--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/yubikey/yubikey.js Fri Jun 30 17:49:12 2017 -0400
@@ -0,0 +1,305 @@
+// sample OTP:
+// ttttvvvvvvcurikvhjcvnlnbecbkubjvuittbifhndhn
+// charset: cbdefghijklnrtuv
+
+var yk_interval = false;
+
+var YK_SEC_NORMAL_USERNAME = 1;
+var YK_SEC_NORMAL_PASSWORD = 2;
+var YK_SEC_ELEV_USERNAME = 4;
+var YK_SEC_ELEV_PASSWORD = 8;
+
+var yubikey_otp_current = false;
+
+function yk_mb_init(fieldid, statid)
+{
+ load_component(['messagebox', 'fadefilter', 'flyin', 'jquery', 'jquery-ui', 'l10n']);
+ var mp = miniPrompt(yk_mb_construct);
+ if ( typeof(fieldid) == 'function' )
+ {
+ var input = mp.getElementsByTagName('input')[0];
+ input.submit_func = fieldid;
+ }
+ else if ( fieldid && statid )
+ {
+ var input = mp.getElementsByTagName('input')[0];
+ input.yk_field_id = fieldid;
+ input.yk_status_id = statid;
+ }
+}
+
+function yk_mb_construct(mp)
+{
+ mp.innerHTML = '';
+ mp.style.textAlign = 'center';
+ mp.innerHTML = '<h3>' + $lang.get('yubiauth_msg_please_touch_key') + '</h3>';
+ var progress = document.createElement('div');
+ $(progress).addClass('yubikey_bar').css('text-align', 'left');
+ var progimg = document.createElement('img');
+ progimg.src = cdnPath + '/images/spacer.gif';
+ progress.appendChild(progimg);
+ mp.appendChild(progress);
+ var ta = document.createElement('input');
+ ta.submitted = false;
+ $(ta)
+ .css('background-color', 'transparent')
+ .css('border-width', '0px')
+ .css('color', '#fff')
+ .css('font-size', '1px')
+ .css('padding', '0')
+ .css('opacity', '0')
+ .attr('size', '1')
+ .keyup(function(e)
+ {
+ if ( e.keyCode == 27 )
+ {
+ window.clearInterval(yk_interval);
+ miniPromptDestroy(this);
+ }
+ // 0.3: submit only upon a keycode 13
+ else if ( e.keyCode == 13 )
+ {
+ this.submitted = true;
+ yk_handle_submit(this);
+ }
+ else
+ {
+ $('div.yubikey_bar > img', this.parentNode)
+ .css('width', String(this.value.length * 2) + 'px')
+ //.css('background-position', String((this.value.length > 44 ? 44 : this.value.length) - 44) + 'px -88px');
+ }
+ e.preventDefault();
+ e.stopPropagation();
+ });
+ mp.appendChild(ta);
+ setTimeout(function()
+ {
+ window.yk_interval = setInterval(function()
+ {
+ ta.focus();
+ }, 50);
+ }, 750);
+ var info = document.createElement('p');
+ $(info)
+ .append('<span style="color: #ffffff; font-size: smaller;">' + $lang.get('yubiauth_msg_close_instructions') + '</span> ')
+ .append('<a class="abutton abutton_green" href="#" onclick="miniPromptDestroy(this); return false;">' + $lang.get('etc_cancel') + '</a> ')
+ //.append('<br />')
+ .append('<span style="color: #909090; font-size: smaller;">' + $lang.get('yubiauth_msg_close_instructions') + '</span>')
+ .css('margin-top', '0');
+ mp.appendChild(info);
+}
+
+function yk_handle_submit(ta)
+{
+ if ( ta.value.length > 44 || !ta.value.match(/^[cbdefghijklnrtuv]+$/) )
+ {
+ // report "invalid characters"
+ setTimeout(function()
+ {
+ var parent = ta.parentNode;
+ var tabackup = {
+ field_id: ta.yk_field_id,
+ status_id: ta.yk_status_id,
+ submit_func: ta.submit_func
+ };
+ yk_mb_construct(parent);
+ var input = parent.getElementsByTagName('input')[0];
+ if ( tabackup.field_id )
+ input.yk_field_id = tabackup.field_id;
+ if ( tabackup.status_id )
+ input.yk_status_id = tabackup.status_id;
+ if ( tabackup.submit_func )
+ input.submit_func = tabackup.submit_func;
+ }, 1000);
+ $('h3', ta.parentNode).text($lang.get(ta.value.length > 44 ? 'yubiauth_msg_too_long' : 'yubiauth_msg_invalid_chars'));
+ $('div.yubikey_bar > img', this.parentNode).addClass('yubikey_bar_error');
+ return false;
+ }
+
+ window.clearInterval(yk_interval);
+
+ if ( ta.yk_field_id && ta.yk_status_id )
+ {
+ var field = document.getElementById(ta.yk_field_id);
+ var status = document.getElementById(ta.yk_status_id);
+ if ( $(status).hasClass('empty') || $(status).hasClass('rmpending') )
+ {
+ $(status)
+ .next('span.yubikey_pubkey')
+ .text(ta.value.substr(0, 12))
+ .next('a.yubikey_enroll')
+ .text($lang.get('yubiauth_ctl_btn_change_key'))
+ .addClass('abutton_green')
+ .after(' <a class="abutton abutton_red yubikey_enroll" href="#yk_clear" onclick="yk_clear(\'' + ta.yk_field_id + '\', \'' + ta.yk_status_id + '\'); return false;">'
+ + $lang.get('yubiauth_ctl_btn_clear') +
+ '</a>');
+ }
+ $(status).removeClass('empty').removeClass('enrolled').removeClass('rmpending').addClass('savepending').html($lang.get('yubiauth_ctl_status_enrolled_pending'));
