/*

 * AJAX-based intelligent login interface

 */

/*

 * FRONTEND

 */

/**

 * Performs a logon as a regular member.

 */

window.ajaxLogonToMember = function()

{

  // IE <6 pseudo-compatibility

  if ( KILL_SWITCH )

    return true;

  if ( auth_level >= USER_LEVEL_MEMBER )

    return true;

  ajaxLoginInit(function(k)

    {

      if ( on_main_page && main_page_members != physical_title )

      {

        window.location = makeUrl(main_page_members);

      }

      else

      {

        window.location.reload();

      }

    }, USER_LEVEL_MEMBER);

}

/**

 * Authenticates to the highest level the current user is allowed to go to.

 */

window.ajaxLogonToElev = function()

{

  if ( auth_level == user_level )

    return true;

  ajaxLoginInit(function(k)

    {

      ENANO_SID = k;

      var url = String(' ' + window.location).substr(1);

      url = append_sid(url);

      window.location = url;

    }, user_level);

}

/*

 * BACKEND

 */

/**

 * Holding object for various AJAX authentication information.

 * @var object

 */

var logindata = {};

/**

 * Path to the image used to indicate loading progress

 * @var string

 */

if ( !ajax_login_loadimg_path )

  var ajax_login_loadimg_path = false;

if ( !ajax_login_successimg_path )

  var ajax_login_successimg_path = false;

if ( !ajax_login_lockimg_path )

  var ajax_login_lockimg_path = false;

/**

 * Status variables

 * @var int

 */

var AJAX_STATUS_LOADING_KEY = 1;

var AJAX_STATUS_GENERATING_KEY = 2;

var AJAX_STATUS_LOGGING_IN = 3;

var AJAX_STATUS_SUCCESS = 4;

var AJAX_STATUS_ERROR = 5;

var AJAX_STATUS_DESTROY = 65535;

/**

 * State constants

 * @var int

 */

var AJAX_STATE_EARLY_INIT = 1;

var AJAX_STATE_LOADING_KEY = 2;

/**

 * Switch to decide if DiffieHellman shows a "browser incompatible" error

 * @var bool

 */

var ajax_login_prevent_dh = ( IE && !IE_8 ) || ( is_iPhone && !is_iPhone_3 );

/**

 * Performs the AJAX request to get an encryption key and from there spawns the login form.

 * @param function The function that will be called once authentication completes successfully.

 * @param int The security level to authenticate at - see http://docs.enanocms.org/Help:Appendix_B

 */

window.ajaxLoginInit = function(call_on_finish, user_level)

{

  load_component(['messagebox', 'flyin', 'fadefilter', 'jquery', 'jquery-ui', 'l10n', 'crypto']);

  logindata = {};

  var title = ( user_level > USER_LEVEL_MEMBER ) ? $lang.get('user_login_ajax_prompt_title_elev') : $lang.get('user_login_ajax_prompt_title');

  logindata.mb_object = new MessageBox(MB_OKCANCEL | MB_ICONLOCK, title, '');

  //

  // Cancel function: called when the "Cancel" button is clicked

  //

  logindata.mb_object.onclick['Cancel'] = function()

  {

    // Hide the error message, if any

    $('#ajax_login_error_box').remove();

    // Hide the captcha, if any

    if ( document.getElementById('autoCaptcha') )

    {

      var to = fly_out_top(document.getElementById('autoCaptcha'), false, true);

      setTimeout(function() {

          var d = document.getElementById('autoCaptcha');

          d.parentNode.removeChild(d);

        }, to);

    }

    // Ask the server to delete the encryption key we're using

    ajaxLoginPerformRequest({

        mode: 'clean_key',

        key_aes: logindata.key_aes,

        key_dh: logindata.key_dh

    });

  };

  // Clicking OK will not cause the box to destroy, as this function returns true.

  logindata.mb_object.onbeforeclick['OK'] = function()

  {

    // Just call the submitter and let it take care of everything

    ajaxLoginSubmitForm();

    return true;

  }

  // Fetch the inner content area

  logindata.mb_inner = document.getElementById('messageBox').getElementsByTagName('div')[0];

  // Initialize state

  logindata.showing_status = false;

  logindata.user_level = user_level;

  logindata.successfunc = call_on_finish;

  // Build the "loading" window

  ajaxLoginSetStatus(AJAX_STATUS_LOADING_KEY);

  // Request the key

  ajaxLoginPerformRequest({ mode: 'getkey' });

}

/**

 * For compatibility only. Really, folks, it's ajaxLoginInit. If you need a

 * mnemonic device, use "two 'in's."

 */

window.ajaxLogonInit = function(call_on_finish, user_level)

{

  return ajaxLoginInit(call_on_finish, user_level);

}

/**

 * Sets the contents of the AJAX login window to the appropriate status message.

