/*

 * AJAX-based intelligent login interface

 */

/*

 * FRONTEND

 */

/**

 * Performs a logon as a regular member.

 */

function ajaxLogonToMember()

{

  // IE <6 pseudo-compatibility

  if ( KILL_SWITCH )

    return true;

  if ( auth_level >= USER_LEVEL_MEMBER )

    return true;

  ajaxLoginInit(function(k)

    {

      window.location.reload();

    }, USER_LEVEL_MEMBER);

}

/**

 * Authenticates to the highest level the current user is allowed to go to.

 */

function ajaxLogonToElev()

{

  if ( auth_level == user_level )

    return true;

  ajaxLoginInit(function(k)

    {

      ENANO_SID = k;

      var url = String(' ' + window.location).substr(1);

      url = append_sid(url);

      window.location = url;

    }, user_level);

}

/*

 * BACKEND

 */

/**

 * Holding object for various AJAX authentication information.

 * @var object

 */

var logindata = {};

/**

 * Path to the image used to indicate loading progress

 * @var string

 */

if ( !ajax_login_loadimg_path )

  var ajax_login_loadimg_path = false;

if ( !ajax_login_successimg_path )

  var ajax_login_successimg_path = false;

/**

 * Status variables

 * @var int

 */

var AJAX_STATUS_LOADING_KEY = 1;

var AJAX_STATUS_GENERATING_KEY = 2;

var AJAX_STATUS_LOGGING_IN = 3;

var AJAX_STATUS_SUCCESS = 4;

var AJAX_STATUS_DESTROY = 65535;

/**

 * State constants

 * @var int

 */

var AJAX_STATE_EARLY_INIT = 1;

var AJAX_STATE_LOADING_KEY = 2;

/**

 * Performs the AJAX request to get an encryption key and from there spawns the login form.

 * @param function The function that will be called once authentication completes successfully.

 * @param int The security level to authenticate at - see http://docs.enanocms.org/Help:Appendix_B

 */

function ajaxLoginInit(call_on_finish, user_level)

{

  logindata = {};

  var title = ( user_level > USER_LEVEL_MEMBER ) ? $lang.get('user_login_ajax_prompt_title_elev') : $lang.get('user_login_ajax_prompt_title');

  logindata.mb_object = new messagebox(MB_OKCANCEL | MB_ICONLOCK, title, '');

  logindata.mb_object.onclick['Cancel'] = function()

  {

    // Hide the error message and captcha

    if ( document.getElementById('ajax_login_error_box') )

    {

      document.getElementById('ajax_login_error_box').parentNode.removeChild(document.getElementById('ajax_login_error_box'));

    }

    if ( document.getElementById('autoCaptcha') )

    {

      var to = fly_out_top(document.getElementById('autoCaptcha'), false, true);

      setTimeout(function() {

          var d = document.getElementById('autoCaptcha');

          d.parentNode.removeChild(d);

        }, to);

    }

    // Ask the server to clean our key

    ajaxLoginPerformRequest({

        mode: 'clean_key',

        key_aes: logindata.key_aes,

        key_dh: logindata.key_dh

    });

  };

  logindata.mb_object.onbeforeclick['OK'] = function()

  {

    ajaxLoginSubmitForm();

    return true;

  }

  // Fetch the inner content area

  logindata.mb_inner = document.getElementById('messageBox').getElementsByTagName('div')[0];

  // Initialize state

  logindata.showing_status = false;

  logindata.user_level = user_level;

  logindata.successfunc = call_on_finish;

  // Build the "loading" window

  ajaxLoginSetStatus(AJAX_STATUS_LOADING_KEY);

  // Request the key

  ajaxLoginPerformRequest({ mode: 'getkey' });

}

/**

 * Sets the contents of the AJAX login window to the appropriate status message.

