412 lines
12 KiB
JavaScript
412 lines
12 KiB
JavaScript
|
|
|
|
/* base.js
|
|
This is the base JS file to render the user interfaces of kratos and provide
|
|
the end user with flows for login, recovery etc.
|
|
|
|
check_flow_*():
|
|
These functions check the status of the flow and based on the status do some
|
|
action to get a better experience for the end user. Usually this is a
|
|
redirect based on the state
|
|
|
|
flow_*():
|
|
execute / render all UI elements in a flow. Kratos expects you to work on
|
|
to query kratos which provides you with the UI elements needed to be
|
|
rendered. This querying and rendering is done exectly by those function.
|
|
Based on what kratos provides or the state of the flow, elements are maybe
|
|
hidden or shown
|
|
|
|
*/
|
|
|
|
|
|
// Check if an auth flow is configured and redirect to auth page in that
|
|
// case.
|
|
function check_flow_auth() {
|
|
var state = Cookies.get('flow_state');
|
|
var url = Cookies.get('auth_url');
|
|
|
|
if (state == 'auth') {
|
|
Cookies.set('flow_state','');
|
|
window.location.href = url;
|
|
}
|
|
}
|
|
|
|
// Check if there if the flow is expired, if so, reset the cookie
|
|
function check_flow_expired() {
|
|
var state = Cookies.get('flow_state');
|
|
|
|
if (state == 'flow_expired') {
|
|
Cookies.set('flow_state','');
|
|
$("#contentFlowExpired").show();
|
|
}
|
|
}
|
|
|
|
|
|
|
|
// The script executed on login flows
|
|
function flow_login() {
|
|
|
|
var flow = $.urlParam('flow');
|
|
var uri = api_url + 'self-service/login/flows?id=' + flow;
|
|
|
|
// Query the Kratos backend to know what fields to render for the
|
|
// current flow
|
|
$.ajax({
|
|
type: "GET",
|
|
url: uri,
|
|
success: function(data) {
|
|
|
|
// Render login form (group: profile)
|
|
var html = render_form(data, 'profile');
|
|
$("#contentLogin").html(html);
|
|
|
|
},
|
|
complete: function(obj) {
|
|
|
|
// If we get a 410, the flow is expired, need to refresh the flow
|
|
if (obj.status == 410) {
|
|
Cookies.set('flow_state','flow_expired');
|
|
// If we call the page without arguments, we get a new flow
|
|
window.location.href = 'login';
|
|
}
|
|
}
|
|
});
|
|
}
|
|
|
|
// This is called after a POST on settings. It tells if the save was
|
|
// successful and display / handles based on that outcome
|
|
function flow_settings_validate() {
|
|
|
|
var flow = $.urlParam('flow');
|
|
var uri = api_url + 'self-service/settings/flows?id=' + flow;
|
|
|
|
$.ajax( {
|
|
type: "GET",
|
|
url: uri,
|
|
success: function(data) {
|
|
|
|
// We had success. We save that fact in our flow_state
|
|
// cookie and regenerate a new flow
|
|
if (data.state == 'success') {
|
|
Cookies.set('flow_state', 'settings_saved');
|
|
|
|
// Redirect to generate new flow ID
|
|
window.location.href = 'settings';
|
|
}
|
|
else {
|
|
|
|
// There was an error, Kratos does not specify what is
|
|
// wrong. So we just show the general error message and
|
|
// let the user figure it out. We can re-use the flow-id
|
|
$("#contentProfileSaveFailed").show();
|
|
}
|
|
}
|
|
});
|
|
}
|
|
|
|
|
|
// Render the settings flow, this is where users can change their personal
|
|
// settings, like name and password. The form contents are defined by Kratos
|
|
function flow_settings() {
|
|
|
|
// Get the details from the current flow from kratos
|
|
var flow = $.urlParam('flow');
|
|
var uri = api_url + 'self-service/settings/flows?id=' + flow;
|
|
$.ajax({
|
|
type: "GET",
|
|
url: uri,
|
|
success: function(data) {
|
|
|
|
var state = Cookies.get('flow_state')
|
|
|
|
// If we have confirmation the settings are saved, show the
|
|
// notification
|
|
if (state == 'settings_saved') {
|
|
$("#contentProfileSaved").show();
|
|
Cookies.set('flow_state', 'settings');
|
|
}
|
|
|
|
// Hide prfile section if we are in recovery state
|
|
// so the user is not confused by other fields. The user
|
|
// probably want to setup a password only first.
