Attachment #7983 for bug #42267





	layers: {
		"dojo/dojo": {
			customBase: true //,
			//include: [
			//	"ucs/PasswordChange",
			//	"ucs/PasswordForgotten",
			//	"ucs/ProtectAccountAccess"
			//]
		}
	}
};




@!@
import json

subpages = ['password_change', 'password_forgotten', 'protect_account_access']
subpage_variable_path = "umc/self-service/passwordservice/subpage/{}"
filtered_subpages = [page for page in subpages if configRegistry.is_true(subpage_variable_path.format(page))]


password_qualities = [
	'credit/digits',
	'credit/lower',
	'credit/upper',
	'credit/other',
	'forbidden/chars',
	'required/chars'
]
quality_variable_path = "password/quality/{}"
filtered_password_qualities = []
for quality in password_qualities:
	ucr_variable = quality_variable_path.format(quality)
	value = configRegistry.get(ucr_variable);
	if value:
		filtered_password_qualities.append({
			'name': quality,
			'value': value
		})


print json.dumps({
	"subpages": filtered_subpages,
	"password_quality": filtered_password_qualities
})
@!@




	color: #619410;
}

div.PasswordServiceContent {
	background: #f3f3f3;
	padding: 1.3em;
	border-radius: 5px 5px 5px 5px;
	-moz-border-radius: 5px 5px 5px 5px;
	-webkit-border-radius: 5px 5px 5px 5px;
	border: 0px solid #000000;
	-webkit-box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);
	-moz-box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);
	box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);

	.contentDesc {
		font-weight: bold;
	}
}

ol.PasswordOl {
	margin-left: 0;
	padding-right: 0;
	padding-left: 0;
	list-style-type: none;

	li.step {
		counter-increment: step-counter;
		margin-bottom: 1em;

		div {
			margin-top: 0.1em;
		}

		.dijitButton {
			margin: 0.6em 0.6em 0 0;
		}
	}

	li.step::before {
		content: counter(step-counter);
		margin-right: 5px;
		font-size: 80%;
		background-color: rgb(200,200,200);
		color: white;
		font-weight: bold;
		padding: 3px 8px;
		border-radius: 3px;
	}

	div.stepLabel {
		display: inline;
	}
}

ol#PasswordChangeSteps li.step::before {
	background-color: #8ebe43;
}

ol#PasswordForgottenSteps li.step::before {
	background-color: #fd5745;
}

ol#PasswordProtectSteps li.step::before {
	background-color: #f8cd23;
}

div.stepContent {
	margin-top: 1.5em;
}


div.step.hide-step {
	opacity: 0;
	display: none;
	visibility: hidden;
	transition: visibility 0s linear 0.5s, opacity 0.5s ease-in-out;
}

Lines 192-198 Link Here

(-)a/management/univention-self-service/css/form/Common.styl (-1 / +1 lines)
192	.claro .dijitSelectDisabled,	192	.claro .dijitSelectDisabled,
193	.claro .dijitTextBoxDisabled,	193	.claro .dijitTextBoxDisabled,
194	.claro .dijitTextBoxDisabled .dijitInputInner {	194	.claro .dijitTextBoxDisabled .dijitInputInner {
195	color: $disabled-text-color;	195	//color: $disabled-text-color;
196	}	196	}
197		197
198	.dj_webkit .claro .dijitDisabled input {	198	.dj_webkit .claro .dijitDisabled input {





}

#header-middle {
	position: absolute;
	left: 50%;
	top: 13px;
	width: 20px;
	height: 20px;
	margin-left: -10px;
	background: url("../../univention-management-console/js/dijit/themes/umc/images/icons.svg") -40px -20px no-repeat;
}

#header-middle:hover {
	background: url("../../univention-management-console/js/dijit/themes/umc/images/icons.svg") -60px -20px no-repeat;
}



#header-left {
	//float:left;
	left: 0;




}

#navigation {
	.PasswordServiceNav {
		display: inline-block;
		width: 14.2857%;
		min-width: 95px;
		max-width: 160px;
		margin: 5px 0;
		position: relative;
		vertical-align: top;
		cursor: pointer;
	}

	.PasswordServiceNav:active {
		font-weight: bold;
	}

	.PasswordServiceNavBubble {
		-webkit-border-radius: 50%;
		-moz-border-radius: 50%;
		border-radius: 50%;
		background-color: aliceblue;
		width: 70px;
		height: 70px;
		margin: auto;
		background-repeat: no-repeat;
		background-position: 50% 40%;
	}
		.password_change {
			background-color: #8ebe43;
			background-image: url("../../icon/password_change.png");
		&.focused {
			background-position: 0 0;
		}
		.password_forgotten {
			background-color: #fd5745;
			background-image: url("../../icon/password_forgotten.png");
		background-position: -70px -70px;
		&.focused {
			background-position: -70px 0;
		}
		.protect_account_access {
			background-color: #f8cd23;
			background-image: url("../../icon/protect_account_access.png");
		background-position: -140px -70px;
		&.focused {
			background-position: -140px 0;
		}
	}

	.loading-bar {
		opacity: 0;
		transition: opacity 1s ease-in-out;
		width: 100%;
		height: 32px;
		background: url(icons/loading-bubbles.gif) no-repeat;
		background-position: center center;
	}

	.PasswordServiceNavTitle {
		display: block;
		font-size: 1em;
		margin-top: 0.5em;
		white-space: pre-line;
	}
}


Lines 5-7 univention-self-service-modules usr/sbin/ Link Here

(-)a/management/univention-self-service/debian/univention-self-service.install (+1 lines)
5	www usr/share/univention-self-service	5	www usr/share/univention-self-service
6	usr/share/univention-self-service/www/	6	usr/share/univention-self-service/www/
7	var/www/univention-self-service	7	var/www/univention-self-service
		8	icon/*.png var/www/icon




chown self-service:adm $ACCESS_LOG $ERROR_LOG
chmod 640 $ACCESS_LOG $ERROR_LOG

# UCR Variable für Passwort Service
# default: Passwort Service aktiviert
univention-config-registry set self-service/passwordchange/web/enabled?yes
	"ucs/web/overview/entries/service/passwordreset/description/de=Setzen Sie Ihr Passwort zurück oder hinterlegen Sie Kontaktinformationen." \
	"ucs/web/overview/entries/service/passwordreset/label=Password Reset" \
	"ucs/web/overview/entries/service/passwordreset/label/de=Passwort zurücksetzen" \
	"ucs/web/overview/entries/service/passwordreset/link=/univention-self-service/?lang=en-US#passwordreset" \
	"ucs/web/overview/entries/service/passwordreset/link/de=/univention-self-service/?lang=de-DE#passwordreset" \
	"ucs/web/overview/entries/service/passwordreset/port_http=" \
	"ucs/web/overview/entries/service/passwordreset/port_https=443"

# UCR Variablen für Unterseiten des Passwort Services
univention-config-registry set "umc/self-service/passwordservice/subpage/password_change=yes" \
	"umc/self-service/passwordservice/subpage/password_forgotten=yes" \
	"umc/self-service/passwordservice/subpage/protect_account_access=yes"

