Implemented the Create Internal Service Request functionality
This commit is contained in:
284
dist/firefox/background.js
vendored
284
dist/firefox/background.js
vendored
@@ -20,9 +20,12 @@ function createMessageTypes() {
|
||||
requestInternalServiceRequest: "opportunitiesExtension.requestInternalServiceRequest",
|
||||
requestSrLookupPrimaryPillar: "opportunitiesExtension.requestSrLookupPrimaryPillar",
|
||||
requestPostServiceRequest: "opportunitiesExtension.requestPostServiceRequest",
|
||||
requestPostInternalServiceRequest: "opportunitiesExtension.requestPostInternalServiceRequest",
|
||||
prepareSrSession: "opportunitiesExtension.prepareSrSession",
|
||||
requestSrLookupLanguage: "opportunitiesExtension.requestSrLookupLanguage",
|
||||
requestSrLookupTechPlatform: "opportunitiesExtension.requestSrLookupTechPlatform",
|
||||
requestLookupTypePlatform: "opportunitiesExtension.requestLookupTypePlatform",
|
||||
requestInternalSrServices: "opportunitiesExtension.requestInternalSrServices",
|
||||
requestSrLookupOpportunityBusiness: "opportunitiesExtension.requestSrLookupOpportunityBusiness",
|
||||
requestCurrentUser: "opportunitiesExtension.requestCurrentUser",
|
||||
invalidateProductsCache: "opportunitiesExtension.invalidateProductsCache",
|
||||
@@ -33,45 +36,8 @@ function createMessageTypes() {
|
||||
}
|
||||
|
||||
// Source: src/shared/debug-body.js
|
||||
function createDebugBodyPreview(text, limit) {
|
||||
if (text.length <= limit) return { value: text || "(empty response body)", truncated: false };
|
||||
try {
|
||||
const normalized = text.replace(/^\uFEFF/, "").trimStart()
|
||||
.replace(/^\)\]\}',?\s*/, "").replace(/^while\s*\(1\);\s*/, "");
|
||||
let value = JSON.parse(normalized);
|
||||
for (let depth = 0; depth < 2 && typeof value === "string" && /^\s*[\[{]/.test(value); depth += 1) {
|
||||
try { value = JSON.parse(value); } catch { break; }
|
||||
}
|
||||
// Bound retained data without cutting JSON syntax or losing sensitive field names.
|
||||
let remaining = Math.max(0, limit - 256);
|
||||
const visit = (node, depth = 0) => {
|
||||
if (remaining <= 64 || depth >= 30) return "[omitted from debug preview]";
|
||||
if (node === null || typeof node !== "object") {
|
||||
const serialized = JSON.stringify(node);
|
||||
if (serialized.length > remaining) {
|
||||
remaining = 0;
|
||||
return "[omitted from debug preview]";
|
||||
}
|
||||
remaining -= serialized.length + 1;
|
||||
return node;
|
||||
}
|
||||
const result = Array.isArray(node) ? [] : Object.create(null);
|
||||
remaining -= 2;
|
||||
for (const key of Object.keys(node)) {
|
||||
const cost = Array.isArray(node) ? 1 : JSON.stringify(key).length + 2;
|
||||
if (remaining < cost + 64) break;
|
||||
remaining -= cost;
|
||||
result[key] = visit(node[key], depth + 1);
|
||||
}
|
||||
return result;
|
||||
};
|
||||
return {
|
||||
value: JSON.stringify({ debugNotice: "Partial response preview: remaining fields/items omitted due to the debug size limit.", preview: visit(value) }),
|
||||
truncated: true
|
||||
};
|
||||
} catch {
|
||||
return { value: `${text.slice(0, limit)}\n... truncated ${text.length - limit} characters`, truncated: true };
|
||||
}
|
||||
function createDebugBodyPreview(text) {
|
||||
return { value: text || "(empty response body)", truncated: false };
|
||||
}
|
||||
|
||||
// Source: src/background/contracts.js
|
||||
@@ -435,6 +401,7 @@ function createAuthSpaCredentials({
|
||||
function createSrRequestHeaders({ runtimeApi }) {
|
||||
const origin = "https://comcipapic-oalprod.integration.ocp.oraclecloud.com";
|
||||
const appPath = "/ic/builder/rt/SeaaS_initiation/";
|
||||
const internalPath = "/ic/builder/rt/SeaaS_SR_management/live;profile=PROD/services/auth/1.1/proxy/oalsetCRMRestAPICloudAccount/uri/https/eeho.fa.us2.oraclecloud.com/crmRestApi/resources/latest/serviceRequests";
|
||||
const storageKey = "opportunitiesExtension.srAppBuilderClientId.v1";
|
||||
const maxAge = 60 * 60 * 1000;
|
||||
let observed = null;
|
||||
@@ -448,7 +415,7 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
function observeHeaders(rawUrl, headers) {
|
||||
let url;
|
||||
try { url = new URL(rawUrl); } catch { return; }
|
||||
if (url.origin !== origin || !/^\/ic\/builder\/rt\/SeaaS_initiation\/live(?:\/|;)/.test(url.pathname)) return;
|
||||
if (url.origin !== origin || !/^\/ic\/builder\/rt\/(?:SeaaS_initiation|SeaaS_SR_management)\/live(?:\/|;)/.test(url.pathname)) return;
|
||||
// Read only the client ID, not cookies, bodies or authorization.
