From d31fe1e9a4bf95ebbd651a6e834d94e59118c968 Mon Sep 17 00:00:00 2001
From: absurdo <antonio.delarosa@salirdelhoyo.com>
Date: Fri, 21 Jul 2023 10:50:40 +0200
Subject: [PATCH] Fixes in double auth in admin

---
 .../modules/admin/templates/login.phtml       |  4 +
 .../modules/admin/templates/need_auth.phtml   | 80 +++++++++++++++++++
 2 files changed, 84 insertions(+)
 create mode 100644 paramecio2/modules/admin/templates/need_auth.phtml

diff --git a/paramecio2/modules/admin/templates/login.phtml b/paramecio2/modules/admin/templates/login.phtml
index f8709c4..4ee5ce7 100644
--- a/paramecio2/modules/admin/templates/login.phtml
+++ b/paramecio2/modules/admin/templates/login.phtml
@@ -19,6 +19,8 @@
             
                 $('#loading').show();
                 
+                $('#login_submit').prop('disabled', true);
+                
                 data_form={'username': $('#username_form').val(), 'password': $('#password_form').val(), 'csrf_token': $("#csrf_token").val()};
             
                 if($('#remember_login:checked').val())
@@ -43,6 +45,8 @@
                     }
                     else
                     {
+                     
+                        $('#login_submit').prop('disabled', false);
                         
                         //$('#csrf_token').val(data.csrf_token);
                         
diff --git a/paramecio2/modules/admin/templates/need_auth.phtml b/paramecio2/modules/admin/templates/need_auth.phtml
new file mode 100644
index 0000000..73fa2ce
--- /dev/null
+++ b/paramecio2/modules/admin/templates/need_auth.phtml
@@ -0,0 +1,80 @@
+<%inherit file="login.phtml"/>
+<%block name="title">${lang('admin', 'login', 'Paramecio Login')}</%block>
+<%block name="content">
+<form id="login">
+    <div id="title">
+        ${lang('admin', 'login', 'Paramecio Login')}
+    </div>
+    <div class="form">
+        <p align="center">${lang('admin', 'check_your_email', 'Check your email for get instructions for complete login with double auth or')} <a href="${url_for('.logout')}">logout</a> and login again with other user</p>
+        <p><label>${lang('admin', 'code', 'Code')} *</label><input type="text" class="" name="code" id="code_form" value="" /> <span class="error" id="code_error"></span></p>
+    </div>
+    <div id="submit_block">
+        <input type="submit" value="${lang('common', 'send_code', 'Send code')}" class="submit" id="code_submit"/>
+        <span id="loading">&nbsp;</span>
+    </div>
+</form>
+</%block>
+<%block name="ajax">
+<script language="javascript">
+    $(document).ready( function () {
+    
+        $('#code_submit').click( function () {
+            
+            $('#code_submit').prop('disabled', true);
+        
+            $('#loading').show();
+            
+            data_form={'code': $('#code_form').val(), 'csrf_token': $("#csrf_token").val()};
+            
+            $.ajax({
+            url: "${url_for('.auth_check')}",
+            method: "POST",
+            dataType: "json",
+            data: data_form,
+            error: function(jqXHR, textStatus, errorThrown ) {
+                
+                alert(textStatus);
+                $('#code_submit').prop('disabled', false);
+                
+            }
+            }).done(function(data) {
+                
+                if(data.error==0)
+                {
+                    
+                    //location.reload()
+                    location.href="${url_for('.admin')}";
+                
+                }
+                else
+                {
+                    $('#code_submit').prop('disabled', true);
+                    
+                    // Firefox have a horrible and stupid bug and you need attr for set de new csrf_token
+                    
+                    $('#csrf_token').attr('value', data.csrf_token);
+                
+                    $('#loading').hide('slow');
+
+                    if(data.hasOwnProperty('disable')) {
+                        
+                        $('#code_error').html("${lang('common', 'error_disabled', 'Error, your user is disabled, you need support of web administration')}");
+                        
+                    } else {
+
+                        $('#code_error').html("${lang('common', 'error_wrong_code', 'Error, wrong code')}");
+                        
+                    }
+                    
+                }
+            
+            });
+            
+            return false;
+        
+        });
+    
+    });
+</script>
+</%block>