2022-10-08 02:41:03 +00:00
|
|
|
'use strict';
|
|
|
|
|
|
|
|
|
|
// Send an AJAX request and get the response
|
|
|
|
|
const wwa_ajax = function () {
|
|
|
|
|
let xmlHttpReq = new XMLHttpRequest();
|
|
|
|
|
return {
|
|
|
|
|
/** Send an AJAX GET request and get the response
|
2024-10-09 12:44:38 +00:00
|
|
|
*
|
2022-10-08 02:41:03 +00:00
|
|
|
* @param {string} url URL
|
|
|
|
|
* @param {string} data Attached data
|
|
|
|
|
* @param {object} callback Callback function
|
|
|
|
|
*/
|
|
|
|
|
get: (url, data = '', callback = () => { }) => {
|
|
|
|
|
xmlHttpReq.open('GET', url + data, true);
|
|
|
|
|
xmlHttpReq.send();
|
|
|
|
|
xmlHttpReq.onreadystatechange = () => {
|
|
|
|
|
if (xmlHttpReq.readyState === 4 && xmlHttpReq.status === 200) {
|
2024-10-09 12:44:38 +00:00
|
|
|
callback(xmlHttpReq.responseText.trim(), true);
|
2022-10-08 02:41:03 +00:00
|
|
|
} else if (xmlHttpReq.readyState === 4) {
|
|
|
|
|
callback('Network Error.', false);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
/** Send an AJAX POST request and get the response
|
2024-10-09 12:44:38 +00:00
|
|
|
*
|
2022-10-08 02:41:03 +00:00
|
|
|
* @param {string} url URL
|
|
|
|
|
* @param {string} data Attached data
|
|
|
|
|
* @param {object} callback Callback function
|
|
|
|
|
*/
|
|
|
|
|
post: (url, data = '', callback = () => { }) => {
|
|
|
|
|
xmlHttpReq.open('POST', url, true);
|
|
|
|
|
xmlHttpReq.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
|
|
|
|
|
xmlHttpReq.send(data);
|
|
|
|
|
xmlHttpReq.onreadystatechange = () => {
|
|
|
|
|
if (xmlHttpReq.readyState === 4 && xmlHttpReq.status === 200) {
|
2024-10-09 12:44:38 +00:00
|
|
|
callback(xmlHttpReq.responseText.trim(), true);
|
2022-10-08 02:41:03 +00:00
|
|
|
} else if (xmlHttpReq.readyState === 4) {
|
|
|
|
|
callback('Network Error.', false);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/** Operate selected DOMs
|
|
|
|
|
*
|
|
|
|
|
* @param {string} selector DOM selector
|
|
|
|
|
* @param {object} callback Callbck function
|
|
|
|
|
* @param {string} method Selecte method
|
|
|
|
|
*/
|
|
|
|
|
const wwa_dom = (selector, callback = () => { }, method = 'query') => {
|
|
|
|
|
let dom_list = [];
|
|
|
|
|
if (method === 'id') {
|
|
|
|
|
let dom = document.getElementById(selector);
|
|
|
|
|
if (dom) {
|
|
|
|
|
callback(dom);
|
|
|
|
|
}
|
|
|
|
|
return;
|
|
|
|
|
} else if (method === 'class') {
|
|
|
|
|
dom_list = document.getElementsByClassName(selector);
|
|
|
|
|
} else if (method === 'tag') {
|
|
|
|
|
dom_list = document.getElementsByTagName(selector);
|
|
|
|
|
} else {
|
|
|
|
|
dom_list = document.querySelectorAll(selector);
|
|
|
|
|
}
|
|
|
|
|
for (let dom of dom_list) {
|
|
|
|
|
callback(dom);
|
|
|
|
|
}
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/** Code Base64URL into Base64
|
|
|
|
|
*
|
|
|
|
|
* @param {string} input Base64URL coded string
|
|
|
|
|
*/
|
|
|
|
|
function base64url2base64(input) {
|
|
|
|
|
input = input.replace(/=/g, '').replace(/-/g, '+').replace(/_/g, '/');
|
|
|
|
|
const pad = input.length % 4;
|
|
|
|
|
if (pad) {
|
|
|
|
|
if (pad === 1) {
|
|
|
|
|
throw new Error('InvalidLengthError: Input base64url string is the wrong length to determine padding');
|
|
|
|
|
}
|
|
|
|
|
input += new Array(5 - pad).join('=');
|
|
|
|
|
}
|
|
|
|
|
return input;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/** Code Uint8Array into Base64 string
|
|
|
|
|
*
|
|
|
|
|
* @param {Uint8Array} a The Uint8Array needed to be coded into Base64 string
|
|
|
|
|
*/
|
|
|
|
|
function arrayToBase64String(a) {
|
|
|
|
|
return btoa(String.fromCharCode(...a));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Disable all WP-Webauthn buttons
|
|
|
|
|
function wwa_disable_buttons() {
|
|
|
|
|
wwa_dom('wwa-test-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-test-usernameless-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-bind-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-login-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wp-submit', (dom) => { dom.disabled = true }, 'id');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Enable all WP-Webauthn buttons
