/*

 * AJAX-based intelligent login interface

 */

/*

 * FRONTEND

 */

/**

 * Performs a logon as a regular member.

 */

window.ajaxLogonToMember = function()

{

  // IE <6 pseudo-compatibility

  if ( KILL_SWITCH )

    return true;

  if ( auth_level >= USER_LEVEL_MEMBER )

    return true;

  ajaxLoginInit(function(k)

    {

      if ( on_main_page && main_page_members != physical_title )

      {

        window.location = makeUrl(main_page_members);

      }

      else

      {

        window.location.reload();

      }

    }, USER_LEVEL_MEMBER);

}

/**

 * Authenticates to the highest level the current user is allowed to go to.

 */

window.ajaxLogonToElev = function()

{

  if ( auth_level == user_level )

    return true;

  ajaxLoginInit(function(k)

    {

      ENANO_SID = k;

      var url = String(' ' + window.location).substr(1);

      url = append_sid(url);

      window.location = url;

    }, user_level);

}

/*

 * BACKEND

 */

/**

 * Holding object for various AJAX authentication information.

 * @var object

 */

var logindata = {};

/**

 * Path to the image used to indicate loading progress

 * @var string

 */

if ( !ajax_login_loadimg_path )

  var ajax_login_loadimg_path = false;

if ( !ajax_login_successimg_path )

  var ajax_login_successimg_path = false;

if ( !ajax_login_lockimg_path )

  var ajax_login_lockimg_path = false;

/**

 * Status variables

 * @var int

 */

var AJAX_STATUS_LOADING_KEY = 1;

var AJAX_STATUS_GENERATING_KEY = 2;

var AJAX_STATUS_LOGGING_IN = 3;

var AJAX_STATUS_SUCCESS = 4;

var AJAX_STATUS_ERROR = 5;

var AJAX_STATUS_DESTROY = 65535;

/**

 * State constants

 * @var int

 */

var AJAX_STATE_EARLY_INIT = 1;

var AJAX_STATE_LOADING_KEY = 2;

/**

 * Switch to decide if DiffieHellman shows a "browser incompatible" error

 * @var bool

 */

var ajax_login_prevent_dh = ( IE && !IE_8 ) || ( is_iPhone && !is_iPhone_3 );

/**

 * Performs the AJAX request to get an encryption key and from there spawns the login form.

 * @param function The function that will be called once authentication completes successfully.

 * @param int The security level to authenticate at - see http://docs.enanocms.org/Help:Appendix_B

 */

window.ajaxLoginInit = function(call_on_finish, user_level)

{

  load_component(['messagebox', 'flyin', 'fadefilter', 'jquery', 'jquery-ui', 'l10n', 'crypto']);

  logindata = {};

  var title = ( user_level > USER_LEVEL_MEMBER ) ? $lang.get('user_login_ajax_prompt_title_elev') : $lang.get('user_login_ajax_prompt_title');

  logindata.mb_object = new MessageBox(MB_OKCANCEL | MB_ICONLOCK, title, '');

  //

  // Cancel function: called when the "Cancel" button is clicked

  //

  logindata.mb_object.onclick['Cancel'] = function()

  {

    // Hide the error message, if any

    $('ajax_login_error_box').remove();

    // Hide the captcha, if any

    if ( document.getElementById('autoCaptcha') )

    {

      var to = fly_out_top(document.getElementById('autoCaptcha'), false, true);

      setTimeout(function() {

          var d = document.getElementById('autoCaptcha');

          d.parentNode.removeChild(d);

        }, to);

    }

    // Ask the server to delete the encryption key we're using

    ajaxLoginPerformRequest({

        mode: 'clean_key',

        key_aes: logindata.key_aes,

        key_dh: logindata.key_dh

    });

  };

  // Clicking OK will not cause the box to destroy, as this function returns true.

  logindata.mb_object.onbeforeclick['OK'] = function()

  {

    // Just call the submitter and let it take care of everything

    ajaxLoginSubmitForm();

    return true;

  }

  // Fetch the inner content area

  logindata.mb_inner = document.getElementById('messageBox').getElementsByTagName('div')[0];

  // Initialize state

  logindata.showing_status = false;

  logindata.user_level = user_level;

  logindata.successfunc = call_on_finish;

  // Build the "loading" window

  ajaxLoginSetStatus(AJAX_STATUS_LOADING_KEY);

  // Request the key

  ajaxLoginPerformRequest({ mode: 'getkey' });

}

/**

 * For compatibility only. Really, folks, it's ajaxLoginInit. If you need a

 * mnemonic device, use "two 'in's."

