salix/back/methods/osticket/closeTicket.js

const jsdom = require('jsdom');
const mysql = require('mysql');
const FormData = require('form-data');

module.exports = Self => {
    Self.remoteMethodCtx('closeTicket', {
        description: 'Close tickets without response from the user',
        accessType: 'READ',
        returns: {
            type: 'object',
            root: true
        },
        http: {
            path: `/closeTicket`,
            verb: 'POST'
        }
    });

    Self.closeTicket = async ctx => {
        const models = Self.app.models;
        const config = await models.OsTicketConfig.findOne();
        const ostUri = `${config.host}/login.php`;

        if (!config.user || !config.password || !config.userDb || !config.passwordDb)
            return false;

        const con = mysql.createConnection({
            host: `${config.hostDb}`,
            user: `${config.userDb}`,
            password: `${config.passwordDb}`,
            port: `${config.portDb}`
        });

        const sql = `SELECT ot.ticket_id, ot.number
                        FROM osticket.ost_ticket ot
                            JOIN osticket.ost_ticket_status ots ON ots.id = ot.status_id
                            JOIN osticket.ost_thread ot2 ON ot2.object_id = ot.ticket_id AND ot2.object_type = 'T'
                            JOIN (
                                SELECT ote.thread_id, MAX(ote.created) created, MAX(ote.updated) updated
                                    FROM osticket.ost_thread_entry ote
                                    WHERE ote.staff_id != 0 AND ote.type = 'R'
                                    GROUP BY ote.thread_id
                            ) sub ON sub.thread_id = ot2.id
                        WHERE ot.isanswered = 1
                            AND ots.state = '${config.oldStatus}'
                            AND IF(sub.updated > sub.created, sub.updated, sub.created) < DATE_SUB(CURDATE(), INTERVAL ${config.day} DAY)`;

        let ticketsId = [];
        con.connect(err => {
            if (err) throw err;
            con.query(sql, (err, results) => {
                if (err) throw err;
                for (const result of results)
                    ticketsId.push(result.ticket_id);
            });
        });

        await getRequestToken();

        async function getRequestToken() {
            const response = await fetch(ostUri);

            const result = response.headers.get('set-cookie');
            const [firtHeader] = result.split(' ');
            const firtCookie = firtHeader.substring(0, firtHeader.length - 1);
            const body = await response.text();
            const dom = new jsdom.JSDOM(body);
            const token = dom.window.document.querySelector('[name="__CSRFToken__"]').value;

            await login(token, firtCookie);
        }

        async function login(token, firtCookie) {
            const data = {
                __CSRFToken__: token,
                do: 'scplogin',
                userid: config.user,
                passwd: config.password,
                ajax: 1
            };
            const params = {
                method: 'POST',
                body: new URLSearchParams(data),
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
                    'Cookie': firtCookie
                }
            };
            const response = await fetch(ostUri, params);
            const result = response.headers.get('set-cookie');
            const [firtHeader] = result.split(' ');
            const secondCookie = firtHeader.substring(0, firtHeader.length - 1);

            await close(token, secondCookie);
        }

        async function getLockCode(token, secondCookie, ticketId) {
            const ostUri = `${config.host}/ajax.php/lock/ticket/${ticketId}`;
            const params = {
                method: 'POST',
                headers: {
                    'X-CSRFToken': token,
                    'Cookie': secondCookie
                }
            };
            const response = await fetch(ostUri, params);
            const body = await response.text();
            const json = JSON.parse(body);

            return json.code || json.retry;
        }

        async function close(token, secondCookie) {
            for (const ticketId of ticketsId) {
                const lockCode = await getLockCode(token, secondCookie, ticketId);
                if (lockCode == false) continue;
                let form = new FormData();
                form.append('__CSRFToken__', token);
                form.append('id', ticketId);
                form.append('a', config.responseType);
                form.append('lockCode', lockCode);
                form.append('from_email_id', config.fromEmailId);
                form.append('reply-to', config.replyTo);
                form.append('cannedResp', 0);
                form.append('response', config.comment);
                form.append('signature', 'none');
                form.append('reply_status_id', config.newStatusId);

                const ostUri = `${config.host}/tickets.php?id=${ticketId}`;
                const params = {
                    method: 'POST',
                    body: form,
                    headers: {
                        'Cookie': secondCookie
                    }
                };
                return fetch(ostUri, params);
            }
        }
    };
};