|
|
|
|
|
function wwa_enable_buttons() {
|
|
|
|
|
wwa_dom('wwa-test-submit', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-test-usernameless-submit', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-bind-submit', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-login-submit', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wp-submit', (dom) => { dom.disabled = false }, 'id');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
document.addEventListener('DOMContentLoaded', () => {
|
|
|
|
|
wwa_dom('wwa-login-submit', (dom) => { dom.addEventListener('click', wwa_auth, false) }, 'class');
|
|
|
|
|
// If traditional form exists
|
|
|
|
|
if (document.getElementsByClassName('wwa-login-form-traditional').length > 0) {
|
|
|
|
|
wwa_dom('.wwa-login-form-traditional .login-password', (dom) => {
|
|
|
|
|
let height = dom.clientHeight;
|
|
|
|
|
wwa_dom('.wwa-login-form-webauthn .wp-webauthn-notice', (ele) => {
|
|
|
|
|
ele.style.height = height - 40.4 + 'px';
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|
wwa_dom('wwa-w2t', (dom) => { dom.addEventListener('click', wwa_toggle, false) }, 'class');
|
|
|
|
|
wwa_dom('wwa-t2w', (dom) => { dom.addEventListener('click', wwa_toggle, false) }, 'class');
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('.wwa-login-form-webauthn .wp-webauthn-notice', (ele) => {
|
|
|
|
|
ele.style.height = '40.6px';
|
|
|
|
|
});
|
|
|
|
|
wwa_dom('wwa-w2t', (dom) => { dom.parentNode.removeChild(document.getElementsByClassName('wwa-w2t')[0]) }, 'class');
|
|
|
|
|
}
|
|
|
|
|
// If not support
|
|
|
|
|
if (window.PublicKeyCredential === undefined || navigator.credentials.create === undefined || typeof navigator.credentials.create !== 'function') {
|
|
|
|
|
wwa_dom('wwa-test-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-test-usernameless-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-bind-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-show-test', (dom) => { dom.innerText = wwa_php_vars.i18n_31 }, 'class');
|
|
|
|
|
wwa_dom('wwa-show-progress', (dom) => { dom.innerText = wwa_php_vars.i18n_31 }, 'class');
|
|
|
|
|
if (document.getElementsByClassName('wwa-login-form-traditional').length > 0) {
|
|
|
|
|
wwa_dom('wwa-login-form-webauthn', (dom) => { dom.classList.add('wwa-hide-form') }, 'class');
|
|
|
|
|
}
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-login-form-traditional', (dom) => { dom.classList.add('wwa-hide-form') }, 'class');
|
|
|
|
|
wwa_dom('wwa-bind-submit', (dom) => { dom.addEventListener('click', wwa_bind, false) }, 'class');
|
|
|
|
|
wwa_dom('wwa-test-submit', (dom) => { dom.addEventListener('click', wwa_verify, false) }, 'class');
|
|
|
|
|
wwa_dom('wwa-test-usernameless-submit', (dom) => { dom.addEventListener('click', wwa_verify, false) }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
// Toggle form
|
|
|
|
|
function wwa_toggle(e) {
|
|
|
|
|
e.preventDefault();
|
|
|
|
|
if (document.getElementsByClassName('wwa-login-form-traditional').length > 0) {
|
|
|
|
|
// Disable buttons if it is not shown
|
|
|
|
|
if (document.getElementsByClassName('wwa-login-form-traditional')[0].className.indexOf('wwa-hide-form') !== -1) {
|
|
|
|
|
wwa_dom('wp-submit', (dom) => { dom.disabled = false }, 'id');
|
|
|
|
|
wwa_dom('wwa-login-submit', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
setTimeout(() => {
|
|
|
|
|
wwa_dom('user_login', (dom) => { dom.focus() }, 'id');
|
|
|
|
|
}, 0);
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('wp-submit', (dom) => { dom.disabled = true }, 'id');
|
|
|
|
|
wwa_dom('wwa-login-submit', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
setTimeout(() => {
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.focus() }, 'id');
|
|
|
|
|
}, 0);
|
|
|
|
|
}
|
|
|
|
|
document.getElementsByClassName('wwa-login-form-traditional')[0].classList.toggle('wwa-hide-form');
