1<!DOCTYPE html> 2<html lang="en-gb"> 3<head> 4 <meta charset="utf-8"> 5 <meta http-equiv="X-UA-Compatible" content="IE=edge"> 6 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"> 7 <meta name="theme-color" content="#F5D76E"/> 8 <meta http-equiv="Referrer-Policy" content="same-origin"> 9 <title>mail.fastuc24.com - mail UI</title> 10 11 <link rel="stylesheet" href="/cache/34260ff0091bc6bb69163f8958b6959e8b27c2a8.css"> 12
12<script> 13 // check if darkmode is preferred by OS or set by localStorage 14 if (window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches && localStorage.getItem("mailcow_theme") !== "light" || 15 localStorage.getItem("mailcow_theme") === "dark") { 16 var head = document.getElementsByTagName('head')[0]; 17 var link = document.createElement('link'); 18 link.id = 'dark-mode-theme'; 19 link.rel = 'stylesheet'; 20 link.type = 'text/css'; 21 link.href = '/css/themes/mailcow-darkmode.css'; 22 head.appendChild(link); 23 } 24 </script>
24 25 26 <link rel="shortcut icon" href="/favicon.png" type="image/png"> 27 <link rel="icon" href="/favicon.png" type="image/png"> 28</head> 29<body> 30<div class="overlay"></div> 31 32<form action="/" method="post" id="logout"><input type="hidden" name="logout"></form> 33 34 35<div class="container flex-grow-1 my-4"> 36<div class="row mb-4" style="margin-top: 60px"> 37 <div class="col-12 col-md-7 col-lg-6 col-xl-5 ms-auto me-auto"> 38 <div class="card"> 39 <div class="card-header d-flex align-items-center"> 40 <i class="bi bi-person-fill me-2"></i> Reset Password 41 <div class="ms-auto form-check form-switch my-auto d-flex align-items-center"> 42 <label class="form-check-label"><i class="bi bi-moon-fill"></i></label> 43 <input class="form-check-input ms-2" type="checkbox" id="dark-mode-toggle"> 44 </div> 45 </div> 46 <div class="card-body"> 47 <div class="text-center mailcow-logo mb-4"> 48 <img class="main-logo" src="/img/cow_mailcow.svg" alt="mailcow"> 49 <img class="main-logo-dark" src="/img/cow_mailcow.svg" alt="mailcow-logo-dark"> 50 </div> 51 <legend>mail.fastuc24.com - mail UI</legend><hr /> 52 53 <form method="post" autofill="off"> 54 <input type="text" autocorrect="off" autocapitalize="none" class="form-control mb-2" name="username" placeholder="Username" /> 55 56 <div class="d-flex justify-content-end mt-4" style="position: relative"> 57 <button type="submit" class="btn btn-xs-lg d-block d-sm-inline btn-success" name="pw_reset_request">Request password change</button> 58 </div> 59 </form> 60 61 62 </div> 63 </div> 64 </div> 65</div> 66
67<script type='text/javascript'> 68 var csrf_token = '828ea0a22f51a2874e35a83b87b163e1f0001f78a83f104574b46cdfeb427814'; 69 var mailcow_cc_username = ''; 70</script>
70 71</div> 72 73<div id="ConfirmDeleteModal" class="modal fade" role="dialog"> 74 <div class="modal-dialog"> 75 <div class="modal-content"> 76 <div class="modal-header"> 77 <h3 class="modal-title">Confirm deletion</h3> 78 <button type="button" class="btn-close" data-bs-dismiss="modal"></button> 79 </div> 80 <div class="modal-body"> 81 <p id="DeleteText">Please confirm your changes to the following object id</p> 82 <ul id="ItemsToDelete"></ul> 83 <hr> 84 <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-danger" id="IsConfirmed">Delete now</button> 85 <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-secondary" id="isCanceled">Cancel</button> 86 </div> 87 </div> 88 </div> 89</div> 90<!-- version modal --> 91<div class="modal fade" id="showVersionModal" tabindex="-1" role="dialog" aria-hidden="true"> 92 <div class="modal-dialog modal-lg"> 93 <div class="modal-content"> 94 <div class="modal-header"> 95 <h5 class="modal-title"></h5> 96 <button type="button" class="btn-close" data-bs-dismiss="modal"></button> 97 </div> 98 <div class="modal-body d-flex flex-column mt-2 p-4"> 99 <div class="spinner-border mx-auto" role="status"> 100 <span class="visually-hidden">Loading...</span> 101 </div> 102 </div> 103 </div> 104 </div> 105</div><!-- version modal --> 106
107<script src="/cache/9b6dc74cc0c459244f628fde5e6d65c05e7270bd.js"></script>
vendor: 1 bytes, line 107
107
