mirror of
https://github.com/n8n-io/n8n.git
synced 2024-12-28 22:19:41 -08:00
108 lines
2.9 KiB
TypeScript
108 lines
2.9 KiB
TypeScript
import type {
|
|
IExecuteFunctions,
|
|
ILoadOptionsFunctions,
|
|
ICredentialTestFunctions,
|
|
IDataObject,
|
|
IPollFunctions,
|
|
IRequestOptions,
|
|
} from 'n8n-workflow';
|
|
|
|
import moment from 'moment-timezone';
|
|
import * as jwt from 'jsonwebtoken';
|
|
|
|
import { formatPrivateKey } from '@utils/utilities';
|
|
|
|
const googleServiceAccountScopes = {
|
|
bigquery: ['https://www.googleapis.com/auth/bigquery'],
|
|
books: ['https://www.googleapis.com/auth/books'],
|
|
chat: ['https://www.googleapis.com/auth/chat.bot'],
|
|
docs: [
|
|
'https://www.googleapis.com/auth/documents',
|
|
'https://www.googleapis.com/auth/drive',
|
|
'https://www.googleapis.com/auth/drive.file',
|
|
],
|
|
drive: [
|
|
'https://www.googleapis.com/auth/drive',
|
|
'https://www.googleapis.com/auth/drive.appdata',
|
|
'https://www.googleapis.com/auth/drive.photos.readonly',
|
|
],
|
|
gmail: [
|
|
'https://www.googleapis.com/auth/gmail.labels',
|
|
'https://www.googleapis.com/auth/gmail.addons.current.action.compose',
|
|
'https://www.googleapis.com/auth/gmail.addons.current.message.action',
|
|
'https://mail.google.com/',
|
|
'https://www.googleapis.com/auth/gmail.modify',
|
|
'https://www.googleapis.com/auth/gmail.compose',
|
|
],
|
|
sheetV1: [
|
|
'https://www.googleapis.com/auth/drive',
|
|
'https://www.googleapis.com/auth/drive.file',
|
|
'https://www.googleapis.com/auth/spreadsheets',
|
|
],
|
|
sheetV2: [
|
|
'https://www.googleapis.com/auth/drive.file',
|
|
'https://www.googleapis.com/auth/spreadsheets',
|
|
'https://www.googleapis.com/auth/drive.metadata',
|
|
],
|
|
slides: [
|
|
'https://www.googleapis.com/auth/drive.file',
|
|
'https://www.googleapis.com/auth/presentations',
|
|
],
|
|
translate: [
|
|
'https://www.googleapis.com/auth/cloud-translation',
|
|
'https://www.googleapis.com/auth/cloud-platform',
|
|
],
|
|
};
|
|
|
|
type GoogleServiceAccount = keyof typeof googleServiceAccountScopes;
|
|
|
|
export async function getGoogleAccessToken(
|
|
this: IExecuteFunctions | ILoadOptionsFunctions | ICredentialTestFunctions | IPollFunctions,
|
|
credentials: IDataObject,
|
|
service: GoogleServiceAccount,
|
|
): Promise<IDataObject> {
|
|
//https://developers.google.com/identity/protocols/oauth2/service-account#httprest
|
|
|
|
const scopes = googleServiceAccountScopes[service];
|
|
|
|
const privateKey = formatPrivateKey(credentials.privateKey as string);
|
|
credentials.email = ((credentials.email as string) || '').trim();
|
|
|
|
const now = moment().unix();
|
|
|
|
const signature = jwt.sign(
|
|
{
|
|
iss: credentials.email,
|
|
sub: credentials.delegatedEmail || credentials.email,
|
|
scope: scopes.join(' '),
|
|
aud: 'https://oauth2.googleapis.com/token',
|
|
iat: now,
|
|
exp: now + 3600,
|
|
},
|
|
privateKey,
|
|
{
|
|
algorithm: 'RS256',
|
|
header: {
|
|
kid: privateKey,
|
|
typ: 'JWT',
|
|
alg: 'RS256',
|
|
},
|
|
},
|
|
);
|
|
|
|
const options: IRequestOptions = {
|
|
headers: {
|
|
'Content-Type': 'application/x-www-form-urlencoded',
|
|
},
|
|
method: 'POST',
|
|
form: {
|
|
grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
|
|
assertion: signature,
|
|
},
|
|
uri: 'https://oauth2.googleapis.com/token',
|
|
json: true,
|
|
};
|
|
|
|
return await this.helpers.request(options);
|
|
}
|