|
|
|
|
|
document.getElementsByClassName('wwa-login-form-webauthn')[0].classList.toggle('wwa-hide-form');
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Auth
|
|
|
|
|
function wwa_auth() {
|
|
|
|
|
if (window.PublicKeyCredential === undefined || navigator.credentials.create === undefined || typeof navigator.credentials.create !== 'function') {
|
|
|
|
|
alert(wwa_php_vars.i18n_31);
|
|
|
|
|
return;
|
|
|
|
|
}
|
2024-10-09 12:44:38 +00:00
|
|
|
let wwa_username = this.closest('.wwa-login-form').getElementsByClassName('wwa-user-name')[0].value;
|
2022-10-08 02:41:03 +00:00
|
|
|
if (wwa_username === '' && wwa_php_vars.usernameless !== 'true') {
|
|
|
|
|
alert(wwa_php_vars.i18n_11);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = true }, 'class');
|
|
|
|
|
wwa_disable_buttons();
|
|
|
|
|
let button_dom = this;
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_3;
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, `?action=wwa_auth_start&user=${encodeURIComponent(wwa_username)}&type=auth`, (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_4;
|
|
|
|
|
let data = rawData;
|
|
|
|
|
try {
|
|
|
|
|
data = JSON.parse(rawData);
|
|
|
|
|
} catch (e) {
|
|
|
|
|
console.warn(rawData);
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true' && wwa_username === '') {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7 + wwa_php_vars.i18n_33;
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
data.challenge = Uint8Array.from(window.atob(base64url2base64(data.challenge)), (c) => c.charCodeAt(0));
|
|
|
|
|
|
|
|
|
|
if (data.allowCredentials) {
|
|
|
|
|
data.allowCredentials = data.allowCredentials.map((item) => {
|
|
|
|
|
item.id = Uint8Array.from(window.atob(base64url2base64(item.id)), (c) => c.charCodeAt(0));
|
|
|
|
|
return item;
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Save client ID
|
|
|
|
|
const clientID = data.clientID;
|
|
|
|
|
delete data.clientID;
|
|
|
|
|
|
|
|
|
|
navigator.credentials.get({ 'publicKey': data }).then((credentialInfo) => {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_5;
|
|
|
|
|
return credentialInfo;
|
|
|
|
|
}).then((data) => {
|
|
|
|
|
const publicKeyCredential = {
|
|
|
|
|
id: data.id,
|
|
|
|
|
type: data.type,
|
|
|
|
|
rawId: arrayToBase64String(new Uint8Array(data.rawId)),
|
|
|
|
|
response: {
|
|
|
|
|
authenticatorData: arrayToBase64String(new Uint8Array(data.response.authenticatorData)),
|
|
|
|
|
clientDataJSON: arrayToBase64String(new Uint8Array(data.response.clientDataJSON)),
|
|
|
|
|
signature: arrayToBase64String(new Uint8Array(data.response.signature)),
|
|
|
|
|
userHandle: data.response.userHandle ? arrayToBase64String(new Uint8Array(data.response.userHandle)) : null
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
return publicKeyCredential;
|
|
|
|
|
}).then(JSON.stringify).then((AuthenticatorResponse) => {
|
|
|
|
|
let response = wwa_ajax();
|
|
|
|
|
response.post(`${wwa_php_vars.ajax_url}?action=wwa_auth`, `data=${encodeURIComponent(window.btoa(AuthenticatorResponse))}&type=auth&clientid=${clientID}&user=${encodeURIComponent(wwa_username)}&remember=${wwa_php_vars.remember_me === 'false' ? 'false' : (document.getElementById('wwa-rememberme') ? (document.getElementById('wwa-rememberme').checked ? 'true' : 'false') : 'false')}`, (data, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
if (data === 'true') {
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_6;
|
|
|
|
|
if (document.querySelectorAll('p.login-submit input[name="redirect_to"]').length > 0) {
|
|
|
|
|
setTimeout(() => {
|
|
|
|
|
window.location.href = document.querySelectorAll('p.login-submit input[name="redirect_to"]')[0].value;
|
|
|
|
|
}, 200);
|
|
|
|
|
} else {
|
|
|
|
|
if (document.getElementsByClassName('wwa-redirect-to').length > 0) {
|
|
|
|
|
setTimeout(() => {
|
|
|
|
|
window.location.href = document.getElementsByClassName('wwa-redirect-to')[0].value;
|
|
|
|
|
}, 200);
|
|
|
|
|
} else {
|
|
|
|
|
setTimeout(() => {