108<script> 109 var lang_footer = {"cancel":"Cancel","confirm_delete":"Confirm deletion","delete_now":"Delete now","delete_these_items":"Please confirm your changes to the following object id","hibp_check":"Check against haveibeenpwned.com","hibp_nok":"Matched! This is a potentially dangerous password!","hibp_ok":"No match found.","loading":"Please wait...","nothing_selected":"Nothing selected","restart_container":"Restart container","restart_container_info":"<b>Important:<\/b> A graceful restart may take a while to complete, please wait for it to finish.","restart_now":"Restart now","restarting_container":"Restarting container, this may take a while"}; 110 var lang_acl = {"alias_domains":"Add alias domains","app_passwds":"Manage app passwords","bcc_maps":"BCC maps","delimiter_action":"Delimiter action","domain_desc":"Change domain description","domain_relayhost":"Change relayhost for a domain","eas_reset":"Reset EAS devices","extend_sender_acl":"Allow to extend sender ACL by external addresses","filters":"Filters","login_as":"Login as mailbox user","mailbox_relayhost":"Change relayhost for a mailbox","prohibited":"Prohibited by ACL","protocol_access":"Change protocol access","pushover":"Pushover","pw_reset":"Allow to reset mailcow user password","quarantine":"Quarantine actions","quarantine_attachments":"Quarantine attachments","quarantine_category":"Change quarantine notification category","quarantine_notification":"Change quarantine notifications","ratelimit":"Rate limit","recipient_maps":"Recipient maps","smtp_ip_access":"Change allowed hosts for SMTP","sogo_access":"Allow management of SOGo access","sogo_profile_reset":"Reset SOGo profile","spam_alias":"Temporary aliases","spam_policy":"Denylist\/Allowlist","spam_score":"Spam score","syncjobs":"Sync jobs","tls_policy":"TLS policy","unlimited_quota":"Unlimited quota for mailboxes"}; 111 var lang_tfa = {"authenticators":"Authenticators","api_register":"%s uses the Yubico Cloud API. Please get an API key for your key <a href=\"https:\/\/upgrade.yubico.com\/getapikey\/\" target=\"_blank\">here<\/a>","confirm":"Confirm","confirm_totp_token":"Please confirm your changes by entering the generated token","delete_tfa":"Disable TFA","disable_tfa":"Disable TFA until next successful login","force_tfa":"Force 2FA enrollment at login","force_tfa_info":"The user will be required to set up two-factor authentication before accessing the panel.","setup_title":"Two-Factor Authentication Required","setup_required":"Your account requires two-factor authentication. Please set up a 2FA method to continue.","cancel_setup":"Cancel and log out","enter_qr_code":"Your TOTP code if your device cannot scan QR codes","error_code":"Error code","init_webauthn":"Initializing, please wait...","key_id":"An identifier for your Device","key_id_totp":"An identifier for your key","none":"Deactivate","reload_retry":"- (reload browser if the error persists)","scan_qr_code":"Please scan the following code with your authenticator app or enter the code manually.","select":"Please select","set_tfa":"Set two-factor authentication method","start_webauthn_validation":"Start validation","tfa":"Two-factor authentication","tfa_token_invalid":"TFA token invalid","totp":"Time-based OTP (Google Authenticator, Authy, etc.)","u2f_deprecated":"It seems that your Key was registered using the deprecated U2F method. We will deactivate Two-Factor-Authenticaiton for you and delete your Key.","u2f_deprecated_important":"Please register your Key in the admin panel with the new WebAuthn method.","webauthn":"WebAuthn authentication","waiting_usb_auth":"<i>Waiting for USB device...<\/i><br><br>Please tap the button on your USB device now.","waiting_usb_register":"<i>Waiting for USB device...<\/i><br><br>Please enter your password above and confirm your registration by tapping the button on your USB device.","yubi_otp":"Yubico OTP authentication"}; 112 var lang_fido2 = {"confirm":"Confirm","fido2_auth":"Login with FIDO2","fido2_success":"Device successfully registered","fido2_validation_failed":"Validation failed","fn":"Friendly name","known_ids":"Known IDs","none":"Disabled","register_status":"Registration status","rename":"Rename","set_fido2":"Register FIDO2 device","set_fido2_touchid":"Register Touch ID on Apple M1","set_fn":"Set friendly name","start_fido2_val