 * @param int One of AJAX_STATUS_*

 */

function ajaxLoginSetStatus(status)

{

  if ( !logindata.mb_inner )

    return false;

  if ( logindata.showing_status )

  {

    var div = document.getElementById('ajax_login_status');

    if ( div )

      logindata.mb_inner.removeChild(div);

  }

  switch(status)

  {

    case AJAX_STATUS_LOADING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_fetching_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_GENERATING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_generating_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform_dh', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_LOGGING_IN:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_loggingin');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_SUCCESS:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_success_short');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/check.png';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

    case AJAX_STATUS_DESTROY:

    case null:

    case undefined:

      logindata.showing_status = false;

      return null;

      break;

  }

  logindata.showing_status = true;

}

/**

 * Performs an AJAX logon request to the server and calls ajaxLoginProcessResponse() on the result.

 * @param object JSON packet to send

 */

function ajaxLoginPerformRequest(json)

{

  json = toJSONString(json);

  json = ajaxEscape(json);

  ajaxPost(makeUrlNS('Special', 'Login/action.json'), 'r=' + json, function()

    {

      if ( ajax.readyState == 4 && ajax.status == 200 )

      {

        // parse response

        var response = String(ajax.responseText + '');

        if ( response.substr(0, 1) != '{' )

        {

          handle_invalid_json(response);

          return false;

        }

        response = parseJSON(response);

        ajaxLoginProcessResponse(response);

      }

    }, true);

}

/**

 * Processes a response from the login server

 * @param object JSON response

 */

function ajaxLoginProcessResponse(response)

{

  // Did the server send a plaintext error?

  if ( response.mode == 'error' )

  {

    logindata.mb_object.destroy();

    var error_msg = $lang.get('user_' + ( response.error.toLowerCase() ));

    new messagebox(MB_ICONSTOP | MB_OK, $lang.get('user_err_login_generic_title'), error_msg);

    return false;

  }

  // Main mode switch

  switch ( response.mode )

  {

    case 'build_box':

      // Rid ourselves of any loading windows

      ajaxLoginSetStatus(AJAX_STATUS_DESTROY);

      // The server wants us to build the login form, all the information is there

      ajaxLoginBuildForm(response);

      break;

    case 'login_success':

      ajaxLoginSetStatus(AJAX_STATUS_SUCCESS);

      logindata.successfunc(response.key);

      break;

    case 'login_failure':

      // Rid ourselves of any loading windows

      ajaxLoginSetStatus(AJAX_STATUS_DESTROY);

      document.getElementById('messageBox').style.backgroundColor = '#C0C0C0';

      var mb_parent = document.getElementById('messageBox').parentNode;

      new Spry.Effect.Shake(mb_parent, {duration: 1500}).start();

      setTimeout(function()

        {

          document.getElementById('messageBox').style.backgroundColor = '#FFF';

          ajaxLoginBuildForm(response.respawn_info);

          ajaxLoginShowFriendlyError(response);

        }, 2500);

      break;

    case 'login_success_reset':

      var conf = confirm($lang.get('user_login_ajax_msg_used_temp_pass'));

      if ( conf )

      {

        var url = makeUrlNS('Special', 'PasswordReset/stage2/' + response.user_id + '/' + response.temp_password);

        window.location = url;

      }

      else

      {

        // treat as a failure

        ajaxLoginSetStatus(AJAX_STATUS_DESTROY);

        document.getElementById('messageBox').style.backgroundColor = '#C0C0C0';

        var mb_parent = document.getElementById('messageBox').parentNode;

        new Spry.Effect.Shake(mb_parent, {duration: 1500}).start();

        setTimeout(function()

          {

            document.getElementById('messageBox').style.backgroundColor = '#FFF';

            ajaxLoginBuildForm(response.respawn_info);

            // don't show an error here, just silently respawn

          }, 2500);

      }

      break;

    case 'noop':

      break;

  }

}

/*

 * RESPONSE HANDLERS

 */

/**

 * Builds the login form.