# Link für Passwort Service
# Informationen für den Link zum Passwort Service
univention-config-registry set "ucs/web/overview/entries/service/passwordchange/label=Password settings" \
	"ucs/web/overview/entries/service/passwordchange/label/de=Passwort-Einstellungen" \
	"ucs/web/overview/entries/service/passwordchange/description=Password change and protection." \
	"ucs/web/overview/entries/service/passwordchange/description/de=Passwort ändern und Kontozugang schützen." \
	"ucs/web/overview/entries/service/passwordchange/link=/univention-self-service/?lang=en-US" \
	"ucs/web/overview/entries/service/passwordchange/link/de=/univention-self-service/?lang=de-DE" \
	"ucs/web/overview/entries/service/passwordchange/port_http=" \
	"ucs/web/overview/entries/service/passwordchange/port_https=443" \
	"ucs/web/overview/entries/service/passwordchange/icon=/icon/password.png"


if [ "$1" = "configure" ]; then




	;;
esac

# UCR Variablen bei Deinstallation löschen
if [ "$1" = "remove" -o "$1" = "purge" ]; then
	# Informationen für den Link zum Passwort Service löschen
		ucs/web/overview/entries/service/passwordreset/description \
		ucs/web/overview/entries/service/passwordreset/description/de \
		ucs/web/overview/entries/service/passwordreset/icon \
		ucs/web/overview/entries/service/passwordreset/label \
		ucs/web/overview/entries/service/passwordreset/label/de \
		ucs/web/overview/entries/service/passwordreset/link \
		ucs/web/overview/entries/service/passwordreset/link/de \
		ucs/web/overview/entries/service/passwordreset/port_http \
		ucs/web/overview/entries/service/passwordreset/port_https

	univention-config-registry unset \
		ucs/web/overview/entries/service/passwordchange/description \
		ucs/web/overview/entries/service/passwordchange/description/de \

		ucs/web/overview/entries/service/passwordchange/link \
		ucs/web/overview/entries/service/passwordchange/link/de \
		ucs/web/overview/entries/service/passwordchange/port_http \
		ucs/web/overview/entries/service/passwordchange/port_https \
		ucs/web/overview/entries/service/passwordchange/icon

	# UCR Variablen für die Unterseiten des Passwort Services löschen
	univention-config-registry unset \
		umc/self-service/passwordservice/subpage/password_change \
		umc/self-service/passwordservice/subpage/password_forgotten \
		umc/self-service/passwordservice/subpage/protect_account_access

	# restart, so apache unloads WSGI and deactivats plugin in its config
	# retry if fail because of to quick successive restarts (from other frontend packages)

Lines 2-4 Type: file Link Here

(-)a/management/univention-self-service/debian/univention-self-service.univention-config-registry (+5 lines)
2	File: usr/share/univention-self-service/www/languages.json	2	File: usr/share/univention-self-service/www/languages.json
3	Variables: locale	3	Variables: locale
4	Variables: ucs/server/languages/.*	4	Variables: ucs/server/languages/.*
		5
		6	Type: file
		7	File: usr/share/univention-self-service/www/entries.json
		8	Variables: umc/self-service/passwordservice/subpage/.*
		9	Variables: password/quality/.*




Description[en]=Enable the web page of the password self service module (default "yes").
Type=bool
Categories=self-service

[umc/self-service/passwordservice/subpage/password_change]
Description[de]=Die Unterseite "Passwort ändern" des Password-Self-Service Moduls einschalten (Standard: "yes").
Description[en]=Enable the sub page "Password change" of the password self service module (default "yes").
Type=bool
Categories=self-service

[umc/self-service/passwordservice/subpage/password_forgotten]
Description[de]=Die Unterseite "Passwort vergessen" des Password-Self-Service Moduls einschalten (Standard: "yes").
Description[en]=Enable the sub page "Password forgotten" of the password self service module (default "yes").
Type=bool
Categories=self-service

[umc/self-service/passwordservice/subpage/protect_account_access]
Description[de]=Die Unterseite "Kontozugäng schützen" des Password-Self-Service Moduls einschalten (Standard: "yes").
Description[en]=Enable the sub page "Protect account access" of the password self service module (default "yes").
Type=bool
Categories=self-service




/**
* Search the value of the QueryString for an given key.
* @param: {string} key - Key for the searched value.
* @param: {mixed} defaultVal - default value if no value is found.
* */
function getQuery(key, defaultVal) {
	var queryString = window.location.search.substring(1);
	var items = queryString.split('&');
	for (var i = 0; i < items.length; i++) {
		var tuple = items[i].split('=');
		if (2 == tuple.length && key == tuple[0]) {
			return tuple[1];
		}
	}
	return defaultVal;
}


/**
 * Get the current language from the queryString
 * */
function getLocale() {
	var locale = getQuery('lang', 'en-US');
	locale = locale.replace('_', '-');
	return locale;
}

// load the javascript module that is specified in the hash
var selfService = document.location.hash.substr(1);

var dojoConfig = {
	isDebug: false,
	locale: getLocale(),
	async: true,
	callback: function() {
		require([
			"ucs/PasswordService",
			"dojo/topic",
			"ucs/" + selfService,
			"ucs/LanguagesDropDown",
			"dojo/domReady!"
		], function(PasswordService, LanguagesDropDown) {
			PasswordService.start();
			LanguagesDropDown.start();
			topic.subscribe("/dojo/hashchange", function(changedHash) {
				window.location.reload();
			});
		});
	}
};

Lines 270-276 define([ Link Here

(-)a/management/univention-self-service/js/ucs/LabelPane.js (-1 / +1 lines)
270	if (description && !this.content.handlesTooltips) {	270	if (description && !this.content.handlesTooltips) {
271	//default to the 'new' tooltip style	271	//default to the 'new' tooltip style
272	if (!this.usesHoverTooltip) {	272	if (!this.usesHoverTooltip) {
273	if (this._isLabelDisplayed() && this.label && !(this.label === ' ')) {	273	if (this._isLabelDisplayed() && this.label && this.label !== ' ') {
274	labelNode = this._getLabelNode();	274	labelNode = this._getLabelNode();
275	this.tooltipNode = domConstruct.create("div",{	275	this.tooltipNode = domConstruct.create("div",{
276	'class': "umcDescription umcDescriptionIcon"	276	'class': "umcDescription umcDescriptionIcon"




/*
 * Copyright 2011-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define*/

define([
	"dojo/_base/declare",
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/when",
	"dojo/json",
	"dijit/form/ValidationTextBox",
	"./_FormWidgetMixin",
	"./LabelPane",
	"./lib",
	"./i18n!."
], function(declare, lang, array, when, json, ValidationTextBox, _FormWidgetMixin, LabelPane, lib, _) {
	return declare('umc.widgets.PasswordBox', [ ValidationTextBox, _FormWidgetMixin ], {
		label: null,
		type: 'password',
		required: true,
		missingMessage: _('This value is required.'),
		promptMessage: '',
		invalidMessage: '',
		tooltipPosition: ['below', 'after'],
		active_password_qualities: null,
		password_qualities: {
			'credit/digits': {
				reg: '.{%[0]}',
				promptMessage: _('Required length:')
			},
			'credit/lower': {
				reg: '^(.*?[a-z]){%[0],}',
				promptMessage: _('Required number of lower case letters:')
			},
			'credit/upper': {
				reg: '^(.*?[A-Z]){%[0],}',
				promptMessage: _('Required number of upper case letters:')
			},
			'credit/other': {
				reg: '^(.*?[^a-zA-Z0-9]){%[0],}',
				promptMessage: _('Required number of special characters (nor digit or letters):')
			},
			'forbidden/chars': {
				reg: "^((?![%[0]]).)*$",
				promptMessage: _('Forbidden chars:')
			},
			'required/chars': {
				reg: '[%[0]]',
				promptMessage: _('Required chars:')
			}
		},

		buildRendering: function() {
			this.inherited(arguments);
			if (this.label !== undefined) {
				this._createLabelNode();
			}
			when(lib.getBackendInformation()).then(lang.hitch(this, function(data) {
				var result = JSON.parse(data, true);
				this.active_password_qualities = result.password_quality;
				this.setPromptMessage(result.password_quality);
			}));
		},

		isValid: function() {
			return this.validator();
		},

		_hasValue: function(password) {
			if (password) {
				return true;
			} else {
				this.setPromptMessage();
				this.invalidMessage = _('This value is required.');
				return false;
			}
		},

