68541

Build # 68541

Build Type

push

Azure DevOps

Committed by GitHub

Commit Message

<a href="https://github.com/Microsoft/BotFramework-Emulator/commit/<a class=hub.com/Microsoft/BotFramework-Emulator/commit/50d05a45b61b1a9ad424dd79bd5d09487d75d964">50d05a45b<a href="https://github.com/Microsoft/BotFramework-Emulator/commit/50d05a45b61b1a9ad424dd79bd5d09487d75d964">">Merge </a><a class="double-link" href="https://github.com/Microsoft/BotFramework-Emulator/commit/<a class="double-link" href="https://github.com/Microsoft/BotFramework-Emulator/commit/dfcaceba4205d809c04c79ee36434073cf8bdf3e">dfcaceba4</a>">dfcaceba4</a><a href="https://github.com/Microsoft/BotFramework-Emulator/commit/50d05a45b61b1a9ad424dd79bd5d09487d75d964"> into 93013216b">93013216b</a>

Run Details

2208 of 4061 branches covered (54.37%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

5927 of 8780 relevant lines covered (67.51%)

8.79 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/packages/app/main/src/openIdMetadata.ts

//
// Copyright (c) Microsoft. All rights reserved.
// Licensed under the MIT license.
//
// Microsoft Bot Framework: http://botframework.com
//
// Bot Framework Emulator Github:
// https://github.com/Microsoft/BotFramwork-Emulator
//
// Copyright (c) Microsoft Corporation
// All rights reserved.
//
// MIT License:
// Permission is hereby granted, free of charge, to any person obtaining
// a copy of this software and associated documentation files (the
// "Software"), to deal in the Software without restriction, including
// without limitation the rights to use, copy, modify, merge, publish,
// distribute, sublicense, and/or sell copies of the Software, and to
// permit persons to whom the Software is furnished to do so, subject to
// the following conditions:
//
// The above copyright notice and this permission notice shall be
// included in all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED ""AS IS"", WITHOUT WARRANTY OF ANY KIND,
// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
//

import got from 'got';

// eslint-disable-next-line typescript/no-var-requires
const getPem = require('rsa-pem-from-mod-exp');

export class OpenIdMetadata {
  private url: string;
  private lastUpdated = 0;
  private keys: Key[];

  constructor(url: string) {
    this.url = url;
  }

  public getKey(keyId: string, cb: (key: string) => void): void {
    // If keys are more than 5 days old, refresh them
    const now = new Date().getTime();
    if (this.lastUpdated < now - 1000 * 60 * 60 * 24 * 5) {
      this.refreshCache(err => {
        if (err) {
          // fall through and return cached key on error
        }

        // Search the cache even if we failed to refresh
        const key = this.findKey(keyId);
        cb(key);
      });
    } else {
      // Otherwise read from cache
      const key = this.findKey(keyId);
      cb(key);
    }
  }

  private refreshCache(cb: (err: Error) => void): void {
    const options = {
      method: 'GET',
      url: this.url,
      json: true,
      strictSSL: false,
      useElectronNet: true,
    };

    got(options)
      .then(resp => {
        if (resp.statusCode >= 400 || !resp.body) {
          throw new Error('Failed to load openID config: ' + resp.statusCode);
        }

        const openIdConfig = resp.body as OpenIdConfig;

        const options1 = {
          method: 'GET',
          url: openIdConfig.jwks_uri,
          json: true,
          strictSSL: false,
          useElectronNet: true,
        };

        got(options1)
          .then((resp1: any) => {
            if (resp1.statusCode >= 400 || !resp1.body) {
              throw new Error('Failed to load Keys: ' + resp1.statusCode);
            }

            this.lastUpdated = new Date().getTime();
            this.keys = resp1.body.keys as Key[];

            cb(null);
          })
          .catch(err => {
            cb(err);
          });
      })
      .catch(err => {
        cb(err);
      });
  }

  private findKey(keyId: string): string {
    if (!this.keys) {
      return null;
    }

    for (let i = 0; i < this.keys.length; i++) {
      if (this.keys[i].kid === keyId) {
        const key = this.keys[i];

        if (!key.n || !key.e) {
          // Return null for non-RSA keys
          return null;
        }

        const modulus = Buffer.from(key.n).toString('base64');
        const exponent = key.e;

        return getPem(modulus, exponent);
      }
    }

    return null;
  }
}

interface OpenIdConfig {
  issuer: string;
  authorization_endpoint: string;
  jwks_uri: string;
  id_token_signing_alg_values_supported: string[];
  token_endpoint_auth_methods_supported: string[];
}

interface Key {
  kty: string;
  use: string;
  kid: string;
  x5t: string;
  n: string;
  e: string;
  x5c: string[];
}