 */

window.ajaxLogonInit = function(call_on_finish, user_level)

{

  return ajaxLoginInit(call_on_finish, user_level);

}

/**

 * Sets the contents of the AJAX login window to the appropriate status message.

 * @param int One of AJAX_STATUS_* constants

 */

window.ajaxLoginSetStatus = function(status)

{

  if ( !logindata.mb_inner )

    return false;

  if ( logindata.showing_status )

  {

    var div = document.getElementById('ajax_login_status');

    if ( div )

      logindata.mb_inner.removeChild(div);

  }

  switch(status)

  {

    case AJAX_STATUS_LOADING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_fetching_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_GENERATING_KEY:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_generating_key');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_lockimg_path ) ? ajax_login_lockimg_path : scriptPath + '/images/lock48.png';

      div.appendChild(img);

      // Another coupla brs

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The link to the full login form

      var small = document.createElement('small');

      small.innerHTML = $lang.get('user_login_ajax_link_fullform_dh', { link_full_form: makeUrlNS('Special', 'Login/' + title) });

      div.appendChild(small);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_LOGGING_IN:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_loggingin');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_loadimg_path ) ? ajax_login_loadimg_path : scriptPath + '/images/loading-big.gif';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_SUCCESS:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_success_short');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/check.png';

      div.appendChild(img);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    case AJAX_STATUS_ERROR:

      // Create the status div

      var div = document.createElement('div');

      div.id = 'ajax_login_status';

      div.style.marginTop = '10px';

      div.style.textAlign = 'center';

      // The circly ball ajaxy image + status message

      var status_msg = $lang.get('user_login_ajax_err_crypto');

      // Insert the status message

      div.appendChild(document.createTextNode(status_msg));

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      var img = document.createElement('img');

      img.src = ( ajax_login_successimg_path ) ? ajax_login_successimg_path : scriptPath + '/images/checkbad.png';

      div.appendChild(img);

      // Append a br or two to space things properly

      div.appendChild(document.createElement('br'));

      div.appendChild(document.createElement('br'));

      // The circly ball ajaxy image + status message

      var detail_msg = $lang.get('user_login_ajax_err_crypto_details');

      var full_link = $lang.get('user_login_ajax_err_crypto_link');

      var link = document.createElement('a');

      link.href = makeUrlNS('Special', 'Login/' + title, 'level=' + logindata.user_level, true);

      link.appendChild(document.createTextNode(full_link));

      var span = document.createElement('span');

      span.style.fontSize = 'smaller';

      // Insert the message

      span.appendChild(document.createTextNode(detail_msg + ' '));

      span.appendChild(link);

      div.appendChild(span);

      // Insert the entire message into the login window

      logindata.mb_inner.innerHTML = '';

      logindata.mb_inner.appendChild(div);

      break;

    default:

      eval(setHook('login_set_status'));

      break;

    case AJAX_STATUS_DESTROY:

    case null:

    case undefined:

      logindata.showing_status = false;

      return;

      break;

  }

  logindata.showing_status = true;

}

/**

 * Performs an AJAX logon request to the server and calls ajaxLoginProcessResponse() on the result.

 * @param object JSON packet to send

 * @param function Optional function to call on the response as well.

 */

window.ajaxLoginPerformRequest = function(json, _hookfunc)

{

  json = toJSONString(json);

  json = ajaxEscape(json);

  var hookfunc = typeof(_hookfunc) == 'function' ? _hookfunc : false;

  ajaxPost(makeUrlNS('Special', 'Login/action.json'), 'r=' + json, function(ajax)

    {

      if ( ajax.readyState == 4 && ajax.status == 200 )

      {

        // parse response

        var response = String(ajax.responseText + '');

        if ( !check_json_response(response) )

        {

          handle_invalid_json(response);

          return false;

        }

        response = parseJSON(response);

        ajaxLoginProcessResponse(response, hookfunc);

      }

    }, true);

}

/**

 * Processes a response from the login server

 * @param object JSON response