		/** Checks if the password meets the active password qualities.
		 * @param {string} password - Current value of the input box.
		 * **/
		_hasValidPasswordQuality: function(password) {
			var result = array.filter(this.active_password_qualities, lang.hitch(this, function(iqual) {
				var quality = this.password_qualities[iqual.name];
				var reg_str = lang.replace(quality.reg, [iqual.value], /\%\[([^\]]+)\]/g);
				var reg = new RegExp(reg_str);
				if (reg.test(password)) {
					return true;
				} else {
					this.invalidMessage += lang.replace('{0} {1}{2}', [quality.promptMessage, iqual.value, '</br>']);
					this.promptMessage = this.invalidMessage;
					return false;
				}
			}));
			if (result.length === this.active_password_qualities.length) {
				this.setValid(true);
				return true;
			} else {
				return false;
			}
		},

		validator: function() {
			this.invalidMessage = '';
			this.promptMessage = '';
			var password = this.get('value');
			return this._hasValue(password) && this._hasValidPasswordQuality(password);
		},

		setPromptMessage: function(active_qualities) {
			var qualities = active_qualities || this.active_password_qualities;
			if (qualities && qualities.length) {
				this.promptMessage = _('The password must fullfill following conditions:');
				array.forEach(qualities, lang.hitch(this, function(iqual) {
					var quality = this.password_qualities[iqual.name];
					this.promptMessage += lang.replace('{0}{1} {2}', ['</br>', quality.promptMessage, iqual.value]);
				}));
			}
		},

		_createLabelNode: function() {
			this.label = new LabelPane({
				content: this,
				'class': this['class']
			});
			this.set('class', '');
		},

		reset: function() {
			this.set('value', '');
			this.set('disabled', false);
			this.setValid();
		}
	});
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./TextBox",
	"./PasswordBox",
	"./lib",
	"./i18n!."
], function(lang, on, keys, dom, json, xhr, Button, put, TextBox, PasswordBox, lib, _) {

	return {
		title: _('Password change'),
		desc: _('Change your (expired) password.'),
		hash: 'passwordchange',
		contentContainer: null,
		steps: null,

		/**
		 * Returns the title of the subpage.
		 * */
		getTitle: function() {
			return _(this.title);
		},

		/**
		 * Returns the description of the subpage.
		 * */
		getDesc: function() {
			return _(this.desc);
		},

		/**
		 * Return the content node of the subpage.
		 * If the content does not exists, it will be generated.
		 * */
		getContent: function() {
			if (!this.contentContainer) {
				this.contentContainer = put('div.contentWrapper');
				put(this.contentContainer, 'div.contentDesc', this.getDesc());
				put(this.contentContainer, this._getSteps());
			}
			return this.contentContainer;
		},

		/**
		 * Return the steps for the content node.
		 * If the steps do not exists, they will be generated.
		 * Note: Please call getContent for generating the steps.
		 * */
		_getSteps: function() {
			if (!this.steps) {
				this.steps = put('ol#PasswordChangeSteps.PasswordOl');
				this._createUsername();
				this._createOldPassword();
				this._createNewPassword();
				this._createSubmit();
			}
			return this.steps;
		},

		/**
		 * Creates input field for username.
		 * */
		_createUsername: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('Username'));
			put(step, label);
			this._username = new TextBox({
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._username.startup();
			put(step, this._username.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates input field for old password.
		 * */
		_createOldPassword: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('Old Password'));
			put(step, label);
			this._oldPassword = new TextBox({
				'class': 'soloLabelPane',
				type: 'password',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._oldPassword.startup();
			put(step, this._oldPassword.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates input fields for new password.
		 * */
		_createNewPassword: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('New Password'));
			put(step, label);
			this._newPassword = new PasswordBox({
				'class': 'soloLabelPane left'
			});
			this._newPassword.startup();
			put(step, this._newPassword.domNode);
			put(this.steps, step);

			step = put('li.step');
			label = put('div.stepLabel', _('New Password (retype)'));
			put(step, label);
			this._verifyPassword = new TextBox({
				type: 'password',
				'class': 'soloLabelPane',
				isValid: lang.hitch(this, function() {
					return this._newPassword.get('value') ===
						this._verifyPassword.get('value');
				}),
				invalidMessage: _('The passwords do not match, please retype again.'),
				required: true
			});
			this._verifyPassword.startup();
			put(step, this._verifyPassword.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates submit button.
		 * */
		_createSubmit: function() {
			var step = put('div');
			this._submitButton = new Button({
				label: _('Change password'),
				onClick: lang.hitch(this, '_setPassword')
			});
			put(step, '>', this._submitButton.domNode);

			// let the user submit the form by pressing ENTER
			on(document, "keyup", lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER && !this._submitButton.get('disabled')) {
					this._setPassword();
				}
			}));
			put(this.steps, step);
		},

		/**
		 * Changes the current password if all input fields are valid.
		 * */
		_setPassword: function() {
			this._submitButton.set('disabled', true);
			var allInputFieldsAreValid = this._username.isValid() &&
				this._oldPassword.isValid() &&
				this._newPassword.isValid() &&
				this._verifyPassword.isValid();

			if (allInputFieldsAreValid) {
				data = json.stringify({
					password: {
						'username': this._username.get('value'),
						'password': this._oldPassword.get('value'),
						'new_password': this._newPassword.get('value')
					}
				});

				xhr.post('/univention-management-console/set', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib.showLastMessage({
						content: data.message,
						'class': '.success'
					});
					this._clearAllInputFields();
				}), lang.hitch(this, function(err) {
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						'class': '.error'
					});
				})).always(lang.hitch(this, function(){
					this._submitButton.set('disabled', false);
				}));
			} else {
				this._submitButton.set('disabled', false);
			}
		},

		/**
		 * Clears all input field values of the subpage.
		 * */
		_clearAllInputFields: function() {
			this._username.reset();
			this._oldPassword.reset();
			this._newPassword.reset();
			this._verifyPassword.reset();
		}
	};
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./ContainerWidget",
	"./LabelPane",
	"./TextBox",
	"./PasswordBox",
	"./RadioButton",
	"./lib",
	"./i18n!."
], function(lang, array, on, keys, dom, json, xhr, Button, put, ContainerWidget, LabelPane, TextBox, PasswordBox, RadioButton, lib, _) {

	return {
		title: _("Password forgotten"),
		desc: _("Forgot your password? Set a new one: "),
		altDesc: _("Set a new password!"),
		hash: 'passwordreset',
		contentContainer: null,
		steps: null,
		selectedRenewOption: null,

		/**
		 * Returns the title of the subpage.
		 * */
		getTitle: function() {
			return _(this.title);
		},

		/**
		 * Returns the description for the subpage:
		 * Request New Password.
		 * */
		getRequestNewPassDesc: function() {
			return _(this.desc);
		},

		/**
		 * Returns the description for the subpage:
		 * Set New Password.
		 * */
		getSetNewPassDesc: function() {
			return _(this.altDesc);
		},

