2021-09-22 20:47:10 +02:00
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html lang="{{ mailcow_locale|default('en') }}">
|
|
|
|
|
<head>
|
|
|
|
|
<meta charset="utf-8">
|
|
|
|
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
|
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0">
|
|
|
|
|
<meta name="theme-color" content="#F5D76E"/>
|
|
|
|
|
<meta http-equiv="Referrer-Policy" content="same-origin">
|
2021-10-19 10:39:22 +02:00
|
|
|
<title>{{ ui_texts.title_name|raw }}</title>
|
2021-09-22 20:47:10 +02:00
|
|
|
|
|
|
|
|
<link rel="stylesheet" href="{{ css_path }}">
|
2022-06-28 07:20:46 +02:00
|
|
|
<script>
|
|
|
|
|
// check if darkmode is preferred by OS or set by localStorage
|
2022-12-16 09:40:20 +01:00
|
|
|
if (window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches && localStorage.getItem("theme") !== "light" ||
|
|
|
|
|
localStorage.getItem("theme") === "dark") {
|
2022-06-28 07:20:46 +02:00
|
|
|
var head = document.getElementsByTagName('head')[0];
|
|
|
|
|
var link = document.createElement('link');
|
|
|
|
|
link.id = 'dark-mode-theme';
|
|
|
|
|
link.rel = 'stylesheet';
|
|
|
|
|
link.type = 'text/css';
|
|
|
|
|
link.href = '/css/themes/mailcow-darkmode.css';
|
|
|
|
|
head.appendChild(link);
|
|
|
|
|
}
|
|
|
|
|
</script>
|
|
|
|
|
|
2021-09-22 20:47:10 +02:00
|
|
|
<link rel="shortcut icon" href="/favicon.png" type="image/png">
|
|
|
|
|
<link rel="icon" href="/favicon.png" type="image/png">
|
|
|
|
|
</head>
|
2022-04-13 12:35:04 +02:00
|
|
|
<body>
|
2021-09-22 20:47:10 +02:00
|
|
|
<div class="overlay"></div>
|
|
|
|
|
{% block navbar %}
|
2022-06-14 15:52:59 +02:00
|
|
|
<nav class="navbar navbar-expand-lg navbar-light bg-light navbar-fixed-top p-0">
|
2021-09-22 20:47:10 +02:00
|
|
|
<div class="container-fluid">
|
2023-09-03 18:49:12 +02:00
|
|
|
<a class="navbar-brand" href="/">
|
|
|
|
|
<img class="main-logo" alt="mailcow-logo" src="{{ logo|default('/img/cow_mailcow.svg') }}">
|
|
|
|
|
<img class="main-logo-dark" alt="mailcow-logo-dark" src="{{ logo_dark|default('/img/cow_mailcow.svg') }}">
|
|
|
|
|
</a>
|
2022-04-13 21:34:00 +02:00
|
|
|
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbar" aria-controls="navbar" aria-expanded="false" aria-label="Toggle navigation">
|
2022-06-23 16:34:58 +02:00
|
|
|
<i class="bi bi-list fs-3"></i>
|
2022-04-13 21:34:00 +02:00
|
|
|
</button>
|
2021-09-22 20:47:10 +02:00
|
|
|
<div id="navbar" class="navbar-collapse collapse">
|
2022-03-31 20:16:44 +02:00
|
|
|
<ul class="navbar-nav ms-auto">
|
2022-06-23 16:34:58 +02:00
|
|
|
<li class="nav-item">
|
|
|
|
|
<div class="nav-link form-check form-switch my-auto d-flex align-items-center">
|
|
|
|
|
<label class="form-check-label"><i class="bi bi-moon-fill"></i></label>
|
|
|
|
|
<input class="form-check-input ms-2" type="checkbox" id="dark-mode-toggle">
|
|
|
|
|
</div>
|
|
|
|
|
</li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% if mailcow_locale %}
|
2022-10-20 11:07:56 +02:00
|
|
|
<li class="nav-item dropdown{% if available_languages|length == 1 %}lang-link-disabled{% endif %}">
|
|
|
|
|
<a href="#" class="nav-link dropdown-toggle" data-bs-toggle="dropdown" role="button" aria-expanded="false"><span class="flag-icon flag-icon-{{ mailcow_locale[-2:] }}"></span></a>
|
|
|
|
|
<ul class="dropdown-menu" role="menu "aria-labelledby="languageDropdown">
|
2021-09-22 20:47:10 +02:00
|
|
|
{% for key, val in available_languages %}
|
2022-10-20 11:07:56 +02:00
|
|
|
<li>
|
|
|
|
|
<a class="dropdown-item {% if mailcow_locale == key %}active{% endif %}" href="?{{ query_string({'lang': key}) }}">
|
2022-10-20 10:58:51 +02:00
|
|
|
<span class="flag-icon flag-icon-{{ key[-2:] }}"></span>{{ val }}
|
