Built motion from commit 9d0783e6.|2.6.13
[motion2.git] / server / api / cloudProvider / cloudProvider.oauth.js
index a6cf30f..4814925 100644 (file)
@@ -15,4 +15,4 @@
 // * treaties. The SOFTWARE PRODUCT is licensed, not sold.                        *
 // *                                                                       *
 // *************************************************************************
-var _0x7754=['form_post','state','prompt','login','value','oauth2Claims','oauth2/','set','decode','payload','iss','issuer','aud','audience','nonce','exp','then','CloudProvider','refresh_token','data6','data1','data3','POST','replace','access_token','data5','authorization_code','decryptString','bind','intervals','findAll','all','catch','inspect','error','[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s','exports','crypto','jsonwebtoken','moment','ioredis','request-promise','util','../../components/encryptor','../../config/environment','../../config/schedule/cloud-provider','../../mysqldb','defaults','redis','https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0','openid','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','/authorize','/token','map','type','Dynamics365','push','data7','/.default','join','Outlook365','{TENANT_ID}','data2','code','id_token','from','stringify','toString','base64','randomBytes','hex','data4','response_mode'];(function(_0x41dfab,_0x4034a2){var _0x9a9b72=function(_0x3e7619){while(--_0x3e7619){_0x41dfab['push'](_0x41dfab['shift']());}};_0x9a9b72(++_0x4034a2);}(_0x7754,0xbf));var _0x4775=function(_0x1e6db3,_0x5643ac){_0x1e6db3=_0x1e6db3-0x0;var _0x1de886=_0x7754[_0x1e6db3];return _0x1de886;};'use strict';var _=require('lodash');var crypto=require(_0x4775('0x0'));var jwt=require(_0x4775('0x1'));var moment=require(_0x4775('0x2'));var Redis=require(_0x4775('0x3'));var rp=require(_0x4775('0x4'));var util=require(_0x4775('0x5'));var encryptor=require(_0x4775('0x6'));var config=require(_0x4775('0x7'));var logger=require('../../config/logger')('api');var schedule=require(_0x4775('0x8'));var db=require(_0x4775('0x9'))['db'];config['redis']=_[_0x4775('0xa')](config[_0x4775('0xb')],{'host':'localhost','port':0x18eb});var redis=new Redis(config[_0x4775('0xb')]);var MICROSOFT_AUTH_URL=_0x4775('0xc');var AZURE_AUTH_SCOPES={'Outlook365':[_0x4775('0xd'),'profile',_0x4775('0xe'),_0x4775('0xf'),_0x4775('0x10'),_0x4775('0x11'),'https://outlook.office.com/SMTP.Send'],'Dynamics365':[_0x4775('0xd'),_0x4775('0xf')]};var MICROSOFT_AUTH_ENDPOINT=_0x4775('0x12');var MICROSOFT_TOKEN_ENDPOINT=_0x4775('0x13');var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x5bbf62){var _0x583ece=_[_0x4775('0x14')](AZURE_AUTH_SCOPES[_0x5bbf62[_0x4775('0x15')]]);if(_0x5bbf62[_0x4775('0x15')]===_0x4775('0x16'))_0x583ece[_0x4775('0x17')](_0x5bbf62[_0x4775('0x18')]+_0x4775('0x19'));return _0x583ece[_0x4775('0x1a')]('\x20');}function getAccessTokenScope(_0x5db2db){if(_0x5db2db[_0x4775('0x15')]===_0x4775('0x1b'))return _0x4775('0x10');if(_0x5db2db[_0x4775('0x15')]===_0x4775('0x16'))return _0x5db2db[_0x4775('0x18')]+_0x4775('0x19');}function generateMicrosoftAuthorizationUrl(_0x421dd7,_0xb3daa9){var _0x17ec5f=MICROSOFT_AUTH_URL['replace'](_0x4775('0x1c'),_0x421dd7[_0x4775('0x1d')]);var _0x1de488=[_0x4775('0x1e'),_0x4775('0x1f')];var _0x1e5c07=Buffer[_0x4775('0x20')](JSON[_0x4775('0x21')]({'id':_0xb3daa9}))[_0x4775('0x22')](_0x4775('0x23'));var _0x2b293f=crypto[_0x4775('0x24')](0x10)[_0x4775('0x22')](_0x4775('0x25'));var _0x44745a=getAuthorizationScopes(_0x421dd7);var _0x1537eb=[{'key':'client_id','value':_0x421dd7['data1']},{'key':'response_type','value':encodeURIComponent(_0x1de488['join']('\x20'))},{'key':'redirect_uri','value':_0x421dd7[_0x4775('0x26')]},{'key':_0x4775('0x27'),'value':_0x4775('0x28')},{'key':'scope','value':encodeURIComponent(_0x44745a)},{'key':_0x4775('0x29'),'value':_0x1e5c07},{'key':'nonce','value':_0x2b293f},{'key':_0x4775('0x2a'),'value':_0x4775('0x2b')}];var _0x4fa538=_0x17ec5f+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x4775('0x14')](_0x1537eb,function(_0x52ab9c){return _0x52ab9c['key']+'='+_0x52ab9c[_0x4775('0x2c')];})[_0x4775('0x1a')]('&');_0x421dd7[_0x4775('0x2d')]={'issuer':_0x17ec5f['replace'](_0x4775('0x2e'),''),'audience':_0x421dd7['data1'],'state':_0x1e5c07,'nonce':_0x2b293f};redis[_0x4775('0x2f')](_0x1e5c07,JSON['stringify'](_0x421dd7));return _0x4fa538;}function isValidIdToken(_0x264e8a,_0x1700af){try{var _0x40fafd=jwt[_0x4775('0x30')](_0x264e8a,{'complete':!![]});var _0x497cf9=_0x40fafd[_0x4775('0x31')];if(_0x497cf9[_0x4775('0x32')]!==_0x1700af[_0x4775('0x33')])return![];if(_0x497cf9[_0x4775('0x34')]!==_0x1700af[_0x4775('0x35')])return![];if(_0x497cf9[_0x4775('0x36')]!==_0x1700af[_0x4775('0x36')])return![];if(moment()['isAfter'](moment['unix'](_0x497cf9[_0x4775('0x37')])))return![];return!![];}catch(_0x1c8c1d){throw _0x1c8c1d;}}function refreshOauth2MicrosoftAccessToken(_0x397293){return Promise['resolve']()[_0x4775('0x38')](function(){if(_0x397293['data3'])return _0x397293;return db[_0x4775('0x39')]['findOne']({'where':{'id':_0x397293['id']},'raw':!![]});})[_0x4775('0x38')](function(_0x536d6c){var _0x451a6e={'grant_type':_0x4775('0x3a'),'refresh_token':_0x536d6c[_0x4775('0x3b')],'scope':getAccessTokenScope(_0x536d6c),'redirect_uri':_0x536d6c['data4'],'client_id':_0x536d6c[_0x4775('0x3c')],'client_secret':encryptor['decryptString'](_0x536d6c[_0x4775('0x3d')])};var _0x517e98={'method':_0x4775('0x3e'),'uri':MICROSOFT_AUTH_URL[_0x4775('0x3f')](_0x4775('0x1c'),_0x536d6c['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x451a6e,'json':!![]};return rp(_0x517e98);})['then'](function(_0x21f23b){_0x397293['data5']=_0x21f23b[_0x4775('0x40')];_0x397293[_0x4775('0x3b')]=_0x21f23b[_0x4775('0x3a')];return db[_0x4775('0x39')]['update']({'data5':_0x397293[_0x4775('0x41')],'data6':_0x397293['data6']},{'where':{'id':_0x397293['id']}});})['then'](function(){return _0x397293;})['catch'](function(_0x512374){logger['error']('Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s',_0x397293['id'],_0x512374);});}function