|
|
|
|
|
window.location.reload();
|
|
|
|
|
}, 200);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true' && wwa_username === '') {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7 + wwa_php_vars.i18n_33;
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true' && wwa_username === '') {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7 + wwa_php_vars.i18n_33;
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}).catch((error) => {
|
|
|
|
|
console.warn(error);
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true' && wwa_username === '') {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7 + wwa_php_vars.i18n_33;
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
})
|
|
|
|
|
} else {
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true' && wwa_username === '') {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7 + wwa_php_vars.i18n_33;
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.parentNode.previousElementSibling.innerHTML = wwa_php_vars.i18n_7;
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-user-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Bind
|
|
|
|
|
function wwa_bind() {
|
|
|
|
|
let button_dom = this;
|
|
|
|
|
let wwa_name = this.parentNode.parentNode.getElementsByClassName('wwa-authenticator-name')[0].value;
|
|
|
|
|
if (wwa_name === '') {
|
|
|
|
|
alert(wwa_php_vars.i18n_12);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
let wwa_type = this.parentNode.parentNode.getElementsByClassName('wwa-authenticator-type')[0].value;
|
|
|
|
|
let wwa_usernameless = this.parentNode.parentNode.querySelectorAll('.wwa-authenticator-usernameless:checked')[0] ? this.parentNode.parentNode.querySelectorAll('.wwa-authenticator-usernameless:checked')[0].value : 'false';
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_3;
|
|
|
|
|
wwa_disable_buttons();
|
|
|
|
|
// Lock options
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = true }, 'class');
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, `?action=wwa_create&name=${encodeURIComponent(wwa_name)}&type=${encodeURIComponent(wwa_type)}&usernameless=${wwa_usernameless}`, (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_28;
|
|
|
|
|
let data = rawData;
|
|
|
|
|
try {
|
|
|
|
|
data = JSON.parse(rawData);
|
|
|
|
|
} catch (e) {
|
|
|
|
|
console.warn(rawData);
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_30;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
let challenge = new Uint8Array(32);
|
|
|
|
|
let user_id = new Uint8Array(32);
|
|
|
|
|
challenge = Uint8Array.from(window.atob(base64url2base64(data.challenge)), (c) => c.charCodeAt(0));
|
|
|
|
|
user_id = Uint8Array.from(window.atob(base64url2base64(data.user.id)), (c) => c.charCodeAt(0));
|
|
|
|
|
|
|
|
|
|
let public_key = {
|
|
|
|
|
challenge: challenge,
|
|
|
|
|
rp: {
|
|
|
|
|
id: data.rp.id,
|
|
|
|
|
name: data.rp.name
|
|
|
|
|
},
|
|
|
|
|
user: {
|
|
|
|
|
id: user_id,
|
|
|
|
|
name: data.user.name,
|
|
|
|
|
displayName: data.user.displayName
|
|
|
|
|
},
|
|
|
|
|
pubKeyCredParams: data.pubKeyCredParams,
|
|
|
|
|
authenticatorSelection: data.authenticatorSelection,
|
|
|
|
|
timeout: data.timeout
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// If some authenticators are already registered, exclude
|
|
|
|
|
if (data.excludeCredentials) {
|
|
|
|
|
public_key.excludeCredentials = data.excludeCredentials.map((item) => {
|
|
|
|
|
item.id = Uint8Array.from(window.atob(base64url2base64(item.id)), (c) => c.charCodeAt(0));
|
|
|
|
|
return item;
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Save client ID
|
|
|
|
|
const clientID = data.clientID;
|
|
|
|
|
delete data.clientID;
|
|
|
|
|
|
|
|
|
|
// Create, a pop-up window should appear
|
|
|
|
|
navigator.credentials.create({ 'publicKey': public_key }).then((newCredentialInfo) => {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_32;
|
|
|
|
|
return newCredentialInfo;
|
|
|
|
|
}).then((data) => {
|
|
|
|
|
// Code Uint8Array into string for transmission