2021-09-22 20:47:10 +02:00
|
|
|
</a>
|
|
|
|
|
</li>
|
|
|
|
|
{% endfor %}
|
|
|
|
|
</ul>
|
|
|
|
|
</li>
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if mailcow_cc_role %}
|
2022-03-30 08:39:38 +02:00
|
|
|
<li class="nav-item dropdown">
|
2022-07-08 15:46:14 +02:00
|
|
|
<a href="#" class="nav-link dropdown-toggle" data-bs-toggle="dropdown" role="button" aria-expanded="false">{{ lang.header.mailcow_system }}</a>
|
2022-03-30 08:39:38 +02:00
|
|
|
<ul class="dropdown-menu">
|
2021-09-22 20:47:10 +02:00
|
|
|
{% if mailcow_cc_role == 'admin' %}
|
2022-03-30 08:39:38 +02:00
|
|
|
<li><a href="/debug" class="dropdown-item {% if is_uri('debug') %}active{% endif %}">{{ lang.header.debug }}</a></li>
|
2022-07-08 15:46:14 +02:00
|
|
|
<li><a href="/admin" class="dropdown-item {% if is_uri('admin') %}active{% endif %}">{{ lang.header.mailcow_config }}</a></li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endif %}
|
|
|
|
|
{% if mailcow_cc_role != 'admin' %}
|
2022-03-30 08:39:38 +02:00
|
|
|
<li><a href="/user" class="dropdown-item {% if is_uri('user') %}active{% endif %}">{{ lang.header.user_settings }}</a></li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endif %}
|
|
|
|
|
</ul>
|
|
|
|
|
</li>
|
2022-07-08 15:46:14 +02:00
|
|
|
<li class="nav-item dropdown">
|
2022-10-18 11:34:48 +02:00
|
|
|
<a href="#" class="nav-link dropdown-toggle" data-bs-toggle="dropdown" role="button" aria-expanded="false">{{ lang.header.email }}</a>
|
2022-07-08 15:46:14 +02:00
|
|
|
<ul class="dropdown-menu">
|
|
|
|
|
{% if mailcow_cc_role == 'admin' or mailcow_cc_role == 'domainadmin' %}
|
2022-10-18 11:34:48 +02:00
|
|
|
<li><a href="/mailbox" class="dropdown-item {% if is_uri('mailbox') %}active{% endif %}">{{ lang.header.mailcow_config }}</a></li>
|
2022-07-08 15:46:14 +02:00
|
|
|
{% endif %}
|
|
|
|
|
<li><a href="/quarantine" class="dropdown-item {% if is_uri('quarantine') %}active{% endif %}">{{ lang.header.quarantine }}</a></li>
|
2022-10-18 11:34:48 +02:00
|
|
|
{% if mailcow_cc_role == 'admin' %}
|
|
|
|
|
<li><a href="/queue" class="dropdown-item {% if is_uri('queue') %}active{% endif %}">{{ lang.queue.queue_manager }}</a></li>
|
|
|
|
|
{% endif %}
|
2022-12-25 14:44:00 +01:00
|
|
|
{% if mailcow_cc_role == 'admin' %}
|
2022-07-08 15:46:14 +02:00
|
|
|
<li><a href="#" class="dropdown-item" data-bs-toggle="modal" data-container="sogo-mailcow" data-bs-target="#RestartContainer">{{ lang.header.restart_sogo }}</a></li>
|
2022-12-25 14:44:00 +01:00
|
|
|
{% endif %}
|
2022-07-08 15:46:14 +02:00
|
|
|
</ul>
|
|
|
|
|
</li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endif %}
|
2021-10-24 12:42:08 +02:00
|
|
|
{% if mailcow_apps or app_links %}
|
2022-03-30 08:39:38 +02:00
|
|
|
<li class="nav-item dropdown">
|
2022-06-14 15:52:59 +02:00
|
|
|
<a href="#" class="nav-link dropdown-toggle" data-bs-toggle="dropdown" role="button" aria-expanded="false"><i class="bi bi-link-45deg me-2"></i> {{ ui_texts.apps_name|raw }}</a>
|
2022-03-30 08:39:38 +02:00
|
|
|
<ul class="dropdown-menu">
|
2021-09-22 20:47:10 +02:00
|
|
|
{% for app in mailcow_apps %}
|
|
|
|
|
{% if not skip_sogo or not is_uri('SOGo', app.link) %}
|
|
|
|
|
<li {% if app.description %}title="{{ app.description }}"{% endif %}>
|
2022-03-30 08:39:38 +02:00
|
|
|
<a href="{{ app.link }}" class="dropdown-item">{{ app.name }}</a>
|
2021-09-22 20:47:10 +02:00
|
|
|
</li>
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
{% for row in app_links %}
|
|
|
|
|
{% for key, val in row %}
|
2022-03-30 08:39:38 +02:00
|
|
|
<li><a href="{{ val }}" class="dropdown-item">{{ key }}</a></li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endfor %}
|
|
|
|
|
{% endfor %}
|
|
|
|
|
</ul>
|
|
|
|
|
</li>
|
