﻿<?xml version="1.0" encoding="utf-8"?>
<ConnectionManager Name="Zoho Vault" RuntimeVersion="" Help="http://www.cozyroc.com/ssis/zoho-vault-connection" xmlns="http://www.cozyroc.com/schema/rcm-config-1.0.xsd">
	<Service EndPoint="https://vault.zoho.com/api/rest/json/v1" />

	<Authentication Name="OAuth 2">
		<Documentation>https://www.zoho.com/accounts/protocol/oauth/use-access-token.html</Documentation>

		<User>
			<Parameter Name="Scope" Default="offline_access ZohoVault.user.READ ZohoVault.user.CREATE ZohoVault.user.UPDATE ZohoVault.secrets.READ ZohoVault.secrets.CREATE ZohoVault.secrets.UPDATE" />
		</User>

		<Test Url="/user">
			<Parameters>
				<Parameter Name="rowPerPage" Value="1" Type="QueryString" />
			</Parameters>
		</Test>

		<Token Url="https://accounts.zoho.com/oauth/v2/auth" Result="{{=response.access_token}}">
			<Parameters>
				<Parameter Name="response_type" Value="{{=OAuth2.sign_in_response_type}}" />
				<Parameter Name="client_id" Value="{{=OAuth2.client_id}}" />
				<Parameter Name="redirect_uri" Value="{{=OAuth2.redirect_uri}}" />
				<Parameter Name="scope" Value="{{=token.Scope}}" />
				<Parameter Name="access_type" Value="offline" />
			</Parameters>

			<Authorized Id="{{=OAuth2.redirect_uri}}" Result="{{=
				connection.execute({
					url: 'https://accounts.zoho.com/oauth/v2/token',
					method: OAuth2.authorization_method,
					parameters: {
						code: response.code,
						grant_type: OAuth2.grant_type,
						client_id: OAuth2.client_id,
						client_secret: OAuth2.client_secret,
						redirect_uri: OAuth2.redirect_uri
				} })
			}}">

				<Documentation>https://desk.zoho.com/DeskAPIDocument#OauthTokens#GeneratingTokens</Documentation>
			</Authorized>

			<Refresh Url="https://accounts.zoho.com/oauth/v2/token" Method="POST" Result="{{=response.refresh_token}}" Expiration="{{=Date.now() + (response.expires_in - 300)}}">
				<Documentation>https://desk.zoho.com/DeskAPIDocument#OauthTokens#RefreshingAccessTokens</Documentation>

				<Parameters>
					<Parameter Name="grant_type" Value="refresh_token" />
					<Parameter Name="refresh_token" Value="{{=token.Refresh}}" />
					<Parameter Name="client_id" Value="{{=OAuth2.client_id}}" />
					<Parameter Name="client_secret" Value="{{=OAuth2.client_secret}}" />
				</Parameters>
			</Refresh>
		</Token>

		<Parameters>
			<Parameter Name="Authorization" Value="Zoho-oauthtoken {{=token.Access}}" Type="HttpHeader" />
		</Parameters>
	</Authentication>

	<Resources>
		<Template>
			<Field Name="ShortText" DataType="DT_WSTR" Length="255" />
			<Field Name="LongText" DataType="DT_WSTR" Length="1000" />
			<Field Name="VeryLongText" DataType="DT_WSTR" Length="4000" />
			<Field Name="DateTime" DataType="DT_DBTIMESTAMP" />
			<Field Name="Date" DataType="DT_DBDATE" />

			<Resource Name="Base">
				<Read>
					<Parameters>
						<Parameter Name="rowPerPage" Default="1" Value="{{=parameters.iterator}}" />
						<Parameter Name="pageNum" Value="{{=parameters.batchSize}}" />
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
					</Parameters>

					<Iterator>
						<Next Value="{{=parseInt(parameters.iterator || 1) + 1}}" />
					</Iterator>
				</Read>

				<Create Method="POST">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" Type="Body" />
					</Parameters>
				</Create>

				<Update Method="PATCH">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" Type="Body" />
					</Parameters>
				</Update>

				<Delete Method="POST">
					<Parameters>
						<Parameter Name="_includeUserParameters" Value="{{=parameters}}" />
						<Parameter Name="application/json" Value="{{=item}}" Type="Body" />
					</Parameters>
				</Delete>
			</Resource>
		</Template>

		<Resource Name="Chamber Management" Template="Base">
			<Documentation>https://www.zoho.com/vault/api/#chamber-management</Documentation>

			<Fields>
				<Field Name="viewusers" Template="LongText" Composite="true" />
				<Field Name="chambername" Template="ShortText" />
				<Field Name="chamberdesc" Template="LongText" />
				<Field Name="logonusers" Template="LongText" Composite="true" />
				<Field Name="modifyusers" Template="LongText" Composite="true" />
				<Field Name="notshared">
					<Component IsArray="true">
						<Component Name="email" Template="ShortText" />
						<Component Name="user_auto_id" Template="ShortText" />
						<Component Name="username" Template="ShortText" />
					</Component>
				</Field>
				<Field Name="chamber_auto_id" Template="ShortText" />
				<Field Name="ownerid" Template="ShortText" />
				<Field Name="manageusers" Template="LongText" Composite="true" />
			</Fields>

			<Read Url="/chambers" Result="{{=response.operation.Details}}">
				<Documentation>https://www.zoho.com/vault/api/#search-chambers</Documentation>
			</Read>

			<Create Url="/chambers">
				<Documentation>https://www.zoho.com/vault/api/#create-a-chamber</Documentation>
			</Create>
		</Resource>
	</Resources>
	<Script>
		<Module Name="Main">
			<![CDATA[
require('underscore');
require('Uri');

]]>
		</Module>
		<Module Name="OAuth 2">
			<![CDATA[
// See RFC 6749 (https://tools.ietf.org/html/rfc6749) for familiarizing with OAuth2 authorization flows-related terms and concepts 
var OAuth2 = {
	client_id: "1000.FLQW8AGJQHOP33153J34HXP4GXAXAL", // required. The Client ID.
	client_secret: "d6f2d546d01d80d9730c684bed990addf085e7e970", // required. The Client Secret.
	sign_in_response_type: "code", // optional. The value for the "response_type" parameter in the initiating call. Usually "code", but can also be "token", "id_token".
	authorization_method: "POST", // required. Usually the authorization URL is accessed via a POST request.
	redirect_uri: "http://www.cozyroc.com/oauth_callback/", // required. The callback URL to be called after autherization. If the default value doesn't meet requirements, need to setup "Token.Authorized.LocalListenUrl".
	grant_type: "authorization_code", // optional. Can also be "client_credentials" or "password" (see https://auth0.com/docs/applications/reference/grant-types-available )
};
]]>
		</Module>
	</Script>
</ConnectionManager>