		/**
		 * Checks if the the query string contains credentials
		 * for setting a new password.
		 * True -Return a subpage to set a new password.
		 * False - Return a subpage to request a new password.
		 * */
		getContent: function() {
			this.contentContainer = put('div.contentWrapper');
			var credentials = this._getCredentials();
			if (credentials) {
				put(this.contentContainer, 'div.contentDesc', this.getSetNewPassDesc());
				put(this.contentContainer, this._getSetNewSteps());
			} else {
				put(this.contentContainer, 'div.contentDesc', this.getRequestNewPassDesc());
				put(this.contentContainer, this._getRequestSteps());
			}
			return this.contentContainer;
		},

		/**
		 * Return the steps for the subpage:
		 * Request New Password.
		 * If the steps do not exists, they will be generated.
		 * Note: Please call getContent for generating the steps.
		 * */
		_getRequestSteps: function() {
			if (!this.steps) {
				this.steps = put('ol#PasswordForgottenSteps.PasswordOl');
				this._createUsername();
			}
			return this.steps;
		},

		/**
		 * Return the steps for the subpage:
		 * Set New Password.
		 * If the steps do not exists, they will be generated.
		 * Note: Please call getContent for generating the steps.
		 * */
		_getSetNewSteps: function() {
			if (!this.steps) {
				this.steps = put('ol#PasswordForgottenSteps.PasswordOl');
				this._createNewPassword();
				this._createSubmitNewPassword();
			}
			return this.steps;
		},

		/**
		 * Creates input field for username and submit button.
		 * */
		_createUsername: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('Username'));
			put(step, label);
			this._username = new TextBox({
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._username.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getResetMethods();
				}
			}));
			this._username.startup();
			put(step, this._username.domNode);

			this._usernameButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_getResetMethods')
			});
			put(step, this._usernameButton.domNode);
			put(this.steps, step);
		},

		/**
		 * Gets the available renew options for the user from
		 * the server.
		 * */
		_getResetMethods: function() {
			this._username.set('disabled', true);
			this._usernameButton.set('disabled', true);

			if (this._username.isValid()) {
				data = json.stringify({
					'username': this._username.get('value')
				});
				xhr.post('passwordreset/get_reset_methods', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					put(this._usernameButton.domNode, '.dijitHidden');
					this._createRenewOptions(data.result);
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						'class': '.error'
					});
					this._usernameButton.set('disabled', false);
					this._username.set('disabled', false);
				}));
			} else {
				this._usernameButton.set('disabled', false);
				this._username.set('disabled', false);
			}
		},

		/**
		 * Creates a list of all options which are
		 * available to request a new password.
		 * @param {array} options - List of password renew options.
		 * */
		_createRenewOptions: function(options) {
			// TODO: skipable for having a pin
			var step = put('li.step.hide-step');
			var label = put('div.stepLabel', _('Please choose an option to renew your password.'));
			put(step, label);
			var renewOptions = this._renderRenewOptions(options);
			put(label, renewOptions);
			this._requestTokenButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_requestToken')
			});
			put(step, this._requestTokenButton.domNode);
			put(this.steps, step);
		},

		/**
		 * Renders a pair of label and radioButton for each
		 * renew option.
		 * */
		_renderRenewOptions: function(options) {
			this._tokenOptions = new ContainerWidget({});
			array.forEach(options, lang.hitch(this, function(obj, idx){
				var radioButton = new RadioButton({
					name: 'button' + idx,
					label: obj.label,
					method: obj.id,
					checked: idx === 0,
					radioButtonGroup: 'token',
					_categoryID: 'token'
				});
				var label = new LabelPane({
					'class': 'ucsRadioButtonLabel',
					content: radioButton
				});
				this._tokenOptions.addChild(label);
			}));
			return this._tokenOptions.domNode;
		},

		/**
		 * Requests a mail or pin from the server to renew the
		 * password.
		 * */
		_requestToken: function() {
			//TODO: Display the renew option for mobilenumber
			//TODO: Add an option to request a new mail/sms
			if (this._getRenewOption()) {
				this._requestTokenButton.set('disabled', true);
				data = json.stringify({
					'username': this._username.get('value'),
					'method': this.selectedRenewOption.method
				});
				xhr.post('passwordreset/send_token', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					this._showNewPasswordHowTo();
					lib.showMessage({
						content: data.message,
						'class': '.success'
					});
					put(this._requestTokenButton.domNode, '.dijitHidden');
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.tokenNode,
						'class': '.error'
					});
					this._requestTokenButton.set('disabled', false);
				}));
			}
		},

		/**
		 * Gets the selected renew option.
		 * */
		_getRenewOption: function() {
			array.some(this._tokenOptions.getChildren(), lang.hitch(this, function(option) {
				var radioButton = option.getChildren()[0];
				if (radioButton.checked) {
					this.selectedRenewOption= {
						label: radioButton.get('label'),
						method: radioButton.get('method')
					};
				}
			}));
			return this.selectedRenewOption;
		},

		/**
		 * Creates a message with instructions about what
		 * todo next to renew the password.
		 * */
		_showNewPasswordHowTo: function() {
			// TODO: add option for sms
			var step = put('li.step');
			var label = put('div.stepLabel', _('You have mail!'));
			put(step, label);
			var msg = put('div.soloLabelPane', _('We have send you an e-mail to your alternative e-mail address, that you have provided on the page "Protect Account Access". Please check your mails and follow the link to renew your password.'));
			put(step, msg);
			var hint = put('div.soloLabelPane', _('If you did not received an e-mail please check your spam directory or use this link to go back to step 2.'));
			put(step, hint);
			put(this.steps, step);
		},

		/**
		 * Creates input fields to set a new password.
		 */
		_createNewPassword: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('New Password'));
			put(step, label);
			this._newPassword = new PasswordBox({
				'class': 'soloLabelPane'
			});
			this._newPassword.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setPassword();
				}
			}));
			this._newPassword.startup();
			put(step, this._newPassword.domNode);
			put(this.steps, step);

			step = put('li.step');
			label = put('div.stepLabel', _('New Password (retype)'));
			put(step, label);
			this._verifyPassword = new TextBox({
				type: 'password',
				'class': 'soloLabelPane',
				isValid: lang.hitch(this, function() {
					return this._newPassword.get('value') ===
						this._verifyPassword.get('value');
				}),
				invalidMessage: _('The passwords do not match, please retype again.'),
				required: true
			});
			this._verifyPassword.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setPassword();
				}
			}));
			this._verifyPassword.startup();
			put(step, this._verifyPassword.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates submit button.
		 * */
		_createSubmitNewPassword: function() {
			var step = put('div');
			this._setPasswordButton = new Button({
				label: _('Change password'),
				onClick: lang.hitch(this, '_setPassword')
			});
			put(step, this._setPasswordButton.domNode);
			put(this.steps, step);
		},

		/**
		 * Sets the new password by sending it to the server.
		 */
		_setPassword: function() {
			this._disableNewPasswordInputs(true);
			var credentials = this._getCredentials();

			var isTokenAndNewPassValid = credentials &&
				this._newPassword.isValid() &&
				this._verifyPassword.isValid();

			if (isTokenAndNewPassValid) {
				data = json.stringify({
					'username': credentials.username,
					'password': this._verifyPassword.get('value'),
					'token' : credentials.token
				});
				xhr.post('passwordreset/set_password', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib.showLastMessage({
						content: data.message,
						'class': '.success'
					});
					this._resetNewPasswordInputs();
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.newPasswordNode,
						'class': '.error'
					});
					this._disableNewPasswordInputs(false);
				}));
			} else {
				this._disableNewPasswordInputs(false);
			}
		},