|
|
|
|
|
const publicKeyCredential = {
|
|
|
|
|
id: data.id,
|
|
|
|
|
type: data.type,
|
|
|
|
|
rawId: arrayToBase64String(new Uint8Array(data.rawId)),
|
|
|
|
|
response: {
|
|
|
|
|
clientDataJSON: arrayToBase64String(new Uint8Array(data.response.clientDataJSON)),
|
|
|
|
|
attestationObject: arrayToBase64String(new Uint8Array(data.response.attestationObject))
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
return publicKeyCredential;
|
|
|
|
|
}).then(JSON.stringify).then((AuthenticatorAttestationResponse) => {
|
|
|
|
|
let response = wwa_ajax();
|
|
|
|
|
response.post(`${wwa_php_vars.ajax_url}?action=wwa_create_response`, `data=${encodeURIComponent(window.btoa(AuthenticatorAttestationResponse))}&name=${encodeURIComponent(wwa_name)}&type=${encodeURIComponent(wwa_type)}&usernameless=${wwa_usernameless}&clientid=${clientID}`, (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
if (rawData === 'true') {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_29;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false; dom.value = '' }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_30;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_30;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}).catch((error) => {
|
|
|
|
|
console.warn(error);
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_30;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
})
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_30;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
wwa_dom('wwa-authenticator-name', (dom) => { dom.readOnly = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-type', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-usernameless', (dom) => { dom.disabled = false }, 'class');
|
|
|
|
|
updateList();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Verify
|
|
|
|
|
function wwa_verify() {
|
|
|
|
|
let button_dom = this;
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_3;
|
|
|
|
|
let usernameless = this.className.indexOf('wwa-test-usernameless-submit') === -1 ? false : true;
|
|
|
|
|
wwa_disable_buttons();
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, `?action=wwa_auth_start&type=test&usernameless=${usernameless ? 'true' : 'false'}`, (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_4;
|
|
|
|
|
if (rawData === 'User not inited.') {
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
let data = rawData;
|
|
|
|
|
try {
|
|
|
|
|
data = JSON.parse(rawData);
|
|
|
|
|
} catch (e) {
|
|
|
|
|
console.warn(rawData);
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
data.challenge = Uint8Array.from(window.atob(base64url2base64(data.challenge)), (c) => c.charCodeAt(0));
|
|
|
|
|
|
|
|
|
|
if (data.allowCredentials) {
|
|
|
|
|
data.allowCredentials = data.allowCredentials.map((item) => {
|
|
|
|
|
item.id = Uint8Array.from(window.atob(base64url2base64(item.id)), (c) => c.charCodeAt(0));
|
|
|
|
|
return item;
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (data.allowCredentials && wwa_php_vars.allow_authenticator_type && wwa_php_vars.allow_authenticator_type !== 'none') {
|
|
|
|
|
for (let credential of data.allowCredentials) {
|
|
|
|
|
if (wwa_php_vars.allow_authenticator_type === 'cross-platform') {
|
|
|
|
|
credential.transports = ['usb', 'nfc', 'ble'];
|
|
|
|
|
} else if (wwa_php_vars.allow_authenticator_type === 'platform') {
|
|
|
|
|
credential.transports = ['internal'];
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Save client ID
|
|
|
|
|
const clientID = data.clientID;
|
|
|
|
|
delete data.clientID;
|
|
|
|
|
|
|
|
|
|
navigator.credentials.get({ 'publicKey': data }).then((credentialInfo) => {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_13;
|
|
|
|
|
return credentialInfo;
|
|
|
|
|
}).then((data) => {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_14;
|
|
|
|
|
const publicKeyCredential = {
|
|
|
|
|
id: data.id,
|
|
|
|
|
type: data.type,
|
|
|
|
|
rawId: arrayToBase64String(new Uint8Array(data.rawId)),
|
|
|
|
|
response: {
