<?

use Bitrix\Security\Mfa\Otp;

/**
 * @global int $ID - Edited user id
 * @global string $strError - Save error
 * @global \CUser $USER
 * @global CMain $APPLICATION
 */

IncludeModuleLangFile(__FILE__);

if(!CModule::IncludeModule("security")):?>
	<tr>
		<td><?=GetMessage("SEC_OTP_NEW_ACCESS_DENIED")?></td>
	</tr>
<?
	return;
endif;
?>
<?if(
	$ID <= 0
	|| ($USER->getID() != $ID && !$USER->CanDoOperation('security_edit_user_otp'))
)
	return;
?>
<?
CJSCore::Init(array('qrcode', 'ajax', 'window'));
$APPLICATION->AddHeadScript('/bitrix/js/security/admin/page/user-edit.js');
$otp = Otp::getByUser($ID);
$deactivateUntil = $otp->getDeactivateUntil();
$availableTypes = Otp::getAvailableTypes();
$availableTypesDescription = \Bitrix\Security\Mfa\Otp::getTypesDescription();
$currentPage = $APPLICATION->GetCurPageParam(
	sprintf('%s_active_tab=%s',$tabControl->name, $tabControl->tabs[$tabControl->tabIndex]['DIV']),
	array(sprintf('%s_active_tab',$tabControl->name))
);
$deactivateDays = array();
$deactivateDays[] = GetMessage("SEC_OTP_NO_DAYS");
for($i=1; $i <= 10; $i++)
{
	$deactivateDays[$i] = FormatDate("ddiff", time()-60*60*24*$i);
}
$jsMessages = array(
	'SEC_OTP_ERROR_TITLE' => GetMessage('SEC_OTP_ERROR_TITLE'),
	'SEC_OTP_UNKNOWN_ERROR' => GetMessage('SEC_OTP_UNKNOWN_ERROR')
);
$jsSettings = array(
	'userId' => (int) $ID,
	'successfulUrl' => $currentPage,
	'deactivateDays' => $deactivateDays,
	'availableTypes' => $availableTypesDescription
)
?>
<script id="otp-user-edit-messages" type="application/json"><?=\Bitrix\Main\Web\Json::encode($jsMessages)?></script>
<script id="otp-user-edit-settings" type="application/json"><?=\Bitrix\Main\Web\Json::encode($jsSettings)?></script>
<!--Popup starts-->
<tr style="display: none;">
	<td colspan="2">
<div id="otp-mobile-popup" class="otp-popup otp-mobile" data-title="<?=GetMessage('SEC_OTP_CONNECT_MOBILE_TITLE')?>">
	<div class="otp-description">
		<ol>
			<li><?=GetMessage('SEC_OTP_CONNECT_MOBILE_STEP_1')?></li>
			<li><?=GetMessage('SEC_OTP_CONNECT_MOBILE_STEP_2')?></li>
			<li><?=GetMessage('SEC_OTP_CONNECT_MOBILE_STEP_3')?></li>
		</ol>
	</div>
	<div class="otp-connect">
		<div id="connect-by-qr">
			<div class="input-type">
				<span class="current"><?=GetMessage('SEC_OTP_MOBILE_SCAN_QR')?></span><span class="separator"><?=GetMessage('SEC_OTP_MOBILE_INPUT_METHODS_SEPARATOR')?></span><a href="#" id="connect-mobile-manual-input"><?=GetMessage('SEC_OTP_MOBILE_MANUAL_INPUT')?></a>
			</div>
			<div style="margin-bottom: 20px">
				<?=GetMessage('SEC_OTP_CONNECT_MOBILE_SCAN_QR')?>
			</div>
			<div>
				<div class="input-wrapper">
					<div data-role="qr-code-block" data-autoclear="yes" style="margin-top: 8px; margin-left: 8px;"></div>
				</div>
			</div>
		</div>
		<div id="connect-by-manual-input" style="display: none;">
			<div class="input-type">
				<a href="#" id="connect-mobile-scan-qr"><?=GetMessage('SEC_OTP_MOBILE_SCAN_QR')?></a><span class="separator"><?=GetMessage('SEC_OTP_MOBILE_INPUT_METHODS_SEPARATOR')?></span><span class="current"><?=GetMessage('SEC_OTP_MOBILE_MANUAL_INPUT')?></span>
			</div>
			<div style="margin-bottom: 20px">
				<?=GetMessage('SEC_OTP_CONNECT_MOBILE_MANUAL_INPUT')?>
				<span class="type-title" data-show-type="hotp"><?=GetMessage('SEC_OTP_CONNECT_MOBILE_MANUAL_INPUT_HOTP')?></span>
				<span class="type-title" data-show-type="totp"><?=GetMessage('SEC_OTP_CONNECT_MOBILE_MANUAL_INPUT_TOTP')?></span>
				.