2021-10-24 12:42:08 +02:00
|
|
|
{% endif %}
|
2021-09-22 20:47:10 +02:00
|
|
|
{% if not dual_login and mailcow_cc_username %}
|
2022-06-23 16:34:58 +02:00
|
|
|
<li class="logged-in-as nav-item"><a href="#" onclick="logout.submit()" class="nav-link"><b class="username-lia">{{ mailcow_cc_username }}</b> <i class="bi bi-power ms-2"></i></a></li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% elseif dual_login %}
|
2022-06-23 16:34:58 +02:00
|
|
|
<li class="logged-in-as nav-item"><a href="#" onclick="logout.submit()" class="nav-link"><b class="username-lia">{{ mailcow_cc_username }} <span class="text-info">({{ dual_login.username }})</span> </b><i class="bi bi-power ms-2"></i></a></li>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endif %}
|
|
|
|
|
{% if not is_master %}
|
2024-01-10 14:43:59 +01:00
|
|
|
<div class="nav-link form-check form-switch my-auto d-flex align-items-center">
|
|
|
|
|
<li class="slave-info">[ slave ]</li>
|
|
|
|
|
</div>
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endif %}
|
|
|
|
|
</ul>
|
|
|
|
|
</div><!--/.nav-collapse -->
|
|
|
|
|
</div><!--/.container-fluid -->
|
|
|
|
|
</nav>
|
|
|
|
|
{% endblock navbar %}
|
|
|
|
|
|
|
|
|
|
<form action="/" method="post" id="logout"><input type="hidden" name="logout"></form>
|
|
|
|
|
|
|
|
|
|
{% if ui_texts.ui_announcement_text and ui_texts.ui_announcement_active and not is_root_uri %}
|
2022-09-26 11:23:04 +02:00
|
|
|
<div class="container mt-4">
|
2021-10-15 17:18:26 +02:00
|
|
|
<div class="alert alert-{{ ui_texts.ui_announcement_type }}">{{ ui_texts.ui_announcement_text }}</div>
|
2021-09-22 20:47:10 +02:00
|
|
|
</div>
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
2022-04-13 12:35:04 +02:00
|
|
|
<div class="container my-4">
|
2021-09-22 20:47:10 +02:00
|
|
|
{% block content %}{% endblock %}
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
{% include 'modals/footer.twig' %}
|
|
|
|
|
|
|
|
|
|
<script src="{{ js_path }}"></script>
|
|
|
|
|
<script>
|
|
|
|
|
var lang_footer = {{ lang_footer|raw }};
|
|
|
|
|
var lang_acl = {{ lang_acl|raw }};
|
|
|
|
|
var lang_tfa = {{ lang_tfa|raw }};
|
|
|
|
|
var lang_fido2 = {{ lang_fido2|raw }};
|
|
|
|
|
var docker_timeout = {{ docker_timeout|raw }} * 1000;
|
2022-08-23 14:24:10 +02:00
|
|
|
var mailcow_cc_role = '{{ mailcow_cc_role }}';
|
|
|
|
|
var last_login = '{{ last_login }}';
|
2022-07-08 15:46:14 +02:00
|
|
|
var mailcow_info = {
|
|
|
|
|
version_tag: '{{ mailcow_info.version_tag }}',
|
|
|
|
|
last_version_tag: '{{ mailcow_info.last_version_tag }}',
|
2022-11-10 16:22:18 +01:00
|
|
|
updatedAt: '{{ mailcow_info.updated_at }}',
|
2022-11-15 16:25:05 +01:00
|
|
|
project_url: '{{ mailcow_info.git_project_url }}',
|
2022-11-10 16:22:18 +01:00
|
|
|
project_owner: '{{ mailcow_info.git_owner }}',
|
|
|
|
|
project_repo: '{{ mailcow_info.git_repo }}',
|
2022-08-30 15:59:16 +02:00
|
|
|
branch: '{{ mailcow_info.mailcow_branch }}'
|
2022-07-08 15:46:14 +02:00
|
|
|
};
|
2021-09-22 20:47:10 +02:00
|
|
|
|
|
|
|
|
$(window).scroll(function() {
|
|
|
|
|
sessionStorage.scrollTop = $(this).scrollTop();
|
|
|
|
|
});
|
|
|
|
|
// Select language and reopen active URL without POST
|
|
|
|
|
function setLang(sel) {
|
|
|
|
|
$.post( '{{ uri }}', {lang: sel} );
|
|
|
|
|
window.location.href = window.location.pathname + window.location.search;
|
|
|
|
|
}
|
|
|
|
|
// FIDO2 functions
|
|
|
|
|
function arrayBufferToBase64(buffer) {
|
|
|
|
|
let binary = '';
|
|
|
|
|
let bytes = new Uint8Array(buffer);
|
|
|
|
|
let len = bytes.byteLength;
|
|
|
|
|
for (let i = 0; i < len; i++) {
|
|
|
|
|
binary += String.fromCharCode( bytes[ i ] );
|
|
|
|
|
}
|
|
|
|
|
return window.btoa(binary);
|
|
|
|
|
}
|
|
|
