snappymail/plugins/two-factor-auth/js/TwoFactorAuthSettings.js

/*
import { trigger as translatorTrigger } from 'Common/Translator';
*/

(rl => { if (rl) {

const
	pString = value => null != value ? '' + value : '',

	Remote = new class {
		/**
		 * @param {?Function} fCallback
		 * @param {string} sCode
		 */
		verifyCode(fCallback, sCode) {
			rl.pluginRemoteRequest(fCallback, 'VerifyTwoFactorCode', {
				Code: sCode
			});
		}

		/**
		 * @param {?Function} fCallback
		 * @param {boolean} bEnable
		 */
		enableTwoFactor(fCallback, bEnable, oParams) {
			rl.pluginRemoteRequest(fCallback, 'EnableTwoFactor', {
				...oParams,
				Enable: bEnable ? 1 : 0
			});
		}
	};

class TwoFactorAuthSettings
{

	constructor() {
		this.processing = ko.observable(false);
		this.clearing = ko.observable(false);
		this.secreting = ko.observable(false);

		this.viewUser = ko.observable('');
		this.twoFactorStatus = ko.observable(false);

		this.twoFactorTested = ko.observable(false);

		this.viewSecret = ko.observable('');
		this.viewQRCode = ko.observable('');
		this.viewBackupCodes = ko.observable('');

		this.viewEnable_ = ko.observable(false);

		const fn = iError => iError && this.viewEnable_(false);
		Object.entries({
			viewEnable: {
				read: this.viewEnable_,
				write: (value) => {
					value = !!value;
					if (value && this.twoFactorTested()) {
						this.viewEnable_(value);
						Remote.enableTwoFactor(iError => {
							fn(iError);
							rl.settings.get('RequireTwoFactor') && rl.settings.set('SetupTwoFactor', !!iError);
						}, value);
					} else {
						// Turning it off needs a current code while it is on.
						// Cancelled or refused, the checkbox goes back to on.
						this.withCode(params => {
							value || this.viewEnable_(value);
							Remote.enableTwoFactor(iError => iError && this.viewEnable_(true), false, params);
						}, () => this.viewEnable_.valueHasMutated());
					}
				}
			},

			viewTwoFactorEnableTooltip: () => {
//				translatorTrigger();
				return this.twoFactorTested() || this.viewEnable_()
					? ''
					: rl.i18n('PLUGIN_2FA/TWO_FACTOR_SECRET_TEST_BEFORE_DESC');
			},

			viewTwoFactorStatus: () => {
//				translatorTrigger();
				return rl.i18n('PLUGIN_2FA/TWO_FACTOR_SECRET_'
					+ (this.twoFactorStatus() ? '' : 'NOT_')
					+ 'CONFIGURED_DESC'
				);
			},

			twoFactorAllowedEnable: () => this.viewEnable() || this.twoFactorTested()
		}).forEach(([key, fn]) => this[key] = ko.computed(fn));

		this.onResult = this.onResult.bind(this);
		this.onChangeResult = this.onChangeResult.bind(this);
		this.onShowSecretResult = this.onShowSecretResult.bind(this);
	}

	/**
	 * While 2-step verification is on, the server wants a current code (or a
	 * backup code) to turn it off, clear it, replace it or show its secret.
	 */
	withCode(fDo, fCancel) {
		if (!this.viewEnable_()) {
			fDo({});
		} else {
			const code = (prompt(rl.i18n('PLUGIN_2FA/LABEL_TWO_FACTOR_CODE')) || '').trim();
			code ? fDo({ Code: code }) : fCancel?.();
		}
	}

	showSecret() {
		this.withCode(params => {
			this.secreting(true);
			rl.pluginRemoteRequest(this.onShowSecretResult, 'ShowTwoFactorSecret', params);
		});
	}

	hideSecret() {
		this.viewSecret('');
		this.viewQRCode('');
		this.viewBackupCodes('');
	}

	createTwoFactor() {
		this.withCode(params => {
			this.processing(true);
			rl.pluginRemoteRequest(this.onChangeResult, 'CreateTwoFactorSecret', params);
		});
	}

	testTwoFactor() {
		TwoFactorAuthTestPopupView.showModal([
			() => {
				this.twoFactorTested(true);
				this.viewEnable(true);
			}
		]);
	}

	clearTwoFactor() {
		this.withCode(params => {
			this.hideSecret();

			this.twoFactorTested(false);

			this.clearing(true);
			rl.pluginRemoteRequest(this.onChangeResult, 'ClearTwoFactorInfo', params);
		});
	}

	// A refused change must not show the account as unconfigured, which is what
	// onResult does with an error; reload the real state instead.
	onChangeResult(iError, oData) {
		if (iError) {
			this.processing(false);
			this.clearing(false);
			this.onBuild();
		} else {
			this.onResult(iError, oData);
		}
	}

	onShow() {
		this.hideSecret('');
	}

	getQr() {
		return 'otpauth://totp/' + encodeURIComponent(this.viewUser())
			+ '?secret=' + encodeURIComponent(this.viewSecret())
			+ '&issuer=' + encodeURIComponent('');
	}

	onResult(iError, oData) {
		this.processing(false);
		this.clearing(false);

		if (iError) {
			this.viewUser('');
			this.viewEnable_(false);
			this.twoFactorStatus(false);
			this.twoFactorTested(false);
			this.hideSecret('');
		} else {
			this.viewUser(pString(oData.Result.User));
			this.viewEnable_(!!oData.Result.Enable);
			this.twoFactorStatus(!!oData.Result.IsSet);
			this.twoFactorTested(!!oData.Result.Tested);

			this.viewSecret(pString(oData.Result.Secret));
			this.viewQRCode(oData.Result.QRCode);
			this.viewBackupCodes(pString(oData.Result.BackupCodes).replace(/[\s]+/g, '  '));
		}
	}

	onShowSecretResult(iError, data) {
		this.secreting(false);

		if (iError) {
			this.viewSecret('');
			this.viewQRCode('');
		} else {
			this.viewSecret(pString(data.Result.Secret));
			this.viewQRCode(pString(data.Result.QRCode));
		}
	}

	onBuild() {
		this.processing(true);
		rl.pluginRemoteRequest(this.onResult, 'GetTwoFactorInfo');
	}
}

class TwoFactorAuthTestPopupView extends rl.pluginPopupView {
	constructor() {
		super('TwoFactorAuthTest');

		this.addObservables({
			code: '',
			codeStatus: null,
			testing: false
		});

		ko.decorateCommands(this, {
			testCodeCommand: self => self.code() && !self.testing()
		});
	}

	testCodeCommand() {
		this.testing(true);
		Remote.verifyCode(iError => {
			this.testing(false);
			this.codeStatus(!iError);
			iError || (this.onSuccess() | this.close());
		}, this.code());
	}

	onShow(onSuccess) {
		this.code('');
		this.codeStatus(null);
		this.testing(false);
		this.onSuccess = onSuccess;
	}
}

rl.addSettingsViewModel(
	TwoFactorAuthSettings,
	'TwoFactorAuthSettings',
	'PLUGIN_2FA/LEGEND_TWO_FACTOR_AUTH',
	'two-factor-auth'
);

}})(window.rl);