			</div>
			<div>
				<div class="input-wrapper">
					<div data-role="app-code-block" data-autoclear="yes" style="margin-left: auto; margin-right: auto; margin-top: 98px; font-weight: bold; text-align: center;">#APP_CODE#</div>
				</div>
			</div>
		</div>
	</div>
	<div>
		<p>
			<?=GetMessage('SEC_OTP_CONNECT_MOBILE_INPUT_DESCRIPTION')?>
		</p>
		<p>
			<input type="text" dir="ltr" data-autoclear="yes" data-role="check-code" autocomplete="off" placeholder="<?=GetMessage('SEC_OTP_CONNECT_MOBILE_ENTER_CODE')?>">
		</p>
		<p data-require-two-codes="yes">
			<?=GetMessage('SEC_OTP_CONNECT_MOBILE_INPUT_NEXT_DESCRIPTION')?>
		</p>
		<p data-require-two-codes="yes">
			<input type="text" dir="ltr" data-autoclear="yes" data-role="check-code" autocomplete="off" placeholder="<?=GetMessage('SEC_OTP_CONNECT_MOBILE_ENTER_NEXT_CODE')?>">
		</p>
		<div data-role="error-container" class="error-wrapper" data-autoclear="yes"></div>
	</div>
</div>
<div id="otp-device-popup" class="otp-popup otp-device" data-title="<?=GetMessage('SEC_OTP_CONNECT_DEVICE_TITLE')?>">
	<table>
		<tr>
			<td>
				<?=GetMessage("SEC_OTP_TYPE")?>:
			</td>
			<td>
				<?foreach($availableTypes as $value):?>
					<span class="type-title" data-show-type="<?=$value?>">
						<?=(isset($availableTypesDescription[$value]['title'])? $availableTypesDescription[$value]['title'] : $value)?>
					</span>
				<?endforeach?>
			</td>
		</tr>
		<tr>
			<td>
				<?=GetMessage("SEC_OTP_SECRET_KEY")?>:
			</td>
			<td>
				<input type="text" autocomplete="off" data-autoclear="yes" data-role="secret-code" size="40" maxlength="64" value="">
			</td>
		</tr>
		<tr class="heading">
			<td colspan="2"><?=GetMessage("SEC_OTP_INIT")?></td>
		</tr>
		<tr>
			<td>
				<?=GetMessage("SEC_OTP_PASS1")?>:
			</td>
			<td>
				<input type="text" autocomplete="off" data-autoclear="yes" data-role="check-code" size="8" maxlength="8" value="">
			</td>
		</tr>
		<tr data-require-two-codes="yes">
			<td>
				<?=GetMessage("SEC_OTP_PASS2")?>:
			</td>
			<td>
				<input type="text" autocomplete="off" data-autoclear="yes" data-role="check-code" size="8" maxlength="8" value="">
			</td>
		</tr>
		<tr>
			<td colspan="2">
				<div data-role="error-container" class="error-wrapper" data-autoclear="yes"></div>
			</td>
		</tr>
	</table>
</div>
<div id="otp-recovery-codes" class="otp-popup otp-recovery-codes" data-title="<?=GetMessage('SEC_OTP_RECOVERY_CODES_TITLE')?>">
	<p>
		<?=GetMessage('SEC_OTP_RECOVERY_CODES_DESCRIPTION')?>
	</p>
	<p>
		<?=GetMessage('SEC_OTP_RECOVERY_CODES_WARNING')?>
	</p>
	<div class="input-wrapper">
		<div>
			<ol data-role="recoverycodes-container" class="codes-container"  style="display: none;">
				<li data-role="recoverycode-template" data-autoclear="yes">#CODE#</li>
			</ol>
		</div>
	</div>
	<p>
		<div style="margin-top: 10px">
			<input type="button" data-role="print-codes" value="<?=GetMessage('SEC_OTP_RECOVERY_CODES_PRINT')?>" />
			<input type="button" data-role="save-codes" value="<?=GetMessage('SEC_OTP_RECOVERY_CODES_SAVE_FILE')?>" />
		</div>
	</p>
	<p>
		<div><?=GetMessage('SEC_OTP_RECOVERY_CODES_REGENERATE_DESCRIPTION')?></div>