|
||||
const value = typeof headers?.get === "function" ? headers.get("x-appbuilder-client-id")
|
||||
: headers?.find(item => item.name.toLowerCase() === "x-appbuilder-client-id")?.value;
|
||||
@@ -461,7 +428,7 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
function start() {
|
||||
if (started || !runtimeApi?.webRequest) return;
|
||||
started = true;
|
||||
const filter = { urls: [`${origin}${appPath}*`], types: ["xmlhttprequest"] };
|
||||
const filter = { urls: [`${origin}${appPath}*`, `${origin}/ic/builder/rt/SeaaS_SR_management/*`], types: ["xmlhttprequest"] };
|
||||
runtimeApi.webRequest.onBeforeSendHeaders?.addListener(details => {
|
||||
if (details.tabId >= 0 && !details.incognito) observeHeaders(details.url, details.requestHeaders);
|
||||
}, filter, ["requestHeaders"]);
|
||||
@@ -474,6 +441,9 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
if (target.origin !== origin || !target.pathname.startsWith(appPath) || !/\/Catalogue_c(?:\/\d+)?$/.test(target.pathname)) {
|
||||
throw new Error("Unexpected Service Request token URL.");
|
||||
}
|
||||
return sessionHeaders(target.origin, "application/vnd.oracle.adf.action+json");
|
||||
}
|
||||
async function sessionHeaders(targetOrigin, contentType) {
|
||||
if (!valid(observed)) {
|
||||
try {
|
||||
const stored = await runtimeApi.storage?.session?.get(storageKey);
|
||||
@@ -481,8 +451,8 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
} catch { /* A missing capture must not prevent trying the other required headers. */ }
|
||||
}
|
||||
return {
|
||||
Accept: "application/json", "Content-Type": "application/vnd.oracle.adf.action+json",
|
||||
Authorization: "Session", Origin: target.origin,
|
||||
Accept: "application/json", "Content-Type": contentType,
|
||||
Authorization: "Session", Origin: targetOrigin,
|
||||
...(valid(observed) ? { "x-appbuilder-client-id": observed.value } : {})
|
||||
};
|
||||
}
|
||||
@@ -490,8 +460,8 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
const headers = await previewTokenHeaders(url);
|
||||
if (!/\/Catalogue_c\/\d+$/.test(new URL(url).pathname)) throw new Error("Missing Catalogue Id.");
|
||||
const serviceTarget = new URL(serviceRequestUrl);
|
||||
if (serviceTarget.origin !== headers.Origin || !serviceTarget.pathname.startsWith(appPath)
|
||||
|| !serviceTarget.pathname.endsWith("/set/seaas/mgmt/serviceRequests") || serviceTarget.search || serviceTarget.hash) {
|
||||
const isServiceRequest = serviceTarget.pathname.startsWith(appPath) && serviceTarget.pathname.endsWith("/set/seaas/mgmt/serviceRequests");
|
||||
if (serviceTarget.origin !== headers.Origin || !isServiceRequest || serviceTarget.search || serviceTarget.hash) {
|
||||
throw new Error("Unexpected Service Request URL.");
|
||||
}
|
||||
if (!runtimeApi?.declarativeNetRequest?.updateSessionRules || !runtimeApi.runtime?.getURL) {
|
||||
@@ -501,10 +471,11 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
const catalogUrl = url.slice(0, url.lastIndexOf("/") + 1);
|
||||
const escapedCatalogUrl = catalogUrl.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
|
||||
const escapedServiceUrl = serviceTarget.href.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
|
||||
const ruleIds = [7201, 7202];
|
||||
await runtimeApi.declarativeNetRequest.updateSessionRules({
|
||||
removeRuleIds: [7201, 7202],
|
||||
removeRuleIds: ruleIds,
|
||||
addRules: [`^${escapedCatalogUrl}[0-9]+$`, `^${escapedServiceUrl}$`].map((regexFilter, index) => ({
|
||||
id: 7201 + index, priority: 1,
|
||||
id: ruleIds[index], priority: 1,
|
||||
action: { type: "modifyHeaders", requestHeaders: [{ header: "Origin", operation: "set", value: headers.Origin }] },
|
||||
condition: { regexFilter, initiatorDomains: [extensionDomain],
|
||||
requestMethods: ["post"], resourceTypes: ["xmlhttprequest"] }
|
||||
@@ -512,7 +483,29 @@ function createSrRequestHeaders({ runtimeApi }) {
|
||||
});
|
||||
