﻿<?xml version="1.0" encoding="utf-8"?>
<ConnectionManager Name="Paycor" RuntimeVersion="" Help="http://www.cozyroc.com/ssis/paycor-connection" xmlns="http://www.cozyroc.com/schema/rcm-config-1.0.xsd">
	<Service EndPoint="https://[Environment].paycor.com/v1" />

	<Authentication>
		<Documentation>https://developers-sandbox.paycor.com/guides#authorization-code-flow</Documentation>

		<User>
			<Parameter Name="client_id">
				<Documentation>Required. Specify client identifier.</Documentation>
			</Parameter>
			<Parameter Name="client_secret" Type="password">
				<Documentation>Required. Specify client secret.</Documentation>
			</Parameter>
			<Parameter Name="subscription_key">
				<Documentation>Required. Specify client secret.</Documentation>
			</Parameter>
			<Parameter Name="scope" Default="offline_access [application id]">
				<Documentation>Required. Specify a valid scope name, separated by a space. offline_access should be left as it is.</Documentation>
			</Parameter>
			<Parameter Name="redirect_uri" Default="https://www.cozyroc.com/oauth_callback">
				<Documentation>Required. Specify redirect_uri.</Documentation>
			</Parameter>
		</User>

		<Test Url="/legalentities/ActivatedLegalEntityTenantList" />

		<Token Url="{{=OAuth2.authorize_url}}" Result="{{=response.access_token}}">
			<Parameters>
				<Parameter Name="response_type" Value="code" />
				<Parameter Name="client_id" Value="{{=token.client_id}}" />
				<Parameter Name="subscription-key" Value="{{=token.subscription_key}}" />
				<Parameter Name="scope" Value="{{=token.scope}}" />
				<Parameter Name="redirect_uri" Value="{{=token.redirect_uri}}" />
				<Parameter Name="code_challenge" Value="1jgwjicxeSJ8yljXXYFQeitYFheQqjh_FAMN4FU5Uv4" />
				<Parameter Name="code_challenge_method" Value="s256" />
			</Parameters>

			<Authorized Id="{{=token.redirect_uri}}" Result="{{=
				connection.execute({
					url: OAuth2.getAuthBase(token) + OAuth2.access_token_url,
					method: OAuth2.access_token_method,
					parameters: {
						grant_type: 'authorization_code',
						code: response.code,
						client_id: token.client_id,
						client_secret: token.client_secret,
						redirect_uri: token.redirect_uri,
						code_verifier: 'IM4BjzOgHYTzj4I5bszz69vCcsQWavt8VJjaR6vXduqDMPRCmJV1pCGNjHRaMfMxfr-1C-1AwPBzDrtw5K3I_2HyhaUNPeQ_1L9WFsMGtmh9BIkcC7FJoQubQoBR9qxd'
				} })
			}}" />

			<Refresh Url="{{=OAuth2.getAuthBase(token) + OAuth2.refresh_token_url}}" Method="POST" Result="{{=response.refresh_token}}" Expiration="{{=Date.now() + (response.expires_in - 300) * 1000}}">
				<Documentation>https://developers-sandbox.paycor.com/guides#authorization-code-flow</Documentation>

				<Parameters>
					<Parameter Name="grant_type" Value="refresh_token" />
					<Parameter Name="client_id" Value="{{=token.client_id}}" />
					<Parameter Name="client_secret" Value="{{=token.client_secret}}" />
					<Parameter Name="refresh_token" Value="{{=token.Refresh}}" />
				</Parameters>
			</Refresh>
		</Token>

		<Parameters>
			<Parameter Name="Authorization" Value="Bearer {{=token.Access}}" Type="HttpHeader" />
			<Parameter Name="Ocp-Apim-Subscription-Key" Value="{{=token.subscription_key}}" Type="HttpHeader" />
		</Parameters>
	</Authentication>

	<Resources>
		<Template>
			<Field Name="ShortText" DataType="DT_WSTR" Length="255" />
			<Field Name="LongText" DataType="DT_WSTR" Length="1000" />
			<Field Name="DateTime" DataType="DT_DBTIMESTAMP" />

			<Resource Name="Base">
				<Read>
					<Parameters>
						<Parameter Name="continuationToken" Value="{{=parameters.iterator}}" />
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
					</Parameters>

					<Iterator>
						<Next Value="{{=(response.HasMoreResults == true) ? response.ContinuationToken : ''}}" />
					</Iterator>
				</Read>

				<Create Method="POST">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" />
					</Parameters>
				</Create>

				<Update Method="POST">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" />
					</Parameters>
				</Update>

				<Delete Method="DELETE" />
			</Resource>
		</Template>
	</Resources>
	<Script>
		<Module Name="Main">
			<![CDATA[
require('underscore');
require('Uri');

]]>
		</Module>
		<Module Name="OAuth 2">
			<![CDATA[
// See RFC 6749 (https://tools.ietf.org/html/rfc6749) for familiarizing with OAuth2 authorization flows-related terms and concepts 
var OAuth2 = {
	authorize_url: 'https://hcm.paycor.com/AppActivation/Authorize',
	access_token_url: '/sts/v1/common/token',
	access_token_method: 'POST',
	refresh_token_url: '/sts/v1/common/token',
	getAuthBase: function(token) { return new Uri(connection.serverHost).authority(); }
};

		]]>
		</Module>
	</Script>
</ConnectionManager>