112idation":"Start FIDO2 validation"}; 113 var lang_success = {"acl_saved":"ACL for object %s saved","admin_added":"Administrator %s has been added","admin_api_modified":"Changes to API have been saved","admin_modified":"Changes to administrator have been saved","admin_removed":"Administrator %s has been removed","alias_added":"Alias address %s (%d) has been added","alias_domain_removed":"Alias domain %s has been removed","alias_modified":"Changes to alias address %s have been saved","alias_removed":"Alias %s has been removed","aliasd_added":"Added alias domain %s","aliasd_modified":"Changes to alias domain %s have been saved","app_links":"Saved changes to app links","app_passwd_added":"Added new app password","app_passwd_removed":"Removed app password ID %s","bcc_deleted":"BCC map entries deleted: %s","bcc_edited":"BCC map entry %s edited","bcc_saved":"BCC map entry saved","cors_headers_edited":"CORS settings have been saved","custom_login_modified":"Login customisation was saved successfully","db_init_complete":"Database initialization completed","delete_filter":"Deleted filters ID %s","delete_filters":"Deleted filters: %s","deleted_syncjob":"Deleted syncjob ID %s","deleted_syncjobs":"Deleted syncjobs: %s","dkim_added":"DKIM key %s has been saved","domain_add_dkim_available":"A DKIM key did already exist","dkim_duplicated":"DKIM key for domain %s has been copied to %s","dkim_removed":"DKIM key %s has been removed","domain_added":"Added domain %s","domain_admin_added":"Domain administrator %s has been added","domain_admin_modified":"Changes to domain administrator %s have been saved","domain_admin_removed":"Domain administrator %s has been removed","domain_footer_modified":"Changes to domain footer %s have been saved","domain_modified":"Changes to domain %s have been saved","domain_removed":"Domain %s has been removed","dovecot_restart_success":"Dovecot was restarted successfully","eas_reset":"ActiveSync devices for user %s were reset","f2b_banlist_refreshed":"Banlist ID has been successfully refreshed.","f2b_modified":"Changes to Fail2ban parameters have been saved","forwarding_host_added":"Forwarding host %s has been added","forwarding_host_removed":"Forwarding host %s has been removed","global_filter_written":"Filter was successfully written to file","hash_deleted":"Hash deleted","iam_test_connection":"Connection successful","ip_check_opt_in_modified":"IP check was saved successfully","item_deleted":"Item %s successfully deleted","item_released":"Item %s released","items_deleted":"Item %s successfully deleted","items_released":"Selected items were released","learned_ham":"Successfully learned ID %s as ham","license_modified":"Changes to license have been saved","logged_in_as":"Logged in as %s","mailbox_added":"Mailbox %s has been added","mailbox_modified":"Changes to mailbox %s have been saved","mailbox_removed":"Mailbox %s has been removed","mailbox_renamed":"Mailbox was renamed from %s to %s","nginx_reloaded":"Nginx was reloaded","object_modified":"Changes to object %s have been saved","password_policy_saved":"Password policy was saved successfully","password_changed_success":"Password was successfully changed","pushover_settings_edited":"Pushover settings successfully set, please verify credentials.","qlearn_spam":"Message ID %s was learned as spam and deleted","queue_command_success":"Queue command completed successfully","recipient_map_entry_deleted":"Recipient map ID %s has been deleted","recipient_map_entry_saved":"Recipient map entry \"%s\" has been saved","recovery_email_sent":"Recovery email sent to %s","relayhost_added":"Map entry %s has been added","relayhost_removed":"Map entry %s has been removed","reset_main_logo":"Reset to default logo","resource_added":"Resource %s has been added","resource_modified":"Changes to mailbox %s have been saved","resource_removed":"Resource %s has been removed","rl_saved":"Rate limit for object %s saved","rspamd_ui_pw_set":"Rspamd UI password successfully set","saved_settings":"Saved settings","settings_map_added":"Added settings map entry","settings_map_removed":"Removed settings map ID %s","sogo_profile_reset"
