d')]()[_0x692c('0x3e')](function(){if(_0x39ea88['data3'])return _0x39ea88;return db[_0x692c('0x3f')][_0x692c('0x40')]({'where':{'id':_0x39ea88['id']},'raw':!![]});})[_0x692c('0x3e')](function(_0x54ca04){var _0x283b96={'grant_type':_0x692c('0x41'),'refresh_token':_0x54ca04[_0x692c('0x42')],'scope':getAccessTokenScope(_0x54ca04),'redirect_uri':_0x54ca04[_0x692c('0x28')],'client_id':_0x54ca04[_0x692c('0x33')],'client_secret':encryptor[_0x692c('0x43')](_0x54ca04['data3'])};var _0x437133={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x692c('0x1c')](_0x692c('0x1d'),_0x54ca04[_0x692c('0x44')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x283b96,'json':!![]};return rp(_0x437133);})[_0x692c('0x3e')](function(_0x100eef){_0x39ea88['data5']=_0x100eef[_0x692c('0x45')];_0x39ea88[_0x692c('0x42')]=_0x100eef[_0x692c('0x41')];return db['CloudProvider'][_0x692c('0x46')]({'data5':_0x39ea88['data5'],'data6':_0x39ea88[_0x692c('0x42')]},{'where':{'id':_0x39ea88['id']}});})['then'](function(){return _0x39ea88;})[_0x692c('0x47')](function(_0x28a158){logger['error'](_0x692c('0x48'),_0x39ea88['id'],_0x28a158);});}function getOauth2MicrosoftAccessToken(_0xa198f8,_0x22eb20){var _0x101ffe={'grant_type':_0x692c('0x49'),'code':_0xa198f8,'scope':getAccessTokenScope(_0x22eb20),'redirect_uri':_0x22eb20[_0x692c('0x28')],'client_id':_0x22eb20[_0x692c('0x33')],'client_secret':encryptor[_0x692c('0x43')](_0x22eb20[_0x692c('0x4a')])};var _0x408f40={'method':_0x692c('0x4b'),'uri':MICROSOFT_AUTH_URL[_0x692c('0x1c')](_0x692c('0x1d'),_0x22eb20['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x101ffe,'json':!![]};return rp(_0x408f40);}function startRefreshInterval(_0x2cb1bc){var _0x1a4f04=schedule[_0x692c('0x4c')];if(_0x1a4f04[_0x2cb1bc['id']])clearInterval(_0x1a4f04[_0x2cb1bc['id']]);_0x1a4f04[_0x2cb1bc['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x692c('0x4d')](this,{'id':_0x2cb1bc['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x692c('0x4c')]=_0x1a4f04;}function startAllRefreshIntervals(){return db[_0x692c('0x3f')][_0x692c('0x4e')]({'where':{'data6':{'$ne':null}},'raw':!![]})['then'](function(_0x4522cc){var _0xf3d1fa=_0x4522cc[_0x692c('0x14')](function(_0x3f56d0){return refreshOauth2MicrosoftAccessToken(_0x3f56d0)[_0x692c('0x3e')](function(_0xaab535){startRefreshInterval(_0xaab535);});});return Promise['all'](_0xf3d1fa);})[_0x692c('0x47')](function(_0x16d97e){var _0x54f354=_0x16d97e?util['inspect'](_0x16d97e,{'showHidden':![],'depth':null}):'';logger[_0x692c('0x4f')](_0x692c('0x50'),_0x54f354);});}module[_0x692c('0x51')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};