return headers;
|
||||
}
|
||||
return { start, tokenHeaders, previewTokenHeaders, observeResponseHeaders: observeHeaders };
|
||||
async function internalServiceRequestHeaders(url) {
|
||||
const target = new URL(url);
|
||||
if (target.origin !== origin || target.pathname !== internalPath || target.search || target.hash) {
|
||||
throw new Error("Unexpected Internal Service Request URL.");
|
||||
}
|
||||
if (!runtimeApi?.declarativeNetRequest?.updateSessionRules || !runtimeApi.runtime?.getURL) {
|
||||
throw new Error("Reload the extension to enable the Internal Service Request header permissions.");
|
||||
}
|
||||
const headers = await sessionHeaders(target.origin, "application/json");
|
||||
const extensionDomain = new URL(runtimeApi.runtime.getURL("/")).hostname;
|
||||
const escapedUrl = target.href.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
|
||||
await runtimeApi.declarativeNetRequest.updateSessionRules({
|
||||
removeRuleIds: [7203],
|
||||
addRules: [{
|
||||
id: 7203, priority: 1,
|
||||
action: { type: "modifyHeaders", requestHeaders: [{ header: "Origin", operation: "set", value: headers.Origin }] },
|
||||
condition: { regexFilter: `^${escapedUrl}$`, initiatorDomains: [extensionDomain],
|
||||
requestMethods: ["post"], resourceTypes: ["xmlhttprequest"] }
|
||||
}]
|
||||
});
|
||||
return headers;
|
||||
}
|
||||
return { start, tokenHeaders, previewTokenHeaders, internalServiceRequestHeaders, observeResponseHeaders: observeHeaders };
|
||||
}
|
||||
|
||||
// Source: src/services/spa/accounts.js
|
||||
@@ -1029,7 +1022,33 @@ function createFusionSrDetails({ fetchJson, tabsCreate, tabsRemove, supportsFire
|
||||
return { ok: true, items: result.items.map(({ Id, RecordName, Abstract_c }) => ({ Id: String(Id), RecordName, Abstract_c: Abstract_c == null ? "" : String(Abstract_c) })), debugRequests };
|
||||
} catch (error) { error.debugRequests = debugRequests; throw error; }
|
||||
}
|
||||
async function requestInternalSrOptions(message, services = false) {
|
||||
const debugRequests = [];
|
||||
const name = services ? "requestInternalSrServices" : "requestLookupTypePlatform";
|
||||
try {
|
||||
const base = "https://comcipapic-oalprod.integration.ocp.oraclecloud.com/ic/builder/rt/SeaaS_SR_management/live;profile=PROD/services/auth/1.1/proxy/oalsetSeaaSOKECustomRestAPI/uri/https/gxpap.oracle.com/oalcrm/service/set/seaas/crm/";
|
||||
let path = "lookups?type=STANDARD&lookupType=SENGG_TECH_PLATFORM";
|
||||
if (services) {
|
||||
const id = String(message.parentServiceId ?? "");
|
||||
if (!/^\d+$/.test(id)) throw new Error("A numeric parent SrId is required.");
|
||||
if (typeof message.emailAddress !== "string" || !message.emailAddress.trim()) throw new Error("Current user email is unavailable.");
|
||||
path = `services?emailAddress=${encodeURIComponent(message.emailAddress.trim())}&parentServiceId=${encodeURIComponent(id)}&serviceType=INTERNAL`;
|
||||
}
|
||||
const result = await fetchJson(base + path, { method: "GET", credentials: "include",
|
||||
headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, name, debugRequests);
|
||||
if (!Array.isArray(result?.items) || result.items.some(item => services
|
||||
? !/^\d+$/.test(String(item?.Id ?? "")) || typeof item?.RecordName !== "string"
|
||||
: typeof item?.code !== "string" || typeof item?.name !== "string")) throw new Error(`Invalid ${name} response.`);
|
||||
const items = services
|
||||
? result.items.map(item => ({ Id: String(item.Id), RecordName: item.RecordName, Description_c: String(item.Description_c ?? "") }))
|
||||
: result.items.filter(item => item.enabledFlag !== "N").map(({ code, name }) => ({ code, name }));
|
||||
return { ok: true, items, debugRequests };
|
||||
} catch (error) { error.debugRequests = debugRequests; throw error; }
|
||||
}
|
||||
return { requestLookupWithSession, requestInternalServiceRequest, requestSrLookupOpportunityBusiness,
|
||||