		_disableNewPasswordInputs: function(/* boolean */ isDiabled) {
			this._setPasswordButton.set('disabled', isDiabled);
			this._newPassword.set('disabled', isDiabled);
			this._verifyPassword.set('disabled', isDiabled);
		},

		_resetNewPasswordInputs: function() {
			this._setPasswordButton.set('value', '');
			this._newPassword.set('value', '');
			this._verifyPassword.set('value', '');
			this._disableNewPasswordInputs(false);
		},

		/**
		 * Gets credentials (token and username) from query string.
		 * */
		_getCredentials: function() {
			var token = lib.getQuery('token');
			var username = lib.getQuery('username');
			if (token && username) {
				return {
					username: username,
					token: token
				};
			}
			return null;
		}
	};
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */

define([
	"dojo/hash",
	"dojo/topic",
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/_base/xhr",
	"dojo/json",
	"put-selector/put",
	"dojo/dom",
	"dijit/layout/StackContainer",
	"dijit/layout/ContentPane",
	"./PasswordChange",
	"./PasswordForgotten",
	"./ProtectAccountAccess",
	"./lib",
	"dojo/domReady!"
], function(hash, topic, lang, array, xhr, JSON, put, dom, StackContainer, ContentPane, PasswordChange, PasswordForgotten, ProtectAccountAccess, lib){

	return {
		content_container: null,
		content_controller: null,
		backend_info: null,
		subpages: {
			"password_change": PasswordChange,
			"password_forgotten": PasswordForgotten,
			"protect_account_access": ProtectAccountAccess
		},
		site_hashes: {},

		/**
		 * Builds the active subpages of the
		 * Password Service.
		 */
		start: function() {
			this._initContainer();
			this._initController();
			this._subscribeOnHashEvents();
			this._requestActiveSubpages();
		},

		_subscribeOnHashEvents: function() {
			topic.subscribe("/dojo/hashchange", lang.hitch(this, function(changedHash) {
				//window.location.reload();
				lib._removeMessage();
				this._loadSubpage(changedHash);
			}));
		},

		/**
		 * Requests the active subpages.
		 **/
		_requestActiveSubpages: function() {
			xhr.get({
				url: "/univention-self-service/entries.json",
				load: lang.hitch(this, function(data) {
					this.backend_info = JSON.parse(data, true);
					this._addSubPages(this.backend_info.subpages || []);
				}),
				error: lang.hitch(this, function(data) {
					console.error(data);
				})
			});
		},

		_initContainer : function() {
			this.content_container = new StackContainer({
				"class" : "PasswordServiceContent",
				id: "contentContainer",
				doLayout: false
			}, "content");
			this.content_container.startup();
		},

		_initController: function() {
			var navContainer = dom.byId('navigation');
			this.content_controller = put(navContainer, ".PasswordServiceController");
		},

		/**
		 * Adds the subpages by name to the Password Service.
		 * */
		_addSubPages: function(page_list) {
			array.forEach(page_list, lang.hitch(this, function(page_name){
				var module = this.subpages[page_name];
				if (module) {
					var subpage = new ContentPane({
						content: module.getContent()
					});
					this.site_hashes[module.hash] = subpage;
					var nav = put("div.PasswordServiceNav", {
						onclick: lang.hitch(this, function() {
							hash(module.hash);
						})
					});
					var bubble = put(nav, "div.PasswordServiceNavBubble" + "." + page_name);
					var title = put(nav, "div.PasswordServiceNavTitle", {
						innerHTML: module.getTitle()
					});
					put(this.content_controller, nav);
					this.content_container.addChild(subpage);
				}
			}));
			this._loadSubpage(hash());
		},

		_loadSubpage: function(changedHash) {
			var subpage = this.site_hashes[changedHash];
			if (!subpage) {
				subpage = this.content_container.getChildren()[0];
			}
			this.content_container.selectChild(subpage);
		}
    };
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./ContainerWidget",
	"./TextBox",
	"./RadioButton",
	"./lib",
	"./i18n!."
], function(lang, array, on, keys, dom, json, xhr, Button, put, ContainerWidget, TextBox, RadioButton, lib, _) {

	return {
		title: _('Protect Account Access'),
		desc: _('Everyone forgets their password now and then. Protect yourself and activate the opportunity to set a new password.'),
		hash: 'setcontactinformation',
		contentContainer: null,
		steps: null,

		/**
		 * Returns the title of the subpage.
		 * */
		getTitle: function() {
			return _(this.title);
		},

		/**
		 * Returns the description of the subpage.
		 * */
		getDesc: function() {
			return _(this.desc);
		},

		/**
		 * Return the content node of the subpage.
		 * If the content does not exists, it will be generated.
		 * */
		getContent: function() {
			if (!this.contentContainer) {
				this.contentContainer = put('div.contentWrapper');
				put(this.contentContainer, 'div.contentDesc', this.getDesc());
				put(this.contentContainer, this._getSteps());
			}
			return this.contentContainer;
		},

		/**
		 * Return the steps for the content node.
		 * If the steps do not exists, they will be generated.
		 * Note: Please call getContent for generating the steps.
		 * */
		_getSteps: function() {
			if (!this.steps) {
				this.steps = put('ol#PasswordProtectSteps.PasswordOl');
				this._createUsername();
				this._createPassword();
				this._createSubmit();
			}
			return this.steps;
		},

		/**
		 * Creates input field for username.
		 * */
		_createUsername: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('Username'));
			put(step, label);
			this._username = new TextBox({
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._username.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getContactInformation();
				}
			}));
			this._username.startup();
			put(step, this._username.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates input field for password.
		 * */
		_createPassword: function() {
			var step = put('li.step');
			var label = put('div.stepLabel', _('Password'));
			put(step, label);
			this._password = new TextBox({
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true,
				type: 'password'
			});
			this._password.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getContactInformation();
				}
			}));
			this._password.startup();
			put(step, this._password.domNode);
			put(this.steps, step);
		},

		/**
		 * Creates submit button.
		 * */
		_createSubmit: function() {
			var step = put('div');
			this._showContactInformationButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_getContactInformation')
			});
			put(step, this._showContactInformationButton.domNode);
			put(this.steps, step);
		},

		/**
		 * Requests available renew options.
		 * */
		_getContactInformation: function() {
			this._username.set('disabled', true);
			this._password.set('disabled', true);
			this._showContactInformationButton.set('disabled', true);

			var validCredentials = this._username.isValid() && this._password.isValid();
			if (validCredentials) {
				data = json.stringify({
					'username': this._username.get('value'),
					'password': this._password.get('value')
				});
				xhr.post('passwordreset/get_contact', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					put(this._showContactInformationButton.domNode, '.dijitHidden');
					this._createRenewOptions(data.result);
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						'class': '.error'
					});
					this._showContactInformationButton.set('disabled', false);
					this._username.set('disabled', false);
					this._password.set('disabled', false);
				}));
			} else {
				this._showContactInformationButton.set('disabled', false);
				this._username.set('disabled', false);
				this._password.set('disabled', false);
			}
		},