|
|
|
|
|
authenticatorData: arrayToBase64String(new Uint8Array(data.response.authenticatorData)),
|
|
|
|
|
clientDataJSON: arrayToBase64String(new Uint8Array(data.response.clientDataJSON)),
|
|
|
|
|
signature: arrayToBase64String(new Uint8Array(data.response.signature)),
|
|
|
|
|
userHandle: data.response.userHandle ? arrayToBase64String(new Uint8Array(data.response.userHandle)) : null
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
return publicKeyCredential;
|
|
|
|
|
}).then(JSON.stringify).then((AuthenticatorResponse) => {
|
|
|
|
|
let response = wwa_ajax();
|
|
|
|
|
response.post(`${wwa_php_vars.ajax_url}?action=wwa_auth`, `data=${encodeURIComponent(window.btoa(AuthenticatorResponse))}&type=test&remember=false&clientid=${clientID}`, (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
if (rawData === 'true') {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_16;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
updateList();
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}).catch((error) => {
|
|
|
|
|
console.warn(error);
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
})
|
|
|
|
|
} else {
|
|
|
|
|
button_dom.nextElementSibling.innerHTML = wwa_php_vars.i18n_15;
|
|
|
|
|
wwa_enable_buttons();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Update authenticator list
|
|
|
|
|
function updateList() {
|
|
|
|
|
if (document.getElementsByClassName('wwa-authenticator-list').length === 0) {
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, '?action=wwa_authenticator_list', (rawData, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
let data = rawData;
|
|
|
|
|
try {
|
|
|
|
|
data = JSON.parse(rawData);
|
|
|
|
|
} catch (e) {
|
|
|
|
|
console.warn(rawData);
|
|
|
|
|
wwa_dom('wwa-authenticator-list', (dom) => { dom.innerHTML = `<tr><td colspan="${document.getElementsByClassName('wwa-usernameless-th')[0].style.display === 'none' ? '5' : '6'}">${wwa_php_vars.i18n_17}</td></tr>` }, 'class');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
if (data.length === 0) {
|
|
|
|
|
if (wwa_php_vars.usernameless === 'true') {
|
|
|
|
|
wwa_dom('.wwa-usernameless-th, .wwa-usernameless-td', (dom) => { dom.style.display = 'table-cell' });
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('.wwa-usernameless-th, .wwa-usernameless-td', (dom) => { dom.style.display = 'none' });
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-authenticator-list', (dom) => { dom.innerHTML = `<tr><td colspan="${document.getElementsByClassName('wwa-usernameless-th')[0].style.display === 'none' ? '5' : '6'}">${wwa_php_vars.i18n_23}</td></tr>` }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-list-usernameless-tip', (dom) => { dom.innerText = '' }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-list-type-tip', (dom) => { dom.innerText = '' }, 'class');
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
let htmlStr = '';
|
|
|
|
|
let has_usernameless = false;
|
|
|
|
|
let has_disabled_type = false;
|
|
|
|
|
for (let item of data) {
|
|
|
|
|
let item_type_disabled = false;
|
|
|
|
|
if (item.usernameless) {
|
|
|
|
|
has_usernameless = true;
|
|
|
|
|
}
|
|
|
|
|
if (wwa_php_vars.allow_authenticator_type !== 'none') {
|
|
|
|
|
if (wwa_php_vars.allow_authenticator_type !== item.type) {
|
|
|
|
|
has_disabled_type = true;
|
|
|
|
|
item_type_disabled = true;
|
|
|
|
|
}
|
|
|
|
|
}
|
2024-10-09 12:44:38 +00:00
|
|
|
htmlStr += `<tr><td>${item.name}</td><td>${item.type === 'none' ? wwa_php_vars.i18n_24 : (item.type === 'platform' ? wwa_php_vars.i18n_25 : wwa_php_vars.i18n_26)}${item_type_disabled ? wwa_php_vars.i18n_35 : ''}</td><td>${item.added}</td><td>${item.last_used}</td><td class="wwa-usernameless-td">${item.usernameless ? wwa_php_vars.i18n_1 + (wwa_php_vars.usernameless === 'true' ? '' : wwa_php_vars.i18n_9) : wwa_php_vars.i18n_8}</td><td class="wwa-key-${item.key}"><a href="javascript:renameAuthenticator('${item.key}', '${item.name.replaceAll('\'', '\\\'').replaceAll(''', '\\'').replaceAll('"', '\\"')}')">${wwa_php_vars.i18n_20}</a> | <a href="javascript:removeAuthenticator('${item.key}', '${item.name.replaceAll('\'', '\\\'').replaceAll(''', '\\'').replaceAll('"', '\\"')}')">${wwa_php_vars.i18n_27}</a></td></tr>`;