|
|
if (state == 'recovery') {
|
|
$("#contentProfile").hide();
|
|
}
|
|
|
|
|
|
// FIXME: This seems to be not necessary anymore in kratos 0.9.0
|
|
// because they moved the password field to the profile group
|
|
// Render the password & profile form based on the fields we got
|
|
// from the API
|
|
// var html = render_form(data, 'profile');
|
|
// $("#contentPassword").html(html);
|
|
|
|
html = render_form(data, 'profile');
|
|
$("#contentProfile").html(html);
|
|
|
|
// If the submit button is hit, execute the POST with Ajax.
|
|
$("#formpassword").submit(function(e) {
|
|
|
|
// avoid to execute the actual submit of the form.
|
|
e.preventDefault();
|
|
|
|
var form = $(this);
|
|
var url = form.attr('action');
|
|
|
|
$.ajax({
|
|
type: "POST",
|
|
url: url,
|
|
data: form.serialize(),
|
|
complete: function(obj) {
|
|
// Validate the settings
|
|
flow_settings_validate();
|
|
},
|
|
});
|
|
});
|
|
|
|
|
|
|
|
},
|
|
complete: function(obj) {
|
|
|
|
// If we get a 410, the flow is expired, need to refresh the flow
|
|
if (obj.status == 410) {
|
|
Cookies.set('flow_state','flow_expired');
|
|
window.location.href = 'settings';
|
|
}
|
|
|
|
}
|
|
});
|
|
|
|
}
|
|
|
|
function flow_recover() {
|
|
var flow = $.urlParam('flow');
|
|
var uri = api_url + 'self-service/recovery/flows?id=' + flow;
|
|
|
|
$.ajax( {
|
|
type: "GET",
|
|
url: uri,
|
|
success: function(data) {
|
|
|
|
// Render the recover form, method 'link'
|
|
var html = render_form(data, 'link');
|
|
$("#contentRecover").html(html);
|
|
|
|
// Do form post as an AJAX call
|
|
$("#formlink").submit(function(e) {
|
|
|
|
// avoid to execute the actual submit of the form.
|
|
e.preventDefault();
|
|
|
|
var form = $(this);
|
|
var url = form.attr('action');
|
|
|
|
// keep stat we are in recovery
|
|
Cookies.set('flow_state', 'recovery');
|
|
$.ajax({
|
|
type: "POST",
|
|
url: url,
|
|
data: form.serialize(), // serializes the form's elements.
|
|
success: function(data)
|
|
{
|
|
|
|
// Show the request is sent out
|
|
$("#contentRecover").hide();
|
|
$("#contentRecoverRequested").show();
|
|
}
|
|
});
|
|
});
|
|
|
|
|
|
},
|
|
complete: function(obj) {
|
|
|
|
// If we get a 410, the flow is expired, need to refresh the flow
|
|
if (obj.status == 410) {
|
|
Cookies.set('flow_state','flow_expired');
|
|
window.location.href = 'recovery';
|
|
|
|
}
|
|
}
|
|
});
|
|
}
|
|
|
|
// Based on Kratos UI data and a group name, get the full form for that group.
|
|
// kratos groups elements which belongs together in a group and should be posted
|
|
// at once. The elements in the default group should be part of all other
|
|
// groups.
|
|
//
|
|
// data: data object as returned form the API
|
|
// group: group to render.
|
|
function render_form(data, group) {
|
|
|
|
// Create form
|
|
var action = data.ui.action;
|
|
var method = data.ui.method;
|
|
var form = "<form id='form"+group+"' method='"+method+"' action='"+action+"'>";
|
|
|
|
for (const node of data.ui.nodes) {
|
|
|
|
var name = node.attributes.name;
|
|
var type = node.attributes.type;
|
|
var value = node.attributes.value;
|
|
|
|
if (node.group == 'default' || node.group == group) {
|
|
var elm = getFormElement(type, name, value);
|
|
form += elm;
|
|
}
|
|
}
|
|
form += "</form>";
|
|
return form;
|
|
|
|
}
|
|
|
|
// Return form element based on name, including help text (sub), placeholder etc.