|
|
function recursiveBase64StrToArrayBuffer(obj) {
|
|
|
|
|
let prefix = '=?BINARY?B?';
|
|
|
|
|
let suffix = '?=';
|
|
|
|
|
if (typeof obj === 'object') {
|
|
|
|
|
for (let key in obj) {
|
|
|
|
|
if (typeof obj[key] === 'string') {
|
|
|
|
|
let str = obj[key];
|
|
|
|
|
if (str.substring(0, prefix.length) === prefix && str.substring(str.length - suffix.length) === suffix) {
|
|
|
|
|
str = str.substring(prefix.length, str.length - suffix.length);
|
|
|
|
|
let binary_string = window.atob(str);
|
|
|
|
|
let len = binary_string.length;
|
|
|
|
|
let bytes = new Uint8Array(len);
|
|
|
|
|
for (let i = 0; i < len; i++) {
|
|
|
|
|
bytes[i] = binary_string.charCodeAt(i);
|
|
|
|
|
}
|
|
|
|
|
obj[key] = bytes.buffer;
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
recursiveBase64StrToArrayBuffer(obj[key]);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
2022-01-12 21:09:18 +01:00
|
|
|
}
|
2022-03-30 08:45:24 +02:00
|
|
|
$(window).on('load', function() {
|
2021-09-22 20:47:10 +02:00
|
|
|
$(".overlay").hide();
|
|
|
|
|
});
|
|
|
|
|
$(document).ready(function() {
|
|
|
|
|
$(document).on('shown.bs.modal', function(e) {
|
|
|
|
|
modal_id = $(e.relatedTarget).data('target');
|
|
|
|
|
$(modal_id).attr("aria-hidden","false");
|
|
|
|
|
});
|
|
|
|
|
// TFA, CSRF, Alerts in footer.inc.php
|
|
|
|
|
// Other general functions in mailcow.js
|
2021-10-15 17:18:26 +02:00
|
|
|
{% for alert_type, alert_msg in alerts %}
|
2022-09-30 10:32:15 +02:00
|
|
|
mailcow_alert_box('{{ alert_msg|raw|e("js") }}', '{{ alert_type }}');
|
2021-09-22 20:47:10 +02:00
|
|
|
{% endfor %}
|
|
|
|
|
|
|
|
|
|
// Confirm TFA modal
|
2022-08-30 15:59:16 +02:00
|
|
|
{% if pending_tfa_methods %}
|
2022-07-01 16:44:24 +02:00
|
|
|
new bootstrap.Modal(document.getElementById("ConfirmTFAModal"), {
|
2021-09-22 20:47:10 +02:00
|
|
|
backdrop: 'static',
|
|
|
|
|
keyboard: false
|
2022-07-01 16:44:24 +02:00
|
|
|
}).show();
|
2022-01-13 19:12:13 +01:00
|
|
|
|
2022-07-15 13:02:13 +02:00
|
|
|
|
2022-02-21 10:46:24 +01:00
|
|
|
// validate Time based OTP tfa
|
|
|
|
|
$("#pending_tfa_tab_totp").click(function(){
|
|
|
|
|
$(".webauthn-authenticator-selection").removeClass("active");
|
|
|
|
|
$("#collapseWebAuthnTFA").collapse('hide');
|
2022-07-15 13:02:13 +02:00
|
|
|
|
|
|
|
|
// select default if only one authenticator exists
|
|
|
|
|
if ($('.totp-authenticator-selection').length == 1){
|
|
|
|
|
$('.totp-authenticator-selection').addClass("active");
|
|
|
|
|
var id = $('.totp-authenticator-selection').children('input').first().val();
|
|
|
|
|
$("#totp_selected_id").val(id);
|
|
|
|
|
$("#collapseTotpTFA").collapse('show');
|
|
|
|
|
}
|
2022-02-21 10:46:24 +01:00
|
|
|
});
|
|
|
|
|
$(".totp-authenticator-selection").click(function(){
|
|
|
|
|
$(".totp-authenticator-selection").removeClass("active");
|
|
|
|
|
$(this).addClass("active");
|
|
|
|
|
|
2022-02-21 14:10:12 +01:00
|
|
|
var id = $(this).children('input').first().val();
|
|
|
|
|
$("#totp_selected_id").val(id);
|
2022-02-21 10:46:24 +01:00
|
|
|
|
|
|
|
|
$("#collapseTotpTFA").collapse('show');
|
|
|
|
|
});
|
2022-07-15 13:02:13 +02:00
|
|
|
if ($('.totp-authenticator-selection').length == 1 &&
|
2022-07-15 16:45:28 +02:00
|
|
|
$('#pending_tfa_tab_yubi_otp').length == 0 &&
|
2022-07-15 13:02:13 +02:00
|
|
|
$('.webauthn-authenticator-selection').length == 0){
|
2022-07-15 16:45:28 +02:00
|
|
|
|
2022-07-15 13:02:13 +02:00
|
|
|
// select default if only one authenticator exists
|
|
|
|
|
$('.totp-authenticator-selection').addClass("active");
|
|
|
|
|
|
|
|
|
|
var id = $('.totp-authenticator-selection').children('input').first().val();
|
|
|
|
|
$("#totp_selected_id").val(id);
|
|
|
|
|
|
|
|
|
|