getOauth2MicrosoftAccessToken(_0x28cc42,_0x404fd3){var _0x2a15f5={'grant_type':_0x4775('0x42'),'code':_0x28cc42,'scope':getAccessTokenScope(_0x404fd3),'redirect_uri':_0x404fd3[_0x4775('0x26')],'client_id':_0x404fd3[_0x4775('0x3c')],'client_secret':encryptor[_0x4775('0x43')](_0x404fd3['data3'])};var _0xe18f94={'method':'POST','uri':MICROSOFT_AUTH_URL[_0x4775('0x3f')](_0x4775('0x1c'),_0x404fd3['data2'])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x2a15f5,'json':!![]};return rp(_0xe18f94);}function startRefreshInterval(_0x5576dc){var _0xec9fb1=schedule['intervals'];if(_0xec9fb1[_0x5576dc['id']])clearInterval(_0xec9fb1[_0x5576dc['id']]);_0xec9fb1[_0x5576dc['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x4775('0x44')](this,{'id':_0x5576dc['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x4775('0x45')]=_0xec9fb1;}function startAllRefreshIntervals(){return db[_0x4775('0x39')][_0x4775('0x46')]({'where':{'data6':{'$ne':null}},'raw':!![]})[_0x4775('0x38')](function(_0x92a5d7){var _0x3b46d3=_0x92a5d7[_0x4775('0x14')](function(_0x5dfe29){return refreshOauth2MicrosoftAccessToken(_0x5dfe29)[_0x4775('0x38')](function(_0x1d8de6){startRefreshInterval(_0x1d8de6);});});return Promise[_0x4775('0x47')](_0x3b46d3);})[_0x4775('0x48')](function(_0x5cd088){var _0x145e9f=_0x5cd088?util[_0x4775('0x49')](_0x5cd088,{'showHidden':![],'depth':null}):'';logger[_0x4775('0x4a')](_0x4775('0x4b'),_0x145e9f);});}module[_0x4775('0x4c')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};
\ No newline at end of file
+var _0xde47=['util','../../components/encryptor','../../config/environment','../../config/schedule/cloud-provider','../../mysqldb','redis','defaults','openid','profile','email','offline_access','https://outlook.office365.com/IMAP.AccessAsUser.All','https://outlook.office.com/POP.AccessAsUser.All','https://outlook.office.com/SMTP.Send','/authorize','map','type','push','/.default','Outlook365','Dynamics365','data7','replace','{TENANT_ID}','data2','code','id_token','from','stringify','base64','hex','join','redirect_uri','response_mode','scope','state','nonce','login','key','value','oauth2Claims','data1','set','decode','payload','iss','issuer','audience','exp','then','data3','CloudProvider','findOne','refresh_token','data4','decryptString','POST','data5','access_token','data6','update','Failed\x20to\x20refresh\x20access\x20token\x20for\x20cloud\x20provider\x20#%s,\x20-\x20err:%s','intervals','bind','findAll','catch','error','exports','lodash','crypto','ioredis','request-promise'];(function(_0x365ea9,_0x17ec94){var _0xb7a188=function(_0x5028c2){while(--_0x5028c2){_0x365ea9['push'](_0x365ea9['shift']());}};_0xb7a188(++_0x17ec94);}(_0xde47,0x1f4));var _0x7de4=function(_0x8a917c,_0x19c5f6){_0x8a917c=_0x8a917c-0x0;var _0x2c704e=_0xde47[_0x8a917c];return _0x2c704e;};'use strict';var _=require(_0x7de4('0x0'));var crypto=require(_0x7de4('0x1'));var jwt=require('jsonwebtoken');var moment=require('moment');var Redis=require(_0x7de4('0x2'));var rp=require(_0x7de4('0x3'));var