implemented oauth removed sas

pages/api/proxy/[...route].js

@@ -11,42 +11,43 @@ const PROXY_RELAY_URL =
     (process.env.RELAYPATH || "dev-pedw-hc") +
     "/";
 
-const getSASToken = () => {
-    var m_ResourceURI =
-        process.env.RELAYURI || "dev-pedw-ns.servicebus.windows.net";
-    var m_Path = process.env.RELAYPATH || "dev-pedw-hc";
-    var m_SasKey =
-        process.env.SASKEY || "Ml0Y/S/nfRcmIrHFRkO4jNm2J3iH52TSxPiak7+E1+Y=";
-    var m_SasKeyName = process.env.SASKEYNAME || "devpedwnspolicy";
+const accessTokenEndpoint = process.env.ACCESS_TOKEN_ENDPOINT;
+const tenantId = process.env.TENANT;
 
-    var encodedResourceUri = encodeURIComponent(
-        "https://" + m_ResourceURI + "/" + m_Path + "/"
-    );
+const tokenBody =
+    "grant_type=" +
+    process.env.GRANT_TYPE +
+    "&client_id=" +
+    process.env.CLIENT_ID +
+    "&client_secret=" +
+    process.env.CLIENT_SECRET +
+    "&scope=" +
+    "https://" +
+    process.env.RELAYURI +
+    "/.default";
 
-    var t0 = new Date(1970, 1, 1, 0, 0, 0, 0);
-    var t1 = new Date();
-    var expireInSeconds =
-        +(31 * 24 * 3600) + 3600 + (((t1.getTime() - t0.getTime()) / 1000) | 0);
+const tokenConfig = {
+    headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+        "Cache-Control": "no-cache",
+    },
+};
 
-    //the line below is a hack that converts to UTF8
-    var plainSignature = JSON.parse(
-        JSON.stringify(encodedResourceUri + "\n" + expireInSeconds)
-    );
-
-    var hash = CryptoJS.HmacSHA256(plainSignature, m_SasKey);
-    var base64HashValue = CryptoJS.enc.Base64.stringify(hash);
-
-    var token =
-        "SharedAccessSignature sr=" +
-        encodedResourceUri +
-        "&sig=" +
-        encodeURIComponent(base64HashValue) +
-        "&se=" +
-        expireInSeconds +
-        "&skn=" +
-        m_SasKeyName;
-
-    return token;
+export const getToken = () => {
+    return axios
+        .post(
+            `${accessTokenEndpoint}${tenantId}/oauth2/v2.0/token`,
+            tokenBody,
+            tokenConfig
+        )
+        .then((res) => res.data)
+        .then((data) => {
+            return data;
+        })
+        .catch((error) => {
+            console.log("error :", error.response);
+            // return error;
+        });
 };
 
 function checkProxyPath(queryPath) {
@@ -70,7 +71,9 @@ function checkProxyPath(queryPath) {
 
 export default async function ApiProxy(req, res) {
     var data = JSON.stringify(req.body);
-    const SASToken = getSASToken();
+    var accessToken = await getToken();
+    accessToken = accessToken.access_token;
+
     const isDocument = req.url.indexOf("/documents/download") > -1;
 
     let hashCheckPath = isDocument
@@ -95,7 +98,7 @@ export default async function ApiProxy(req, res) {
             "Accept": "application/json",
             "Prefer":
                 'odata.include-annotations="*",return=representation,odata.maxpagesize=10',
-            "Authorization": SASToken,
+            "Authorization": "Bearer " + accessToken,
             "Content-Type": "application/json",
         },
     };
@@ -112,7 +115,7 @@ export default async function ApiProxy(req, res) {
             "OData-Version": "4.0",
             "Accept": "application/json",
             "Prefer": 'odata.include-annotations="*",return=representation',
-            "Authorization": SASToken,
+            "Authorization": "Bearer " + accessToken,
             "Content-Type": "application/json",
         },
         data: data,
@@ -130,7 +133,7 @@ export default async function ApiProxy(req, res) {
             "OData-Version": "4.0",
             "Accept": "application/json",
             "Prefer": 'odata.include-annotations="*",return=representation',
-            "Authorization": SASToken,
+            "Authorization": "Bearer " + accessToken,
             "Content-Type": "application/json",
         },
         responseType: "arraybuffer",
@@ -168,7 +171,7 @@ export default async function ApiProxy(req, res) {
                 })
                 .catch((error) => {
                     console.log("proxy response error", error);
-                    // res.json(error);
+                    //res.json(error);
                     res.status(405).end();
                     return resolve();
                 });