Initial commit

src/background.js

@@ -0,0 +1,216 @@
+(function () {
+  "use strict";
+
+  const ORACLE_DOMAIN = "eeho.fa.us2.oraclecloud.com";
+  const ORACLE_COOKIE_URLS = [
+    "https://eeho.fa.us2.oraclecloud.com/",
+    "https://eeho.fa.us2.oraclecloud.com/hcmUI/faces/FuseWelcome",
+    "https://eeho.fa.us2.oraclecloud.com/fscmUI/faces/FuseWelcome",
+    "https://eeho.fa.us2.oraclecloud.com/fscmRestApi/tokenrelay"
+  ];
+  const XSRF_COOKIE_NAME = "XSRF-TOKEN-US2DZ2V_F";
+  const XSRF_COOKIE_PREFIX = "XSRF-TOKEN-";
+  const runtimeApi = typeof browser !== "undefined" ? browser : chrome;
+
+  runtimeApi.runtime.onMessage.addListener((message, sender, sendResponse) => {
+    if (!message || message.type !== "opportunitiesExtension.getXsrfToken") {
+      return false;
+    }
+
+    getXsrfTokenCookie()
+      .then((result) => {
+        sendResponse({
+          ok: true,
+          cookieName: result.cookie ? result.cookie.name : "",
+          token: result.cookie ? result.cookie.value : "",
+          matchedCookieNames: result.matchedCookieNames,
+          lookupDetails: result.lookupDetails
+        });
+      })
+      .catch((error) => {
+        sendResponse({
+          ok: false,
+          cookieName: "",
+          token: "",
+          matchedCookieNames: [],
+          lookupDetails: [],
+          error: error.message || "Unable to read cookies."
+        });
+      });
+
+    return true;
+  });
+
+  async function getXsrfTokenCookie() {
+    const lookupDetails = [];
+    const allCookies = [];
+    const stores = await getCookieStores(lookupDetails);
+
+    for (const store of stores) {
+      const exactCookie = await getExactCookieFromUrls(store.id, lookupDetails);
+
+      if (exactCookie) {
+        allCookies.push(exactCookie);
+      }
+    }
+
+    for (const store of stores) {
+      await collectCookies({
+        name: XSRF_COOKIE_NAME,
+        storeId: store.id
+      }, allCookies, lookupDetails);
+    }
+
+    for (const store of stores) {
+      await collectCookies({
+        domain: ORACLE_DOMAIN,
+        storeId: store.id
+      }, allCookies, lookupDetails);
+
+      await collectCookies({
+        domain: `.${ORACLE_DOMAIN}`,
+        storeId: store.id
+      }, allCookies, lookupDetails);
+    }
+
+    for (const store of stores) {
+      for (const url of ORACLE_COOKIE_URLS) {
+        await collectCookies({
+          url,
+          storeId: store.id
+        }, allCookies, lookupDetails);
+      }
+    }
+
+    const uniqueCookies = dedupeCookies(allCookies);
+    const xsrfCookies = uniqueCookies.filter((cookie) => cookie.name.startsWith(XSRF_COOKIE_PREFIX));
+    const exactCookie = xsrfCookies.find((cookie) => cookie.name === XSRF_COOKIE_NAME);
+    const hostCookie = xsrfCookies.find((cookie) => cookie.domain === ORACLE_DOMAIN || cookie.domain === `.${ORACLE_DOMAIN}`);
+
+    return {
+      cookie: exactCookie || hostCookie || xsrfCookies[0] || null,
+      matchedCookieNames: xsrfCookies.map((cookie) => `${cookie.name} (${cookie.domain}${cookie.path})`),
+      lookupDetails
+    };
+  }
+
+  async function getExactCookieFromUrls(storeId, lookupDetails) {
+    for (const url of ORACLE_COOKIE_URLS) {
+      const cookie = await cookiesGet({
+        url,
+        name: XSRF_COOKIE_NAME,
+        storeId
+      });
+
+      lookupDetails.push(`${JSON.stringify({ url, name: XSRF_COOKIE_NAME, storeId })} => ${cookie ? "found" : "not found"}`);
+
+      if (cookie) {
+        return cookie;
+      }
+    }
+
+    return null;
+  }
+
+  async function getCookieStores(lookupDetails) {
+    try {
+      const stores = await cookiesGetAllCookieStores();
+      lookupDetails.push(`getAllCookieStores => ${stores.length} store(s)`);
+      return stores.length ? stores : [{ id: undefined }];
+    } catch (error) {
+      lookupDetails.push(`getAllCookieStores => unavailable (${error.message || "unknown error"})`);
+      return [{ id: undefined }];
+    }
+  }
+
+  async function collectCookies(details, target, lookupDetails) {
+    const cleanDetails = removeUndefinedValues(details);
+    const cookies = await cookiesGetAll(cleanDetails);
+    target.push(...cookies);
+    lookupDetails.push(`${JSON.stringify(cleanDetails)} => ${cookies.length} cookie(s)`);
+  }
+
+  function dedupeCookies(cookies) {
+    const seen = new Set();
+
+    return cookies.filter((cookie) => {
+      const key = `${cookie.name}|${cookie.domain}|${cookie.path}|${cookie.storeId || ""}`;
+
+      if (seen.has(key)) {
+        return false;
+      }
+
+      seen.add(key);
+      return true;
+    });
+  }
+
+  function cookiesGetAll(details) {
+    if (runtimeApi.cookies.getAll.length <= 1) {
+      return runtimeApi.cookies.getAll(details);
+    }
+
+    return new Promise((resolve, reject) => {
+      runtimeApi.cookies.getAll(details, (cookies) => {
+        const lastError = runtimeApi.runtime.lastError;
+
+        if (lastError) {
+          reject(new Error(lastError.message));
+          return;
+        }
+
+        resolve(cookies);
+      });
+    });
+  }
+
+  function cookiesGet(details) {
+    const cleanDetails = removeUndefinedValues(details);
+
+    if (runtimeApi.cookies.get.length <= 1) {
+      return runtimeApi.cookies.get(cleanDetails);
+    }
+
+    return new Promise((resolve, reject) => {
+      runtimeApi.cookies.get(cleanDetails, (cookie) => {
+        const lastError = runtimeApi.runtime.lastError;
+
+        if (lastError) {
+          reject(new Error(lastError.message));
+          return;
+        }
+
+        resolve(cookie);
+      });
+    });
+  }
+
+  function cookiesGetAllCookieStores() {
+    if (!runtimeApi.cookies.getAllCookieStores) {
+      return Promise.resolve([{ id: undefined }]);
+    }
+
+    if (runtimeApi.cookies.getAllCookieStores.length === 0) {
+      return runtimeApi.cookies.getAllCookieStores();
+    }
+
+    return new Promise((resolve, reject) => {
+      runtimeApi.cookies.getAllCookieStores((stores) => {
+        const lastError = runtimeApi.runtime.lastError;
+
+        if (lastError) {
+          reject(new Error(lastError.message));
+          return;
+        }
+
+        resolve(stores);
+      });
+    });
+  }
+
+  function removeUndefinedValues(details) {
+    return Object.fromEntries(
+      Object.entries(details).filter((entry) => entry[1] !== undefined)
+    );
+  }
+})();