requestLookupTypePlatform: () => requestInternalSrOptions({}),
|
||||
requestInternalSrServices: message => requestInternalSrOptions(message, true),
|
||||
prepareSession: sender => requestLookupWithSession(null, {}, sender, true),
|
||||
requestSrLookupPrimaryPillar: () => requestLookup("SENGG_PRIMARY_PILLAR", "requestSrLookupPrimaryPillar"),
|
||||
requestSrLookupLanguage: () => requestLookup("SENGG_LANGUAGE", "requestSrLookupLanguage"),
|
||||
@@ -1037,7 +1056,7 @@ function createFusionSrDetails({ fetchJson, tabsCreate, tabsRemove, supportsFire
|
||||
}
|
||||
|
||||
// Source: src/services/fusion/sr-create.js
|
||||
function createFusionSrCreate({ fetchJson, tokenHeaders, previewTokenHeaders }) {
|
||||
function createFusionSrCreate({ fetchJson, tokenHeaders, previewTokenHeaders, internalServiceRequestHeaders }) {
|
||||
const base = "https://comcipapic-oalprod.integration.ocp.oraclecloud.com/ic/builder/rt/SeaaS_initiation/live;profile=PROD/services/auth/1.1/proxy/";
|
||||
const catalog = base + "crmRestApiResources/uri/https/eeho.fa.us2.oraclecloud.com/crmRestApi/resources/11.13.18.05/Catalogue_c";
|
||||
const resourceUsers = base + "oke_seaas/uri/https/gxpap.oracle.com/oalcrm/service/set/seaas/crm/resourceUsers";
|
||||
@@ -1050,26 +1069,76 @@ function createFusionSrCreate({ fetchJson, tokenHeaders, previewTokenHeaders })
|
||||
if (typeof value !== "string" || !value.trim()) throw new Error(`Missing ${name}.`);
|
||||
return value.trim();
|
||||
}
|
||||
function dateOnly(value, name) {
|
||||
const date = text(value, name);
|
||||
if (!/^\d{4}-\d{2}-\d{2}$/.test(date) || !Number.isFinite(Date.parse(`${date}T00:00:00Z`))
|
||||
|| new Date(`${date}T00:00:00Z`).toISOString().slice(0, 10) !== date) throw new Error(`Invalid ${name}.`);
|
||||
return date;
|
||||
}
|
||||
function payloadFor(input) {
|
||||
const payload = {};
|
||||
for (const name of ["AccountPartyId", "OpportunityName_Id_c", "ServiceNew_Id_c"]) payload[name] = numericId(input?.[name], name);
|
||||
for (const name of ["Title", "RegionText_c", "ProblemDescription", "Language_c", "CustomerDeadline_c", "TechPlatformLookUp_c", "CountryText_c", "PrimaryPillarNew_c"]) payload[name] = text(input?.[name], name);
|
||||
const date = payload.CustomerDeadline_c;
|
||||
if (!/^\d{4}-\d{2}-\d{2}$/.test(date) || !Number.isFinite(Date.parse(`${date}T00:00:00Z`))
|
||||
|| new Date(`${date}T00:00:00Z`).toISOString().slice(0, 10) !== date) throw new Error("Invalid Customer deadline.");
|
||||
dateOnly(payload.CustomerDeadline_c, "Customer deadline");
|
||||
return { ...payload, SvcQuestionsCollection_c: [], SourceCd: "SVC_OPPORTUNITY_SCREEN", SeverityCd: "ORA_SVC_SEV2", ChannelTypeCd: "ORA_SVC_WEB" };
|
||||
}
|
||||
async function requestResourceUser(email, debugRequests) {
|
||||
const emailAddress = text(email, "current user email");
|
||||
const resource = await fetchJson(`${resourceUsers}?emailAddress=${encodeURIComponent(emailAddress)}`, {
|
||||
method: "GET", credentials: "include", headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, "requestResourceUser", debugRequests);
|
||||
return numericId(resource?.resourcePartyId, "resourcePartyId");
|
||||
}
|
||||
async function requestPostInternalServiceRequest(message) {
|
||||
const debugRequests = [];
|
||||
try {
|
||||
const source = message.payload;
|
||||
const parentSrId = numericId(source?.ServiceRequest_Id_SRToInternalSR, "parent SrId");
|
||||
const payload = {
|
||||
Title: text(source?.Title, "Title"),
|
||||
ServiceNew_Id_c: numericId(source?.ServiceNew_Id_c, "ServiceNew_Id_c"),
|
||||
ProblemDescription: text(source?.ProblemDescription, "Description"),
|
||||
CustomerDeadline_c: dateOnly(source?.CustomerDeadline_c, "Customer deadline"),
|
||||
TechPlatformLookUp_c: text(source?.TechPlatformLookUp_c, "Platform"),
|
||||
InternalDeadline_c: `${dateOnly(source?.InternalDeadline_c, "Internal Deadline")}T00:00:00.000Z`,
|
||||