|
2022-10-08 02:41:03 +00:00
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-authenticator-list', (dom) => { dom.innerHTML = htmlStr }, 'class');
|
|
|
|
|
if (has_usernameless || wwa_php_vars.usernameless === 'true') {
|
|
|
|
|
wwa_dom('.wwa-usernameless-th, .wwa-usernameless-td', (dom) => { dom.style.display = 'table-cell' });
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('.wwa-usernameless-th, .wwa-usernameless-td', (dom) => { dom.style.display = 'none' });
|
|
|
|
|
}
|
|
|
|
|
if (has_usernameless && wwa_php_vars.usernameless !== 'true') {
|
|
|
|
|
wwa_dom('wwa-authenticator-list-usernameless-tip', (dom) => { dom.innerText = wwa_php_vars.i18n_10 }, 'class');
|
|
|
|
|
wwa_dom('wwa-authenticator-list-usernameless-tip', (dom) => { dom.style.display = 'block'; }, 'class');
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('wwa-authenticator-list-usernameless-tip', (dom) => { dom.innerText = ''; dom.style.display = 'none' }, 'class');
|
|
|
|
|
}
|
|
|
|
|
if (has_disabled_type && wwa_php_vars.allow_authenticator_type !== 'none') {
|
|
|
|
|
if (wwa_php_vars.allow_authenticator_type === 'platform') {
|
|
|
|
|
wwa_dom('wwa-authenticator-list-type-tip', (dom) => { dom.innerText = wwa_php_vars.i18n_36 }, 'class');
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('wwa-authenticator-list-type-tip', (dom) => { dom.innerText = wwa_php_vars.i18n_37 }, 'class');
|
|
|
|
|
}
|
|
|
|
|
wwa_dom('wwa-authenticator-list-type-tip', (dom) => { dom.style.display = 'block'; }, 'class');
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('wwa-authenticator-list-type-tip', (dom) => { dom.innerText = ''; dom.style.display = 'none' }, 'class');
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
wwa_dom('wwa-authenticator-list', (dom) => { dom.innerHTML = `<tr><td colspan="${document.getElementsByClassName('wwa-usernameless-th')[0].style.display === 'none' ? '5' : '6'}">${wwa_php_vars.i18n_17}</td></tr>` }, 'class');
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/** Rename an authenticator
|
|
|
|
|
*
|
|
|
|
|
* @param {string} id Authenticator ID
|
|
|
|
|
* @param {string} name Current authenticator name
|
|
|
|
|
*/
|
|
|
|
|
function renameAuthenticator(id, name) {
|
|
|
|
|
let new_name = prompt(wwa_php_vars.i18n_21, name);
|
|
|
|
|
if (new_name === '') {
|
|
|
|
|
alert(wwa_php_vars.i18n_12);
|
|
|
|
|
} else if (new_name !== null && new_name !== name) {
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
wwa_dom(`wwa-key-${id}`, (dom) => { dom.innerText = wwa_php_vars.i18n_22 }, 'class');
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, `?action=wwa_modify_authenticator&id=${encodeURIComponent(id)}&name=${encodeURIComponent(new_name)}&target=rename`, (data, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
updateList();
|
|
|
|
|
} else {
|
|
|
|
|
alert(`Error: ${data}`);
|
|
|
|
|
updateList();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/** Remove an authenticator
|
|
|
|
|
*
|
|
|
|
|
* @param {string} id Authenticator ID
|
|
|
|
|
* @param {string} name Authenticator name
|
|
|
|
|
*/
|
|
|
|
|
function removeAuthenticator(id, name) {
|
|
|
|
|
if (confirm(wwa_php_vars.i18n_18 + name + (document.getElementsByClassName('wwa-authenticator-list')[0].children.length === 1 ? '\n' + wwa_php_vars.i18n_34 : ''))) {
|
|
|
|
|
wwa_dom(`wwa-key-${id}`, (dom) => { dom.innerText = wwa_php_vars.i18n_19 }, 'class');
|
|
|
|
|
let request = wwa_ajax();
|
|
|
|
|
request.get(wwa_php_vars.ajax_url, `?action=wwa_modify_authenticator&id=${encodeURIComponent(id)}&target=remove`, (data, status) => {
|
|
|
|
|
if (status) {
|
|
|
|
|
updateList();
|
|
|
|
|
} else {
|
|
|
|
|
alert(`Error: ${data}`);
|
|
|
|
|
updateList();
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
}
|