$("#collapseTotpTFA").collapse('show');
|
2022-07-15 16:45:28 +02:00
|
|
|
setTimeout(function() { $("#collapseTotpTFA").find('input[name="token"]').focus(); }, 1000);
|
2022-07-15 13:02:13 +02:00
|
|
|
}
|
2022-07-15 16:45:28 +02:00
|
|
|
$('#pending_tfa_tab_totp').on('shown.bs.tab', function() {
|
2022-07-15 13:02:13 +02:00
|
|
|
// autofocus
|
|
|
|
|
setTimeout(function() { $("#collapseTotpTFA").find('input[name="token"]').focus(); }, 200);
|
2022-07-15 16:45:28 +02:00
|
|
|
});
|
|
|
|
|
// validate Yubi OTP tfa
|
|
|
|
|
if ($('.webauthn-authenticator-selection').length == 0){
|
|
|
|
|
// autofocus
|
|
|
|
|
setTimeout(function() { $("#collapseYubiTFA").find('input[name="token"]').focus(); }, 1000);
|
|
|
|
|
}
|
|
|
|
|
$('#pending_tfa_tab_yubi_otp').on('shown.bs.tab', function() {
|
|
|
|
|
// autofocus
|
|
|
|
|
$("#collapseYubiTFA").find('input[name="token"]').focus();
|
2022-07-15 13:02:13 +02:00
|
|
|
});
|
2022-01-14 20:26:26 +01:00
|
|
|
// validate WebAuthn tfa
|
2022-02-21 10:46:24 +01:00
|
|
|
$("#pending_tfa_tab_webauthn").click(function(){
|
|
|
|
|
$(".totp-authenticator-selection").removeClass("active");
|
|
|
|
|
|
|
|
|
|
$("#collapseTotpTFA").collapse('hide');
|
|
|
|
|
});
|
|
|
|
|
$(".webauthn-authenticator-selection").click(function(){
|
|
|
|
|
$(".webauthn-authenticator-selection").removeClass("active");
|
|
|
|
|
$(this).addClass("active");
|
|
|
|
|
|
2022-02-21 14:10:12 +01:00
|
|
|
var id = $(this).children('input').first().val();
|
|
|
|
|
$("#webauthn_selected_id").val(id);
|
2022-02-21 10:46:24 +01:00
|
|
|
|
2022-08-30 15:59:16 +02:00
|
|
|
var webauthn_status_auth = document.getElementById('webauthn_status_auth');
|
|
|
|
|
webauthn_status_auth.style.setProperty('display', 'flex', 'important');
|
|
|
|
|
var webauthn_return_code = document.getElementById('webauthn_return_code');
|
|
|
|
|
webauthn_return_code.style.setProperty('display', 'none', 'important');
|
|
|
|
|
|
2022-02-21 10:46:24 +01:00
|
|
|
$("#collapseWebAuthnTFA").collapse('show');
|
2022-01-13 19:12:13 +01:00
|
|
|
|
2021-09-22 20:47:10 +02:00
|
|
|
$(this).find('input[name=token]').focus();
|
2022-01-12 21:09:18 +01:00
|
|
|
if(document.getElementById("webauthn_auth_data") !== null) {
|
|
|
|
|
// Check Browser support
|
|
|
|
|
if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
|
|
|
|
|
window.alert('Browser not supported for WebAuthn.');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
2022-01-14 20:26:26 +01:00
|
|
|
// fetch webauthn auth args
|
2022-01-12 21:09:18 +01:00
|
|
|
window.fetch("/api/v1/get/webauthn-tfa-get-args", {method:'GET',cache:'no-cache'}).then(response => {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(json => {
|
2022-05-17 19:02:52 +02:00
|
|
|
console.log(json);
|
2022-02-21 10:46:24 +01:00
|
|
|
if (json.success === false) throw new Error();
|
|
|
|
|
if (json.type === "error") throw new Error(json.msg);
|
2022-01-12 21:09:18 +01:00
|
|
|
|
2022-02-21 10:46:24 +01:00
|
|
|
recursiveBase64StrToArrayBuffer(json);
|
|
|
|
|
return json;
|
2022-01-12 21:09:18 +01:00
|
|
|
}).then(getCredentialArgs => {
|
2022-02-21 10:46:24 +01:00
|
|
|
// get credentials
|
|
|
|
|
return navigator.credentials.get(getCredentialArgs);
|
2022-01-12 21:09:18 +01:00
|
|
|
}).then(cred => {
|
2022-02-21 10:46:24 +01:00
|
|
|
return {
|
|
|
|
|
id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null,
|
|
|
|
|
clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
|
|
|
|
|
authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null,
|
|
|
|
|
signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null
|
|
|
|
|
};
|
2022-01-12 21:09:18 +01:00
|
|
|
}).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) {
|
2022-02-21 10:46:24 +01:00
