PageSourceSearch

https://merasharebazaar.com/reset-password

html merasharebazaar.com collected 2026-10-08 01:35:18 UTC 31,328 bytes, 362 lines download raw bytes

1<!DOCTYPE html>
2<html lang="en-gb">
3<head>
4  <meta charset="utf-8">
5  <meta http-equiv="X-UA-Compatible" content="IE=edge">
6  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0">
7  <meta name="theme-color" content="#F5D76E"/>
8  <meta http-equiv="Referrer-Policy" content="same-origin">
9  <title>mail.fastuc24.com - mail UI</title>
10
11  <link rel="stylesheet" href="/cache/34260ff0091bc6bb69163f8958b6959e8b27c2a8.css">
12  
12<script>
13    // check if darkmode is preferred by OS or set by localStorage
14    if (window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches && localStorage.getItem("mailcow_theme") !== "light" ||
15        localStorage.getItem("mailcow_theme") === "dark") {
16      var head  = document.getElementsByTagName('head')[0];
17      var link  = document.createElement('link');
18      link.id   = 'dark-mode-theme';
19      link.rel  = 'stylesheet';
20      link.type = 'text/css';
21      link.href = '/css/themes/mailcow-darkmode.css';
22      head.appendChild(link);
23    }
24  </script>
24
25
26  <link rel="shortcut icon" href="/favicon.png" type="image/png">
27  <link rel="icon" href="/favicon.png" type="image/png">
28</head>
29<body>
30<div class="overlay"></div>
31
32<form action="/" method="post" id="logout"><input type="hidden" name="logout"></form>
33
34
35<div class="container flex-grow-1 my-4">
36<div class="row mb-4" style="margin-top: 60px">
37  <div class="col-12 col-md-7 col-lg-6 col-xl-5 ms-auto me-auto">
38    <div class="card">
39      <div class="card-header d-flex align-items-center">
40        <i class="bi bi-person-fill me-2"></i> Reset Password
41        <div class="ms-auto form-check form-switch my-auto d-flex align-items-center">
42          <label class="form-check-label"><i class="bi bi-moon-fill"></i></label>
43          <input class="form-check-input ms-2" type="checkbox" id="dark-mode-toggle">
44        </div>
45      </div>
46      <div class="card-body">
47        <div class="text-center mailcow-logo mb-4">
48          <img class="main-logo" src="/img/cow_mailcow.svg" alt="mailcow">
49          <img class="main-logo-dark" src="/img/cow_mailcow.svg" alt="mailcow-logo-dark">
50        </div>
51        <legend>mail.fastuc24.com - mail UI</legend><hr />
52
53                <form method="post" autofill="off">
54          <input type="text" autocorrect="off" autocapitalize="none" class="form-control mb-2" name="username" placeholder="Username" />
55
56          <div class="d-flex justify-content-end mt-4" style="position: relative">
57            <button type="submit" class="btn btn-xs-lg d-block d-sm-inline btn-success" name="pw_reset_request">Request password change</button>
58          </div>
59        </form>
60        
61
62      </div>
63    </div>
64  </div>
65</div>
66
67<script type='text/javascript'>
68  var csrf_token = '828ea0a22f51a2874e35a83b87b163e1f0001f78a83f104574b46cdfeb427814';
69  var mailcow_cc_username = '';
70</script>
70
71</div>
72
73<div id="ConfirmDeleteModal" class="modal fade" role="dialog">
74  <div class="modal-dialog">
75    <div class="modal-content">
76      <div class="modal-header">
77        <h3 class="modal-title">Confirm deletion</h3>
78        <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
79      </div>
80      <div class="modal-body">
81        <p id="DeleteText">Please confirm your changes to the following object id</p>
82        <ul id="ItemsToDelete"></ul>
83        <hr>
84        <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-danger" id="IsConfirmed">Delete now</button>
85        <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-secondary" id="isCanceled">Cancel</button>
86      </div>
87    </div>
88  </div>
89</div>
90<!-- version modal -->
91<div class="modal fade" id="showVersionModal" tabindex="-1" role="dialog" aria-hidden="true">
92  <div class="modal-dialog modal-lg">
93    <div class="modal-content">
94      <div class="modal-header">
95        <h5 class="modal-title"></h5>
96        <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
97      </div>
98      <div class="modal-body d-flex flex-column mt-2 p-4">
99        <div class="spinner-border mx-auto" role="status">
100          <span class="visually-hidden">Loading...</span>
101        </div>
102      </div>
103    </div>
104  </div>
105</div><!-- version modal -->
106
107<script src="/cache/9b6dc74cc0c459244f628fde5e6d65c05e7270bd.js"></script>