113:"SOGo profile for user %s was reset","template_added":"Added template %s","template_modified":"Changes to template %s have been saved","template_removed":"Template ID %s has been deleted","tls_policy_map_entry_deleted":"TLS policy map ID %s has been deleted","tls_policy_map_entry_saved":"TLS policy map entry \"%s\" has been saved","ui_texts":"Saved changes to UI texts","upload_success":"File uploaded successfully","verified_fido2_login":"Verified FIDO2 login","verified_totp_login":"Verified TOTP login","verified_webauthn_login":"Verified WebAuthn login","verified_yotp_login":"Verified Yubico OTP login"}; 114 var lang_danger = {"access_denied":"Access denied or invalid form data","tfa_removal_blocked":"Two-factor authentication cannot be removed because it is required for your account.","alias_domain_invalid":"Alias domain %s is invalid","alias_empty":"Alias address must not be empty","alias_goto_identical":"Alias and goto address must not be identical","alias_invalid":"Alias address %s is invalid","aliasd_targetd_identical":"Alias domain must not be equal to target domain: %s","aliases_in_use":"Max. aliases must be greater or equal to %d","app_name_empty":"App name cannot be empty","app_passwd_id_invalid":"App password ID %s invalid","authsource_in_use":"The identity provider cannot be changed or deleted as it is currently in use by one or more users.","bcc_empty":"BCC destination cannot be empty","bcc_exists":"A BCC map %s exists for type %s","bcc_must_be_email":"BCC destination %s is not a valid email address","comment_too_long":"Comment too long, max 160 chars allowed","cors_invalid_method":"Invalid Allow-Method specified","cors_invalid_origin":"Invalid Allow-Origin specified","defquota_empty":"Default quota per mailbox must not be 0.","demo_mode_enabled":"Demo Mode is enabled","description_invalid":"Resource description for %s is invalid","dkim_domain_or_sel_exists":"A DKIM key for \"%s\" exists and will not be overwritten","dkim_domain_or_sel_invalid":"DKIM domain or selector invalid: %s","domain_cannot_match_hostname":"Domain cannot match hostname","domain_exists":"Domain %s already exists","domain_invalid":"Domain name is empty or invalid","domain_not_empty":"Cannot remove non-empty domain %s","domain_not_found":"Domain %s not found","domain_quota_m_in_use":"Domain quota must be greater or equal to %s MiB","extended_sender_acl_denied":"missing ACL to set external sender addresses","extra_acl_invalid":"External sender address \"%s\" is invalid","extra_acl_invalid_domain":"External sender \"%s\" uses an invalid domain","fido2_verification_failed":"FIDO2 verification failed: %s","file_open_error":"File cannot be opened for writing","filter_type":"Wrong filter type","from_invalid":"Sender must not be empty","generic_server_error":"An unexpected server error occurred. Please contact your administrator.","global_filter_write_error":"Could not write filter file: %s","global_map_invalid":"Global map ID %s invalid","global_map_write_error":"Could not write global map ID %s: %s","goto_empty":"An alias address must contain at least one valid goto address","goto_invalid":"Goto address %s is invalid","ham_learn_error":"Ham learn error: %s","iam_test_connection":"Connection failed","imagick_exception":"Error: Imagick exception while reading image","img_dimensions_exceeded":"Image exceeds the maximum image size","img_invalid":"Cannot validate image file","img_size_exceeded":"Image exceeds the maximum file size","img_tmp_missing":"Cannot validate image file: Temporary file not found","invalid_bcc_map_type":"Invalid BCC map type","invali
114d_destination":"Destination format \"%s\" is invalid","invalid_filter_type":"Invalid filter type","invalid_host":"Invalid host specified: %s","invalid_mime_type":"Invalid mime type","invalid_nexthop":"Next hop format is invalid","invalid_nexthop_authenticated":"Next hop exists with different credentials, please update the existing credentials for this next hop first.","invalid_recipient_map_new":"Invalid new recipient specified: %s","invalid_recipient_map_old":"Invalid original recipient specified: %s","invalid_reset_token":"Invalid reset token","ip_list_empty":"List of allowed IPs cannot be empty","is_alias":"%s is already known as an alias address","is_alias_or_mailbox":"%s is already known as an alias, a mailbox or an alias address expanded from an alias domain.","is_spam_alias":"%s is already known as a temporary alias address (spam alias address)","last_key":"Last key cannot be deleted, please deactivate TFA instead.","login_failed":"Login failed","mailbox_defquota_exceeds_mailbox_maxquota":"Default quota