@sipgate/integration-bridge 0.22.2 → 0.22.5

package/dist/util/lang/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/util/lang/diff.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAAgC;AAUhC,SAAS,IAAI,CAAI,IAAa,EAAE,EAAO;IACrC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,iCAAM,KAAK,KAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAgB,UAAU,CACxB,KAAc,EACd,KAAc,EACd,EAAO,EACP,EAAO;IAEP,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3D,OAAO,EAAE,CAAC,MAAM,CACd,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAc,EAAE,EAAE,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE1B,IAAI,GAAG,IAAI,GAAG,EAAE;YACd,OAAO;gBACL,UAAU;gBACV,UAAU;gBACV,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACpC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;aACrC,CAAC;SACH;aAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE;YACtB,OAAO;gBACL,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxC,UAAU;gBACV,QAAQ;gBACR,QAAQ;aACT,CAAC;SACH;aAAM,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE;YACtB,OAAO;gBACL,UAAU;gBACV,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxC,QAAQ;gBACR,QAAQ;aACT,CAAC;SACH;aAAM;YACL,OAAO;gBACL,UAAU;gBACV,UAAU;gBACV,QAAQ;gBACR,QAAQ;aACT,CAAC;SACH;IACH,CAAC,EACD;QACE,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;KACb,EACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CACnB,CAAC;AACJ,CAAC;AAxDD,gCAwDC"}

package/dist/util/lang/index.d.ts

@@ -0,0 +1,2 @@
+import { diffArrays } from "./diff";
+export { diffArrays };

package/dist/util/lang/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.diffArrays = void 0;
+const diff_1 = require("./diff");
+Object.defineProperty(exports, "diffArrays", { enumerable: true, get: function () { return diff_1.diffArrays; } });
+//# sourceMappingURL=index.js.map

package/dist/util/lang/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/util/lang/index.ts"],"names":[],"mappings":";;;AAAA,iCAAoC;AAE3B,2FAFA,iBAAU,OAEA"}

package/dist/util/oauth.d.ts

@@ -0,0 +1,32 @@
+import { Request, Response } from "express";
+import { AxiosResponse } from "axios";
+export type ExtractTokenFromResponseFn<T> = (response: AxiosResponse) => T;
+export interface OAuthParams {
+    accesTokenUrl: string;
+    apiUrl: string;
+    redirect_uri: string;
+    cookieName: string;
+    client_id: string;
+    client_secret: string;
+    authorizeUrl: string;
+}
+export interface OAuthCallbackParams {
+    cookieName: string;
+    client_id: string;
+    client_secret: string;
+    redirect_uri: string;
+    extractToken: ExtractTokenFromResponseFn<any>;
+}
+export declare function getOAuth2RedirectUrl(config: OAuthParams, req: Request, res: Response): Promise<string>;
+export declare function handleOAuth2Callback(config: OAuthCallbackParams, req: Request, res: Response, checkNonceCookie?: boolean, paramCommunication?: GetAccessTokenParamCommunication): Promise<{
+    apiKey: string;
+    apiUrl: string;
+    query_params: any;
+}>;
+export declare enum GetAccessTokenParamCommunication {
+    QUERY_PARAM = 0,
+    X_WWW_FORM_URL_ENCODED = 1,
+    BODY = 2
+}
+export declare function getAccessToken(accessTokenURL: string, authorizationCode: string, clientId: string, clientSecret: string, redirect_uri: string, paramCommunication?: GetAccessTokenParamCommunication): Promise<AxiosResponse<any, any>>;
+export declare function refreshToken(accessTokenURL: string, refresh_token: string, clientId: string, clientSecret: string, paramCommunication?: GetAccessTokenParamCommunication): Promise<AxiosResponse<any, any>>;