vendor: 1 bytes, line 107
107
108<script>
109  var lang_footer = {"cancel":"Cancel","confirm_delete":"Confirm deletion","delete_now":"Delete now","delete_these_items":"Please confirm your changes to the following object id","hibp_check":"Check against haveibeenpwned.com","hibp_nok":"Matched! This is a potentially dangerous password!","hibp_ok":"No match found.","loading":"Please wait...","nothing_selected":"Nothing selected","restart_container":"Restart container","restart_container_info":"<b>Important:<\/b> A graceful restart may take a while to complete, please wait for it to finish.","restart_now":"Restart now","restarting_container":"Restarting container, this may take a while"};
110  var lang_acl = {"alias_domains":"Add alias domains","app_passwds":"Manage app passwords","bcc_maps":"BCC maps","delimiter_action":"Delimiter action","domain_desc":"Change domain description","domain_relayhost":"Change relayhost for a domain","eas_reset":"Reset EAS devices","extend_sender_acl":"Allow to extend sender ACL by external addresses","filters":"Filters","login_as":"Login as mailbox user","mailbox_relayhost":"Change relayhost for a mailbox","prohibited":"Prohibited by ACL","protocol_access":"Change protocol access","pushover":"Pushover","pw_reset":"Allow to reset mailcow user password","quarantine":"Quarantine actions","quarantine_attachments":"Quarantine attachments","quarantine_category":"Change quarantine notification category","quarantine_notification":"Change quarantine notifications","ratelimit":"Rate limit","recipient_maps":"Recipient maps","smtp_ip_access":"Change allowed hosts for SMTP","sogo_access":"Allow management of SOGo access","sogo_profile_reset":"Reset SOGo profile","spam_alias":"Temporary aliases","spam_policy":"Denylist\/Allowlist","spam_score":"Spam score","syncjobs":"Sync jobs","tls_policy":"TLS policy","unlimited_quota":"Unlimited quota for mailboxes"};
111  var lang_tfa = {"authenticators":"Authenticators","api_register":"%s uses the Yubico Cloud API. Please get an API key for your key <a href=\"https:\/\/upgrade.yubico.com\/getapikey\/\" target=\"_blank\">here<\/a>","confirm":"Confirm","confirm_totp_token":"Please confirm your changes by entering the generated token","delete_tfa":"Disable TFA","disable_tfa":"Disable TFA until next successful login","force_tfa":"Force 2FA enrollment at login","force_tfa_info":"The user will be required to set up two-factor authentication before accessing the panel.","setup_title":"Two-Factor Authentication Required","setup_required":"Your account requires two-factor authentication. Please set up a 2FA method to continue.","cancel_setup":"Cancel and log out","enter_qr_code":"Your TOTP code if your device cannot scan QR codes","error_code":"Error code","init_webauthn":"Initializing, please wait...","key_id":"An identifier for your Device","key_id_totp":"An identifier for your key","none":"Deactivate","reload_retry":"- (reload browser if the error persists)","scan_qr_code":"Please scan the following code with your authenticator app or enter the code manually.","select":"Please select","set_tfa":"Set two-factor authentication method","start_webauthn_validation":"Start validation","tfa":"Two-factor authentication","tfa_token_invalid":"TFA token invalid","totp":"Time-based OTP (Google Authenticator, Authy, etc.)","u2f_deprecated":"It seems that your Key was registered using the deprecated U2F method. We will deactivate Two-Factor-Authenticaiton for you and delete your Key.","u2f_deprecated_important":"Please register your Key in the admin panel with the new WebAuthn method.","webauthn":"WebAuthn authentication","waiting_usb_auth":"<i>Waiting for USB device...<\/i><br><br>Please tap the button on your USB device now.","waiting_usb_register":"<i>Waiting for USB device...<\/i><br><br>Please enter your password above and confirm your registration by tapping the button on your USB device.","yubi_otp":"Yubico OTP authentication"};
112  var lang_fido2 = {"confirm":"Confirm","fido2_auth":"Login with FIDO2","fido2_success":"Device successfully registered","fido2_validation_failed":"Validation failed","fn":"Friendly name","known_ids":"Known IDs","none":"Disabled","register_status":"Registration status","rename":"Rename","set_fido2":"Register FIDO2 device","set_fido2_touchid":"Register Touch ID on Apple M1","set_fn":"Set friendly name","start_fido2_val
112idation":"Start FIDO2 validation"};
