// Parameters:
//		helper - a helper class providing useful methods: prepareMessage(), sendAndReceive(msg)
//		paramsValues - the values of the parameters configured in the Session Properties -> Authentication panel.
//					The paramsValues is a map, having as keys the parameters names (as returned by the getRequiredParamsNames()
//					and getOptionalParamsNames() functions below)
//		credentials - an object containing the credentials values, as configured in the Session Properties -> Users panel.
//					The credential values can be obtained via calls to the getParam(paramName) method. The param names are the ones
//					returned by the getCredentialsParamsNames() below
function authenticate(helper, paramsValues, credentials) {
	print("Okta Oauth2 Authorization Code Flow authenticating via JavaScript script...");
 
     var authorizationOktaUrl = paramsValues.get("authorizationOktaUrl");
	print("1) making request");
	var msg = callGet(helper, authorizationOktaUrl, null);
	var locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("Location"));
 
	// Prepare the login request details
     var authorizationOktaUrl = paramsValues.get("authorizationOktaUrl");
	print("1) making request");
	var msg = callGet(helper, authorizationOktaUrl, null);
	var locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("Location"));
 
	print("2) making request");
	msg = callGet(helper, locationUrl, null);
    	locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("location"));
	var fromURI = locationUrl.substring(locationUrl.indexOf("?")+1);
	var oktaKey = getAllUrlParams(fromURI).okta_key;
	print("oktaKey:"+oktaKey);
 
	print("3) making request");
	msg = callGet(helper, locationUrl, null);
 
	var apiAuthEndpoint = paramsValues.get("apiAuthEndpoint");
	var apiAuthEndpointRequestBody = paramsValues.get("apiAuthEndpointRequestBody");	
	print("4) making request");
	msg = callPost(helper, apiAuthEndpoint, apiAuthEndpointRequestBody);
	var sessionToken = JSON.parse(msg.getResponseBody()).sessionToken;
	print("sessionToken:"+sessionToken);
 
	var sessionCookieRedirect = paramsValues.get("sessionCookieRedirectUrl");
	sessionCookieRedirect = sessionCookieRedirect.replace("{sessionToken}",sessionToken);
	sessionCookieRedirect = sessionCookieRedirect.replace("{oktaKey}",oktaKey);
	print("5) making request");
	msg = callGet(helper, sessionCookieRedirect, null);
	locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("location"));
 
	print("6) making request:");
	msg = callGet(helper, locationUrl, null);
	locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("location"));
 
	print("7) making request");
	msg = callGet(helper, locationUrl, null);
	locationUrl = decodeURIComponent(msg.getResponseHeader().getHeader("location"));
 
	return msg;
}
 
function callPost(helper, requestUrl, requestBody){
	var HttpRequestHeader = Java.type("org.parosproxy.paros.network.HttpRequestHeader")
	var HttpHeader = Java.type("org.parosproxy.paros.network.HttpHeader")
	var URI = Java.type("org.apache.commons.httpclient.URI")
	print("-----start of callPost-------");
	var requestUri = new URI(requestUrl, false);
	print("url encoded request body:"+requestBody);
	var msg = helper.prepareMessage();
	var requestHeader = new HttpRequestHeader(HttpRequestHeader.POST, requestUri, HttpHeader.HTTP10);
	requestHeader.setHeader("content-type","application/json");
	requestHeader.setHeader("Accept","application/json");
	msg.setRequestHeader(requestHeader);
	msg.setRequestBody(requestBody);
	print("Sending POST request: " + requestHeader);
	helper.sendAndReceive(msg);
	print("\nReceived response status code for authentication request: " + msg.getResponseHeader());
	print("\nResponseBody: " + msg.getResponseBody());
	print("------------------------------------");
     return msg;
}
 
function callGet(helper, requestUrl, queryParameters){
	var HttpRequestHeader = Java.type("org.parosproxy.paros.network.HttpRequestHeader")
	var HttpHeader = Java.type("org.parosproxy.paros.network.HttpHeader")
	var URI = Java.type("org.apache.commons.httpclient.URI")
	print("-----start of callGet-------");
	var requestUri = new URI(requestUrl, false);
	var msg = helper.prepareMessage();
	var requestHeader = new HttpRequestHeader(HttpRequestHeader.GET, requestUri, HttpHeader.HTTP10);
	print("Sending GET request: " + requestHeader);
	msg.setRequestHeader(requestHeader);
	helper.sendAndReceive(msg);
	print("Received response status code for authentication request: " + msg.getResponseHeader());
	print("------------------------------------");
     return msg;
}
 
// This function is called during the script loading to obtain a list of the names of the required configuration parameters,
// that will be shown in the Session Properties -> Authentication panel for configuration. They can be used
// to input dynamic data into the script, from the user interface (e.g. a login URL, name of POST parameters etc.)
function getRequiredParamsNames(){
	return ["authorizationOktaUrl","apiAuthEndpoint","apiAuthEndpointRequestBody", "sessionCookieRedirectUrl"];
}
 
// This function is called during the script loading to obtain a list of the names of the optional configuration parameters,
// that will be shown in the Session Properties -> Authentication panel for configuration. They can be used
// to input dynamic data into the script, from the user interface (e.g. a login URL, name of POST parameters etc.)
function getOptionalParamsNames(){
	return [];
}
 
// This function is called during the script loading to obtain a list of the names of the parameters that are required,
// as credentials, for each User configured corresponding to an Authentication using this script 
function getCredentialsParamsNames(){
	return [];
}
 
//source: https://www.sitepoint.com/get-url-parameters-with-javascript/
function getAllUrlParams(url) {
 
  // get query string from url (optional) or window
  var queryString = url ? url.split('?')[1] : window.location.search.slice(1);
 
  // we'll store the parameters here
  var obj = {};
 
  // if query string exists
  if (queryString) {
 
    // stuff after # is not part of query string, so get rid of it
    queryString = queryString.split('#')[0];
 
    // split our query string into its component parts
    var arr = queryString.split('&');
 
    for (var i = 0; i < arr.length; i++) {
      // separate the keys and the values
      var a = arr[i].split('=');
 
      // set parameter name and value (use 'true' if empty)
      var paramName = a[0];
      var paramValue = typeof (a[1]) === 'undefined' ? true : a[1];
 
      // if the paramName ends with square brackets, e.g. colors[] or colors[2]
      if (paramName.match(/\[(\d+)?\]$/)) {
 
        // create key if it doesn't exist
        var key = paramName.replace(/\[(\d+)?\]/, '');
        if (!obj[key]) obj[key] = [];
 
        // if it's an indexed array e.g. colors[2]
        if (paramName.match(/\[\d+\]$/)) {
          // get the index value and add the entry at the appropriate position
          var index = /\[(\d+)\]/.exec(paramName)[1];
          obj[key][index] = paramValue;
        } else {
          // otherwise add the value to the end of the array
          obj[key].push(paramValue);
        }
      } else {
        // we're dealing with a string
        if (!obj[paramName]) {
          // if it doesn't exist, create property
          obj[paramName] = paramValue;
        } else if (obj[paramName] && typeof obj[paramName] === 'string'){
          // if property does exist and it's a string, convert it to an array
          obj[paramName] = [obj[paramName]];
          obj[paramName].push(paramValue);
        } else {
          // otherwise add the property
          obj[paramName].push(paramValue);
        }
      }
    }
  }
 
  return obj;
}