+ $(status).next('span.yubikey_pubkey').text(ta.value.substr(0, 12));
+ field.value = ta.value;
+ miniPromptDestroy(ta);
+ return true;
+ }
+ else if ( ta.submit_func )
+ {
+ ta.submit_func(ta);
+ }
+ else
+ {
+ miniPromptDestroy(ta);
+ }
+}
+
+function yk_login_validate_reqs(ta)
+{
+ $(ta.parentNode).remove('p');
+ yubikey_otp_current = ta.value;
+
+ miniPromptDestroy(ta, true);
+
+ if ( logindata )
+ {
+ if ( logindata.mb_object )
+ {
+ // login window is open
+ if ( user_level == USER_LEVEL_GUEST )
+ {
+ // for guests, get the user's yubikey auth flags
+ // we're still ok to submit, so make sure twofactor isn't enabled
+ // as we are a guest, we have to get the flags for the user from the server
+ var ajax = ajaxMakeXHR();
+ var uri = makeUrlNS('Special', 'Yubikey', 'get_flags=' + ta.value.substr(0, 12));
+ var flags = 0;
+ try
+ {
+ ajax.open('GET', uri, false);
+ ajax.send(null);
+
+ if ( ajax.readyState == 4 && ajax.status == 200 )
+ {
+ // we got it
+ var response = String(ajax.responseText + '');
+ if ( check_json_response(response) )
+ {
+ response = parseJSON(response);
+ flags = response.flags || 0;
+ }
+ }
+ }
+ catch ( e )
+ {
+ ajaxLoginSetStatus(AJAX_STATUS_ERROR);
+ return false;
+ }
+ var show_username = flags & YK_SEC_NORMAL_USERNAME;
+ var show_password = flags & YK_SEC_NORMAL_PASSWORD;
+ }
+ else
+ {
+ var show_username = window.yk_user_flags & YK_SEC_ELEV_USERNAME;
+ var show_password = window.yk_user_flags & YK_SEC_ELEV_PASSWORD;
+ }
+ if ( !show_username )
+ $('#ajax_login_field_username').parent('td').hide().prev().hide();
+ if ( !show_password )
+ $('#ajax_login_field_password').parent('td').hide().prev().hide();
+
+ var can_submit = true;
+ if ( show_username && !$('#ajax_login_field_username').attr('value') )
+ {
+ $('#ajax_login_field_username').focus();
+
+ if ( !show_password )
+ $('#ajax_login_field_username').keyup(function(e)
+ {
+ // assign press of Enter in username field to submit
+ if ( e.keyCode == 13 )
+ {
+ $('#messageBoxButtons input:button:first').click();
+ }
+ });
+
+ can_submit = false;
+ }
+ if ( show_password && !$('#ajax_login_field_password').attr('value') )
+ {
+ if ( can_submit )
+ {
+ // can_submit only true if show_username false
+ $('#ajax_login_field_password').focus();
+ }
+ can_submit = false;
+ }
+
+ if ( can_submit )
+ {
+ $('#messageBoxButtons input:button:first').click();
+ }
+ }
+ }
+}
+
+function yk_clear(field_id, status_id)
+{
+ var field = document.getElementById(field_id);
+ var status = document.getElementById(status_id);
+
+ var was_pending = $(field).hasClass('wasempty');
+
+ $(field).attr('value', '');
+ $(status)
+ .removeClass('savepending')
+ .removeClass('enrolled')
+ .addClass( was_pending ? 'empty' : 'rmpending' )
+ .text( was_pending ? $lang.get('yubiauth_ctl_status_empty') : $lang.get('yubiauth_ctl_status_remove_pending') )
+ .next('span.yubikey_pubkey')
+ .text('')
+ .next('a')
+ .text($lang.get('yubiauth_ctl_btn_enroll'))
+ .removeClass('abutton_green')
+ .next('a')
+ .remove();
+}
+
+addOnloadHook(function()
+ {
+ if ( is_iPhone )
+ // kinda can't plug a yubikey into an iPhone
+ // ... yet?
+ return;
+
+ attachHook('login_build_form', 'yk_login_dlg_hook(table, data);');
+ attachHook('login_build_userinfo', 'if ( window.yubikey_otp_current ) userinfo.yubikey_otp = window.yubikey_otp_current;');
+ if ( title == namespace_list.Special + 'Preferences/Yubikey' )
+ {
+ load_component(['jquery', 'jquery-ui', 'expander']);
+ }
+ });
+
+function yk_login_dlg_hook(table, data)
+{
+ window.yubikey_otp_current = false;
+ var tr = document.createElement('tr');
+ var td = document.createElement('td');
+ $(td)
+ .attr('colspan', '2')
+ .css('text-align', 'center')
+ .css('font-size', 'smaller')
+ .css('font-weight', 'bold')
+ .html('<a href="#" onclick="yk_mb_init(yk_login_validate_reqs); return false;" style="color: #6fa202">' + $lang.get('yubiauth_btn_enter_otp') + '</a>');
+ $('a', td).blur(function(e)
+ {
+ $('#messageBoxButtons input:button:first').focus();
+ $('#ajax_login_field_captcha').focus();
+ });
+ if ( ( window.yk_reg_require_otp || window.yk_user_enabled ) && !data.locked_out.locked_out )
+ {
+ setTimeout(function()
+ {
+ yk_mb_init(yk_login_validate_reqs);
+ }, 750);
+ }
+ tr.appendChild(td);
+ table.appendChild(tr);
+}
+