exceeds max quota limit","mailbox_invalid":"Mailbox name is invalid","mailbox_quota_exceeded":"Quota exceeds the domain limit (max. %d MiB)","mailbox_quota_exceeds_domain_quota":"Max. quota exceeds domain quota limit","mailbox_quota_left_exceeded":"Not enough space left (space left: %d MiB)","mailboxes_in_use":"Max. mailboxes must be greater or equal to %d","malformed_username":"Malformed username","map_content_empty":"Map content cannot be empty","max_age_invalid":"Max age %s is invalid","max_alias_exceeded":"Max. aliases exceeded","max_mailbox_exceeded":"Max. mailboxes exceeded (%d of %d)","max_quota_in_use":"Mailbox quota must be greater or equal to %d MiB","maxquota_empty":"Max. quota per mailbox must not be 0.","mode_invalid":"Mode %s is invalid","mx_invalid":"MX record %s is invalid","mysql_error":"MySQL error: %s","network_host_invalid":"Invalid network or host: %s","next_hop_interferes":"%s interferes with nexthop %s","next_hop_interferes_any":"An existing next hop interferes with %s","nginx_reload_failed":"Nginx reload failed: %s","no_user_defined":"No user defined","object_exists":"Object %s already exists","object_is_not_numeric":"Value %s is not numeric","password_complexity":"Password does not meet the policy","password_empty":"Password must not be empty","password_mismatch":"Confirmation password does not match","password_reset_invalid_user":"Mailbox not found or no recovery email is set","password_reset_na":"The password recovery is currently unavailable. Please contact your administrator.","policy_list_from_exists":"A record with given name exists","policy_list_from_invalid":"Record has invalid format","private_key_error":"Private key error: %s","pushover_credentials_missing":"Pushover token and or key missing","pushover_key":"Pushover key has a wrong format","pushover_token":"Pushover token has a wrong format","quarantine_category_invalid":"Quarantine category must be one of: add_header, reject, all","quota_not_0_not_numeric":"Quota must be numeric and >= 0","recipient_map_entry_exists":"A Recipient map entry \"%s\" exists","recovery_email_failed":"Could not send a recovery email. Please contact your administrator.","redis_error":"Redis error: %s","relayhost_invalid":"Map entry %s is invalid","release_send_failed":"Message could not be released: %s","required_data_missing":"Required data %s is missing","reset_f2b_regex":"Regex filter could not be reset in time, please try again or wait a few more seconds and reload the website.","reset_token_limit_exceeded":"Reset token limit has been exceeded. Please try again later.","resource_invalid":"Resource name %s is invalid","rl_timeframe":"Rate limit time frame is incorrect","rspamd_ui_pw_length":"Rspamd UI password should be at least 6 chars long","script_empty":"Script cannot be empty","sender_acl_invalid":"Sender ACL value %s is invalid","set_acl_failed":"Failed to set ACL","settings_map_invalid":"Settings map ID %s invalid","sieve_error":"Sieve parser error: %s","spam_learn_error":"Spam learn error: %s","subject_empty":"Subject must not be empty","target_domain_invali
114d":"Target domain %s is invalid","targetd_not_found":"Target domain %s not found","targetd_relay_domain":"Target domain %s is a relay domain","template_exists":"Template %s already exists","template_id_invalid":"Template ID %s invalid","template_name_invalid":"Template name invalid","temp_error":"Temporary error","text_empty":"Text must not be empty","tfa_token_invalid":"TFA token invalid","tls_policy_map_dest_invalid":"Policy destination is invalid","tls_policy_map_entry_exists":"A TLS policy map entry \"%s\" exists","tls_policy_map_parameter_invalid":"Policy parameter is invalid","to_invalid":"Recipient must not be empty","totp_verification_failed":"TOTP verification failed","transport_dest_exists":"Transport destination \"%s\" exists","webauthn_verification_failed":"WebAuthn verification failed: %s","webauthn_authenticator_failed":"The selected authenticator was not found","webauthn_publickey_failed":"No public key was stored for the selected authenticator","webauthn_username_failed":"The selected authenticator belongs to another account","unknown":"An unknown error occurred","unknown_tfa_method":"Unknown TFA method","unlimited_quota_acl":"Unlimited quota prohibited by ACL","username_invalid":"Username %s cannot be used","validity_missing":"Please assign a period of validity","value_missing":"Please provide all values","version_invalid":"Version %s is invalid","yotp_verification_failed":"Yubico OTP verification failed: %s"}; 115 var docker_timeout = 60 * 1000; 116 var mailcow_cc_role = ''; 117 var mailcow_info = { 118 version_tag: '', 119 last_version_tag: '', 120 updatedAt: '', 121 project_url: '', 122 project_owner: '', 123 project_repo: '', 124 branch: '' 125 }; 126 127$(window).scroll(function() { 128 sessionStorage.scrollTop = $(this).scrollTop(); 129}); 130// Select language and reopen active URL without POST 131function setLang(sel) { 132 $.post( '\/reset\u002Dpassword', {lang: sel} ); 133 window.location.href = window.location.pathname + window.location.search; 134} 135// FIDO2 functions 136function arrayBufferToBase64(buffer) { 137 let binary = ''; 138 let bytes = new Uint8Array(buffer); 139 let len = bytes.byteLength; 140 for (let i = 0; i < len; i++) { 141 binary += String.fromCharCode( bytes[ i ] ); 142 } 143 return window.btoa(binary); 144} 145function recursiveBase64StrToArrayBuffer(obj) { 146 let prefix = '=?BINARY?B?'; 147 let suffix = '?='; 148 if (typeof obj === 'object') { 149 for (let key in obj) { 150 if (typeof obj[key] === 'string') { 151 let str = obj[key]; 152 if (str.substring(0, prefix.length) === prefix && str.substring(str.length - suffix.length) === suffix) { 153 str = str.substring(prefix.length, str.length - suffix.length); 154 let binary_string = window.atob(str); 155 let len = binary_string.length; 156 let bytes = new Uint8Array(len); 157 for (let i = 0; i < len; i++) { 158 bytes[i] = binary_string.charCodeAt(i); 159 } 160 obj[key] = bytes.buffer; 161 } 162 } else { 163 recursiveBase64StrToArrayBuffer(obj[key]); 164 } 165 } 166 } 167} 168 $(window).on('load', function() { 169 $(".overlay").hide(); 170 }); 171 $(document).ready(function() { 172 $(document).on('shown.bs.modal', function(e) { 173 modal_id = $(e.relatedTarget).data('target'); 174 $(modal_id).attr("aria-hidden","false"); 175 }); 176 // TFA, CSRF, Alerts in footer.inc.php 177 // Other general functions in mailcow.js 178 179 // Confirm TFA modal 180 181 182 183 184 // Validate FIDO2 185 $("#fido2-login").click(function(){ 186 $('#fido2-alerts').html(); 187 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 188 window.alert('Browser not supported.'); 189 return; 190 } 191 window.fetch("/api/v1/get/fido2-get-args", {method:'GET',cache:'no-cache'}).then(function(response) { 192 return response.json(); 193 }).then(function(json) { 194 if (json.success === false) { 195 throw new Error(); 196 } 197 recursiveBase64StrToArrayBuffer(json); 198 return json; 199 }).then(function(getCredentialArgs) { 200 return navigator.credentials.get(getCredentialArgs); 201 }).then(function(cred) { 202 return { 203 id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null, 204 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 205 authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null, 206 signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null 207 }; 208 }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { 209 var formData = new FormData(); 210 formData.append("token", AuthenticatorAttestationResponse); 211 formData.append("verify_fido2_login", "true"); 212 213 return window.fetch(window.location.href, {method:'POST', body: formData, cache:'no-cache'}); 214 }).then(function(response) { 215 window.location = window.location.href.split("#")[0]; 216 }).catch(function(err) { 217 if (typeof err.message === 'undefined') {
218 mailcow_alert_box(lang_fido2.fido2_validation_failed, "danger"); 219 } else { 220 mailcow_alert_box(lang_fido2.fido2_validation_failed + ":<br><i>" + err.message + "</i>", "danger"); 221 } 222 }); 223 }); 224 // Set TFA/FIDO2 225 $("#register-fido2, #register-fido2-touchid").click(function(){ 226 let t = $(this); 227 228 $("option:selected").prop("selected", false); 229 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 230 window.alert('Browser not supported.'); 231 return; 232 } 233 234 window.fetch("/api/v1/get/fido2-registration/null", {method:'GET',cache:'no-cache'}).then(function(response) { 235 return response.json(); 236 }).then(function(json) { 237 if (json.success === false) { 238 