abacus-authserver-plugin/lib/index.js

'use strict';

// Plugin for an authorization server. Implements REST endpoints to retrieve
// access token endpoint details and to get an OAuth bearer access token with
// expected scopes.

var _ = require('underscore');
var router = require('abacus-router');
var webapp = require('abacus-webapp');
var jwt = require('jsonwebtoken');

var extend = _.extend;

// Setup the debug log
var debug = require('abacus-debug')('abacus-authserver-plugin');

// Create an express router
var routes = router();

// Secure the routes or not
var secured = function secured(req) {
  return process.env.SECURED === 'true' && req.headers['x-forwarded-proto'] === 'https';
};

// Retrieve token point information
routes.get('/v2/info', regeneratorRuntime.mark(function _callee(req) {
  return regeneratorRuntime.wrap(function _callee$(_context) {
    while (1) {
      switch (_context.prev = _context.next) {
        case 0:
          return _context.abrupt('return', {
            body: {
              token_endpoint: [secured(req) ? 'https://' : 'http://', req.headers.host].join('')
            }
          });

        case 1:
        case 'end':
          return _context.stop();
      }
    }
  }, _callee, this);
}));

// Retrieve OAuth bearer access token
routes.get('/oauth/token', regeneratorRuntime.mark(function _callee2(req) {
  var token, signed;
  return regeneratorRuntime.wrap(function _callee2$(_context2) {
    while (1) {
      switch (_context2.prev = _context2.next) {
        case 0:
          debug('Get OAuth bearer access token');

          // Default OAuth bearer access token
          token = {
            jti: 'fa1b29fe-76a9-4c2d-903e-dddd0563a9e3',
            sub: 'test-token',
            client_id: 'test-token',
            cid: 'test-token',
            azp: 'test-token',
            grant_type: 'client_credentials',
            iss: req.url,
            zid: 'authserver-plugin',
            aud: ['abacus', 'account', 'provisioning']
          };

          // Sign OAuth bearer access token with expected scopes

          signed = jwt.sign(extend(token, {
            authorities: req.query.scope.split(' '),
            scope: req.query.scope.split(' ')
          }), process.env.JWTKEY || 'encode', {
            algorithm: process.env.JWTALGO,
            expiresIn: 43200
          });
          return _context2.abrupt('return', {
            body: {
              access_token: signed,
              token_type: 'bearer',
              scope: req.query.scope,
              expires_in: 43200
            }
          });

        case 4:
        case 'end':
          return _context2.stop();
      }
    }
  }, _callee2, this);
}));

// Create an authorization server plugin application
var authserver = function authserver() {
  var app = webapp();
  app.use(routes);
  return app;
};

// Command line interface, create the app and listen
var runCLI = function runCLI() {
  return authserver().listen();
};

// Export our public functions
module.exports = authserver;
module.exports.runCLI = runCLI;
//# sourceMappingURL=data:application/json;base64,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