Task 6916: PPG-801 - Issues with relying party[CAS] session timeout a…

…nd logout [existing issue on Production] - rootcause analysis

src/assets/rpIFrame.js

@@ -9,10 +9,10 @@ function onLoad() {
 
 function check_session() {
     let win = window.parent.document.getElementById("opIFrame").contentWindow;
-    let client_id = this.localStorage.getItem('client_id');
+    let client_id = decrypt('client_id');
     let session_state = this.localStorage.getItem('session_state');
     let mes = client_id + ' ' + session_state;
-    win.postMessage(mes, 'https://identify.crowncommercial.gov.uk/');
+    win.postMessage(mes, this.localStorage.getItem('securityapiurl'));
 }
 
 function setTimer() {
@@ -32,7 +32,7 @@ function noticeToParentWindow(stat) {
         console.log('changed');
         let secApiURl = this.localStorage.getItem('securityapiurl');
         let redirect_uri = this.localStorage.getItem('redirect_uri') + '/authsuccess';
-        let client_id = this.localStorage.getItem('client_id');
+        let client_id = decrypt('client_id');
         let secApi = secApiURl + '/security/authorize?client_id=' + client_id
             + '&redirect_uri=' + redirect_uri + '&response_type=code' +
             '&scope=email profile openid offline_access&prompt=none';
@@ -41,4 +41,24 @@ function noticeToParentWindow(stat) {
     } else {
         console.log('not-changed');
     }
+}
+
+function decrypt(key) {
+    const shift = 3;
+    var encryptedText = localStorage.getItem(key) || '';
+    var decryptedText = '';
+    for (var i = 0; i < encryptedText.length; i++) {
+        var charCode = encryptedText.charCodeAt(i);
+        if (charCode >= 65 && charCode <= 90) {
+            decryptedText += String.fromCharCode.apply(null,[((charCode - 65 - shift + 26) % 26) + 65]);
+        }
+        else if (charCode >= 97 && charCode <= 122) {
+            decryptedText += String.fromCharCode.apply(null,[((charCode - 97 - shift + 26) % 26) + 97]);
+        }
+        else {
+            decryptedText += encryptedText[i];
+        }
+    }
+
+    return decryptedText;
 }