util=require(_0x7de4('0x4'));var encryptor=require(_0x7de4('0x5'));var config=require(_0x7de4('0x6'));var logger=require('../../config/logger')('api');var schedule=require(_0x7de4('0x7'));var db=require(_0x7de4('0x8'))['db'];config[_0x7de4('0x9')]=_[_0x7de4('0xa')](config['redis'],{'host':'localhost','port':0x18eb});var redis=new Redis(config['redis']);var MICROSOFT_AUTH_URL='https://login.microsoftonline.com/{TENANT_ID}/oauth2/v2.0';var AZURE_AUTH_SCOPES={'Outlook365':[_0x7de4('0xb'),_0x7de4('0xc'),_0x7de4('0xd'),_0x7de4('0xe'),_0x7de4('0xf'),_0x7de4('0x10'),_0x7de4('0x11')],'Dynamics365':[_0x7de4('0xb'),'offline_access']};var MICROSOFT_AUTH_ENDPOINT=_0x7de4('0x12');var MICROSOFT_TOKEN_ENDPOINT='/token';var OAUTH_REFRESH_INTERVAL=0xfa;function getAuthorizationScopes(_0x3142db){var _0x272a19=_[_0x7de4('0x13')](AZURE_AUTH_SCOPES[_0x3142db[_0x7de4('0x14')]]);if(_0x3142db[_0x7de4('0x14')]==='Dynamics365')_0x272a19[_0x7de4('0x15')](_0x3142db['data7']+_0x7de4('0x16'));return _0x272a19['join']('\x20');}function getAccessTokenScope(_0x1f362a){if(_0x1f362a[_0x7de4('0x14')]===_0x7de4('0x17'))return _0x7de4('0xf');if(_0x1f362a['type']===_0x7de4('0x18'))return _0x1f362a[_0x7de4('0x19')]+_0x7de4('0x16');}function generateMicrosoftAuthorizationUrl(_0x5a9fb6,_0x3601a9){var _0x4fe245=MICROSOFT_AUTH_URL[_0x7de4('0x1a')](_0x7de4('0x1b'),_0x5a9fb6[_0x7de4('0x1c')]);var _0x51cbd9=[_0x7de4('0x1d'),_0x7de4('0x1e')];var _0x9c4e2b=Buffer[_0x7de4('0x1f')](JSON[_0x7de4('0x20')]({'id':_0x3601a9}))['toString'](_0x7de4('0x21'));var _0x579b76=crypto['randomBytes'](0x10)['toString'](_0x7de4('0x22'));var _0xc4d2a9=getAuthorizationScopes(_0x5a9fb6);var _0x4bb550=[{'key':'client_id','value':_0x5a9fb6['data1']},{'key':'response_type','value':encodeURIComponent(_0x51cbd9[_0x7de4('0x23')]('\x20'))},{'key':_0x7de4('0x24'),'value':_0x5a9fb6['data4']},{'key':_0x7de4('0x25'),'value':'form_post'},{'key':_0x7de4('0x26'),'value':encodeURIComponent(_0xc4d2a9)},{'key':_0x7de4('0x27'),'value':_0x9c4e2b},{'key':_0x7de4('0x28'),'value':_0x579b76},{'key':'prompt','value':_0x7de4('0x29')}];var _0x36c4ba=_0x4fe245+MICROSOFT_AUTH_ENDPOINT+'?'+_[_0x7de4('0x13')](_0x4bb550,function(_0xd5c92c){return _0xd5c92c[_0x7de4('0x2a')]+'='+_0xd5c92c[_0x7de4('0x2b')];})[_0x7de4('0x23')]('&');_0x5a9fb6[_0x7de4('0x2c')]={'issuer':_0x4fe245[_0x7de4('0x1a')]('oauth2/',''),'audience':_0x5a9fb6[_0x7de4('0x2d')],'state':_0x9c4e2b,'nonce':_0x579b76};redis[_0x7de4('0x2e')](_0x9c4e2b,JSON[_0x7de4('0x20')](_0x5a9fb6));return _0x36c4ba;}function isValidIdToken(_0x4ab4d9,_0xb83994){try{var _0x1e2069=jwt[_0x7de4('0x2f')](_0x4ab4d9,{'complete':!![]});var _0x2b9ed8=_0x1e2069[_0x7de4('0x30')];if(_0x2b9ed8[_0x7de4('0x31')]!==_0xb83994[_0x7de4('0x32')])return![];if(_0x2b9ed8['aud']!==_0xb83994[_0x7de4('0x33')])return![];if(_0x2b9ed8[_0x7de4('0x28')]!