package/dist/util/oauth.js

@@ -0,0 +1,167 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refreshToken = exports.getAccessToken = exports.GetAccessTokenParamCommunication = exports.handleOAuth2Callback = exports.getOAuth2RedirectUrl = void 0;
+const _1 = require(".");
+const util = __importStar(require("util"));
+const axios_1 = __importDefault(require("axios"));
+const models_1 = require("../models");
+function getOAuth2RedirectUrl(config, req, res) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const nonce_string = _1.Security.Nonce.nonce();
+            const state = JSON.stringify({
+                nonce: nonce_string,
+                accessTokenUrl: config.accesTokenUrl,
+                apiUrl: config.apiUrl,
+            });
+            const searchParamsAuth = new URLSearchParams({
+                response_type: "code",
+                redirect_uri: config.redirect_uri,
+                client_id: config.client_id,
+                state,
+            });
+            _1.Security.Nonce.setNonceCookie(req, res, config.cookieName, config.client_secret, nonce_string);
+            const url = new URL(config.authorizeUrl);
+            url.search = searchParamsAuth.toString();
+            return url.toString();
+        }
+        catch (exception) {
+            const errorMessage = `Error in getOAuth2RedirectUrl:  ${JSON.stringify(exception, Object.getOwnPropertyNames(exception))} ${util.inspect((_a = exception === null || exception === void 0 ? void 0 : exception.response) === null || _a === void 0 ? void 0 : _a.data, { depth: 3 })}`;
+            console.error(errorMessage);
+            throw new models_1.ServerError(500, errorMessage);
+        }
+    });
+}
+exports.getOAuth2RedirectUrl = getOAuth2RedirectUrl;
+function handleOAuth2Callback(config, req, res, checkNonceCookie = false, paramCommunication = GetAccessTokenParamCommunication.BODY) {
+    var _a, _b, _c, _d;
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            if (req.query.error)
+                throw `Error in handleOAuth2Callback flow: ${req.query.error} ${(_a = req === null || req === void 0 ? void 0 : req.query) === null || _a === void 0 ? void 0 : _a.error_description}`;
+            if (!((_b = req === null || req === void 0 ? void 0 : req.query) === null || _b === void 0 ? void 0 : _b.state))
+                throw 'Unexpected: request has not query param "state"';
+            if (!((_c = req === null || req === void 0 ? void 0 : req.query) === null || _c === void 0 ? void 0 : _c.code))
+                throw 'Unexpected: request has not query param "code"';
+            const nonce_cookie = _1.Security.Nonce.getNonceFromCookie(req, res, config.cookieName, config.client_secret);
+            const state = JSON.parse(req.query.state.toString());
+            if (checkNonceCookie) {
+                if (!nonce_cookie)
+                    throw `Unexpected: cookie ${config.cookieName} not found`;
+                const nonce_request = state.nonce;
+                if (nonce_request !== nonce_cookie)
+                    if (nonce_request !== nonce_cookie)
+                        throw `Unexpected: nonce parameter from request and from cookie are different. Possible CSFR attack!`;
+                _1.Security.Nonce.deleteNonceCookie(req, res, config.cookieName, config.client_secret);
+            }
+            const response = yield getAccessToken(state.accessTokenUrl, req.query.code.toString(), config.client_id, config.client_secret, config.redirect_uri, paramCommunication);
+            return {
+                apiKey: config.extractToken(response),
+                apiUrl: state.apiUrl,
+                query_params: req.query,
+            };