113  var lang_success = {"acl_saved":"ACL for object %s saved","admin_added":"Administrator %s has been added","admin_api_modified":"Changes to API have been saved","admin_modified":"Changes to administrator have been saved","admin_removed":"Administrator %s has been removed","alias_added":"Alias address %s (%d) has been added","alias_domain_removed":"Alias domain %s has been removed","alias_modified":"Changes to alias address %s have been saved","alias_removed":"Alias %s has been removed","aliasd_added":"Added alias domain %s","aliasd_modified":"Changes to alias domain %s have been saved","app_links":"Saved changes to app links","app_passwd_added":"Added new app password","app_passwd_removed":"Removed app password ID %s","bcc_deleted":"BCC map entries deleted: %s","bcc_edited":"BCC map entry %s edited","bcc_saved":"BCC map entry saved","cors_headers_edited":"CORS settings have been saved","custom_login_modified":"Login customisation was saved successfully","db_init_complete":"Database initialization completed","delete_filter":"Deleted filters ID %s","delete_filters":"Deleted filters: %s","deleted_syncjob":"Deleted syncjob ID %s","deleted_syncjobs":"Deleted syncjobs: %s","dkim_added":"DKIM key %s has been saved","domain_add_dkim_available":"A DKIM key did already exist","dkim_duplicated":"DKIM key for domain %s has been copied to %s","dkim_removed":"DKIM key %s has been removed","domain_added":"Added domain %s","domain_admin_added":"Domain administrator %s has been added","domain_admin_modified":"Changes to domain administrator %s have been saved","domain_admin_removed":"Domain administrator %s has been removed","domain_footer_modified":"Changes to domain footer %s have been saved","domain_modified":"Changes to domain %s have been saved","domain_removed":"Domain %s has been removed","dovecot_restart_success":"Dovecot was restarted successfully","eas_reset":"ActiveSync devices for user %s were reset","f2b_banlist_refreshed":"Banlist ID has been successfully refreshed.","f2b_modified":"Changes to Fail2ban parameters have been saved","forwarding_host_added":"Forwarding host %s has been added","forwarding_host_removed":"Forwarding host %s has been removed","global_filter_written":"Filter was successfully written to file","hash_deleted":"Hash deleted","iam_test_connection":"Connection successful","ip_check_opt_in_modified":"IP check was saved successfully","item_deleted":"Item %s successfully deleted","item_released":"Item %s released","items_deleted":"Item %s successfully deleted","items_released":"Selected items were released","learned_ham":"Successfully learned ID %s as ham","license_modified":"Changes to license have been saved","logged_in_as":"Logged in as %s","mailbox_added":"Mailbox %s has been added","mailbox_modified":"Changes to mailbox %s have been saved","mailbox_removed":"Mailbox %s has been removed","mailbox_renamed":"Mailbox was renamed from %s to %s","nginx_reloaded":"Nginx was reloaded","object_modified":"Changes to object %s have been saved","password_policy_saved":"Password policy was saved successfully","password_changed_success":"Password was successfully changed","pushover_settings_edited":"Pushover settings successfully set, please verify credentials.","qlearn_spam":"Message ID %s was learned as spam and deleted","queue_command_success":"Queue command completed successfully","recipient_map_entry_deleted":"Recipient map ID %s has been deleted","recipient_map_entry_saved":"Recipient map entry \"%s\" has been saved","recovery_email_sent":"Recovery email sent to %s","relayhost_added":"Map entry %s has been added","relayhost_removed":"Map entry %s has been removed","reset_main_logo":"Reset to default logo","resource_added":"Resource %s has been added","resource_modified":"Changes to mailbox %s have been saved","resource_removed":"Resource %s has been removed","rl_saved":"Rate limit for object %s saved","rspamd_ui_pw_set":"Rspamd UI password successfully set","saved_settings":"Saved settings","settings_map_added":"Added settings map entry","settings_map_removed":"Removed settings map ID %s","sogo_profile_reset"
113:"SOGo profile for user %s was reset","template_added":"Added template %s","template_modified":"Changes to template %s have been saved","template_removed":"Template ID %s has been deleted","tls_policy_map_entry_deleted":"TLS policy map ID %s has been deleted","tls_policy_map_entry_saved":"TLS policy map entry \"%s\" has been saved","ui_texts":"Saved changes to UI texts","upload_success":"File uploaded successfully","verified_fido2_login":"Verified FIDO2 login","verified_totp_login":"Verified TOTP login","verified_webauthn_login":"Verified WebAuthn login","verified_yotp_login":"Verified Yubico OTP login"};