|
|
|
// send request by submit
|
|
|
|
|
var form = document.getElementById('webauthn_auth_form');
|
|
|
|
|
var auth = document.getElementById('webauthn_auth_data');
|
|
|
|
|
auth.value = AuthenticatorAttestationResponse;
|
|
|
|
|
form.submit();
|
2022-01-12 21:09:18 +01:00
|
|
|
}).catch(function(err) {
|
2022-08-30 15:59:16 +02:00
|
|
|
var webauthn_status_auth = document.getElementById('webauthn_status_auth');
|
|
|
|
|
webauthn_status_auth.style.setProperty('display', 'none', 'important');
|
|
|
|
|
|
2022-02-21 10:46:24 +01:00
|
|
|
var webauthn_return_code = document.getElementById('webauthn_return_code');
|
2022-08-30 15:59:16 +02:00
|
|
|
webauthn_return_code.style.setProperty('display', 'block', 'important');
|
2022-02-21 10:46:24 +01:00
|
|
|
webauthn_return_code.innerHTML = lang_tfa.error_code + ': ' + err + ' ' + lang_tfa.reload_retry;
|
2021-09-22 20:47:10 +02:00
|
|
|
});
|
2022-01-12 21:09:18 +01:00
|
|
|
}
|
2021-09-22 20:47:10 +02:00
|
|
|
});
|
|
|
|
|
$('#ConfirmTFAModal').on('hidden.bs.modal', function(){
|
2022-01-14 20:26:26 +01:00
|
|
|
// cancel pending login
|
2021-09-22 20:47:10 +02:00
|
|
|
$.ajax({
|
|
|
|
|
type: "GET",
|
|
|
|
|
cache: false,
|
|
|
|
|
dataType: 'script',
|
|
|
|
|
url: '/inc/ajax/destroy_tfa_auth.php',
|
|
|
|
|
complete: function(data){
|
|
|
|
|
window.location = window.location.href.split("#")[0];
|
|
|
|
|
}
|
|
|
|
|
});
|
|
|
|
|
});
|
2022-02-21 10:46:24 +01:00
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
|
2021-09-22 20:47:10 +02:00
|
|
|
// Validate FIDO2
|
|
|
|
|
$("#fido2-login").click(function(){
|
|
|
|
|
$('#fido2-alerts').html();
|
|
|
|
|
if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
|
|
|
|
|
window.alert('Browser not supported.');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
window.fetch("/api/v1/get/fido2-get-args", {method:'GET',cache:'no-cache'}).then(function(response) {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(function(json) {
|
|
|
|
|
if (json.success === false) {
|
|
|
|
|
throw new Error();
|
|
|
|
|
}
|
|
|
|
|
recursiveBase64StrToArrayBuffer(json);
|
|
|
|
|
return json;
|
|
|
|
|
}).then(function(getCredentialArgs) {
|
|
|
|
|
return navigator.credentials.get(getCredentialArgs);
|
|
|
|
|
}).then(function(cred) {
|
|
|
|
|
return {
|
|
|
|
|
id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null,
|
|
|
|
|
clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
|
|
|
|
|
authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null,
|
|
|
|
|
signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null
|
|
|
|
|
};
|
|
|
|
|
}).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) {
|
|
|
|
|
return window.fetch("/api/v1/process/fido2-args", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'});
|
|
|
|
|
}).then(function(response) {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(function(json) {
|
|
|
|
|
if (json.success) {
|
|
|
|
|
window.location = window.location.href.split("#")[0];
|
|
|
|
|
} else {
|
|
|
|
|
throw new Error();
|
|
|
|
|
}
|
|
|
|
|
}).catch(function(err) {
|
|
|
|
|
if (typeof err.message === 'undefined') {
|
|
|
|
|
mailcow_alert_box(lang_fido2.fido2_validation_failed, "danger");
|
|
|
|
|
} else {
|
|
|
|
|
mailcow_alert_box(lang_fido2.fido2_validation_failed + ":<br><i>" + err.message + "</i>", "danger");
|
|
|
|
|
}
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
// Set TFA/FIDO2
|
|
|
|
|
$("#register-fido2, #register-fido2-touchid").click(function(){
|
|
|
|
|
let t = $(this);
|
|
|
|
|
|
|
|
|
|
$("option:selected").prop("selected", false);
|
|
|
|
|
if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
|
|
|
|
|
window.alert('Browser not supported.');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