SvcQuestionsCollection_c: []
|
||||
};
|
||||
const parent = await requestSRInfo(parentSrId, debugRequests);
|
||||
payload.ServiceRequest_Id_SRToInternalSR = String(parentSrId);
|
||||
for (const name of ["AccountPartyId", "OpportunityName_Id_c"]) payload[name] = numericId(parent[name], name);
|
||||
for (const name of ["OpportunityName_c", "RegionText_c", "SvcHealth_c", "Language_c", "CountryText_c", "PrimaryPillarNew_c"]) payload[name] = text(parent[name], name);
|
||||
payload.SecondaryPillarNew_c = parent.SecondaryPillarNew_c == null ? null : text(parent.SecondaryPillarNew_c, "SecondaryPillarNew_c");
|
||||
payload.ReportedByPartyId = await requestResourceUser(message.emailAddress, debugRequests);
|
||||
const url = "https://comcipapic-oalprod.integration.ocp.oraclecloud.com/ic/builder/rt/SeaaS_SR_management/live;profile=PROD/services/auth/1.1/proxy/oalsetCRMRestAPICloudAccount/uri/https/eeho.fa.us2.oraclecloud.com/crmRestApi/resources/latest/serviceRequests";
|
||||
const result = await fetchJson(url, { method: "POST", credentials: "include",
|
||||
headers: await internalServiceRequestHeaders(url),
|
||||
body: JSON.stringify(payload)
|
||||
}, "requestPostInternalServiceRequest", debugRequests, { allowEmpty: true });
|
||||
return { ok: true, result, debugRequests };
|
||||
} catch (error) { error.debugRequests = debugRequests; throw error; }
|
||||
}
|
||||
async function requestSRInfo(parentSrId, debugRequests) {
|
||||
const url = new URL("https://comcipapic-oalprod.integration.ocp.oraclecloud.com/ic/builder/rt/SeaaS_SR_management/live;profile=PROD/services/auth/1.1/proxy/oalsetCRMRestAPI/uri/https/eeho.fa.us2.oraclecloud.com/crmRestApi/resources/latest/serviceRequests");
|
||||
url.searchParams.set("fields", "PrimaryPillarNew_c,SecondaryPillarNew_c,SvcHealth_c,SrNumber,AccountPartyId,CountryText_c,Language_c,OpportunityName_Id_c,OpportunityName_c,RegionText_c,ServiceNew_Id_c");
|
||||
url.searchParams.set("onlyData", "true");
|
||||
url.searchParams.set("orderBy", "LastUpdateDate:desc");
|
||||
url.searchParams.set("q", `SrId=${parentSrId}`);
|
||||
const result = await fetchJson(url.href, {
|
||||
method: "GET", credentials: "include", headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, "requestSRInfo", debugRequests);
|
||||
if (!Array.isArray(result?.items) || result.items.length !== 1 || !result.items[0]
|
||||
|| (result.items[0].SrId != null && String(result.items[0].SrId) !== String(parentSrId))) {
|
||||
throw new Error("requestSRInfo did not return the selected parent Service Request.");
|
||||
}
|
||||
return result.items[0];
|
||||
}
|
||||
async function requestPostServiceRequest(message) {
|
||||
const debugRequests = [];
|
||||
try {
|
||||
if (message.phase !== "prepare" && message.phase !== "confirm") throw new Error("Service Request confirmation is required.");
|
||||
const payload = payloadFor(message.payload);
|
||||
if (message.phase === "prepare") {
|
||||
const emailAddress = text(message.emailAddress, "current user email");
|
||||
const resource = await fetchJson(`${resourceUsers}?emailAddress=${encodeURIComponent(emailAddress)}`, {
|
||||
method: "GET", credentials: "include", headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, "requestResourceUser", debugRequests);
|
||||
payload.ReportedByPartyId = numericId(resource?.resourcePartyId, "resourcePartyId");
|
||||
payload.ReportedByPartyId = await requestResourceUser(message.emailAddress, debugRequests);
|
||||
const sharedHeaders = await previewTokenHeaders(catalog);
|
||||
return { ok: true, payload, debugRequests, headers: {
|
||||
requestSrTokenCatalog: sharedHeaders,
|
||||
@@ -1077,34 +1146,9 @@ function createFusionSrCreate({ fetchJson, tokenHeaders, previewTokenHeaders })
|
||||
} };
|
||||
}
|
||||
payload.ReportedByPartyId = numericId(message.payload?.ReportedByPartyId, "ReportedByPartyId");
|
||||
let id = message.catalogId;
|
||||
if (id == null) {
|
||||
const result = await fetchJson(`${catalog}?onlyData=true&fields=Id&limit=1`, {
|
||||
method: "GET", credentials: "include", headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, "requestSrCatalog", debugRequests);
|
||||
id = result?.items?.[0]?.Id;
|
||||
}
|
||||
id = numericId(id, "Catalogue Id");
|
||||
const tokenUrl = `${catalog}/${id}`;
|
||||
let catalogHeaders = await tokenHeaders(tokenUrl, endpoint);
|
||||
const requestToken = () => fetchJson(tokenUrl, {
|
||||
method: "POST", credentials: "include", headers: catalogHeaders, body: JSON.stringify({ name: "getJwtToken" })
|
||||
}, "requestSrTokenCatalog", debugRequests);
|
||||
let token;
|
||||
try {
|
||||
token = await requestToken();
|
||||
} catch (error) {
|
||||
if (error.httpStatus !== 403) throw error;
|
||||
const refreshed = await previewTokenHeaders(tokenUrl);
|
||||
if (!refreshed["x-appbuilder-client-id"] || refreshed["x-appbuilder-client-id"] === catalogHeaders["x-appbuilder-client-id"]) throw error;
|
||||
catalogHeaders = refreshed;
|
||||
token = await requestToken();
|
||||
}
|
||||
if (debugRequests.at(-1)?.httpStatus !== 200 || typeof token?.result !== "string" || !token.result.trim()) {
|
||||
throw new Error("requestSrTokenCatalog did not return HTTP 200 with a token.");
|
||||
}
|
||||
const headers = await requestCreationHeaders(message.catalogId, endpoint, debugRequests);
|
||||
const result = await fetchJson(endpoint, {
|
||||
method: "POST", credentials: "include", headers: { ...catalogHeaders, "vb-proxy-header-x-oracle-ectoken": token.result.trim() },
|
||||
method: "POST", credentials: "include", headers,
|
||||
body: JSON.stringify(payload)
|
||||
}, "requestPostServiceRequest", debugRequests, { allowEmpty: true });
|
||||
return { ok: true, result, debugRequests };
|
||||
@@ -1112,18 +1156,45 @@ function createFusionSrCreate({ fetchJson, tokenHeaders, previewTokenHeaders })
|
||||
error.debugRequests = debugRequests;
|
||||
throw error;
|
||||
} finally {
|
||||
// Never forward the signing token to content scripts, even with Debug secrets enabled.
|
||||
for (const entry of debugRequests) {
|
||||
if (entry.name === "requestSrTokenCatalog") {
|
||||
entry.metadata.appBuilderClientId = entry.requestHeaders?.["x-appbuilder-client-id"] ? "Observed in SeaaS requests" : "Not observed in SeaaS requests";
|
||||
entry.responseBody = JSON.stringify({ result: "(redacted)" });
|
||||
entry.responseBodyTruncated = false;
|
||||
}
|
||||
if (entry.requestHeaders?.["vb-proxy-header-x-oracle-ectoken"]) entry.requestHeaders["vb-proxy-header-x-oracle-ectoken"] = "(redacted)";
|
||||
annotateSigningRequest(debugRequests);
|
||||
}
|
||||
}
|
||||
async function requestCreationHeaders(id, target, debugRequests) {
|
||||
if (id == null) {
|
||||
const result = await fetchJson(`${catalog}?onlyData=true&fields=Id&limit=1`, {
|
||||
method: "GET", credentials: "include", headers: { Accept: "application/json", Authorization: "Session" }
|
||||
}, "requestSrCatalog", debugRequests);
|
||||
id = result?.items?.[0]?.Id;
|
||||
}
|
||||
id = numericId(id, "Catalogue Id");
|
||||
const tokenUrl = `${catalog}/${id}`;
|
||||
let catalogHeaders = await tokenHeaders(tokenUrl, target);
|
||||
const requestToken = () => fetchJson(tokenUrl, {
|
||||
method: "POST", credentials: "include", headers: catalogHeaders, body: JSON.stringify({ name: "getJwtToken" })
|
||||
}, "requestSrTokenCatalog", debugRequests);
|
||||
let token;
|
||||
try {
|
||||
token = await requestToken();
|
||||
} catch (error) {
|
||||
if (error.httpStatus !== 403) throw error;
|
||||
const refreshed = await previewTokenHeaders(tokenUrl);
|
||||
if (!refreshed["x-appbuilder-client-id"] || refreshed["x-appbuilder-client-id"] === catalogHeaders["x-appbuilder-client-id"]) throw error;
|
||||
catalogHeaders = refreshed;
|
||||
token = await requestToken();
|
||||
}
|
||||