114  var lang_danger = {"access_denied":"Access denied or invalid form data","tfa_removal_blocked":"Two-factor authentication cannot be removed because it is required for your account.","alias_domain_invalid":"Alias domain %s is invalid","alias_empty":"Alias address must not be empty","alias_goto_identical":"Alias and goto address must not be identical","alias_invalid":"Alias address %s is invalid","aliasd_targetd_identical":"Alias domain must not be equal to target domain: %s","aliases_in_use":"Max. aliases must be greater or equal to %d","app_name_empty":"App name cannot be empty","app_passwd_id_invalid":"App password ID %s invalid","authsource_in_use":"The identity provider cannot be changed or deleted as it is currently in use by one or more users.","bcc_empty":"BCC destination cannot be empty","bcc_exists":"A BCC map %s exists for type %s","bcc_must_be_email":"BCC destination %s is not a valid email address","comment_too_long":"Comment too long, max 160 chars allowed","cors_invalid_method":"Invalid Allow-Method specified","cors_invalid_origin":"Invalid Allow-Origin specified","defquota_empty":"Default quota per mailbox must not be 0.","demo_mode_enabled":"Demo Mode is enabled","description_invalid":"Resource description for %s is invalid","dkim_domain_or_sel_exists":"A DKIM key for \"%s\" exists and will not be overwritten","dkim_domain_or_sel_invalid":"DKIM domain or selector invalid: %s","domain_cannot_match_hostname":"Domain cannot match hostname","domain_exists":"Domain %s already exists","domain_invalid":"Domain name is empty or invalid","domain_not_empty":"Cannot remove non-empty domain %s","domain_not_found":"Domain %s not found","domain_quota_m_in_use":"Domain quota must be greater or equal to %s MiB","extended_sender_acl_denied":"missing ACL to set external sender addresses","extra_acl_invalid":"External sender address \"%s\" is invalid","extra_acl_invalid_domain":"External sender \"%s\" uses an invalid domain","fido2_verification_failed":"FIDO2 verification failed: %s","file_open_error":"File cannot be opened for writing","filter_type":"Wrong filter type","from_invalid":"Sender must not be empty","generic_server_error":"An unexpected server error occurred. Please contact your administrator.","global_filter_write_error":"Could not write filter file: %s","global_map_invalid":"Global map ID %s invalid","global_map_write_error":"Could not write global map ID %s: %s","goto_empty":"An alias address must contain at least one valid goto address","goto_invalid":"Goto address %s is invalid","ham_learn_error":"Ham learn error: %s","iam_test_connection":"Connection failed","imagick_exception":"Error: Imagick exception while reading image","img_dimensions_exceeded":"Image exceeds the maximum image size","img_invalid":"Cannot validate image file","img_size_exceeded":"Image exceeds the maximum file size","img_tmp_missing":"Cannot validate image file: Temporary file not found","invalid_bcc_map_type":"Invalid BCC map type","invali
114d_destination":"Destination format \"%s\" is invalid","invalid_filter_type":"Invalid filter type","invalid_host":"Invalid host specified: %s","invalid_mime_type":"Invalid mime type","invalid_nexthop":"Next hop format is invalid","invalid_nexthop_authenticated":"Next hop exists with different credentials, please update the existing credentials for this next hop first.","invalid_recipient_map_new":"Invalid new recipient specified: %s","invalid_recipient_map_old":"Invalid original recipient specified: %s","invalid_reset_token":"Invalid reset token","ip_list_empty":"List of allowed IPs cannot be empty","is_alias":"%s is already known as an alias address","is_alias_or_mailbox":"%s is already known as an alias, a mailbox or an alias address expanded from an alias domain.","is_spam_alias":"%s is already known as a temporary alias address (spam alias address)","last_key":"Last key cannot be deleted, please deactivate TFA instead.","login_failed":"Login failed","mailbox_defquota_exceeds_mailbox_maxquota":"Default quota exceeds max quota limit","mailbox_invalid":"Mailbox name is invalid","mailbox_quota_exceeded":"Quota exceeds the domain limit (max. %d MiB)","mailbox_quota_exceeds_domain_quota":"Max. quota exceeds domain quota limit","mailbox_quota_left_exceeded":"Not enough space left (space left: %d MiB)","mailboxes_in_use":"Max. mailboxes must be greater or equal to %d","malformed_username":"Malformed username","map_content_empty":"Map content cannot be empty","max_age_invalid":"Max age %s is invalid","max_alias_exceeded":"Max. aliases exceeded","max_mailbox_exceeded":"Max. mailboxes exceeded (%d of %d)","max_quota_in_use":"Mailbox quota must be