window.fetch("/api/v1/get/fido2-registration/{{ mailcow_cc_username|url_encode(true)|default('null') }}", {method:'GET',cache:'no-cache'}).then(function(response) {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(function(json) {
|
|
|
|
|
if (json.success === false) {
|
|
|
|
|
throw new Error(json.msg);
|
|
|
|
|
}
|
|
|
|
|
recursiveBase64StrToArrayBuffer(json);
|
|
|
|
|
|
|
|
|
|
// set attestation to node if we are registering apple touch id
|
|
|
|
|
if(t.attr('id') === 'register-fido2-touchid') {
|
|
|
|
|
json.publicKey.attestation = 'none';
|
|
|
|
|
json.publicKey.authenticatorSelection.authenticatorAttachment = "platform";
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return json;
|
|
|
|
|
}).then(function(createCredentialArgs) {
|
|
|
|
|
console.log(createCredentialArgs);
|
|
|
|
|
return navigator.credentials.create(createCredentialArgs);
|
|
|
|
|
}).then(function(cred) {
|
|
|
|
|
return {
|
|
|
|
|
clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
|
|
|
|
|
attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null
|
|
|
|
|
};
|
|
|
|
|
}).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) {
|
|
|
|
|
return window.fetch("/api/v1/add/fido2-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'});
|
|
|
|
|
}).then(function(response) {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(function(json) {
|
|
|
|
|
if (json.success) {
|
|
|
|
|
window.location = window.location.href.split("#")[0];
|
|
|
|
|
} else {
|
|
|
|
|
throw new Error(json.msg);
|
|
|
|
|
}
|
|
|
|
|
}).catch(function(err) {
|
|
|
|
|
$('#fido2-alerts').html('<span class="text-danger"><b>' + err.message + '</b></span>');
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
$('#selectTFA').change(function () {
|
|
|
|
|
if ($(this).val() == "yubi_otp") {
|
|
|
|
|
$('#YubiOTPModal').modal('show');
|
|
|
|
|
$("option:selected").prop("selected", false);
|
|
|
|
|
}
|
|
|
|
|
if ($(this).val() == "totp") {
|
|
|
|
|
$('#TOTPModal').modal('show');
|
|
|
|
|
request_token = $('#tfa-qr-img').data('totp-secret');
|
|
|
|
|
$.ajax({
|
|
|
|
|
url: '/inc/ajax/qr_gen.php',
|
|
|
|
|
data: {
|
|
|
|
|
token: request_token,
|
|
|
|
|
},
|
|
|
|
|
}).done(function (result) {
|
|
|
|
|
$("#tfa-qr-img").attr("src", result);
|
|
|
|
|
});
|
|
|
|
|
$("option:selected").prop("selected", false);
|
|
|
|
|
}
|
2022-01-12 21:09:18 +01:00
|
|
|
if ($(this).val() == "webauthn") {
|
|
|
|
|
// check if Browser is supported
|
|
|
|
|
if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
|
|
|
|
|
window.alert('Browser not supported.');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// show modal
|
|
|
|
|
$('#WebAuthnModal').modal('show');
|
|
|
|
|
$("option:selected").prop("selected", false);
|
|
|
|
|
|
|
|
|
|
$("#start_webauthn_register").click(() => {
|
|
|
|
|
var key_id = document.getElementsByName('key_id')[1].value;
|
2022-02-21 10:46:24 +01:00
|
|
|
var confirm_password = document.getElementsByName('confirm_password')[1].value;
|
2022-01-12 21:09:18 +01:00
|
|
|
|
2022-01-14 20:26:26 +01:00
|
|
|
// fetch WebAuthn create args
|
2022-01-12 21:09:18 +01:00
|
|
|
window.fetch("/api/v1/get/webauthn-tfa-registration/{{ mailcow_cc_username|url_encode(true)|default('null') }}", {method:'GET',cache:'no-cache'}).then(response => {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(json => {
|
2022-07-04 17:01:35 +02:00
|
|
|
console.log(json);
|
2022-01-12 21:09:18 +01:00
|
|
|
if (json.success === false) throw new Error(json.msg);
|
|
|
|
|
recursiveBase64StrToArrayBuffer(json);
|
|
|
|
|
|
|
|
|
|
return json;
|
|
|
|
|
}).then(createCredentialArgs => {
|
2022-01-14 20:26:26 +01:00
|
|
|
// create credentials