if (debugRequests.at(-1)?.httpStatus !== 200 || typeof token?.result !== "string" || !token.result.trim()) {
|
||||
throw new Error("requestSrTokenCatalog did not return HTTP 200 with a token.");
|
||||
}
|
||||
return { ...catalogHeaders, "vb-proxy-header-x-oracle-ectoken": token.result.trim() };
|
||||
}
|
||||
function annotateSigningRequest(debugRequests) {
|
||||
for (const entry of debugRequests) {
|
||||
if (entry.name === "requestSrTokenCatalog") {
|
||||
entry.metadata.appBuilderClientId = entry.requestHeaders?.["x-appbuilder-client-id"] ? "Observed in SeaaS requests" : "Not observed in SeaaS requests";
|
||||
}
|
||||
}
|
||||
}
|
||||
return { requestPostServiceRequest };
|
||||
return { requestPostServiceRequest, requestPostInternalServiceRequest };
|
||||
}
|
||||
|
||||
// Source: src/services/spa/current-user.js
|
||||
@@ -1144,12 +1215,6 @@ function createSpaCurrentUser({ fetchJson }) {
|
||||
for (const entry of debugRequests) { entry.status = "failed"; entry.error = error.message; }
|
||||
error.debugRequests = debugRequests;
|
||||
throw error;
|
||||
} finally {
|
||||
// The identity token is not needed by content scripts or debug, including on failures.
|
||||
for (const entry of debugRequests) {
|
||||
entry.responseBody = JSON.stringify(user ? { user, token: "(redacted)" } : { error: "Identity response omitted." }, null, 2);
|
||||
entry.responseBodyTruncated = false;
|
||||
}
|
||||
}
|
||||
}
|
||||
return { requestCurrentUser };
|
||||
@@ -1330,7 +1395,6 @@ function createSpaResponseShapes() {
|
||||
// Source: src/services/http/background-json.js
|
||||
function createHttpBackgroundJson({
|
||||
previewDebugBody,
|
||||
DEBUG_BODY_LIMIT,
|
||||
observeResponseHeaders = () => {},
|
||||
environment
|
||||
}) {
|
||||
@@ -1457,7 +1521,7 @@ function createHttpBackgroundJson({
|
||||
}
|
||||
|
||||
function createDebugBody(text) {
|
||||
return previewDebugBody(text, DEBUG_BODY_LIMIT);
|
||||
return previewDebugBody(text);
|
||||
}
|
||||
|
||||
function normalizeDebugHeaders(headers) {
|
||||
@@ -2227,12 +2291,15 @@ function registerBackgroundMessages({
|
||||
requestActionFindLookup,
|
||||
requestMgmtAction,
|
||||
requestPostServiceRequest,
|
||||
requestPostInternalServiceRequest,
|
||||
requestInternalServiceRequest,
|
||||
requestSrLookupPrimaryPillar,
|
||||
requestSrLookupWithSession,
|
||||
prepareSrSession,
|
||||
requestSrLookupLanguage,
|
||||
requestSrLookupTechPlatform,
|
||||
requestLookupTypePlatform,
|
||||
requestInternalSrServices,
|
||||
requestSrLookupOpportunityBusiness,
|
||||
requestCurrentUser,
|
||||
requestConsumerTokenService,
|
||||
@@ -2246,6 +2313,11 @@ runtimeApi.runtime.onMessage.addListener((message, sender, sendResponse) => {
|
||||
if (!message || !message.type) {
|
||||
return false;
|
||||
}
|
||||
if (message.type === messageTypes.requestPostInternalServiceRequest) {
|
||||
requestPostInternalServiceRequest(message).then(sendResponse).catch(error => sendResponse({ ok: false,
|
||||
error: error.message, debugRequests: error.debugRequests || [] }));
|
||||
return true;
|
||||
}
|
||||
if (message.type === messageTypes.requestPostServiceRequest) {
|
||||
requestPostServiceRequest(message).then(sendResponse).catch(error => sendResponse({ ok: false,
|
||||
error: error.message, debugRequests: error.debugRequests || [] }));
|
||||
@@ -2257,6 +2329,8 @@ runtimeApi.runtime.onMessage.addListener((message, sender, sendResponse) => {
|
||||
return true;
|
||||
}
|
||||
const srLookups = {
|
||||
[messageTypes.requestLookupTypePlatform]: requestLookupTypePlatform,
|
||||
[messageTypes.requestInternalSrServices]: requestInternalSrServices,
|
||||
[messageTypes.requestSrLookupPrimaryPillar]: requestSrLookupPrimaryPillar,
|
||||
[messageTypes.requestSrLookupLanguage]: requestSrLookupLanguage,
|
||||
[messageTypes.requestSrLookupTechPlatform]: requestSrLookupTechPlatform,
|
||||
@@ -2491,7 +2565,6 @@ function createBackgroundApplication(overrides = {}) {