greater or equal to %d MiB","maxquota_empty":"Max. quota per mailbox must not be 0.","mode_invalid":"Mode %s is invalid","mx_invalid":"MX record %s is invalid","mysql_error":"MySQL error: %s","network_host_invalid":"Invalid network or host: %s","next_hop_interferes":"%s interferes with nexthop %s","next_hop_interferes_any":"An existing next hop interferes with %s","nginx_reload_failed":"Nginx reload failed: %s","no_user_defined":"No user defined","object_exists":"Object %s already exists","object_is_not_numeric":"Value %s is not numeric","password_complexity":"Password does not meet the policy","password_empty":"Password must not be empty","password_mismatch":"Confirmation password does not match","password_reset_invalid_user":"Mailbox not found or no recovery email is set","password_reset_na":"The password recovery is currently unavailable. Please contact your administrator.","policy_list_from_exists":"A record with given name exists","policy_list_from_invalid":"Record has invalid format","private_key_error":"Private key error: %s","pushover_credentials_missing":"Pushover token and or key missing","pushover_key":"Pushover key has a wrong format","pushover_token":"Pushover token has a wrong format","quarantine_category_invalid":"Quarantine category must be one of: add_header, reject, all","quota_not_0_not_numeric":"Quota must be numeric and >= 0","recipient_map_entry_exists":"A Recipient map entry \"%s\" exists","recovery_email_failed":"Could not send a recovery email. Please contact your administrator.","redis_error":"Redis error: %s","relayhost_invalid":"Map entry %s is invalid","release_send_failed":"Message could not be released: %s","required_data_missing":"Required data %s is missing","reset_f2b_regex":"Regex filter could not be reset in time, please try again or wait a few more seconds and reload the website.","reset_token_limit_exceeded":"Reset token limit has been exceeded. Please try again later.","resource_invalid":"Resource name %s is invalid","rl_timeframe":"Rate limit time frame is incorrect","rspamd_ui_pw_length":"Rspamd UI password should be at least 6 chars long","script_empty":"Script cannot be empty","sender_acl_invalid":"Sender ACL value %s is invalid","set_acl_failed":"Failed to set ACL","settings_map_invalid":"Settings map ID %s invalid","sieve_error":"Sieve parser error: %s","spam_learn_error":"Spam learn error: %s","subject_empty":"Subject must not be empty","target_domain_invali
114d":"Target domain %s is invalid","targetd_not_found":"Target domain %s not found","targetd_relay_domain":"Target domain %s is a relay domain","template_exists":"Template %s already exists","template_id_invalid":"Template ID %s invalid","template_name_invalid":"Template name invalid","temp_error":"Temporary error","text_empty":"Text must not be empty","tfa_token_invalid":"TFA token invalid","tls_policy_map_dest_invalid":"Policy destination is invalid","tls_policy_map_entry_exists":"A TLS policy map entry \"%s\" exists","tls_policy_map_parameter_invalid":"Policy parameter is invalid","to_invalid":"Recipient must not be empty","totp_verification_failed":"TOTP verification failed","transport_dest_exists":"Transport destination \"%s\" exists","webauthn_verification_failed":"WebAuthn verification failed: %s","webauthn_authenticator_failed":"The selected authenticator was not found","webauthn_publickey_failed":"No public key was stored for the selected authenticator","webauthn_username_failed":"The selected authenticator belongs to another account","unknown":"An unknown error occurred","unknown_tfa_method":"Unknown TFA method","unlimited_quota_acl":"Unlimited quota prohibited by ACL","username_invalid":"Username %s cannot be used","validity_missing":"Please assign a period of validity","value_missing":"Please provide all values","version_invalid":"Version %s is invalid","yotp_verification_failed":"Yubico OTP verification failed: %s"};
115  var docker_timeout = 60 * 1000;
116  var mailcow_cc_role = '';
117    var mailcow_info = {
118    version_tag: '',
119    last_version_tag: '',
120    updatedAt: '',
121    project_url: '',
122    project_owner: '',
123    project_repo: '',
124    branch: ''
125  };
126  
127$(window).scroll(function() {
128  sessionStorage.scrollTop = $(this).scrollTop();
129});
130// Select language and reopen active URL without POST
131function setLang(sel) {
132  $.post( '\/reset\u002Dpassword', {lang: sel} );
133  window.location.href = window.location.pathname + window.location.search;
134}
135// FIDO2 functions
136function arrayBufferToBase64(buffer) {
137  let binary = '';
