From 39d11c2f48d3cf126e4ff2a236d14e39320e2c91 Mon Sep 17 00:00:00 2001 From: Juliusz Chroboczek Date: Wed, 10 Apr 2024 03:31:52 +0200 Subject: [PATCH] Implement form for changing passwords. --- static/change-password.css | 18 +++++++++ static/change-password.html | 33 +++++++++++++++ static/change-password.js | 80 +++++++++++++++++++++++++++++++++++++ 3 files changed, 131 insertions(+) create mode 100644 static/change-password.css create mode 100644 static/change-password.html create mode 100644 static/change-password.js diff --git a/static/change-password.css b/static/change-password.css new file mode 100644 index 0000000..3f20cfe --- /dev/null +++ b/static/change-password.css @@ -0,0 +1,18 @@ +#errormessage { + color: red; + font-weight: bold; + height: 12px; +} + +#message { + font-weight: bold; + height: 12px; +} + +label { + display: block; +} + +#passwordform { + padding: 2rem; +} diff --git a/static/change-password.html b/static/change-password.html new file mode 100644 index 0000000..78387c9 --- /dev/null +++ b/static/change-password.html @@ -0,0 +1,33 @@ + + + + Change password + + + + + + + + + + +

Change password

+ +
+ + + + + + + +
+ +

+ +

+ + + + diff --git a/static/change-password.js b/static/change-password.js new file mode 100644 index 0000000..8125464 --- /dev/null +++ b/static/change-password.js @@ -0,0 +1,80 @@ +// Copyright (c) 2020 by Juliusz Chroboczek. + +// Permission is hereby granted, free of charge, to any person obtaining a copy +// of this software and associated documentation files (the "Software"), to deal +// in the Software without restriction, including without limitation the rights +// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +// copies of the Software, and to permit persons to whom the Software is +// furnished to do so, subject to the following conditions: +// +// The above copyright notice and this permission notice shall be included in +// all copies or substantial portions of the Software. +// +// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +// THE SOFTWARE. + +'use strict'; + +document.getElementById('passwordform').onsubmit = async function(e) { + e.preventDefault(); + + let parms = new URLSearchParams(window.location.search); + let group = parms.get('group'); + if(!group) { + displayError("Couldn't determine group"); + return; + } + let user = parms.get('username'); + if(!user) { + displayError("Couldn't determine username"); + return; + } + + let old1 = document.getElementById('old1').value; + let old2 = document.getElementById('old2').value; + if(old1 !== old2) { + displayError("Passwords don't match."); + return; + } + + try { + await doit(group, user, old1, document.getElementById('new').value); + document.getElementById('old1').value = ''; + document.getElementById('old2').value = ''; + document.getElementById('new').value = ''; + displayError(null); + document.getElementById('message').textContent = + 'Password successfully changed.'; + } catch(e) { + displayError(e.toString()); + } +} + +async function doit(group, user, old, pw) { + let creds = btoa(user + ":" + old); + let r = await fetch(`/galene-api/0/.groups/${group}/.users/${user}/.password`, + { + method: 'POST', + body: pw, + credentials: 'omit', + headers: { + 'Authorization': `Basic ${creds}` + } + }); + if(!r.ok) { + if(r.status === 401) + throw new Error('Permission denied'); + else + throw new Error(`The server said: ${r.status} ${r.statusText}`); + return; + } +} + +function displayError(message) { + document.getElementById('errormessage').textContent = (message || ''); +}