* Copyright (C) 2020 Red Hat, Inc.
* SPDX-License-Identifier: LGPL-2.1-or-later
*/
import cockpit from 'cockpit';
import React from 'react';
import { superuser } from "superuser";
import { Form, FormGroup } from "@patternfly/react-core/dist/esm/components/Form/index.js";
import { TextInput } from "@patternfly/react-core/dist/esm/components/TextInput/index.js";
import { has_errors } from "./dialog-utils.js";
import { show_modal_dialog, apply_modal_dialog } from "cockpit-components-dialog.jsx";
import { password_quality, PasswordFormFields } from "cockpit-components-password.jsx";
import { FormHelper } from "cockpit-components-form-helper";
const _ = cockpit.gettext;
function passwd_self(old_pass, new_pass) {
const old_exps = [
/Current password: $/,
/Current Password: $/,
/.*\(current\) UNIX password: $/,
];
const new_exps = [
/.*New password: $/,
/.*Retype new password: $/,
/.*Enter new \w*\s?password: $/,
/.*Retype new \w*\s?password: $/
];
const bad_exps = [
/.*BAD PASSWORD:.*/
];
const too_new_exps = [
/.*must wait longer to change.*/
];
return new Promise((resolve, reject) => {
let buffer = "";
let sent_new = false;
let failure = _("Old password not accepted");
const timeout = window.setTimeout(function() {
failure = _("Prompting via passwd timed out");
proc.close("timeout");
}, 10 * 1000);
const proc = cockpit.spawn(["passwd"], { pty: true, environ: ["LC_ALL=C"], err: "out" })
.always(function() {
window.clearInterval(timeout);
})
.done(function() {
resolve();
})
.fail(function(ex) {
if (ex.exit_status || ex.problem === "timeout")
ex = new Error(failure);
reject(ex);
})
.stream(function(data) {
buffer += data;
for (let i = 0; i < too_new_exps.length; i++) {
if (too_new_exps[i].test(buffer)) {
failure = _("You must wait longer to change your password");
}
}
if (sent_new) {
for (let i = 0; i < bad_exps.length; i++) {
if (bad_exps[i].test(buffer)) {
failure = _("New password was not accepted");
}
}
}
for (let i = 0; i < old_exps.length; i++) {
if (old_exps[i].test(buffer)) {
buffer = "";
this.input(old_pass + "\n", true);
return;
}
}
for (let i = 0; i < new_exps.length; i++) {
if (new_exps[i].test(buffer)) {
buffer = "";
this.input(new_pass + "\n", true);
failure = _("Failed to change password");
sent_new = true;
return;
}
}
});
});
}
export function passwd_change(user, new_pass) {
return new Promise((resolve, reject) => {
cockpit.spawn(["chpasswd"], { superuser: "require", err: "out" })
.input(user + ":" + new_pass)
.done(function() {
resolve();
})
.fail(function(ex, response) {
if (ex.exit_status) {
console.log(ex);
if (response)
ex = new Error(response);
else
ex = new Error(_("Failed to change password"));
}
reject(ex);
});
});
}
function SetPasswordDialogBody({ state, errors, change }) {
const { need_old, password_old, current_user } = state;
return (
<Form isHorizontal onSubmit={apply_modal_dialog}>
{ need_old &&
<>
<input hidden disabled value={current_user} />
<FormGroup label={_("Old password")}
fieldId="account-set-password-old">
<TextInput className="check-passwords" type="password" id="account-set-password-old"
autoComplete="current-password" value={password_old} onChange={(_event, value) => change("password_old", value)} />
<FormHelper helperTextInvalid={errors?.password_old} />
</FormGroup>
</> }
<PasswordFormFields password_label={_("New password")}
password_confirm_label={_("Confirm new password")}
error_password={errors?.password}
error_password_confirm={errors?.password_confirm}
idPrefix="account-set-password"
change={change} />
</Form>
);
}
export function set_password_dialog(account, current_user) {
let dlg = null;
const change_self = (account.name === current_user && !superuser.allowed);
const state = {
need_old: change_self,
current_user,
password_old: "",
password: "",
password_confirm: "",
confirm_weak: false,
};
let errors = { };
let old_password = null;
function change(field, value) {
state[field] = value;
if (state.password !== old_password) {
state.confirm_weak = false;
old_password = state.password;
errors = { };
}
update();
}
function validate(force, password, password_confirm) {
const errs = { };
if (password !== password_confirm)
errs.password_confirm = _("The passwords do not match");
if (password.length > 256)
errs.password = _("Password is longer than 256 characters");
return password_quality(password, force)
.catch(ex => {
errs.password = (ex.message || ex.toString()).replaceAll("\n", " ");
})
.then(() => {
errors = errs;
return !has_errors(errs);
});
}
function passwd_check(force, password, password_confirm, password_old) {
return validate(force, password, password_confirm).then(valid => {
if (valid) {
if (change_self)
return passwd_self(password_old, password);
else
return passwd_change(account.name, password);
} else {
if (!errors.password_confirm && state.password.length <= 256) {
state.confirm_weak = true;
}
update();
return Promise.reject();
}
});
}
function update() {
const props = {
id: "account-set-password-dialog",
title: _("Set password"),
body: <SetPasswordDialogBody state={state} errors={errors} change={change} />
};
const footer = {
actions: [
{
caption: _("Set password"),
style: "primary",
clicked: () => {
return passwd_check(false, state.password, state.password_confirm, state.password_old);
},
disabled: state.confirm_weak
}
]
};
if (state.confirm_weak) {
footer.actions.push(
{
caption: _("Set weak password"),
style: "warning",
clicked: () => {
return passwd_check(true, state.password, state.password_confirm, state.password_old);
}
}
);
}
if (!dlg)
dlg = show_modal_dialog(props, footer);
else {
dlg.setProps(props);
dlg.setFooterProps(footer);
}
}
update();
}
export function reset_password_dialog(account) {
const msg = cockpit.format(_("The account '$0' will be forced to change their password on next login"),
account.name);
const props = {
id: "password-reset",
title: _("Force password change"),
body: <p>{msg}</p>
};
const footer = {
actions: [
{
caption: _("Reset password"),
style: "primary",
clicked: () => {
return cockpit.spawn(["passwd", "-e", account.name],
{ superuser: "require", err: "message" });
}
}
]
};
show_modal_dialog(props, footer);
}