138  let bytes = new Uint8Array(buffer);
139  let len = bytes.byteLength;
140  for (let i = 0; i < len; i++) {
141    binary += String.fromCharCode( bytes[ i ] );
142  }
143  return window.btoa(binary);
144}
145function recursiveBase64StrToArrayBuffer(obj) {
146  let prefix = '=?BINARY?B?';
147  let suffix = '?=';
148  if (typeof obj === 'object') {
149    for (let key in obj) {
150      if (typeof obj[key] === 'string') {
151        let str = obj[key];
152        if (str.substring(0, prefix.length) === prefix && str.substring(str.length - suffix.length) === suffix) {
153          str = str.substring(prefix.length, str.length - suffix.length);
154          let binary_string = window.atob(str);
155          let len = binary_string.length;
156          let bytes = new Uint8Array(len);
157          for (let i = 0; i < len; i++) {
158            bytes[i] = binary_string.charCodeAt(i);
159          }
160          obj[key] = bytes.buffer;
161        }
162      } else {
163        recursiveBase64StrToArrayBuffer(obj[key]);
164      }
165    }
166  }
167}
168  $(window).on('load', function() {
169    $(".overlay").hide();
170  });
171  $(document).ready(function() {
172    $(document).on('shown.bs.modal', function(e) {
173      modal_id = $(e.relatedTarget).data('target');
174      $(modal_id).attr("aria-hidden","false");
175    });
176    // TFA, CSRF, Alerts in footer.inc.php
177    // Other general functions in mailcow.js
178    
179    // Confirm TFA modal
180  
181  
182  
183
184    // Validate FIDO2
185  $("#fido2-login").click(function(){
186    $('#fido2-alerts').html();
187    if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
188      window.alert('Browser not supported.');
189      return;
190    }
191    window.fetch("/api/v1/get/fido2-get-args", {method:'GET',cache:'no-cache'}).then(function(response) {
192      return response.json();
193    }).then(function(json) {
194    if (json.success === false) {
195      throw new Error();
196    }
197    recursiveBase64StrToArrayBuffer(json);
198    return json;
199    }).then(function(getCredentialArgs) {
200      return navigator.credentials.get(getCredentialArgs);
201    }).then(function(cred) {
202      return {
203        id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null,
204        clientDataJSON: cred.response.clientDataJSON  ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
205        authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null,
206        signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null
207      };
208    }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) {
209      var formData = new FormData();
210      formData.append("token", AuthenticatorAttestationResponse);
211      formData.append("verify_fido2_login", "true");
212
213      return window.fetch(window.location.href, {method:'POST', body: formData, cache:'no-cache'});
214    }).then(function(response) {
215      window.location = window.location.href.split("#")[0];
216    }).catch(function(err) {
217    if (typeof err.message === 'undefined') {
218      mailcow_alert_box(lang_fido2.fido2_validation_failed, "danger");
219    } else {
220      mailcow_alert_box(lang_fido2.fido2_validation_failed + ":<br><i>" + err.message + "</i>", "danger");
221    }
222  });
223  });
224  // Set TFA/FIDO2
225  $("#register-fido2, #register-fido2-touchid").click(function(){
226    let t = $(this);
227
228    $("option:selected").prop("selected", false);
229    if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
230      window.alert('Browser not supported.');
231      return;
232    }
233
234    window.fetch("/api/v1/get/fido2-registration/null", {method:'GET',cache:'no-cache'}).then(function(response) {
235      return response.json();
236    }).then(function(json) {
237      if (json.success === false) {
238        throw new Error(json.msg);
239      }
240      recursiveBase64StrToArrayBuffer(json);
241
242      // set attestation to node if we are registering apple touch id
243      if(t.attr('id') === 'register-fido2-touchid') {
244        json.publicKey.attestation = 'none';
245        json.publicKey.authenticatorSelection.authenticatorAttachment = "platform";
246      }
247
248      return json;
249    }).then(function(createCredentialArgs) {
250      console.log(createCredentialArgs);
251      return navigator.credentials.create(createCredentialArgs);
252    }).then(function(cred) {
253      return {
254        clientDataJSON: cred.response.clientDataJSON  ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
255        attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null