|
|
// Kratos give us form names and types and specifies what to render. However
|
|
// it does not provide labels or translations. This function returns a HTML
|
|
// form element based on the fields provided by Kratos with proper names and
|
|
// labels
|
|
// type: input type, usual "input", "hidden" or "submit". But bootstrap types
|
|
// like "email" are also supported
|
|
// name: name of the field. Used when posting data
|
|
// value: If there is already a value known, show it
|
|
function getFormElement(type, name, value) {
|
|
|
|
if (value == undefined) {
|
|
value = '';
|
|
}
|
|
if (name == 'email' || name == 'traits.email') {
|
|
return getFormInput(
|
|
'email',
|
|
name,
|
|
value,
|
|
'E-mail address',
|
|
'Please enter your e-mail address here',
|
|
'Please provide your e-mail address. We will send a recovery ' +
|
|
'link to that e-mail address.',
|
|
);
|
|
}
|
|
|
|
if (name == 'traits.username') {
|
|
return getFormInput(
|
|
'name',
|
|
name,
|
|
value,
|
|
'Username',
|
|
'Please provide an username',
|
|
null
|
|
);
|
|
}
|
|
|
|
if (name == 'traits.name') {
|
|
return getFormInput(
|
|
'name',
|
|
name,
|
|
value,
|
|
'Full name',
|
|
'Please provide your full name',
|
|
null
|
|
);
|
|
}
|
|
|
|
|
|
if (name == 'identifier') {
|
|
return getFormInput(
|
|
'email',
|
|
name,
|
|
value,
|
|
'E-mail address',
|
|
'Please provide your e-mail address to login',
|
|
null
|
|
);
|
|
}
|
|
|
|
if (name == 'password') {
|
|
return getFormInput(
|
|
'password',
|
|
name,
|
|
value,
|
|
'Password',
|
|
'Please provide your password',
|
|
null
|
|
);
|
|
}
|
|
|
|
|
|
if (type == 'hidden' || name == 'traits.uuid') {
|
|
|
|
return `
|
|
<input type="hidden" class="form-control" id="`+name+`"
|
|
name="`+name+`" value='`+value+`'>`;
|
|
}
|
|
|
|
if (type == 'submit') {
|
|
|
|
return `<div class="form-group">
|
|
<input type="hidden" name="`+name+`" value="`+value+`">
|
|
<button type="submit" class="btn btn-primary">Go!</button>
|
|
</div>`;
|
|
}
|
|
|
|
|
|
return getFormInput('input', name, value, name, null,null);
|
|
|
|
|
|
}
|
|
|
|
// Usually called by getFormElement, generic function to generate an
|
|
// input box.
|
|
// param type: type of input, like 'input', 'email', 'password'
|
|
// param name: name of form field, used when posting the form
|
|
// param value: preset value of the field
|
|
// param label: Label to display above field
|
|
// param placeHolder: Label to display in field if empty
|
|
// param help: Additional help text, displayed below the field in small font
|
|
function getFormInput(type, name, value, label, placeHolder, help) {
|
|
|
|
// Id field for help element
|
|
var nameHelp = name + "Help";
|
|
|
|
var element = '<div class="form-group">';
|
|
element += '<label for="'+name+'">'+label+'</label>';
|
|
element += '<input type="'+type+'" class="form-control" id="'+name+'" name="'+name+'" ';
|
|
|
|
// If we are a password field, add a eye icon to reveal password
|
|
if (value) {
|
|
element += 'value="'+value+'" ';
|
|
}
|
|
if (help) {
|
|
element += 'aria-describedby="' + nameHelp +'" ';
|
|
}
|
|
if (placeHolder) {
|
|
element += 'placeholder="'+placeHolder+'" ';
|
|
}
|
|
element += ">";
|
|
|
|
if (help) {
|
|
element +=
|
|
`<small id="`+nameHelp+`" class="form-text text-muted">` + help + `
|
|
</small>`;
|
|
}
|
|
|
|
element += '</div>';
|
|
|
|
return element;
|
|
}
|
|
|
|
|
|
|
|
// $.urlParam get parameters from the URI. Example: id = $.urlParam('id');
|
|
$.urlParam = function(name) {
|
|
var results = new RegExp('[\?&]' + name + '=([^&#]*)').exec(window.location.href);
|
|
if (results==null) {
|
|
return null;
|
|
}
|
|
return decodeURI(results[1]) || 0;
|
|
};
|
|
|
|
|
|
|
|
|
|
|