+        }
+        catch (exception) {
+            const errorMessage = `Error in handleOAuth2Callback: ${JSON.stringify(exception, Object.getOwnPropertyNames(exception))} ${util.inspect((_d = exception === null || exception === void 0 ? void 0 : exception.response) === null || _d === void 0 ? void 0 : _d.data, { depth: 3 })}`;
+            console.error(errorMessage);
+            throw new models_1.ServerError(500, errorMessage);
+        }
+    });
+}
+exports.handleOAuth2Callback = handleOAuth2Callback;
+var GetAccessTokenParamCommunication;
+(function (GetAccessTokenParamCommunication) {
+    GetAccessTokenParamCommunication[GetAccessTokenParamCommunication["QUERY_PARAM"] = 0] = "QUERY_PARAM";
+    GetAccessTokenParamCommunication[GetAccessTokenParamCommunication["X_WWW_FORM_URL_ENCODED"] = 1] = "X_WWW_FORM_URL_ENCODED";
+    GetAccessTokenParamCommunication[GetAccessTokenParamCommunication["BODY"] = 2] = "BODY";
+})(GetAccessTokenParamCommunication = exports.GetAccessTokenParamCommunication || (exports.GetAccessTokenParamCommunication = {}));
+function getAccessToken(accessTokenURL, authorizationCode, clientId, clientSecret, redirect_uri, paramCommunication = GetAccessTokenParamCommunication.BODY) {
+    return __awaiter(this, void 0, void 0, function* () {
+        console.log(`Start: fetching access tokens`);
+        const params = {
+            grant_type: "authorization_code",
+            code: authorizationCode,
+            client_id: clientId,
+            client_secret: clientSecret,
+            redirect_uri: redirect_uri,
+        };
+        switch (paramCommunication) {
+            case GetAccessTokenParamCommunication.QUERY_PARAM:
+                return yield axios_1.default.post(accessTokenURL, {}, { params: params });
+            case GetAccessTokenParamCommunication.X_WWW_FORM_URL_ENCODED:
+                return yield axios_1.default.post(accessTokenURL, new URLSearchParams(params), {
+                    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                });
+            case GetAccessTokenParamCommunication.BODY:
+                return yield axios_1.default.post(accessTokenURL, params);
+            default:
+                throw Error("Unexpected parameter communication type");
+                break;
+        }
+        console.log(`End: fetching access tokens`);
+    });
+}
+exports.getAccessToken = getAccessToken;
+function refreshToken(accessTokenURL, refresh_token, clientId, clientSecret, paramCommunication = GetAccessTokenParamCommunication.BODY) {
+    return __awaiter(this, void 0, void 0, function* () {
+        console.log(`Start: refreshing access tokens`);
+        const params = {
+            grant_type: "refresh_token",
+            refresh_token: refresh_token,
+            client_id: clientId,
+            client_secret: clientSecret,
+        };
+        switch (paramCommunication) {
+            case GetAccessTokenParamCommunication.QUERY_PARAM:
+                return yield axios_1.default.post(accessTokenURL, {}, { params: params });
+            case GetAccessTokenParamCommunication.X_WWW_FORM_URL_ENCODED:
+                return yield axios_1.default.post(accessTokenURL, new URLSearchParams(params), {
+                    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                });
+            case GetAccessTokenParamCommunication.BODY:
+                return yield axios_1.default.post(accessTokenURL, params);
+            default:
+                throw Error("Unexpected parameter communication type");
+                break;
+        }
+        console.log(`End: refreshing access tokens`);
+    });
+}
+exports.refreshToken = refreshToken;
+//# sourceMappingURL=oauth.js.map