		<div data-role="error-container" class="error-wrapper" data-autoclear="yes"></div>
		<div>
			<input type="button" data-role="regenerate-codes" value="<?=GetMessage('SEC_OTP_RECOVERY_CODES_REGENERATE')?>" />
		</div>
	</p>
	<p>
		* <?=GetMessage('SEC_OTP_RECOVERY_CODES_NOTE')?>
	</p>
</div>
	</td>
</tr>
<!--Popup ends-->
<?if (!$otp->isActivated()):?>
	<?if (
		Otp::isMandatoryUsing()
		&& $otp->getInitialDate() // User trigger any of OTP mechanisms
		&& $USER->CanDoOperation('security_edit_user_otp')
		&& !$otp->canSkipMandatoryByRights()
	):?>
		<tr>
			<td>
		<?if (!$otp->isMandatorySkipped()):?>
				<?=BeginNote()?>
				<?=getMessage('SEC_OTP_MANDATORY_EXPIRED')?>
				<span class="otp-link-button" id="otp-deffer"><?=GetMessage('SEC_OTP_MANDATORY_DEFFER')?></span>
				<?=EndNote()?>
		<?elseif ($otp->isMandatorySkipped() && $otp->getDeactivateUntil()):?>
				<?=BeginNote()?>
				<?=getMessage('SEC_OTP_MANDATORY_ALMOST_EXPIRED', array('#DATE#' => $otp->getDeactivateUntil()))?>
				<span class="otp-link-button" id="otp-deffer"><?=GetMessage('SEC_OTP_MANDATORY_DEFFER')?></span>
				<?=EndNote()?>
		<?else:?>
				<?=BeginNote()?>
				<?=getMessage('SEC_OTP_MANDATORY_DISABLED')?>
				<span class="otp-link-button" id="otp-mandatory-active">
					<?if (empty($deactivateDays)):?>
						<?=GetMessage('SEC_OTP_MANDATORY_ENABLE_DEFAULT')?>
					<?else:?>
						<?=GetMessage('SEC_OTP_MANDATORY_ENABLE')?>
					<?endif;?>
				</span>
				<?=EndNote()?>
		<?endif;?>
			</td>
		</tr>
	<?endif;?>
	<tr>
		<?if ($otp->isInitialized()):?>
			<td style="text-align: left;">
				<a class="adm-btn-save adm-btn" id="otp-activate"><?=GetMessage('SEC_OTP_ENABLE')?></a>
				<?if ($deactivateUntil):?>
					<span>(<?=getMessage('SEC_OTP_DEACTIVATE_UNTIL', array('#DATE#' => $deactivateUntil))?>)</span>
				<?endif;?>
			</td>
			<td style="text-align: right;">
				<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-device"><?=GetMessage('SEC_OTP_CONNECT_DEVICE')?></a>
				<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-mobile" style="margin-left: 20px;"><?=GetMessage('SEC_OTP_CONNECT_MOBILE')?></a>
			</td>
		<?else:?>
			<td colspan="2">
				<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-device"><?=GetMessage('SEC_OTP_CONNECT_DEVICE')?></a>
				<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-mobile" style="margin-left: 20px;"><?=GetMessage('SEC_OTP_CONNECT_MOBILE')?></a>
			</td>
		<?endif;?>
	</tr>
	<tr>
		<td colspan="2">
			<div style=" padding: 20px;">
				<h3 style="clear:both"><br><?=getMessage('SEC_OTP_DESCRIPTION_INTRO_TITLE')?></h3>
				<div style="float: left; margin-right: 20px">
					<div style="-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; border: 2px solid #e0e3e5; border-radius: 2px; height: 156px; width: 156px; background: white url(/bitrix/images/security/etoken_pass.png?v2) no-repeat center center;"></div>
				</div>
				<div>
					<?=(IsModuleInstalled('intranet')?
						getMessage('SEC_OTP_DESCRIPTION_INTRO_INTRANET'):
						getMessage('SEC_OTP_DESCRIPTION_INTRO_SITE'))?>
				</div>
				<?
