team2_server/node_modules/@azure/ms-rest-nodeauth/dist/lib/credentials/msiTokenCredentials.js

"use strict";
// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the MIT License. See License.txt in the project root for license information.
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
Object.defineProperty(exports, "__esModule", { value: true });
const ms_rest_js_1 = require("@azure/ms-rest-js");
const authConstants_1 = require("../util/authConstants");
/**
 * @class MSITokenCredentials - Provides information about managed service identity token credentials.
 * This object can only be used to acquire token on a virtual machine provisioned in Azure with managed service identity.
 */
class MSITokenCredentials {
    /**
     * Creates an instance of MSITokenCredentials.
     * @param {object} [options] - Optional parameters
     * @param {string} [options.resource] - The resource uri or token audience for which the token is needed.
     * For e.g. it can be:
     * - resource management endpoint "https://management.azure.com/"(default)
     * - management endpoint "https://management.core.windows.net/"
     */
    constructor(options) {
        if (!options)
            options = {};
        if (!options.resource) {
            options.resource = authConstants_1.AuthConstants.RESOURCE_MANAGER_ENDPOINT;
        }
        else if (typeof options.resource.valueOf() !== "string") {
            throw new Error("resource must be a uri.");
        }
        this.resource = options.resource;
        this._httpClient = options.httpClient || new ms_rest_js_1.DefaultHttpClient();
    }
    /**
     * Parses a tokenResponse json string into a object, and converts properties on the first level to camelCase.
     * This method tries to standardize the tokenResponse
     * @param  {string} body  A json string
     * @return {object} [tokenResponse] The tokenResponse (tokenType and accessToken are the two important properties).
     */
    parseTokenResponse(body) {
        // Docs show different examples of possible MSI responses for different services. https://docs.microsoft.com/en-us/azure/active-directory/managed-service-identity/overview
        // expires_on - is a Date like string in this doc
        //   - https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity#rest-protocol-examples
        // In other doc it is stringified number.
        //   - https://docs.microsoft.com/en-us/azure/active-directory/managed-service-identity/tutorial-linux-vm-access-arm#get-an-access-token-using-the-vms-identity-and-use-it-to-call-resource-manager
        const parsedBody = JSON.parse(body);
        parsedBody.accessToken = parsedBody["access_token"];
        delete parsedBody["access_token"];
        parsedBody.tokenType = parsedBody["token_type"];
        delete parsedBody["token_type"];
        if (parsedBody["refresh_token"]) {
            parsedBody.refreshToken = parsedBody["refresh_token"];
            delete parsedBody["refresh_token"];
        }
        if (parsedBody["expires_in"]) {
            parsedBody.expiresIn = parsedBody["expires_in"];
            if (typeof parsedBody["expires_in"] === "string") {
                // normal number as a string '1504130527'
                parsedBody.expiresIn = parseInt(parsedBody["expires_in"], 10);
            }
            delete parsedBody["expires_in"];
        }
        if (parsedBody["not_before"]) {
            parsedBody.notBefore = parsedBody["not_before"];
            if (typeof parsedBody["not_before"] === "string") {
                // normal number as a string '1504130527'
                parsedBody.notBefore = parseInt(parsedBody["not_before"], 10);
            }
            delete parsedBody["not_before"];
        }
        if (parsedBody["expires_on"]) {
            parsedBody.expiresOn = parsedBody["expires_on"];
            if (typeof parsedBody["expires_on"] === "string") {
                // possibly a Date string '09/14/2017 00:00:00 PM +00:00'
                if (parsedBody["expires_on"].includes(":") || parsedBody["expires_on"].includes("/")) {
                    parsedBody.expiresOn = new Date(parsedBody["expires_on"], 10);
                }
                else {
                    // normal number as a string '1504130527'
                    parsedBody.expiresOn = new Date(parseInt(parsedBody["expires_on"], 10));
                }
            }
            delete parsedBody["expires_on"];
        }
        return parsedBody;
    }
    /**
     * Signs a request with the Authentication header.
     *
     * @param {webResource} The WebResource to be signed.
     * @return {Promise<WebResource>} Promise with signed WebResource.
     */
    signRequest(webResource) {
        return __awaiter(this, void 0, void 0, function* () {
            const tokenResponse = yield this.getToken();
            webResource.headers.set(ms_rest_js_1.Constants.HeaderConstants.AUTHORIZATION, `${tokenResponse.tokenType} ${tokenResponse.accessToken}`);
            return Promise.resolve(webResource);
        });
    }
}
exports.MSITokenCredentials = MSITokenCredentials;
//# sourceMappingURL=msiTokenCredentials.js.map