		/**
		 * Creates renew options.
		 * @param {array} renewOptions - List of renew options.
		 * */
		_createRenewOptions: function(renewOptions) {
			var options = renewOptions.length ? renewOptions : [{id: "email", value: '', label: "E-Mail"}];
			var step = put('li.step');
			this._renewOptions = step;
			var label = put('div.stepLabel', _('Activate renew options.'));
			put(step, label);
			this._renewInputs = array.map(options, function(option) {
				var optionNode = put('div');
				put(optionNode, 'div', option.label + _(' (retype)'));
				var input = new TextBox({
					value: option.value
				});
				var inputRetype = new TextBox({
					value: option.value,
					id: option.id,
					isValid: function() {
						return input.get('value') ===
							this.get('value');
					},
					invalidMessage: _('The entries do not match, please retype again.')
				});
				put(optionNode, input.domNode);
				put(optionNode, inputRetype.domNode);
				put(step, optionNode);
				return {
					id: option.id,
					getValue: function() { return inputRetype.get('value');},
					isValid: function() { return inputRetype.isValid();}
				};
			});
			this._saveButton = new Button({
				label: _('Save'),
				onClick: lang.hitch(this, '_setContactInformation')
			});
			put(step, this._saveButton.domNode);

			this._cancelButton = new Button({
				label: _('Cancel'),
				onClick: lang.hitch(this, '_deleteRenewOptions')
			});
			put(step, this._cancelButton.domNode);
			put(this.steps, step);
		},

		/**
		 * Send renew options to the server.
		 * */
		_setContactInformation: function() {
			this._cancelButton.set('disabled', true);
			this._saveButton.set('disabled', true);

			var allOptionsAreValid = array.some(this._renewInputs, function(input){
				return input.isValid();
			});
			
			//var isValidMail = this._validateMail(data.email);
			if (allOptionsAreValid) {
				data = this._getNewContactInformation();
				xhr.post('passwordreset/set_contact', {
						handleAs: 'json',
						headers: {
							'Content-Type': 'application/json',
							'Accept-Language': lib.getQuery('lang') || 'en-US'
						},
						data: json.stringify(data)
					}).then(lang.hitch(this, function(data) {
						lib.showLastMessage({
							content: data.message,
							'class': '.success'
						});
						this._deleteRenewOptions();
					}), lang.hitch(this, function(err){
						var message = err.name + ": " + err.message;
						if (err.response && err.response.data && err.response.data.message) {
							message = err.response.data.message;
						}
						lib.showMessage({
							content: message,
							'class': '.error'
						});
						this._cancelButton.set('disabled', false);
						this._saveButton.set('disabled', false);
					}));
			} else {
				this._cancelButton.set('disabled', false);
				this._saveButton.set('disabled', false);
			}
		},

		/**
		 * Gets current renew options and credentials.
		 * */
		_getNewContactInformation: function() {
			var contactInformation = {
				'username': this._username.get('value'),
				'password': this._password.get('value')
			};
			array.forEach(this._renewInputs, function(input){
				contactInformation[input.id] = input.getValue();
			});

			// ugly hack because the backend urgently needs an empty string
			// for mail and for mobile
			array.forEach(['email', 'mobile'], function(key) {
				if (!contactInformation[key]) {
					contactInformation[key] = '';
				}
			});
			return contactInformation;
		},

		/**
		 * Validates given email address.
		 * */
		_validateMail: function(email) {
			var reg = /^([\w\-]+(?:\.[\w\-]+)*)@((?:[\w\-]+\.)*\w[\w\-]{0,66})\.([a-z]{2,6}(?:\.[a-z]{2})?)$/i;
			var isValid = !email.length || reg.test(email);
			if(!isValid) {
				lib.showMessage({
					content: _('Please enter a valid email address.'),
					'class': '.error'
				});
			}
			return isValid;
		},

		/**
		 * Delets renew options node.
		 * */
		_deleteRenewOptions: function() {
			put(this._renewOptions, '!');
			put(this._showContactInformationButton.domNode, '!dijitHidden');
			this._showContactInformationButton.set('disabled', false);
			this._username.reset();
			this._password.reset();
		}
	};
});





define([
	"dojo/_base/declare",
	"dijit/form/ValidationTextBox"
], function(declare, ValidationTextBox) {
	return declare("selfservice.password.TextBox", [ ValidationTextBox ], {
	"dojo/when",
	"dijit/form/ValidationTextBox",
	"./LabelPane",
	"./_FormWidgetMixin"
	//"umc/tools"
], function(declare, lang, put, on, when, ValidationTextBox, LabelPane, _FormWidgetMixin) {
	return declare("umc.widgets.TextBox", [ ValidationTextBox, _FormWidgetMixin ], {
		// dynamicValue: String|Function
		//		Either an UMCP command to query a value from or a javascript function.
		//		The javascript function may return a String or a dojo/Deferred object.
		dynamicValue: null,

		// depends: String?|String[]?
		//		Specifies that values need to be loaded dynamically depending on
		//		other form fields.
		depends: null,

		// umcpCommand:
		//		Reference to the umcpCommand the widget should use.
		//		In order to make the widget send information such as module flavor
		//		etc., it can be necessary to specify a module specific umcpCommand
		//		method.
		//umcpCommand: lang.hitch(tools, 'umcpCommand'),

		// inlineLabel: String
		//		If specified, the given string ias positioned as label above the input field.
		inlineLabel: null,
		_inlineLabelNode: null,
		label: null,

		_createInlineLabelNode: function(value) {
			this._inlineLabelNode = put(this.focusNode, '-span.umcInlineLabel', value);
			this.own(on(this._inlineLabelNode, 'click', lang.hitch(this, 'focus')));
		},

		reset: function() {
			this.set('value', '');
			this.set('disabled', false);
			this.setValid();
			if (this.inlineLabel && this._inlineLabelNode) {
				this._updateInlineLabelVisibility();
			}
		},

		_updateInlineLabelVisibility: function(eventType) {
			var showInlineLabel = !this.get('value') && eventType != 'keydown';
			put(this._inlineLabelNode, showInlineLabel ? '.umcEmptyValue' : '!umcEmptyValue');
		},

		_registerInlineLabelEvents: function() {
			this.on('keydown', lang.hitch(this, '_updateInlineLabelVisibility', 'keydown'));
			this.on('click', lang.hitch(this, '_updateInlineLabelVisibility', 'keydown'));
			this.on('focus', lang.hitch(this, '_updateInlineLabelVisibility', 'focus'));
			this.on('blur', lang.hitch(this, '_updateInlineLabelVisibility', 'blur'));
		},

		_setInlineLabelAttr: function(value) {
			if (!this._inlineLabelNode) {
				return;
			}

			// update node content
			put(this._inlineLabelNode, '', {
				innerHTML: value
			});

			// notify observers
			this._set('inlineLabel', value);
		},

		buildRendering: function() {
			this.inherited(arguments);
			if (this.inlineLabel !== null) {
				this._createInlineLabelNode(this.inlineLabel);
				this._registerInlineLabelEvents();
				this._updateInlineLabelVisibility();
			}
			if (this.label !== undefined) {
				this.label = new LabelPane({
					content: this,
					'class': this['class']
				});
				this.set('class', '');
			}
			this.tooltipPosition = ['after', 'below'];
		},

		reset: function() {
			this.set('value', '');
			this.set('disabled', false);
//			// mixin additional options for the UMCP command
//			if (this.dynamicOptions && typeof this.dynamicOptions == "object") {
//				lang.mixin(params, this.dynamicOptions);
//			}
//
//			// get the dynamic values, block concurrent events for value loading
//			var func = tools.stringOrFunction(this.dynamicValue, this.umcpCommand);
//			var deferredOrValues = func(params);
//
//			// make sure we have an array or a dojo/Deferred object
//			if (deferredOrValues) {
//				when(deferredOrValues, lang.hitch(this, function(res) {
//					this.set('value', res);
//				}));
//			}
//		},

