// sample OTP:

// ttttvvvvvvcurikvhjcvnlnbecbkubjvuittbifhndhn

// charset: cbdefghijklnrtuv

var yk_interval = false;

var YK_SEC_NORMAL_USERNAME = 1;

var YK_SEC_NORMAL_PASSWORD = 2;

var YK_SEC_ELEV_USERNAME = 4;

var YK_SEC_ELEV_PASSWORD = 8;

var yubikey_otp_current = false;

function yk_mb_init(fieldid, statid)

{

  load_component(['messagebox', 'fadefilter', 'flyin', 'jquery', 'jquery-ui', 'l10n']);

  var mp = miniPrompt(yk_mb_construct);

  if ( typeof(fieldid) == 'function' )

  {

    var input = mp.getElementsByTagName('input')[0];

    input.submit_func = fieldid;

  }

  else if ( fieldid && statid )

  {

    var input = mp.getElementsByTagName('input')[0];

    input.yk_field_id = fieldid;

    input.yk_status_id = statid;

  }

}

function yk_mb_construct(mp)

{

  mp.innerHTML = '';

  mp.style.textAlign = 'center';

  mp.innerHTML = '<h3>' + $lang.get('yubiauth_msg_please_touch_key') + '</h3>';

  var progress = document.createElement('div');

  $(progress).addClass('yubikey_bar').css('text-align', 'left');

  var progimg = document.createElement('img');

  progimg.src = cdnPath + '/images/spacer.gif';

  progress.appendChild(progimg);

  mp.appendChild(progress);

  var ta = document.createElement('input');

  ta.submitted = false;

  $(ta)

    .css('background-color', 'transparent')

    .css('border-width', '0px')

    .css('color', '#fff')

    .css('font-size', '1px')

    .css('padding', '0')

    .css('opacity', '0')

    .attr('size', '1')

    .keyup(function(e)

      {

        if ( e.keyCode == 27 )

        {

          window.clearInterval(yk_interval);

          miniPromptDestroy(this);

        }

        // 0.3: submit only upon a keycode 13

        else if ( e.keyCode == 13 )

        {

          this.submitted = true;

          yk_handle_submit(this);

        }

        else

        {

          $('div.yubikey_bar > img', this.parentNode)

            .css('width', String(this.value.length * 2) + 'px')

            //.css('background-position', String((this.value.length > 44 ? 44 : this.value.length) - 44) + 'px -88px');

        }

        e.preventDefault();

        e.stopPropagation();

      });

  mp.appendChild(ta);

  setTimeout(function()

    {

      window.yk_interval = setInterval(function()

        {

          ta.focus();

        }, 50);

    }, 750);

  var info = document.createElement('p');

  $(info)

    .append('<span style="color: #ffffff; font-size: smaller;">' + $lang.get('yubiauth_msg_close_instructions') + '</span>&nbsp;&nbsp;')

    .append('<a class="abutton abutton_green" href="#" onclick="miniPromptDestroy(this); return false;">' + $lang.get('etc_cancel') + '</a>&nbsp;&nbsp;')

    //.append('<br />')

    .append('<span style="color: #909090; font-size: smaller;">' + $lang.get('yubiauth_msg_close_instructions') + '</span>')

    .css('margin-top', '0');

  mp.appendChild(info);

}

function yk_handle_submit(ta)

{

  if ( ta.value.length > 44 || !ta.value.match(/^[cbdefghijklnrtuv]+$/) )

  {

    // report "invalid characters"

    setTimeout(function()

      {

        var parent = ta.parentNode;

        var tabackup = {

          field_id: ta.yk_field_id,

          status_id: ta.yk_status_id,

          submit_func: ta.submit_func

        };

        yk_mb_construct(parent);

        var input = parent.getElementsByTagName('input')[0];

        if ( tabackup.field_id )

          input.yk_field_id = tabackup.field_id;

        if ( tabackup.status_id )

          input.yk_status_id = tabackup.status_id;

        if ( tabackup.submit_func )

          input.submit_func = tabackup.submit_func;

      }, 1000);

    $('h3', ta.parentNode).text($lang.get(ta.value.length > 44 ? 'yubiauth_msg_too_long' : 'yubiauth_msg_invalid_chars'));

    $('div.yubikey_bar > img', this.parentNode).addClass('yubikey_bar_error');

    return false;

  }

  window.clearInterval(yk_interval);

  if ( ta.yk_field_id && ta.yk_status_id )

  {

    var field = document.getElementById(ta.yk_field_id);

    var status = document.getElementById(ta.yk_status_id);

    if ( $(status).hasClass('empty') || $(status).hasClass('rmpending') )

    {

      $(status)

      .next('span.yubikey_pubkey')

        .text(ta.value.substr(0, 12))

      .next('a.yubikey_enroll')

        .text($lang.get('yubiauth_ctl_btn_change_key'))

        .addClass('abutton_green')

        .after(' <a class="abutton abutton_red yubikey_enroll" href="#yk_clear" onclick="yk_clear(\'' + ta.yk_field_id + '\', \'' + ta.yk_status_id + '\'); return false;">'

               + $lang.get('yubiauth_ctl_btn_clear') +

               '</a>');

