Edouard Vanbelle
39 lines
1.4 KiB
JavaScript
39 lines
1.4 KiB
JavaScript
// Extract token from URL path and set form action
|
|
var pathParts = window.location.pathname.split('/');
|
|
var token = pathParts[pathParts.length - 1];
|
|
// Validate token is hex-only to prevent injection
|
|
if (!/^[0-9a-fA-F]+$/.test(token)) {
|
|
document.body.innerHTML = '<p>Invalid session token.</p>';
|
|
throw new Error('Invalid token format');
|
|
}
|
|
document.getElementById('login-flow-form').action = `/login/v2/flow/${token}`;
|
|
|
|
// Check if OIDC is available and configure SSO button
|
|
(async () => {
|
|
try {
|
|
const resp = await fetch('/api/auth/oidc/providers');
|
|
if (!resp.ok) return;
|
|
const info = await resp.json();
|
|
if (!info.enabled) return;
|
|
|
|
// Show OIDC section
|
|
document.getElementById('oidc-section').classList.remove('hidden');
|
|
|
|
// Update button text with provider name
|
|
const btn = document.getElementById('oidc-button');
|
|
btn.textContent = `Sign in with ${info.provider_name || 'SSO'}`;
|
|
|
|
// If password login is disabled, hide the password form
|
|
if (!info.password_login_enabled) {
|
|
document.getElementById('login-flow-form').style.display = 'none';
|
|
}
|
|
|
|
// SSO button redirects to the OIDC flow for this NC token
|
|
btn.addEventListener('click', () => {
|
|
window.location.href = `/login/v2/flow/${token}/oidc`;
|
|
});
|
|
} catch (_e) {
|
|
// OIDC not available — silently keep password-only mode
|
|
}
|
|
})();
|