		// this seems to be necessary for IE8:
		// https://forge.univention.org/bugzilla/show_bug.cgi?id=28498
		_getValueAttr: function() {
			var val = this.inherited(arguments);
			if (val === '') {
				// seriously! at least it should not break anything...
				// although val === '', json.stringify returns ""null"" in IE8
				val = '';
			}
			return val;
		}
	});
});




msgstr ""
"Project-Id-Version: univention-apache\n"
"Report-Msgid-Bugs-To: packages@univention.de\n"
"POT-Creation-Date: 2016-04-01 13:30+0200\n"
"PO-Revision-Date: 2016-01-14 11:26+0100\n"
"Last-Translator: Univention GmbH <packages@univention.de>\n"
"Language-Team: Univention GmbH <packages@univention.de>\n"

"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"

msgid " (retype)"
msgstr " (Wiederholung)"

msgid " If your token has expired you can <a>request a new token</a>."
msgstr " Wenn Ihr Token abgelaufen ist, können Sie einen <a>neuen Token anfordern</a>."

msgid "</br><a href='/{0}'>Back to the overview.</a>"
msgstr "</br><a href='/{0}'>Zurück zur Übersicht.</a>"

msgid "</br><div>You will be redirected {0} in <a id='redirectTimer'> {1} </a> second(s).</div>"
msgstr "</br><div>Sie werden in <a id='redirectTimer'> {1} </a> Sekunden {0} weitergeleitet.</div>"

msgid "Activate renew options."
msgstr "Wiederherstellungsoptionen aktivieren."

msgid "Cancel"
msgstr "Abbrechen"

msgid "Change Password"
msgstr "Passwort ändern"

msgid "Change password"
msgstr "Passwort ändern"

msgid "Change your (expired) password."
msgstr "Ändern Sie Ihr (abgelaufenes) Passwort."

msgid "Everyone forgets their password now and then. Protect yourself and activate the opportunity to set a new password."
msgstr "Jeder vergißt mal das Passwort. Schützen Sie sich und aktivieren Sie die Möglichkeit ihr Passwort erneuern zu können."

msgid "Forbidden chars:"
msgstr "Vorbotene Zeichen:"

msgid ""
"Forbidden redirect to: {0}\n"

"Verbotene Weiterleitung nach: {0}\n"
" Die URL muss mit (nur) einem \"/\" beginnen."

msgid "Forgot your password? Set a new one: "
msgstr "Haben Sie ihr Passwort vergessen? Setzen Sie ein Neues:"

#, python-format
msgid "Hello %(last)s, %(first)s!"
msgstr "Hallo %(last)s, %(first)s!"

msgid "Hello %s %s!"
msgstr "Hallo %s %s!"

msgid "If you did not received an e-mail please check your spam directory or use this link to go back to step 2."
msgstr "Sollten Sie keine E-Mail erhalten haben, dann prüfen Sie bitte Ihr SPAM-Verzeichnis oder nutzen Sie diesen Link und kehren zu Schritt 2 zurück."

msgid "Language"
msgstr "Sprache"

msgid "New Password"
msgstr "Mobilfunknummer"

msgid "New password"
msgstr "Neues Passwort"

msgid "New Password (retype)"
msgstr "Neues Passwort (Wiederholung)"

msgid "Next"
msgstr "Weiter"

msgid "Old Password"
msgstr "Altes Passwort"

msgid "On this page you can change your password. If you have lost your password, use this link to the <a href=\"/univention-self-service/{0}#passwordreset\">password reset</a> page."
msgstr "Auf dieser Seite können Sie Ihr Passwort ändern. Wenn Sie Ihr Passwort vergessen haben, nutzen Sie bitte den folgenden Link: <a href=\"/univention-self-service/{0}#passwordreset\">Passwort zurücksetzen.</a>"

msgid "On this page you can reset your lost password or provide contact information for setting a new password in the future."
msgstr "Auf dieser Seite können Sie Ihr Passwort zurücksetzen oder Ihre Kontaktinformationen angeben, um zukünftig Ihr Passwort zurücksetzen zu können."

msgid "On this page you can set your contact information to reset your password in the future. During the reset process a token is sent to you. Without contact information it is not possible to reset your password."
msgstr "Auf dieser Seite können Sie Ihre Kontaktinformationen angeben. Diese Informationen werden benötigt, um Ihnen einen Token (Sicherheitsschlüssel) zuzusenden. Nur mit Hilfe eines Tokens ist es möglich das Passwort zurückzusetzen."

msgid "Password"
msgstr "Passwort"

msgid "Password change"
msgstr "Passwort ändern"

msgid "Password forgotten"
msgstr "Passwort vergessen"

msgid "Please choose an option to renew your password."
msgstr "Bitte wählen Sie eine Wiederherstellungsoption aus."

msgid "Please enter a valid email address."
msgstr "Keine gültige E-Mail-Adresse."

msgid "Protect Account Access"
msgstr "Kontozugang schützen"

msgid "Required chars:"
msgstr "Erforderliche Zeichen:"

msgid "Required length:"
msgstr "Erforderliche Passwortlänge:"

msgid "Required number of lower case letters:"
msgstr "Erforderliche Anzahl von Kleinbuchstaben:"

msgid "Required number of special characters (nor digit or letters):"
msgstr "Erforderliche Anzahl von Sonderzeichen:"

msgid "Required number of upper case letters:"
msgstr "Erforderliche Anzahl von Großbuchstaben:"

msgid "Save"
msgstr "Speichern"

msgid "Set a new password!"
msgstr "Setzen Sie ein neues Passwort!"

msgid "The entries do not match, please retype again."
msgstr "Die Eingaben stimmen nicht überein. Bitte versuchen Sie es erneut."

msgid "The password must fullfill following conditions:"
msgstr "Das Passwort muss folgende Bedingungen erfüllen:"

msgid "The passwords do not match, please retype again."
msgstr "Die Passwörter stimmen nicht überein. Bitte versuchen Sie es erneut."


msgid "The total cost was %.2f EUR!"
msgstr "Die Gesamtkosten waren %.2f EUR!"

msgid "This value is required."
msgstr "Pflichtfeld."

msgid "Translate me!"
msgstr "Übersetz mich!"

msgid "Username"
msgstr "Benutzername"

msgid "We have send you an e-mail to your alternative e-mail address, that you have provided on the page \"Protect Account Access\". Please check your mails and follow the link to renew your password."
msgstr "Wir haben Ihnen eine E-Mail an Ihre alternative E-Mailadresse geschickt. Diese haben Sie auf der Seite \"Kontugang schützen\" hinterlegt. Bitte prüfen Sie Ihre E-Mails und folgen Sie den Link, um Ihr Passwort zu erneuern."

#~ msgid "A license file has been sent to <strong id=\"email-address\">{0}</strong>. This file is necessary to activate the system. For this, please carry out the following steps: <ol><li>Open the email.</li><li>Save the attachement (ucs.license) on your computer.</li><li>Click the button 'Upload license file'.</li><li>Select the file (ucs.license) you just saved.</li><li>Confirm the selection.</li></ol>Once the activation has been finished your email address will be sent to the app provider. The app provider may contact you."
#~ msgstr "Eine Lizenzdatei wurde an <strong id=\"email-address\">{0}</strong> gesendet. Sie wird benötigt um das System zu aktivieren. Bitte führen Sie dazu folgende Schritte aus: <ol><li>Öffnen Sie die E-Mail.</li><li>Speichern Sie den Anhang (ucs.license) auf Ihren Computer.</li><li>Klicken Sie auf die Schaltfläche 'Lizenzdatei hochladen'.</li><li>Wählen Sie die soeben gespeicherte Datei (ucs.license) aus.</li><li>Bestätigen Sie die Auswahl.</li></ol> Sobald die Aktivierung durchgeführt ist, wird Ihre E-Mail-Adresse an den App-Anbieter weitergeleitet. Der App-Anbieter wird Sie ggf. kontaktieren."

