server/api/cloudProvider/cloudProvider.oauth.js

   1 // *************************************************************************
   2 // *                                                                       *
   3 // * xCALLY Motion -  The Omnichannel Contact Center                       *
   4 // * Copyright (c) Xenialab s.r.l. All Rights Reserved                     *
   5 // *                                                                       *
   6 // *************************************************************************
   7 // *                                                                       *
   8 // * Email: info@xcally.com                                                *
   9 // * Website: https://www.xcally.com                                       *
  10 // *                                                                       *
  11 // *************************************************************************
  12 // *                                                                       *
  13 // * The SOFTWARE PRODUCT is protected by copyright laws and international *
  14 // * copyright treaties, as well as other intellectual property laws and   *
  15 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                         *
  16 // *                                                                       *
  17 // *************************************************************************
  18 var _0x441b=['payload','iss','aud','audience','isAfter','unix','resolve','then','data3','CloudProvider','findOne','refresh_token','data6','POST','data5','access_token','update','error','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','authorization_code','{TENANT_ID}','intervals','findAll','all','catch','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','lodash','crypto','jsonwebtoken','moment','ioredis','request-promise','util','../../config/environment','api','redis','localhost','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','profile','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','/authorize','/token','map','type','Dynamics365','push','data7','/.default','join','Outlook365','replace','data2','code','id_token','from','stringify','randomBytes','toString','data1','redirect_uri','data4','response_mode','form_post','state','nonce','login','key','oauth2/','decode'];(function(_0x5abe5a,_0x5747c0){var _0x5abba2=function(_0x36c001){while(--_0x36c001){_0x5abe5a['push'](_0x5abe5a['shift']());}};_0x5abba2(++_0x5747c0);}(_0x441b,0x143));var _0xb441=function(_0x5d9454,_0x519530){_0x5d9454=_0x5d9454-0x0;var _0x9618c9=_0x441b[_0x5d9454];return _0x9618c9;};'use strict';var _=require(_0xb441('0x0'));var crypto=require(_0xb441('0x1'));var jwt=require(_0xb441('0x2'));var moment=require(_0xb441('0x3'));var Redis=require(_0xb441('0x4'));var rp=require(_0xb441('0x5'));var util=require(_0xb441('0x6'));var encryptor=require('../../components/encryptor');var config=require(_0xb441('0x7'));var logger=require('../../config/logger')(_0xb441('0x8'));var schedule=require('../../config/schedule/cloud-provider');var db=require('../../mysqldb')['db'];config[_0xb441('0x9')]=_['defaults'](config[_0xb441('0x9')],{'host':_0xb441('0xa'),'port':0x18eb});var redis=new Redis(config[_0xb441('0x9')]);var MICROSOFT_AUTH_URL=_0xb441('0xb');var AZURE_AUTH_SCOPES={'Outlook365':[_0xb441('0xc'),_0xb441('0xd'),_0xb441('0xe'),_0xb441('0xf'),_0xb441('0x10'),_0xb441('0x11'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0xb441('0xc'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0xb441('0x12');var MICROSOFT_TOKEN_ENDPOINT=_0xb441('0x13');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x65d3){var _0x51c334=_[_0xb441('0x14')](AZURE_AUTH_SCOPES[_0x65d3['type']]);if(_0x65d3[_0xb441('0x15')]===_0xb441('0x16'))_0x51c334[_0xb441('0x17')](_0x65d3[_0xb441('0x18')]+_0xb441('0x19'));return _0x51c334[_0xb441('0x1a')]('\x20');}function getAccessTokenScope(_0x23671a){if(_0x23671a['type']===_0xb441('0x1b'))return'https://outlook.office365.com/IMAP.AccessAsUser.All';if(_0x23671a[_0xb441('0x15')]==='Dynamics365')return _0x23671a[_0xb441('0x18')]+_0xb441('0x19');}function generateMicrosoftAuthorizationUrl(_0x38631a,_0x4539a5){var _0x1002a8=MICROSOFT_AUTH_URL[_0xb441('0x1c')]('{TENANT_ID}',_0x38631a[_0xb441('0x1d')]);var _0x22283f=[_0xb441('0x1e'),_0xb441('0x1f')];var _0x4d4fbf=Buffer[_0xb441('0x20')](JSON[_0xb441('0x21')]({'id':_0x4539a5}))['toString']('base64');var _0x17d7cf=crypto[_0xb441('0x22')](0x10)[_0xb441('0x23')]('hex');var _0x175f5d=getAuthorizationScopes(_0x38631a);var _0x149fb8=[{'key':'client_id','value':_0x38631a[_0xb441('0x24')]},{'key':'response_type','value':encodeURIComponent(_0x22283f['join']('\x20'))},{'key':_0xb441('0x25'),'value':_0x38631a[_0xb441('0x26')]},{'key':_0xb441('0x27'),'value':_0xb441('0x28')},{'key':'scope','value':encodeURIComponent(_0x175f5d)},{'key':_0xb441('0x29'),'value':_0x4d4fbf},{'key':_0xb441('0x2a'),'value':_0x17d7cf},{'key':'prompt','value':_0xb441('0x2b')}];var _0x20837e=_0x1002a8+MICROSOFT_AUTH_ENDPOINT+'?'+_['map'](_0x149fb8,function(_0x2c4e97){return _0x2c4e97[_0xb441('0x2c')]+'='+_0x2c4e97['value'];})[_0xb441('0x1a')]('&');_0x38631a['oauth2Claims']={'issuer':_0x1002a8[_0xb441('0x1c')](_0xb441('0x2d'),''),'audience':_0x38631a[_0xb441('0x24')],'state':_0x4d4fbf,'nonce':_0x17d7cf};redis['set'](_0x4d4fbf,JSON[_0xb441('0x21')](_0x38631a));return _0x20837e;}function isValidIdToken(_0x36d53d,_0xfe2c0b){try{var _0x17cbe6=jwt[_0xb441('0x2e')](_0x36d53d,{'complete':!![]});var _0x3f3006=_0x17cbe6[_0xb441('0x2f')];if(_0x3f3006[_0xb441('0x30')]!==_0xfe2c0b['issuer'])return![];if(_0x3f3006[_0xb441('0x31')]!==_0xfe2c0b[_0xb441('0x32')])return![];if(_0x3f3006['nonce']!==_0xfe2c0b[_0xb441('0x2a')])return![];if(moment()[_0xb441('0x33')](moment[_0xb441('0x34')](_0x3f3006['exp'])))return![];return!![];}catch(_0x54b22e){throw _0x54b22e;}}function refreshOauth2MicrosoftAccessToken(_0x945501){return Promise[_0xb441('0x35')]()[_0xb441('0x36')](function(){if(_0x945501[_0xb441('0x37')])return _0x945501;return db[_0xb441('0x38')][_0xb441('0x39')]({'where':{'id':_0x945501['id']},'raw':!![]});})[_0xb441('0x36')](function(_0x40c30a){var _0x4c5233={'grant_type':_0xb441('0x3a'),'refresh_token':_0x40c30a[_0xb441('0x3b')],'scope':getAccessTokenScope(_0x40c30a),'redirect_uri':_0x40c30a[_0xb441('0x26')],'client_id':_0x40c30a[_0xb441('0x24')],'client_secret':encryptor['decryptString'](_0x40c30a['data3'])};var _0x550c73={'method':_0xb441('0x3c'),'uri':MICROSOFT_AUTH_URL[_0xb441('0x1c')]('{TENANT_ID}',_0x40c30a['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x4c5233,'json':!![]};return rp(_0x550c73);})['then'](function(_0x45896c){_0x945501[_0xb441('0x3d')]=_0x45896c[_0xb441('0x3e')];_0x945501[_0xb441('0x3b')]=_0x45896c[_0xb441('0x3a')];return db['CloudProvider'][_0xb441('0x3f')]({'data5':_0x945501[_0xb441('0x3d')],'data6':_0x945501[_0xb441('0x3b')]},{'where':{'id':_0x945501['id']}});})['then'](function(){return _0x945501;})['catch'](function(_0x517598){logger[_0xb441('0x40')](_0xb441('0x41'),_0x945501['id'],_0x517598);});}function getOauth2MicrosoftAccessToken(_0x386495,_0x433b6c){var _0x5bab47={'grant_type':_0xb441('0x42'),'code':_0x386495,'scope':getAccessTokenScope(_0x433b6c),'redirect_uri':_0x433b6c[_0xb441('0x26')],'client_id':_0x433b6c[_0xb441('0x24')],'client_secret':encryptor['decryptString'](_0x433b6c[_0xb441('0x37')])};var _0x3d62bc={'method':_0xb441('0x3c'),'uri':MICROSOFT_AUTH_URL[_0xb441('0x1c')](_0xb441('0x43'),_0x433b6c[_0xb441('0x1d')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x5bab47,'json':!![]};return rp(_0x3d62bc);}function startRefreshInterval(_0x558af1){var _0x5522db=schedule['intervals'];if(_0x5522db[_0x558af1['id']])clearInterval(_0x5522db[_0x558af1['id']]);_0x5522db[_0x558af1['id']]=setInterval(refreshOauth2MicrosoftAccessToken['bind'](this,{'id':_0x558af1['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0xb441('0x44')]=_0x5522db;}function startAllRefreshIntervals(){return db['CloudProvider'][_0xb441('0x45')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0xb441('0x36')](function(_0x554117){var _0xed6a23=_0x554117[_0xb441('0x14')](function(_0x253013){return refreshOauth2MicrosoftAccessToken(_0x253013)[_0xb441('0x36')](function(_0x47ba24){startRefreshInterval(_0x47ba24);});});return Promise[_0xb441('0x46')](_0xed6a23);})[_0xb441('0x47')](function(_0x53649a){var _0xd88e59=_0x53649a?util['inspect'](_0x53649a,{'showHidden':![],'depth':null}):'';logger['error'](_0xb441('0x48'),_0xd88e59);});}module[_0xb441('0x49')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};