|
||||
const httpBackgroundJson = createHttpBackgroundJson({
|
||||
observeResponseHeaders: (...args) => srRequestHeaders.observeResponseHeaders(...args),
|
||||
previewDebugBody: createDebugBodyPreview,
|
||||
DEBUG_BODY_LIMIT: contracts.DEBUG_BODY_LIMIT,
|
||||
environment
|
||||
});
|
||||
const productsBackgroundJobs = createProductsBackgroundJobs({
|
||||
@@ -2563,6 +2636,7 @@ function createBackgroundApplication(overrides = {}) {
|
||||
const fusionSrCreate = createFusionSrCreate({
|
||||
fetchJson: (...args) => httpBackgroundJson.fetchJson(...args),
|
||||
tokenHeaders: (...args) => srRequestHeaders.tokenHeaders(...args),
|
||||
internalServiceRequestHeaders: url => srRequestHeaders.internalServiceRequestHeaders(url),
|
||||
previewTokenHeaders: url => srRequestHeaders.previewTokenHeaders(url)
|
||||
});
|
||||
const fusionSrDetails = createFusionSrDetails({
|
||||
@@ -2576,7 +2650,11 @@ function createBackgroundApplication(overrides = {}) {
|
||||
});
|
||||
function start() {
|
||||
srRequestHeaders.start();
|
||||
startBackgroundApplication({ requestPostServiceRequest: message => fusionSrCreate.requestPostServiceRequest(message), prepareSrSession: sender => fusionSrDetails.prepareSession(sender), requestSrLookupWithSession: (...args) => fusionSrDetails.requestLookupWithSession(...args), messageTypes, requestSrLookupLanguage: () => fusionSrDetails.requestSrLookupLanguage(), requestSrLookupTechPlatform: () => fusionSrDetails.requestSrLookupTechPlatform(), requestSrLookupOpportunityBusiness: message => fusionSrDetails.requestSrLookupOpportunityBusiness(message), requestSrLookupPrimaryPillar: () => fusionSrDetails.requestSrLookupPrimaryPillar(), requestInternalServiceRequest: (message, sender) => fusionSrDetails.requestInternalServiceRequest(message, sender), requestMgmtAction: message => spaActionOptions.requestMgmtAction(message), invalidateProductsCache: () => productsCache.invalidate(), requestCurrentUser, getXsrfTokenCookie, refreshXsrfCookie, requestAccountPlans, requestInstallBase, requestCustomerServiceRequest, requestWlActions, requestActionTeamMembers, requestActionFindLookup, requestConsumerTokenService, requestConsumptionTrend, requestConsumptionPlanDetail, requestRatecardByPlan, requestOpptyProducts, runtimeApi });
|
||||
startBackgroundApplication({
|
||||
requestLookupTypePlatform: () => fusionSrDetails.requestLookupTypePlatform(),
|
||||
requestPostInternalServiceRequest: message => fusionSrCreate.requestPostInternalServiceRequest(message),
|
||||
requestInternalSrServices: message => fusionSrDetails.requestInternalSrServices(message),
|
||||
requestPostServiceRequest: message => fusionSrCreate.requestPostServiceRequest(message), prepareSrSession: sender => fusionSrDetails.prepareSession(sender), requestSrLookupWithSession: (...args) => fusionSrDetails.requestLookupWithSession(...args), messageTypes, requestSrLookupLanguage: () => fusionSrDetails.requestSrLookupLanguage(), requestSrLookupTechPlatform: () => fusionSrDetails.requestSrLookupTechPlatform(), requestSrLookupOpportunityBusiness: message => fusionSrDetails.requestSrLookupOpportunityBusiness(message), requestSrLookupPrimaryPillar: () => fusionSrDetails.requestSrLookupPrimaryPillar(), requestInternalServiceRequest: (message, sender) => fusionSrDetails.requestInternalServiceRequest(message, sender), requestMgmtAction: message => spaActionOptions.requestMgmtAction(message), invalidateProductsCache: () => productsCache.invalidate(), requestCurrentUser, getXsrfTokenCookie, refreshXsrfCookie, requestAccountPlans, requestInstallBase, requestCustomerServiceRequest, requestWlActions, requestActionTeamMembers, requestActionFindLookup, requestConsumerTokenService, requestConsumptionTrend, requestConsumptionPlanDetail, requestRatecardByPlan, requestOpptyProducts, runtimeApi });
|
||||
}
|
||||
return {
|
||||
start, contracts,
|
||||
|
||||
Reference in New Issue
Block a user