				if (in_array(LANGUAGE_ID, array('en', 'ru', 'de'), true))
					$imageLanguage = LANGUAGE_ID;
				else
					$imageLanguage = \Bitrix\Main\Localization\Loc::getDefaultLang(LANGUAGE_ID);
				?>
				<h3 style="clear:both"><br><?=getMessage('SEC_OTP_DESCRIPTION_USING_TITLE')?></h3>
				<div style="float: left; margin-right: 20px">
					<div style="-webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; border: 2px solid #e0e3e5; border-radius: 2px; padding: 5px 10px; background: white; height: 150px;">
						<div style="float: left; background: url(/bitrix/images/security/<?=$imageLanguage?>_login_step0.png) no-repeat top right; width: 220px; height: 120px; padding-top: 20px;" ><?=getMessage('SEC_OTP_DESCRIPTION_USING_STEP_0')?></div>
						<div style="float: left; background: url(/bitrix/images/security/<?=$imageLanguage?>_login_step1.png) no-repeat top right; width: 220px; height: 120px; padding-top: 20px; margin-left:20px;"><?=getMessage('SEC_OTP_DESCRIPTION_USING_STEP_1')?></div>
					</div>
				</div>
				<div>
					<?=getMessage('SEC_OTP_DESCRIPTION_USING')?>
				</div>
				<h3 style="clear:both"><br><?=getMessage('SEC_OTP_DESCRIPTION_ACTIVATION_TITLE')?></h3>
				<div>
					<?=getMessage('SEC_OTP_DESCRIPTION_ACTIVATION')?>
				</div>
				<?=BeginNote()?>
				<h3><?=getMessage('SEC_OTP_DESCRIPTION_ABOUT_TITLE')?></h3>
				<div>
					<?=getMessage('SEC_OTP_DESCRIPTION_ABOUT')?>
				</div>
				<?=EndNote()?>
			</div>
		</td>
	</tr>
<?else:?>
	<?if (Otp::isRecoveryCodesEnabled()):?>
		<?
		$codes = \Bitrix\Security\Mfa\RecoveryCodesTable::getList(array(
			'select' => array('ID'),
			'filter' => array('=USER_ID' => $ID),
			'limit' => 1
		))->fetch();
		if (!$codes):?>
			<tr data-role="otp-recovery-codes-warning">
				<td colspan="2">
					<?CAdminMessage::ShowMessage(array(
						"MESSAGE" => GetMessage('SEC_OTP_WARNING_RECOVERY_CODES'),
						"TYPE" => 'ERROR',
						"HTML" => true
					));?>
				</td>
			</tr>
		<?endif;?>
	<?endif;?>
	<tr>
		<td style="text-align: left;">
			<span><?=GetMessage('SEC_OTP_CONNECTED')?></span>
			<?if(
				!Otp::isMandatoryUsing()
				|| $otp->canSkipMandatory()
				|| $USER->CanDoOperation('security_edit_user_otp')
			):?>
				<span class="otp-link-button" id="otp-deactivate"><?=GetMessage('SEC_OTP_DISABLE')?></span>
			<?endif;?>
			<?if (Otp::isRecoveryCodesEnabled()):?>
				<span class="otp-link-button" id="otp-show-recovery-codes"><?=GetMessage('SEC_OTP_RECOVERY_CODES_BUTTON')?></span>
			<?endif;?>
			<?if ($USER->CanDoOperation('security_edit_user_otp')):?>
				<span class="otp-link-button" id="otp-reinitialize"><?=GetMessage('SEC_OTP_SYNC_NOW')?></span>
			<?endif;?>
		</td>
		<td style="text-align: right;">
			<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-device"><?=GetMessage('SEC_OTP_CONNECT_NEW_DEVICE')?></a>
			<a class="adm-btn-save adm-btn adm-btn-menu" id="otp-connect-mobile" style="margin-left: 20px;"><?=GetMessage('SEC_OTP_CONNECT_NEW_MOBILE')?></a>
		</td>
	</tr>
	<?if ($USER->CanDoOperation('security_edit_user_otp')):?>
		<tr class="heading" style="display:none;" data-show-on-reinitialize="yes">
			<td colspan="2"><?=GetMessage("SEC_OTP_INIT")?></td>
			<input type="hidden" name="profile_module_id[]" value="security">
		</tr>
		<tr style="display:none;" data-show-on-reinitialize="yes">
			<td>
				<?=GetMessage("SEC_OTP_PASS1")?>:
			</td>
			<td>
				<input type="text" autocomplete="off" id="security_SYNC1" name="security_SYNC1" size="8" maxlength="8" value="">
			</td>
		</tr>
		<tr style="display:none;" data-show-on-reinitialize="yes">
			<td>
				<?=GetMessage("SEC_OTP_PASS2")?>:
			</td>
			<td>
				<input type="text" autocomplete="off" id="security_SYNC2" name="security_SYNC2" size="8" maxlength="8" value="">
			</td>
		</tr>
	<?endif;?>
<?endif;?>