package/dist/util/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/util/oauth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wBAA6B;AAC7B,2CAA6B;AAC7B,kDAA6C;AAC7C,sCAAwC;AAsBxC,SAAsB,oBAAoB,CACxC,MAAmB,EACnB,GAAY,EACZ,GAAa;;;QAEb,IAAI;YACF,MAAM,YAAY,GAAW,WAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,KAAK,EAAE,YAAY;gBACnB,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,MAAM,gBAAgB,GAAG,IAAI,eAAe,CAAC;gBAC3C,aAAa,EAAE,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK;aACN,CAAC,CAAC;YACH,WAAQ,CAAC,KAAK,CAAC,cAAc,CAC3B,GAAG,EACH,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,EACpB,YAAY,CACb,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACzC,GAAG,CAAC,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;SACvB;QAAC,OAAO,SAAc,EAAE;YACvB,MAAM,YAAY,GAAG,mCAAmC,IAAI,CAAC,SAAS,CACpE,SAAS,EACT,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CACtC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,0CAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5B,MAAM,IAAI,oBAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;SAC1C;;CACF;AApCD,oDAoCC;AAED,SAAsB,oBAAoB,CACxC,MAA2B,EAC3B,GAAY,EACZ,GAAa,EACb,mBAA4B,KAAK,EACjC,qBAAuD,gCAAgC,CAAC,IAAI;;;QAE5F,IAAI;YACF,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;gBACjB,MAAM,uCAAuC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,KAAK,0CAAE,iBAAiB,EAAE,CAAC;YAClG,IAAI,CAAC,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,KAAK,0CAAE,KAAK,CAAA;gBACpB,MAAM,iDAAiD,CAAC;YAC1D,IAAI,CAAC,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,KAAK,0CAAE,IAAI,CAAA;gBACnB,MAAM,gDAAgD,CAAC;YACzD,MAAM,YAAY,GAAG,WAAQ,CAAC,KAAK,CAAC,kBAAkB,CACpD,GAAG,EACH,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACrB,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,IAAI,gBAAgB,EAAE;gBACpB,IAAI,CAAC,YAAY;oBACf,MAAM,sBAAsB,MAAM,CAAC,UAAU,YAAY,CAAC;gBAE5D,MAAM,aAAa,GAAW,KAAK,CAAC,KAAK,CAAC;gBAC1C,IAAI,aAAa,KAAK,YAAY;oBAChC,IAAI,aAAa,KAAK,YAAY;wBAChC,MAAM,+FAA+F,CAAC;gBAC1G,WAAQ,CAAC,KAAK,CAAC,iBAAiB,CAC9B,GAAG,EACH,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,aAAa,CACrB,CAAC;aACH;YACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,KAAK,CAAC,cAAc,EACpB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EACzB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,YAAY,EACnB,kBAAkB,CACnB,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,GAAG,CAAC,KAAK;aACxB,CAAC;SACH;QAAC,OAAO,SAAc,EAAE;YACvB,MAAM,YAAY,GAAG,kCAAkC,IAAI,CAAC,SAAS,CACnE,SAAS,EACT,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CACtC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,0CAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5B,MAAM,IAAI,oBAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;SAC1C;;CACF;AAzDD,oDAyDC;AACD,IAAY,gCAIX;AAJD,WAAY,gCAAgC;IAC1C,qGAAW,CAAA;IACX,2HAAsB,CAAA;IACtB,uFAAI,CAAA;AACN,CAAC,EAJW,gCAAgC,GAAhC,wCAAgC,KAAhC,wCAAgC,QAI3C;AACD,SAAsB,cAAc,CAClC,cAAsB,EACtB,iBAAyB,EACzB,QAAgB,EAChB,YAAoB,EACpB,YAAoB,EACpB,qBAAuD,gCAAgC,CAAC,IAAI;;QAE5F,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,YAAY;SAC3B,CAAC;QACF,QAAQ,kBAAkB,EAAE;YAC1B,KAAK,gCAAgC,CAAC,WAAW;gBAC/C,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,KAAK,gCAAgC,CAAC,sBAAsB;gBAC1D,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE;oBACnE,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;iBACjE,CAAC,CAAC;YACL,KAAK,gCAAgC,CAAC,IAAI;gBACxC,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAClD;gBACE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM;SACT;QACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;CAAA;AA9BD,wCA8BC;AAED,SAAsB,YAAY,CAChC,cAAsB,EACtB,aAAqB,EACrB,QAAgB,EAChB,YAAoB,EACpB,qBAAuD,gCAAgC,CAAC,IAAI;;QAE5F,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,aAAa;YAC5B,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;SAC5B,CAAC;QACF,QAAQ,kBAAkB,EAAE;YAC1B,KAAK,gCAAgC,CAAC,WAAW;gBAC/C,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,KAAK,gCAAgC,CAAC,sBAAsB;gBAC1D,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE;oBACnE,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;iBACjE,CAAC,CAAC;YACL,KAAK,gCAAgC,CAAC,IAAI;gBACxC,OAAO,MAAM,eAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAClD;gBACE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM;SACT;QACD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;CAAA;AA5BD,oCA4BC"}