    }

    $(status).removeClass('empty').removeClass('enrolled').removeClass('rmpending').addClass('savepending').html($lang.get('yubiauth_ctl_status_enrolled_pending'));

    $(status).next('span.yubikey_pubkey').text(ta.value.substr(0, 12));

    field.value = ta.value;

    miniPromptDestroy(ta);

    return true;

  }

  else if ( ta.submit_func )

  {

    ta.submit_func(ta);

  }

  else

  {

    miniPromptDestroy(ta);

  }

}

function yk_login_validate_reqs(ta)

{

  $(ta.parentNode).remove('p');

  yubikey_otp_current = ta.value;

  miniPromptDestroy(ta, true);

  if ( logindata )

  {

    if ( logindata.mb_object )

    {

      // login window is open

      if ( user_level == USER_LEVEL_GUEST )

      {

        // for guests, get the user's yubikey auth flags

        // we're still ok to submit, so make sure twofactor isn't enabled

        // as we are a guest, we have to get the flags for the user from the server

        var ajax = ajaxMakeXHR();

        var uri = makeUrlNS('Special', 'Yubikey', 'get_flags=' + ta.value.substr(0, 12));

        var flags = 0;

        try

        {

          ajax.open('GET', uri, false);

          ajax.send(null);

          if ( ajax.readyState == 4 && ajax.status == 200 )

          {

            // we got it

            var response = String(ajax.responseText + '');

            if ( check_json_response(response) )

            {

              response = parseJSON(response);

              flags = response.flags || 0;

            }

          }

        }

        catch ( e )

        {

          ajaxLoginSetStatus(AJAX_STATUS_ERROR);

          return false;

        }

        var show_username = flags & YK_SEC_NORMAL_USERNAME;

        var show_password = flags & YK_SEC_NORMAL_PASSWORD;

      }

      else

      {

        var show_username = window.yk_user_flags & YK_SEC_ELEV_USERNAME;

        var show_password = window.yk_user_flags & YK_SEC_ELEV_PASSWORD;

      }

      if ( !show_username )

        $('#ajax_login_field_username').parent('td').hide().prev().hide();

      if ( !show_password )

        $('#ajax_login_field_password').parent('td').hide().prev().hide();

      var can_submit = true;

      if ( show_username && !$('#ajax_login_field_username').attr('value') )

      {

        $('#ajax_login_field_username').focus();

        if ( !show_password )

          $('#ajax_login_field_username').keyup(function(e)

            {

              // assign press of Enter in username field to submit

              if ( e.keyCode == 13 )

              {

                $('#messageBoxButtons input:button:first').click();

              }

            });

        can_submit = false;

      }

      if ( show_password && !$('#ajax_login_field_password').attr('value') )

      {

        if ( can_submit )

        {

          // can_submit only true if show_username false

          $('#ajax_login_field_password').focus();

        }

        can_submit = false;

      }

      if ( can_submit )

      {

        $('#messageBoxButtons input:button:first').click();

      }

    }

  }

}

function yk_clear(field_id, status_id)

{

  var field = document.getElementById(field_id);

  var status = document.getElementById(status_id);

  var was_pending = $(field).hasClass('wasempty');

  $(field).attr('value', '');

  $(status)

    .removeClass('savepending')

    .removeClass('enrolled')

    .addClass( was_pending ? 'empty' : 'rmpending' )

    .text( was_pending ? $lang.get('yubiauth_ctl_status_empty') : $lang.get('yubiauth_ctl_status_remove_pending') )

    .next('span.yubikey_pubkey')

      .text('')

    .next('a')

      .text($lang.get('yubiauth_ctl_btn_enroll'))

      .removeClass('abutton_green')

    .next('a')

      .remove();

}

addOnloadHook(function()

  {

    if ( is_iPhone )

      // kinda can't plug a yubikey into an iPhone

      // ... yet?

      return;

    attachHook('login_build_form', 'yk_login_dlg_hook(table, data);');

    attachHook('login_build_userinfo', 'if ( window.yubikey_otp_current ) userinfo.yubikey_otp = window.yubikey_otp_current;');

    if ( title == namespace_list.Special + 'Preferences/Yubikey' )

    {

      load_component(['jquery', 'jquery-ui', 'expander']);

    }

  });

function yk_login_dlg_hook(table, data)

{

  window.yubikey_otp_current = false;

  var tr = document.createElement('tr');

  var td = document.createElement('td');

  $(td)

    .attr('colspan', '2')

    .css('text-align', 'center')

    .css('font-size', 'smaller')

    .css('font-weight', 'bold')

    .html('<a href="#" onclick="yk_mb_init(yk_login_validate_reqs); return false;" style="color: #6fa202">' + $lang.get('yubiauth_btn_enter_otp') + '</a>');

  $('a', td).blur(function(e)

    {

      $('#messageBoxButtons input:button:first').focus();

      $('#ajax_login_field_captcha').focus();

    });

  if ( ( window.yk_reg_require_otp || window.yk_user_enabled ) && !data.locked_out.locked_out )

  {

    setTimeout(function()

      {

        yk_mb_init(yk_login_validate_reqs);

      }, 750);

  }

  tr.appendChild(td);

  table.appendChild(tr);

}