==_0xb83994[_0x7de4('0x28')])return![];if(moment()['isAfter'](moment['unix'](_0x2b9ed8[_0x7de4('0x34')])))return![];return!![];}catch(_0x36ffbc){throw _0x36ffbc;}}function refreshOauth2MicrosoftAccessToken(_0x566e85){return Promise['resolve']()[_0x7de4('0x35')](function(){if(_0x566e85[_0x7de4('0x36')])return _0x566e85;return db[_0x7de4('0x37')][_0x7de4('0x38')]({'where':{'id':_0x566e85['id']},'raw':!![]});})['then'](function(_0x355d16){var _0x153160={'grant_type':_0x7de4('0x39'),'refresh_token':_0x355d16['data6'],'scope':getAccessTokenScope(_0x355d16),'redirect_uri':_0x355d16[_0x7de4('0x3a')],'client_id':_0x355d16[_0x7de4('0x2d')],'client_secret':encryptor[_0x7de4('0x3b')](_0x355d16[_0x7de4('0x36')])};var _0x1c604e={'method':_0x7de4('0x3c'),'uri':MICROSOFT_AUTH_URL[_0x7de4('0x1a')](_0x7de4('0x1b'),_0x355d16[_0x7de4('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x153160,'json':!![]};return rp(_0x1c604e);})[_0x7de4('0x35')](function(_0x1aa77f){_0x566e85[_0x7de4('0x3d')]=_0x1aa77f[_0x7de4('0x3e')];_0x566e85[_0x7de4('0x3f')]=_0x1aa77f[_0x7de4('0x39')];return db[_0x7de4('0x37')][_0x7de4('0x40')]({'data5':_0x566e85[_0x7de4('0x3d')],'data6':_0x566e85['data6']},{'where':{'id':_0x566e85['id']}});})['then'](function(){return _0x566e85;})['catch'](function(_0x258366){logger['error'](_0x7de4('0x41'),_0x566e85['id'],_0x258366);});}function getOauth2MicrosoftAccessToken(_0x452b2f,_0x506707){var _0x4c3618={'grant_type':'authorization_code','code':_0x452b2f,'scope':getAccessTokenScope(_0x506707),'redirect_uri':_0x506707[_0x7de4('0x3a')],'client_id':_0x506707['data1'],'client_secret':encryptor[_0x7de4('0x3b')](_0x506707[_0x7de4('0x36')])};var _0x4cbca8={'method':_0x7de4('0x3c'),'uri':MICROSOFT_AUTH_URL[_0x7de4('0x1a')](_0x7de4('0x1b'),_0x506707[_0x7de4('0x1c')])+MICROSOFT_TOKEN_ENDPOINT,'form':_0x4c3618,'json':!![]};return rp(_0x4cbca8);}function startRefreshInterval(_0x1e8257){var _0x4078ef=schedule[_0x7de4('0x42')];if(_0x4078ef[_0x1e8257['id']])clearInterval(_0x4078ef[_0x1e8257['id']]);_0x4078ef[_0x1e8257['id']]=setInterval(refreshOauth2MicrosoftAccessToken[_0x7de4('0x43')](this,{'id':_0x1e8257['id']}),OAUTH_REFRESH_INTERVAL*0x3e8);schedule[_0x7de4('0x42')]=_0x4078ef;}function startAllRefreshIntervals(){return db[_0x7de4('0x37')][_0x7de4('0x44')]({'where':{'data6':{'$ne':null}},'raw':!![]})['then'](function(_0x4872bb){var _0x56e8d1=_0x4872bb['map'](function(_0x3d4116){return refreshOauth2MicrosoftAccessToken(_0x3d4116)[_0x7de4('0x35')](function(_0x96c52f){startRefreshInterval(_0x96c52f);});});return Promise['all'](_0x56e8d1);})[_0x7de4('0x45')](function(_0x129214){var _0x2c7579=_0x129214?util['inspect'](_0x129214,{'showHidden':![],'depth':null}):'';logger[_0x7de4('0x46')]('[CLOUD_PROVIDER]\x20Error\x20while\x20refreshing\x20the\x20tokens\x20after\x20service\x20restart\x20error:%s',_0x2c7579);});}module[_0x7de4('0x47')]={'generateMicrosoftAuthorizationUrl':generateMicrosoftAuthorizationUrl,'getOauth2MicrosoftAccessToken':getOauth2MicrosoftAccessToken,'isValidIdToken':isValidIdToken,'startAllRefreshIntervals':startAllRefreshIntervals,'refreshOauth2MicrosoftAccessToken':refreshOauth2MicrosoftAccessToken,'startRefreshInterval':startRefreshInterval};
\ No newline at end of file