package/dist/util/security/index.d.ts

@@ -0,0 +1,3 @@
+import * as Nonce from "./nonce";
+export { Nonce };
+export * from "./nonce";

package/dist/util/security/index.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Nonce = void 0;
+const Nonce = __importStar(require("./nonce"));
+exports.Nonce = Nonce;
+__exportStar(require("./nonce"), exports);
+//# sourceMappingURL=index.js.map

package/dist/util/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/util/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAExB,sBAAK;AAEd,0CAAwB"}

package/dist/util/security/nonce.d.ts

@@ -0,0 +1,5 @@
+import { Request, Response } from "express";
+export declare function nonce(): string;
+export declare function getNonceFromCookie(request: Request, response: Response, name: string, secret: string): string | undefined;
+export declare function setNonceCookie(req: Request, res: Response, cookieName: string, secret: string, state: string): void;
+export declare function deleteNonceCookie(req: Request, res: Response, cookieName: string, secret: string): void;

package/dist/util/security/nonce.js

@@ -0,0 +1,49 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteNonceCookie = exports.setNonceCookie = exports.getNonceFromCookie = exports.nonce = void 0;
+const crypto_1 = require("crypto");
+const cookies_1 = __importDefault(require("cookies"));
+function nonce() {
+    const length = 15;
+    const bytes = (0, crypto_1.randomBytes)(length);
+    const nonce = bytes
+        .map((byte) => {
+        return byte % 10;
+    })
+        .join("");
+    return nonce;
+}
+exports.nonce = nonce;
+function getNonceFromCookie(request, response, name, secret) {
+    const cookies = new cookies_1.default(request, response, {
+        secure: true,
+        keys: [secret],
+    });
+    return cookies.get(name, { signed: true });
+}
+exports.getNonceFromCookie = getNonceFromCookie;
+function setNonceCookie(req, res, cookieName, secret, state) {
+    const cookies = new cookies_1.default(req, res, {
+        keys: [secret],
+        secure: true,
+    });
+    cookies.set(cookieName, state, {
+        signed: true,
+        expires: new Date(Date.now() + 60000),
+        sameSite: "none",
+        secure: true,
+    });
+}
+exports.setNonceCookie = setNonceCookie;
+function deleteNonceCookie(req, res, cookieName, secret) {
+    const cookies = new cookies_1.default(req, res, {
+        keys: [secret],
+        secure: true,
+    });
+    cookies.set(cookieName);
+}
+exports.deleteNonceCookie = deleteNonceCookie;
+//# sourceMappingURL=nonce.js.map

package/dist/util/security/nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.js","sourceRoot":"","sources":["../../../src/util/security/nonce.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAqC;AAErC,sDAA8B;AAE9B,SAAgB,KAAK;IACnB,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,MAAM,CAAC,CAAC;IAElC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,KAAK,CAAC;AACf,CAAC;AAXD,sBAWC;AAED,SAAgB,kBAAkB,CAChC,OAAgB,EAChB,QAAkB,EAClB,IAAY,EACZ,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;QAC7C,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAXD,gDAWC;AAED,SAAgB,cAAc,CAC5B,GAAY,EACZ,GAAa,EACb,UAAkB,EAClB,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,GAAG,EAAE,GAAG,EAAE;QACpC,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE;QAC7B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC;AAjBD,wCAiBC;AAED,SAAgB,iBAAiB,CAC/B,GAAY,EACZ,GAAa,EACb,UAAkB,EAClB,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,GAAG,EAAE,GAAG,EAAE;QACpC,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAXD,8CAWC"}

package/dist/util/token-util.d.ts

@@ -0,0 +1,6 @@
+import { TokenStorageCache } from "../cache";
+import { Config } from "../models";
+import { Token } from "../models/token.model";
+export type TokenRefreshFn = (config: Config) => Promise<Token>;
+export declare function getTokenCache(): TokenStorageCache;
+export declare function getFreshAccessToken(config: Config, refreshFn: TokenRefreshFn, force?: boolean): Promise<string>;

package/dist/util/token-util.js

@@ -0,0 +1,66 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFreshAccessToken = exports.getTokenCache = void 0;
+const cache_1 = require("../cache");
+const storage_1 = require("../cache/storage");
+const __1 = require("..");
+const REFRESH_MARKER_TTL = 5;
+function useCollection(value) {
+    const { INTEGRATION_NAME } = process.env;
+    if (!INTEGRATION_NAME) {
+        return value;
+    }
+    return `${INTEGRATION_NAME}:${value.replace(/:/g, "_")}`;
+}
+function getTokenCache() {
+    const { REDIS_URL } = process.env;
+    if (REDIS_URL) {
+        console.log("[TOKEN CACHE] Using Redis cache");
+        return new cache_1.TokenStorageCache(new storage_1.RedisStorageAdapter(REDIS_URL));
+    }
+    console.log("[TOKEN CACHE] Using memory cache");
+    const { TOKEN_CACHE_TTL } = process.env;
+    return new cache_1.TokenStorageCache(new storage_1.MemoryStorageAdapter(parseInt(TOKEN_CACHE_TTL || "60") * 1000));
+}
+exports.getTokenCache = getTokenCache;
+function getFreshAccessToken(config, refreshFn, force = false) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+        if (force) {
+            const newToken = yield getNewToken(config, refreshFn);
+            return newToken.access_token;
+        }
+        const token = yield __1.tokenCache.get(useCollection(config.apiKey));
+        if (token === null || token === void 0 ? void 0 : token.access_token)
+            return token.access_token;
+        if (token === null || token === void 0 ? void 0 : token.isPending) {
+            yield sleep(5000);
+            return yield getFreshAccessToken(config, refreshFn);
+        }
+        const newToken = yield getNewToken(config, refreshFn);
+        return newToken.access_token;
+    });
+}
+exports.getFreshAccessToken = getFreshAccessToken;
+function getNewToken(config, refreshFn) {
+    return __awaiter(this, void 0, void 0, function* () {
+        yield __1.tokenCache.set(useCollection(config.apiKey), {
+            refresh_token: "",
+            access_token: "",
+            isPending: true,
+        }, REFRESH_MARKER_TTL);
+        const newToken = Object.assign(Object.assign({}, (yield refreshFn(config))), { isPending: false });
+        yield __1.tokenCache.set(useCollection(config.apiKey), newToken, parseInt(process.env.TOKEN_CACHE_TTL || "60"));
+        return newToken;
+    });
+}
+//# sourceMappingURL=token-util.js.map