 * @param int One of AJAX_STATUS_* constants

 */

window.ajaxLoginSetStatus = function(status)

{

  if ( !logindata.mb_inner )

    return false;

  if ( logindata.showing_status )

  {

    var div = document.getElementById('ajax_login_status');

    if ( div )

      logindata.mb_inner.removeChild(div);

  }

  switch(status)

  {

    case AJAX_STATUS_LOADING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_fetching_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_GENERATING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_generating_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_lockimg_path ) ? ajax_login_lockimg_path : scriptPath + '/images/lock48.png';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform_dh', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_LOGGING_IN:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_loggingin');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_SUCCESS:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_success_short');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/check.png';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_ERROR:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_err_crypto');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/checkbad.png';

      div.appendChild(img);

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The circly ball ajaxy image + status message

      var detail_msg = $lang.get('user_login_ajax_err_crypto_details');

      var full_link = $lang.get('user_login_ajax_err_crypto_link');

      var link = document.createElement('a');

      link.href = makeUrlNS('Special', 'Login/' + title, 'level=' + logindata.user_level, true);

      link.appendChild(document.createTextNode(full_link));

      var span = document.createElement('span');

      span.style.fontSize = 'smaller';

      // Insert the message

      span.appendChild(document.createTextNode(detail_msg + ' '));

      span.appendChild(link);

      div.appendChild(span);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    default:

      eval(setHook('login_set_status'));

      break;

    case AJAX_STATUS_DESTROY:

    case null:

    case undefined:

      logindata.showing_status = false;

      return;

      break;

  }

  logindata.showing_status = true;

}

/**

 * Performs an AJAX logon request to the server and calls ajaxLoginProcessResponse() on the result.

 * @param object JSON packet to send

 * @param function Optional function to call on the response as well.

 */

window.ajaxLoginPerformRequest = function(json, _hookfunc)

{

  json = toJSONString(json);

  json = ajaxEscape(json);

  var hookfunc = typeof(_hookfunc) == 'function' ? _hookfunc : false;

  ajaxPost(makeUrlNS('Special', 'Login/action.json'), 'r=' + json, function(ajax)

    {

      if ( ajax.readyState == 4 && ajax.status == 200 )

      {

        // parse response

        var response = String(ajax.responseText + '');

        if ( !check_json_response(response) )

        {

          handle_invalid_json(response);

          return false;

        }

        response = parseJSON(response);

        ajaxLoginProcessResponse(response, hookfunc);

      }

    }, true);

}

/**

 * Processes a response from the login server

 * @param object JSON response

 */

window.ajaxLoginProcessResponse = function(response, hookfunc)

{

  // Did the server send a plaintext error?

  if ( response.mode == 'error' )

  {

    if ( logindata.mb_object )

    {

      logindata.mb_object.destroy();

      var error_msg = $lang.get('user_' + ( response.error.toLowerCase() ));

      new MessageBox(MB_ICONSTOP | MB_OK, $lang.get('user_err_login_generic_title'), error_msg);

    }

    else

    {

      alert(response.error);

    }

    return false;

  }

  // Main mode switch

  switch ( response.mode )

  {

    case 'initial':

      // Rid ourselves of any loading windows

      ajaxLoginSetStatus(AJAX_STATUS_DESTROY);

      // show any errors

      ajaxLoginShowFriendlyError(response);

      // The server wants us to build the login form, all the information is there

      ajaxLoginBuildForm(response);

      break;

    case 'login_success':

      ajaxLoginSetStatus(AJAX_STATUS_SUCCESS);

      logindata.successfunc(response.key, response);

      break;

    case 'reset_pass_used':

      // We logged in with a temporary password. Prompt the user to go to the temp password page and

      // reset their real password. If they click no, treat it as a login failure, as no session key

      // is actually issued when this type of login is performed.

      var conf = confirm($lang.get('user_login_ajax_msg_used_temp_pass'));

      if ( conf )

      {

        var url = makeUrlNS('Special', 'PasswordReset/stage2/' + response.user_id + '/' + response.temp_password);

        window.location = url;

        break;

      }

      // else, treat as a failure

    default:

      // Rid ourselves of any loading windows

      ajaxLoginSetStatus(AJAX_STATUS_DESTROY);

      document.getElementById('messageBox').style.backgroundColor = '#C0C0C0';

      var mb_parent = document.getElementById('messageBox').parentNode;

      $(mb_parent).effect("shake", {}, 200);

      setTimeout(function()

        {

          document.getElementById('messageBox').style.backgroundColor = '#FFF';

          console.debug(response);

          ajaxLoginShowFriendlyError(response);

          ajaxLoginBuildForm(response);

        }, 2500);

      break;

    case 'logout_success':

      if ( ENANO_SID )

      {

        ajaxLoginReplaceSIDInline(false, ENANO_SID, USER_LEVEL_MEMBER);

      }

      break;

    case 'noop':

      break;

  }

  if ( hookfunc )

  {

    hookfunc(response);

  }

}

/*

 * RESPONSE HANDLERS

 */

/**

 * Builds the login form.

 * @param object Metadata to build off of

 */

window.ajaxLoginBuildForm = function(data)

{

  // let's hope this effectively preloads the image...

  var _1 = document.createElement('img');

  _1.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/check.png';

  var _2 = document.createElement('img');

  _2.src = ( ajax_login_lockimg_path ) ? ajax_login_lockimg_path : scriptPath + '/images/lock48.png';

  var div = document.createElement('div');

  div.id = 'ajax_login_form';

  var show_captcha = ( data.lockout.active && data.lockout.policy == 'captcha' ) ? data.lockout.captcha : false;

  // text displayed on re-auth

  if ( logindata.user_level > USER_LEVEL_MEMBER )

  {