256      };
257    }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) {
258      return window.fetch("/api/v1/add/fido2-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'});
259    }).then(function(response) {
260      return response.json();
261    }).then(function(json) {
262      if (json.success) {
263        window.location = window.location.href.split("#")[0];
264      } else {
265        throw new Error(json.msg);
266      }
267    }).catch(function(err) {
268      $('#fido2-alerts').html('<span class="text-danger"><b>' + err.message + '</b></span>');
269    });
270  });
271  $('#selectTFA').change(function () {
272    if ($(this).val() == "yubi_otp") {
273      $('#YubiOTPModal').modal('show');
274      $("option:selected").prop("selected", false);
275    }
276    if ($(this).val() == "totp") {
277      $('#TOTPModal').modal('show');
278      request_token = $('#tfa-qr-img').data('totp-secret');
279      $.ajax({
280        url: '/inc/ajax/qr_gen.php',
281        data: {
282          token: request_token,
283        },
284      }).done(function (result) {
285        $("#tfa-qr-img").attr("src", result);
286      });
287      $("option:selected").prop("selected", false);
288    }
289    if ($(this).val() == "webauthn") {
290        // check if Browser is supported
291        if (!window.fetch || !navigator.credentials || !navigator.credentials.create) {
292            window.alert('Browser not supported.');
293            return;
294        }
295
296        // show modal
297        $('#WebAuthnModal').modal('show');
298        $("option:selected").prop("selected", false);
299
300        $("#start_webauthn_register").click(() => {
301            var key_id = document.getElementsByName('key_id')[1].value;
302            var confirm_password = document.getElementsByName('confirm_password')[1].value;
303
304            // fetch WebAuthn create args
305            window.fetch("/api/v1/get/webauthn-tfa-registration/null", {method:'GET',cache:'no-cache'}).then(response => {
306                return response.json();
307            }).then(json => {
308                console.log(json);
309                if (json.success === false) throw new Error(json.msg);
310                recursiveBase64StrToArrayBuffer(json);
311
312                return json;
313            }).then(createCredentialArgs => {
314                // create credentials
315                return navigator.credentials.create(createCredentialArgs);
316            }).then(cred => {
317                return {
318                    clientDataJSON: cred.response.clientDataJSON  ? arrayBufferToBase64(cred.response.clientDataJSON) : null,
319                    attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null,
320                    key_id: key_id,
321                    tfa_method: "webauthn",
322                    confirm_password: confirm_password
323                };
324            }).then(JSON.stringify).then(AuthenticatorAttestationResponse => {
325                // send request
326                return window.fetch("/api/v1/add/webauthn-tfa-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'});
327            }).then(response => {
328                return response.json();
329            }).then(json => {
330                if (json.success) {
331                    // reload on success
332                    window.location = window.location.href.split("#")[0];
333                } else {
334                    throw new Error(json.msg);
335                }
336            }).catch(function(err) {
337                console.log(err);
338                var webauthn_return_code = document.getElementById('webauthn_return_code');
339                webauthn_return_code.style.display = webauthn_return_code.style.display === 'none' ? '' : null;
340                webauthn_return_code.innerHTML = lang_tfa.error_code + ': ' + err + ' ' + lang_tfa.reload_retry;
341            });
342        });
343    }
344    if ($(this).val() == "none") {
345      $('#DisableTFAModal').modal('show');
346      $("option:selected").prop("selected", false);
347    }
348  });
349
350  
351  // CSRF
352  $('<input type="hidden" value="828ea0a22f51a2874e35a83b87b163e1f0001f78a83f104574b46cdfeb427814">').attr('name', 'csrf_token').appendTo('form');
353  if (sessionStorage.scrollTop != "undefined") {
354    $(window).scrollTop(sessionStorage.scrollTop);
355  }
356  });
357</script>
357
358
359<div class="container footer">
360        </div>
361</body>
362</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.