package/dist/util/token-util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-util.js","sourceRoot":"","sources":["../../src/util/token-util.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oCAA6C;AAC7C,8CAA6E;AAI7E,0BAAgC;AAEhC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAEzC,IAAI,CAAC,gBAAgB,EAAE;QACrB,OAAO,KAAK,CAAC;KACd;IAED,OAAO,GAAG,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAID,SAAgB,aAAa;IAC3B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAElC,IAAI,SAAS,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,IAAI,yBAAiB,CAAC,IAAI,6BAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;KAClE;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACxC,OAAO,IAAI,yBAAiB,CAC1B,IAAI,8BAAoB,CAAC,QAAQ,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CACnE,CAAC;AACJ,CAAC;AAbD,sCAaC;AAED,SAAsB,mBAAmB,CACvC,MAAc,EACd,SAAyB,EACzB,KAAK,GAAG,KAAK;;QAEb,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAC3B,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAEpD,IAAI,KAAK,EAAE;YACT,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAEtD,OAAO,QAAQ,CAAC,YAAY,CAAC;SAC9B;QAED,MAAM,KAAK,GAAG,MAAM,cAAU,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAEjE,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY;YAAE,OAAO,KAAK,CAAC,YAAY,CAAC;QAEnD,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,EAAE;YACpB,MAAM,KAAK,CAAC,IAAK,CAAC,CAAC;YACnB,OAAO,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;SACrD;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEtD,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC/B,CAAC;CAAA;AA1BD,kDA0BC;AAED,SAAe,WAAW,CACxB,MAAc,EACd,SAAyB;;QAEzB,MAAM,cAAU,CAAC,GAAG,CAClB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5B;YACE,aAAa,EAAE,EAAE;YACjB,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,IAAI;SAChB,EACD,kBAAkB,CACnB,CAAC;QAEF,MAAM,QAAQ,mCAAQ,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,KAAE,SAAS,EAAE,KAAK,GAAE,CAAC;QAEpE,MAAM,cAAU,CAAC,GAAG,CAClB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5B,QAAQ,EACR,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAC9C,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sipgate/integration-bridge",
-  "version": "0.22.2",
+  "version": "0.22.5",
   "description": "sipgate Integration Bridge Framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -54,6 +54,8 @@
     "@types/lru-cache": "7.10.9",
     "@types/node": "18.16.5",
     "@types/redis": "4.0.10",
+    "@types/cookies": "^0.7.7",
+    "@types/lodash": "^4.14.191",
     "husky": "8.0.3",
     "jest": "^29.4.0",
     "lint-staged": "13.2.2",
@@ -74,6 +76,11 @@
     "express": "^4.18.1",
     "lru-cache": "^7.13.1",
     "moment": "^2.29.4",
-    "redis": "^4.2.0"
+    "redis": "^4.2.0",
+    "@slack/webhook": "^6.1.0",
+    "cookies": "^0.8.0",
+    "dotenv": "^16.0.3",
+    "lodash": "^4.17.21",
+    "rate-limiter-flexible": "^2.3.11"
   }
 }