|
2022-01-12 21:09:18 +01:00
|
|
|
return navigator.credentials.create(createCredentialArgs);
|
|
|
|
|
}).then(cred => {
|
|
|
|
|
return {
|
|
|
|
|
clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
|
|
|
|
|
attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null,
|
|
|
|
|
key_id: key_id,
|
2022-02-21 10:46:24 +01:00
|
|
|
tfa_method: "webauthn",
|
|
|
|
|
confirm_password: confirm_password
|
2022-01-12 21:09:18 +01:00
|
|
|
};
|
|
|
|
|
}).then(JSON.stringify).then(AuthenticatorAttestationResponse => {
|
2022-01-14 20:26:26 +01:00
|
|
|
// send request
|
2022-01-12 21:09:18 +01:00
|
|
|
return window.fetch("/api/v1/add/webauthn-tfa-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'});
|
|
|
|
|
}).then(response => {
|
|
|
|
|
return response.json();
|
|
|
|
|
}).then(json => {
|
|
|
|
|
if (json.success) {
|
2022-01-14 20:26:26 +01:00
|
|
|
// reload on success
|
2022-01-17 21:39:54 +01:00
|
|
|
window.location = window.location.href.split("#")[0];
|
2022-01-12 21:09:18 +01:00
|
|
|
} else {
|
|
|
|
|
throw new Error(json.msg);
|
2021-09-22 20:47:10 +02:00
|
|
|
}
|
2022-01-12 21:09:18 +01:00
|
|
|
}).catch(function(err) {
|
|
|
|
|
console.log(err);
|
|
|
|
|
var webauthn_return_code = document.getElementById('webauthn_return_code');
|
|
|
|
|
webauthn_return_code.style.display = webauthn_return_code.style.display === 'none' ? '' : null;
|
|
|
|
|
webauthn_return_code.innerHTML = lang_tfa.error_code + ': ' + err + ' ' + lang_tfa.reload_retry;
|
|
|
|
|
});
|
2021-09-22 20:47:10 +02:00
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
if ($(this).val() == "none") {
|
|
|
|
|
$('#DisableTFAModal').modal('show');
|
|
|
|
|
$("option:selected").prop("selected", false);
|
|
|
|
|
}
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
{% if mailcow_cc_username %}
|
|
|
|
|
// Reload after session timeout
|
|
|
|
|
var session_lifetime = {{ (session_lifetime * 1000) + 15000 }};
|
|
|
|
|
setTimeout(function() {
|
|
|
|
|
location.reload();
|
|
|
|
|
}, session_lifetime);
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
// CSRF
|
|
|
|
|
$('<input type="hidden" value="{{ csrf_token }}">').attr('name', 'csrf_token').appendTo('form');
|
|
|
|
|
if (sessionStorage.scrollTop != "undefined") {
|
|
|
|
|
$(window).scrollTop(sessionStorage.scrollTop);
|
|
|
|
|
}
|
|
|
|
|
});
|
|
|
|
|
</script>
|
|
|
|
|
|
|
|
|
|
<div class="container footer">
|
|
|
|
|
{% if ui_texts.ui_footer %}
|
|
|
|
|
<hr><span class="rot-enc">{{ ui_texts.ui_footer|rot13|raw }}</span>
|
|
|
|
|
{% endif %}
|
2022-08-24 14:37:00 +02:00
|
|
|
{% if mailcow_cc_username and mailcow_info.mailcow_branch|lower == "master" and mailcow_info.version_tag|default %}
|
2022-02-01 15:26:48 +01:00
|
|
|
<span class="version">
|
|
|
|
|
🐮 + 🐋 = 💕
|
2022-08-24 14:31:32 +02:00
|
|
|
Version: <a href="{{ mailcow_info.git_project_url }}/releases/tag/{{ mailcow_info.version_tag }}" target="_blank">{{ mailcow_info.version_tag }}
|
2022-02-01 15:26:48 +01:00
|
|
|
</a>
|
|
|
|
|
</span>
|
2022-08-24 14:31:32 +02:00
|
|
|
{% endif %}
|
2022-08-24 16:16:38 +02:00
|
|
|
{% if mailcow_cc_username and mailcow_info.mailcow_branch|lower == "nightly" and mailcow_info.version_tag|default %}
|
2022-08-24 14:31:32 +02:00
|
|
|
<span class="version">
|
|
|
|
|
🛠️🐮 + 🐋 = 💕
|
|
|
|
|
Nightly: <a href="{{ mailcow_info.git_project_url }}/commit/{{ mailcow_info.git_commit }}" target="_blank">{{ mailcow_info.version_tag }}
|
|
|
|
|
</a><br>
|
|
|
|
|
<span style="text-align:right;display:block;">Build: {{ mailcow_info.git_commit_date }}</span>
|
|
|
|
|
</span>
|
2022-02-01 15:26:48 +01:00
|
|
|
{% endif %}
|
2021-09-22 20:47:10 +02:00
|
|
|
</div>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