1	//
2	// Copyright (c) Microsoft. All rights reserved.
3	// Licensed under the MIT license.
4	//
5	// Microsoft Bot Framework: http://botframework.com
6	//
7	// Bot Framework Emulator Github:
8	// https://github.com/Microsoft/BotFramwork-Emulator
9	//
10	// Copyright (c) Microsoft Corporation
11	// All rights reserved.
12	//
13	// MIT License:
14	// Permission is hereby granted, free of charge, to any person obtaining
15	// a copy of this software and associated documentation files (the
16	// "Software"), to deal in the Software without restriction, including
17	// without limitation the rights to use, copy, modify, merge, publish,
18	// distribute, sublicense, and/or sell copies of the Software, and to
19	// permit persons to whom the Software is furnished to do so, subject to
20	// the following conditions:
21	//
22	// The above copyright notice and this permission notice shall be
23	// included in all copies or substantial portions of the Software.
24	//
25	// THE SOFTWARE IS PROVIDED ""AS IS"", WITHOUT WARRANTY OF ANY KIND,
26	// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
27	// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
28	// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
29	// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
30	// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
31	// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
32	//
33
34	import got from 'got';
35
36	// eslint-disable-next-line typescript/no-var-requires
37	const getPem = require('rsa-pem-from-mod-exp');	×
38
39	export class OpenIdMetadata {
40	private url: string;
41	private lastUpdated = 0;	×
42	private keys: Key[];
43
44	constructor(url: string) {
45	this.url = url;	×
46	}
47
48	public getKey(keyId: string, cb: (key: string) => void): void {
49	// If keys are more than 5 days old, refresh them
50	const now = new Date().getTime();	×
51	if (this.lastUpdated < now - 1000 * 60 * 60 * 24 * 5) {	×
52	this.refreshCache(err => {	×
53	if (err) {	×
54	// fall through and return cached key on error
55	}
56
57	// Search the cache even if we failed to refresh
58	const key = this.findKey(keyId);	×
59	cb(key);	×
60	});
61	} else {
62	// Otherwise read from cache
63	const key = this.findKey(keyId);	×
64	cb(key);	×
65	}
66	}
67
68	private refreshCache(cb: (err: Error) => void): void {
69	const options = {	×
70	method: 'GET',
71	url: this.url,
72	json: true,
73	strictSSL: false,
74	useElectronNet: true,
75	};
76
77	got(options)	×
78	.then(resp => {
79	if (resp.statusCode >= 400 \|\| !resp.body) {	×
80	throw new Error('Failed to load openID config: ' + resp.statusCode);	×
81	}
82
83	const openIdConfig = resp.body as OpenIdConfig;	×
84
85	const options1 = {	×
86	method: 'GET',
87	url: openIdConfig.jwks_uri,
88	json: true,
89	strictSSL: false,
90	useElectronNet: true,
91	};
92
93	got(options1)	×
94	.then((resp1: any) => {
95	if (resp1.statusCode >= 400 \|\| !resp1.body) {	×
96	throw new Error('Failed to load Keys: ' + resp1.statusCode);	×
97	}
98
99	this.lastUpdated = new Date().getTime();	×
100	this.keys = resp1.body.keys as Key[];	×
101
102	cb(null);	×
103	})
104	.catch(err => {
105	cb(err);	×
106	});
107	})
108	.catch(err => {
109	cb(err);	×
110	});
111	}
112
113	private findKey(keyId: string): string {
114	if (!this.keys) {	×
115	return null;	×
116	}
117
118	for (let i = 0; i < this.keys.length; i++) {	×
119	if (this.keys[i].kid === keyId) {	×
120	const key = this.keys[i];	×
121
122	if (!key.n \|\| !key.e) {	×
123	// Return null for non-RSA keys
124	return null;	×
125	}
126
127	const modulus = Buffer.from(key.n).toString('base64');	×
128	const exponent = key.e;	×
129
130	return getPem(modulus, exponent);	×
131	}
132	}
133
134	return null;	×
135	}
136	}
137
138	interface OpenIdConfig {
139	issuer: string;
140	authorization_endpoint: string;
141	jwks_uri: string;
142	id_token_signing_alg_values_supported: string[];
143	token_endpoint_auth_methods_supported: string[];
144	}
145
146	interface Key {
147	kty: string;
148	use: string;
149	kid: string;
150	x5t: string;
151	n: string;
152	e: string;
153	x5c: string[];
154	}

Microsoft / BotFramework-Emulator / 68541

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous