login.system 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402
  1. <!DOCTYPE HTML>
  2. <html>
  3. <head>
  4. <meta charset="UTF-8">
  5. <meta name="robots" content="noindex" />
  6. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  7. <link rel="author" href="humans.txt"/>
  8. <title>ArozOS - Login</title>
  9. <link rel="stylesheet" href="script/semantic/semantic.min.css">
  10. <link rel="stylesheet" href="script/ao.css">
  11. <script type="application/javascript" src="script/jquery.min.js"></script>
  12. <script type="application/javascript" src="script/semantic/semantic.min.js"></script>
  13. <style>
  14. @media only screen and (max-height: 1000px) {
  15. .leftPictureFrame {
  16. height:auto !important;
  17. }
  18. }
  19. .leftPictureFrame{
  20. position:fixed;
  21. top:0px;
  22. left:0px;
  23. min-width:calc(100% - 500px);
  24. min-height:100%;
  25. background-color:#faf7eb;
  26. background-image:url("./system/info/wallpaper.jpg");
  27. -webkit-background-size: cover;
  28. -moz-background-size: cover;
  29. -o-background-size: cover;
  30. background-size: cover;
  31. background-repeat: no-repeat, no-repeat;
  32. background-position:bottom left;
  33. }
  34. .rightLoginFrame{
  35. position:fixed;
  36. top:0;
  37. right:0;
  38. height:100%;
  39. width:500px;
  40. background-color:white;
  41. z-index:100%;
  42. padding-left: 30px;
  43. padding-right: 20px;
  44. }
  45. .fullHeightImage{
  46. height:100% !important;
  47. position:relative;
  48. left:-20px;
  49. }
  50. .bottombar{
  51. position:absolute;
  52. bottom:1em;
  53. left:0;
  54. padding-left: 20px;
  55. width:100%;
  56. }
  57. #animationFrame{
  58. position:absolute;
  59. bottom:0px;
  60. width:100%;
  61. }
  62. .textbox{
  63. margin-bottom:15px;
  64. }
  65. .themecolor{
  66. background-color: #6eacfc !important;
  67. transition: background-color 0.1s;
  68. }
  69. .themecolor:hover{
  70. background-color: #63a7ff !important;
  71. }
  72. .subthemecolor{
  73. background-color: #6eacfc !important;
  74. transition: background-color 0.1s;
  75. }
  76. .subthemecolor:hover{
  77. background-color: #61a6ff !important;
  78. }
  79. .loginbtn{
  80. color:white !important;
  81. margin-top:4em;
  82. }
  83. .oauthbtn{
  84. color:white !important;
  85. margin-top:1em;
  86. }
  87. .alternativeAccount:not(.disabled){
  88. cursor: pointer;
  89. }
  90. .alternativeAccount:not(.disabled):hover{
  91. background-color: rgb(245, 245, 245);
  92. }
  93. .alternativeAccount:disabled{
  94. opacity: 0.6;
  95. pointer-events: none !important;
  96. user-select: none;
  97. cursor: not-allowed;
  98. }
  99. </style>
  100. </head>
  101. <body>
  102. <div class="leftPictureFrame">
  103. </div>
  104. <div id="loginInterface" class="rightLoginFrame">
  105. <br><br><br>
  106. <img class="ui medium image" src="data:image/png;base64, {{service_logo}}">
  107. <div class="ui borderless basic segment">
  108. <p><i class="key icon"></i> Sign in <span class="hostname">ArozOS</span> with your username and password</p>
  109. <div class="ui fluid input textbox">
  110. <input id="username" type="text" placeholder="Username">
  111. </div>
  112. <div class="ui fluid input textbox">
  113. <input id="magic" type="password" placeholder="Password">
  114. </div>
  115. <div class="ui checkbox">
  116. <input id="rmbme" type="checkbox">
  117. <label for="rmbme">Remember Me</label>
  118. </div>
  119. <br><br>
  120. <button id="loginbtn" class="ui button loginbtn themecolor" style="display:inline-block;">Sign In</button>
  121. <div class="oauthonly" style="display:inline-block;">
  122. <a class="ui button oauthbtn subthemecolor" href="system/auth/oauth/login">Sign In via OAuth 2.0</a><br>
  123. </div>
  124. <div class="ldaponly" style="display:inline-block;">
  125. <a class="ui button oauthbtn subthemecolor" href="ldapLogin.system">Sign In via LDAP</a><br>
  126. </div>
  127. <div class="resumableOnly" style="display:none;">
  128. <br>
  129. <div class="ui clickable segment alternativeAccount" style="margin-bottom: 0px; padding-bottom: 8px; width: 100%; padding-top: 0px;">
  130. <div style="margin-top: 0.6em;">
  131. <div class="ui header">
  132. <img class="usericon ui circular image" src="img/public/user.svg">
  133. <div class="content" style="font-size: 95% !important;">
  134. <span class="username"><i class="ui loading spinner icon"></i></span>
  135. <div class="sub header usergroup"><i class="ui green check circle icon" style="margin-right: 0px;"></i> Resumable Session</div>
  136. </div>
  137. </div>
  138. </div>
  139. </div>
  140. <br>
  141. <button class="ui subthemecolor newResumableSession button" style="color: white; display:none;"><i class="ui add icon"></i> Create New Session</button>
  142. </div>
  143. <br>
  144. <div class="ui breadcrumb" style="margin-top:12px;">
  145. <a class="section signup" style="cursor:pointer; display:none;" href="public/register/register.system">Sign Up</a>
  146. <div class="divider signup"> / </div>
  147. <a id="forgetpw" class="section" style="cursor:pointer" href="reset.system">Forgot Password</a>
  148. </div>
  149. <p style="margin-top:18px;color:#ff7a70; display:none;font-size:1.2em;"><i class="remove icon"></i><span id="errmsg">Error. Incorrect username or password.</span></p>
  150. </div>
  151. <div class="bottombar">
  152. © <a href="https://arozos.com">ArozOS</a> 2017 - <span class="thisyear"></span><br>
  153. <small style="font-size: 80%">Request Time: <span id="requestTime"></span></small>
  154. </div>
  155. </div>
  156. <script>
  157. var redirectionAddress = "{{redirection_addr}}";
  158. var loginAddress = "{{login_addr}}";
  159. var systemUserCount = "{{usercount}}" - 0; //Magic way to convert string to int :)
  160. var autoRedirectTimer;
  161. var isMobile = false; //initiate as false
  162. // device detection
  163. if(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|ipad|iris|kindle|Android|Silk|lge |maemo|midp|mmp|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows (ce|phone)|xda|xiino/i.test(navigator.userAgent)
  164. || /1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(navigator.userAgent.substr(0,4))) {
  165. isMobile = true;
  166. }
  167. if (isMobile){
  168. //Full screen the login panel
  169. $("#loginInterface").css("width","100%");
  170. }
  171. if (systemUserCount == 0){
  172. //There are no user in this system yet. Rediect to user setup
  173. window.location.href = "/user.system";
  174. }
  175. //Hide elements by default
  176. $(".ldaponly").hide();
  177. $(".oauthonly").hide();
  178. $(document).ready(function(){
  179. var currentdate = new Date();
  180. var datetime = currentdate.getDate() + "/"
  181. + (currentdate.getMonth()+1) + "/"
  182. + currentdate.getFullYear() + " "
  183. + currentdate.getHours() + ":"
  184. + currentdate.getMinutes() + ":"
  185. + currentdate.getSeconds();
  186. $("#requestTime").text(datetime);
  187. $(".ui.checkbox").checkbox();
  188. //Check if the user already logged in
  189. $.get("system/auth/checkLogin",function(data){
  190. try{
  191. if (data === true || data.trim() == "true"){
  192. //User already logged in. Redirect to target page.
  193. if (redirectionAddress == ""){
  194. //Redirect back to index
  195. window.location.href = "/";
  196. }else{
  197. console.log(data);
  198. //window.location.href = redirectionAddress;
  199. }
  200. }
  201. }catch(ex){
  202. //Assume not logged in
  203. console.log(data);
  204. }
  205. });
  206. //Check if the system is open for registry
  207. $.get("public/register/checkPublicRegister",function(data){
  208. if (data == true){
  209. $(".signup").show();
  210. }else{
  211. $(".signup").remove();
  212. }
  213. });
  214. //OAuth related code, check if system is open for ext login
  215. $.getJSON("system/auth/oauth/checkoauth",function(data){
  216. if (data.enabled == true){
  217. $(".oauthonly").show();
  218. }else{
  219. $(".oauthonly").hide();
  220. }
  221. //if auto redirect is on
  222. if(data.auto_redirect == true) {
  223. //checking if they come from desktop.system or mobile.system
  224. //if they come from that two pages, usually mean they are just logged out.
  225. if(document.referrer != ''){
  226. var path = new URL(document.referrer);
  227. } else {
  228. var path = new URL('http://0.0.0.0');
  229. }
  230. if(document.referrer != window.location.origin + "/desktop.system" && document.referrer != window.location.origin + "/mobile.system" && path.origin + path.pathname != window.location.origin + "/system/auth/oauth/authorize"){
  231. $(".ts.borderless.basic.segment").attr("style","display: none;");
  232. $(".ts.borderless.basic.segment").attr("id","aoLogin");
  233. $(".ts.borderless.basic.segment").after('<div id="autoRedirectSegment" class="ui borderless basic segment"><p><i class="key icon"></i>Redirecting to organization sign-in page in 5 seconds...</p><br><a style="cursor: pointer;" onclick="stopAutoRedirect()">Cancel</a></div>');
  234. autoRedirectTimer = setTimeout(function(){
  235. window.location.href = "system/auth/oauth/login?redirect=" + redirectionAddress;
  236. }, 3000);
  237. }
  238. }
  239. });
  240. //LDAP related code, check if system is open for ext login
  241. $.getJSON("system/auth/ldap/checkldap",function(data){
  242. if (data.enabled == true && window.location.pathname.toLowerCase() != "/ldaplogin.system"){
  243. $(".ldaponly").show();
  244. }else{
  245. $(".ldaponly").hide();
  246. }
  247. });
  248. //Switchable accounts related code, check if the user has a session to continue
  249. $.getJSON("system/auth/u/p/list",function(data){
  250. if (data.Username != ""){
  251. //There is a session to resume
  252. let resumeableAccountUsername = data.Username;
  253. $(".resumableOnly").show();
  254. $(".resumableOnly").find(".username").text(data.Username);
  255. console.log(data.ProfileImage, $('.resumableOnly').find(".usericon"));
  256. if (data.ProfileImage != ""){
  257. $('.resumableOnly').find(".usericon").attr("src", data.ProfileImage);
  258. }
  259. $(".alternativeAccount").on("click", function(event){
  260. $("#username").val(resumeableAccountUsername);
  261. $("#username").parent().addClass("disabled");
  262. $(".alternativeAccount").addClass("disabled");
  263. $(".newResumableSession").show();
  264. });
  265. $(".newResumableSession").on("click", function(event){
  266. $("#username").val("");
  267. $("#username").parent().removeClass("disabled");
  268. $(".alternativeAccount").removeClass("disabled");
  269. $(".newResumableSession").hide();
  270. })
  271. }
  272. });
  273. if(get('redirect') != undefined){
  274. $(".section.signin").attr("href","system/auth/oauth/login?redirect=" + redirectionAddress);
  275. }
  276. //Get the system hostname and replace the hostname fields
  277. $.get("system/info/getArOZInfo", function(data){
  278. document.title = data.HostName + " - Sign In"
  279. $(".hostname").text(data.HostName);
  280. });
  281. });
  282. //Event handlers for buttons
  283. $("#loginbtn").on("click",function(){
  284. login();
  285. });
  286. $("input").on("keydown",function(event){
  287. if (event.keyCode === 13) {
  288. event.preventDefault();
  289. if ($(this).attr("id") == "magic"){
  290. login();
  291. }else{
  292. //Fuocus to password field
  293. $("#magic").focus();
  294. }
  295. }
  296. });
  297. //Login system with the given username and password
  298. function login(){
  299. var username = $("#username").val();
  300. var magic = $("#magic").val();
  301. var rmbme = document.getElementById("rmbme").checked;
  302. $("input").addClass('disabled');
  303. $.post(loginAddress, {"username": username, "password": magic, "rmbme": rmbme}).done(function(data){
  304. if (data.error !== undefined){
  305. //Something went wrong during the login
  306. $("#errmsg").text(data.error);
  307. $("#errmsg").parent().stop().finish().slideDown('fast').delay(5000).slideUp('fast');
  308. }else if(data.redirect !== undefined){
  309. //LDAP Related Code
  310. window.location.href = data.redirect;
  311. }else{
  312. //Login succeed
  313. if (redirectionAddress == "" || redirectionAddress == "/"){
  314. //Redirect back to index
  315. window.location.href = "./";
  316. }else{
  317. if (window.location.hash.length > 0){
  318. redirectionAddress += window.location.hash
  319. }
  320. window.location.href = redirectionAddress;
  321. }
  322. }
  323. $("input").removeClass('disabled');
  324. });
  325. }
  326. function get(name){
  327. if(name=(new RegExp('[?&]'+encodeURIComponent(name)+'=([^&]*)')).exec(location.search))
  328. return decodeURIComponent(name[1]);
  329. }
  330. function stopAutoRedirect(){
  331. clearTimeout(autoRedirectTimer);
  332. $("#aoLogin").removeAttr("style");
  333. $("#autoRedirectSegment").attr("style", "display:none");
  334. }
  335. $(".thisyear").text(new Date().getFullYear());
  336. function updateRenderElements(){
  337. if (window.innerHeight < 520){
  338. $(".bottombar").hide();
  339. }else{
  340. $(".bottombar").show();
  341. }
  342. }
  343. updateRenderElements();
  344. $(window).on("resize", function(){
  345. updateRenderElements();
  346. });
  347. </script>
  348. </body>
  349. </html>