throw new Error(json.msg); 239 } 240 recursiveBase64StrToArrayBuffer(json); 241 242 // set attestation to node if we are registering apple touch id 243 if(t.attr('id') === 'register-fido2-touchid') { 244 json.publicKey.attestation = 'none'; 245 json.publicKey.authenticatorSelection.authenticatorAttachment = "platform"; 246 } 247 248 return json; 249 }).then(function(createCredentialArgs) { 250 console.log(createCredentialArgs); 251 return navigator.credentials.create(createCredentialArgs); 252 }).then(function(cred) { 253 return { 254 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 255 attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null 256 }; 257 }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { 258 return window.fetch("/api/v1/add/fido2-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'}); 259 }).then(function(response) { 260 return response.json(); 261 }).then(function(json) { 262 if (json.success) { 263 window.location = window.location.href.split("#")[0]; 264 } else { 265 throw new Error(json.msg); 266 } 267 }).catch(function(err) { 268 $('#fido2-alerts').html('<span class="text-danger"><b>' + err.message + '</b></span>'); 269 }); 270 }); 271 $('#selectTFA').change(function () { 272 if ($(this).val() == "yubi_otp") { 273 $('#YubiOTPModal').modal('show'); 274 $("option:selected").prop("selected", false); 275 } 276 if ($(this).val() == "totp") { 277 $('#TOTPModal').modal('show'); 278 request_token = $('#tfa-qr-img').data('totp-secret'); 279 $.ajax({ 280 url: '/inc/ajax/qr_gen.php', 281 data: { 282 token: request_token, 283 }, 284 }).done(function (result) { 285 $("#tfa-qr-img").attr("src", result); 286 }); 287 $("option:selected").prop("selected", false); 288 } 289 if ($(this).val() == "webauthn") { 290 // check if Browser is supported 291 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 292 window.alert('Browser not supported.'); 293 return; 294 } 295 296 // show modal 297 $('#WebAuthnModal').modal('show'); 298 $("option:selected").prop("selected", false); 299 300 $("#start_webauthn_register").click(() => { 301 var key_id = document.getElementsByName('key_id')[1].value; 302 var confirm_password = document.getElementsByName('confirm_password')[1].value; 303 304 // fetch WebAuthn create args 305 window.fetch("/api/v1/get/webauthn-tfa-registration/null", {method:'GET',cache:'no-cache'}).then(response => { 306 return response.json(); 307 }).then(json => { 308 console.log(json); 309 if (json.success === false) throw new Error(json.msg); 310 recursiveBase64StrToArrayBuffer(json); 311 312 return json; 313 }).then(createCredentialArgs => { 314 // create credentials 315 return navigator.credentials.create(createCredentialArgs); 316 }).then(cred => { 317 return { 318 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 319 attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null, 320 key_id: key_id, 321 tfa_method: "webauthn", 322 confirm_password: confirm_password 323 }; 324 }).then(JSON.stringify).then(AuthenticatorAttestationResponse => { 325 // send request 326 return window.fetch("/api/v1/add/webauthn-tfa-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'}); 327 }).then(response => { 328 return response.json(); 329 }).then(json => { 330 if (json.success) { 331 // reload on success 332 window.location = window.location.href.split("#")[0]; 333 } else { 334 throw new Error(json.msg); 335 } 336 }).catch(function(err) { 337 console.log(err); 338 var webauthn_return_code = document.getElementById('webauthn_return_code'); 339 webauthn_return_code.style.display = webauthn_return_code.style.display === 'none' ? '' : null; 340 webauthn_return_code.innerHTML = lang_tfa.error_code + ': ' + err + ' ' + lang_tfa.reload_retry; 341 }); 342 }); 343 } 344 if ($(this).val() == "none") { 345 $('#DisableTFAModal').modal('show'); 346 $("option:selected").prop("selected", false); 347 } 348 }); 349 350 351 // CSRF 352 $('<input type="hidden" value="828ea0a22f51a2874e35a83b87b163e1f0001f78a83f104574b46cdfeb427814">').attr('name', 'csrf_token').appendTo('form'); 353 if (sessionStorage.scrollTop != "undefined") { 354 $(window).scrollTop(sessionStorage.scrollTop); 355 } 356 }); 357</script>
357 358 359<div class="container footer"> 360 </div> 361</body> 362</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.