 * @param object Metadata to build off of

 */

function ajaxLoginBuildForm(data)

{

  // let's hope this effectively preloads the image...

  var _ = document.createElement('img');

  _.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/check.png';

  var div = document.createElement('div');

  div.id = 'ajax_login_form';

  var show_captcha = ( data.locked_out && data.lockout_info.lockout_policy == 'captcha' ) ? data.lockout_info.captcha : false;

  // text displayed on re-auth

  if ( logindata.user_level > USER_LEVEL_MEMBER )

  {

    div.innerHTML += $lang.get('user_login_ajax_prompt_body_elev') + '<br /><br />';

  }

  // Create the form

  var form = document.createElement('form');

  form.action = 'javascript:void(ajaxLoginSubmitForm());';

  form.onsubmit = function()

  {

    ajaxLoginSubmitForm();

    return false;

  }

  if ( IE )

  {

    form.style.marginTop = '-20px';

  }

  // Using tables to wrap form elements because it results in a

  // more visually appealing form. Yes, tables suck. I don't really

  // care - they make forms look good.

  var table = document.createElement('table');

  table.style.margin = '0 auto';

  // Field - username

  var tr1 = document.createElement('tr');

  var td1_1 = document.createElement('td');

  td1_1.appendChild(document.createTextNode($lang.get('user_login_field_username') + ':'));

  tr1.appendChild(td1_1);

  var td1_2 = document.createElement('td');

  var f_username = document.createElement('input');

  f_username.id = 'ajax_login_field_username';

  f_username.name = 'ajax_login_field_username';

  f_username.type = 'text';

  f_username.size = '25';

  if ( data.username )

    f_username.value = data.username;

  td1_2.appendChild(f_username);

  tr1.appendChild(td1_2);

  table.appendChild(tr1);

  // Field - password

  var tr2 = document.createElement('tr');

  var td2_1 = document.createElement('td');

  td2_1.appendChild(document.createTextNode($lang.get('user_login_field_password') + ':'));

  tr2.appendChild(td2_1);

  var td2_2 = document.createElement('td');

  var f_password = document.createElement('input');

  f_password.id = 'ajax_login_field_password';

  f_password.name = 'ajax_login_field_username';

  f_password.type = 'password';

  f_password.size = '25';

  if ( !show_captcha )

  {

    f_password.onkeyup = function(e)

    {

      if ( !e )

        e = window.event;

      if ( !e && IE )

        return true;

      if ( e.keyCode == 13 )

      {

        ajaxLoginSubmitForm();

      }

    }

  }

  td2_2.appendChild(f_password);

  tr2.appendChild(td2_2);

  table.appendChild(tr2);

  // Field - captcha

  if ( show_captcha )

  {

    var tr3 = document.createElement('tr');

    var td3_1 = document.createElement('td');

    td3_1.appendChild(document.createTextNode($lang.get('user_login_field_captcha') + ':'));

    tr3.appendChild(td3_1);

    var td3_2 = document.createElement('td');

    var f_captcha = document.createElement('input');

    f_captcha.id = 'ajax_login_field_captcha';

    f_captcha.name = 'ajax_login_field_username';

    f_captcha.type = 'text';

    f_captcha.size = '25';

    f_captcha.onkeyup = function(e)

    {

      if ( !e )

        e = window.event;

      if ( !e.keyCode )

        return true;

      if ( e.keyCode == 13 )

      {

        ajaxLoginSubmitForm();

      }

    }

    td3_2.appendChild(f_captcha);

    tr3.appendChild(td3_2);

    table.appendChild(tr3);

  }

  // Done building the main part of the form

  form.appendChild(table);

  // Field: enable Diffie Hellman

  if ( IE || is_iPhone )

  {

    var lbl_dh = document.createElement('span');

    lbl_dh.style.fontSize = 'smaller';

    lbl_dh.style.display = 'block';

    lbl_dh.style.textAlign = 'center';

    lbl_dh.innerHTML = $lang.get('user_login_ajax_check_dh_ie');

    form.appendChild(lbl_dh);

  }

  else

  {

    var lbl_dh = document.createElement('label');