#~ msgid "Activation of {appliance_name} Univention App"
#~ msgstr "Aktivierung von {appliance_name} Univention App"

#~ msgid "Activation successful!"
#~ msgstr "Aktivierung erfolgreich!"

#~ msgid "An unknown error has occurred."
#~ msgstr "Ein unbekannter Fehler trat auf."

#~ msgid "An unknown error occured. Please try it again later!"
#~ msgstr "Ein unbekannter Fehler trat auf. Bitte versuchen sie es später noch einmal!"

#~ msgid "Confirm username"
#~ msgstr "Benutzername bestätigen"

#~ msgid "Continue"
#~ msgstr "Weiter"

msgid "You have mail!"
msgstr "Sie haben eine neue E-Mail!"

msgid "to '{0}'"
msgstr "zu '{0}'"

#~ msgid "I have forgotten my password."
#~ msgstr "Ich habe mein Passwort vergessen."

#~ msgid "I want to change my (expired) password."
#~ msgstr "Ich will mein (abgelaufenes) Passwort ändern."

#~ msgid "I would like to set my contact information for resetting my password."
#~ msgstr "Ich möchte meine Kontaktinformationen ändern, um zukünftig mein Password  zurücksetzen zu können."

#~ msgid "If you did not receive an email, please check your SPAM directory or <a href=\"#register\"> request the email again</a>."
#~ msgstr "Sollten Sie keine E-Mail erhalten haben, prüfen Sie Ihr SPAM-Verzeichnis oder <a href=\"#register\">fordern Sie die Lizenzdatei noch einmal an</a>."

#~ msgid "If you encounter problems during the activation, please send an email to: <strong><a href=\"mailto:feedback@univention.de\" style=\"color:#000\">feedback@univention.de</a></strong>"
#~ msgstr "Sollten Probleme bei der Aktivierung auftreten, senden Sie bitte eine E-Mail an: <strong><a href=\"mailto:feedback@univention.de\" style=\"color:#000\">feedback@univention.de</a></strong>"

#~ msgid "In order to reset your password please carry out the following steps: "
#~ msgstr "Um Ihr Passwort zurückzusetzen führen Sie bitte die folgenden Schritte aus: "

#~ msgid "License request."
#~ msgstr "Anforderung einer Lizenz."

#~ msgid "More details about the activation can be found in the <a href=\"http://docs.univention.de/manual.html#central:license\" target=\"_blank\">UCS manual</a>."
#~ msgstr "Weitere Informationen zu der Aktivierung können im <a href=\"http://docs.univention.de/handbuch.html#central:license\" target=\"_blank\">UCS-Handbuch</a> gefunden werden."

#~ msgid "Password self-service"
#~ msgstr "Passwort verwalten"

#~ msgid "Please enter a valid email address in order to activate {appliance_name} Univention App. The activation is mandatory to deploy the system. In the next step you can upload the license file that has been sent to your email address."
#~ msgstr "Bitte geben Sie eine gültige E-Mail-Adresse ein, um {appliance_name} Univention App zu aktivieren. Die Aktivierung ist Voraussetzung, um das System in Gebrauch zu nehmen. Im nächsten Schritt können sie die Lizenzdatei hochladen, die an Ihre E-Mail-Adresse gesendet wurde."

#~ msgid "Please enter your username."
#~ msgstr "Bitte geben Sie Ihren Benutzernamen ein."

#~ msgid "Request token"
#~ msgstr "Token anfordern"

#~ msgid "Show contact information"
#~ msgstr "Kontaktinformationen anzeigen"

#~ msgid "The following error occurred:"
#~ msgstr "Der folgende Fehler trat auf:"

#~ msgid "The server is not responding. Please restart the system."
#~ msgstr "Der Webserver antwortet nicht. Bitte starten Sie das System neu."

#~ msgid "Upload license file"
#~ msgstr "Lizenzdatei hochladen"

#~ msgid "Welcome to the Password self-service. On this site you can reset and change your password. Please select an option to get more information."
#~ msgstr "Willkommen zur Passwortverwaltung. Auf dieser Seite können Sie Ihr Passwort  zurücksetzen oder ändern. Bitte wählen Sie eine Option, um mehr Informationen  zu erhalten."

#~ msgid "You have got mail!"
#~ msgstr "Sie haben eine neue E-Mail!"

#~ msgid "You have received a license file by email!"
#~ msgstr "Sie haben eine Lizendatei per E-Mail erhalten!"

#~ msgid "your email address"
#~ msgstr "Ihre E-Mail-Adresse"

#~ msgid "{appliance_name} Univention App is now activated. Click \"Continue\" to access the management interface (which may take a while)."
#~ msgstr "{appliance_name} Univention App ist nun aktiviert. Klicken sie auf \"Weiter\", um auf die Verwaltungsoberfläche zuzugreifen. (Das kann einige Zeit benötigen.)"




	"dojo/io-query",
	"dojox/html/entities",
	"put-selector/put",
	"dojo/request",
	"./i18n!."
], function(lang, fx, dom, domGeom, ioQuery, htmlEntities, put, request, _) {

	return {
		getCurrentLanguageQuery: function() {
			return '?lang=' + (this.getQuery('lang') || 'en-US');
		},

		/**
		 * Displays given message.
		 * @param {object} msg - Provides targetNode, class and content
		 * for the message.
		 */
		showMessage: function(msg) {
			var targetNode = msg.targetNode || dom.byId("server_msg");
			var msgNode = dom.byId('msg');

			if (msgNode) {

		},

		showLastMessage: function(msg) {
			var targetNode = msg.targetNode || dom.byId("server_msg");
			var msgNode = dom.byId('msg');

			if (msgNode) {

			return message;
		},

		/**
		 * Returns relative url from query string.
		 */
		_getUrlForRedirect: function() {
			var queryUrl = this.getQuery('url');
			if (queryUrl) {
				if (this._isUrlRelative(queryUrl)) {
				var reg = /^\/([^\/]|$)/;
				var isUrlRelative = reg.test(queryUrl);
				if (isUrlRelative) {
					return queryUrl;
				} else {
					var msg = {
						content: lang.replace(_('Forbidden redirect to: {0}\n The url has to start with (only) one "/".', [queryUrl])),
						'class': 'error'
					};
					this.showMessage(msg);
				}
			}
			return;
		},

		/** Returns boolean if given url is relative.
		 * @param {string} url - url to test
		 * */
		_isUrlRelative: function(url) {
				var reg = /^\/([^\/]|$)/;
				var isUrlRelative = reg.test(url);
				return isUrlRelative;
		},

		_getUrlLabelForRedirect: function() {
			var label = this.getQuery('urlLabel');
			if (label) {

			}
		},

		/**
		 * Returns the value of the query string for a given key.
		 * */
		getQuery: function(key) {
			var queryString = window.location.search.substring(1);
			var queryObject = ioQuery.queryToObject(queryString);

			}
		},

		/**
		 * Returns the needed backend information for the Password Service
		 * as a promise or as an object.
		 * The information is requested once and will be cached in
		 * this._backend_info.
		 * */
		getBackendInformation: function() {
			if (!this._backend_info) {
				var promise = request.get("/univention-self-service/entries.json");
				promise.then(lang.hitch(this, function(data){
					this._backend_info = data;
				}));
				return promise;
			} else {
				return this._backend_info;
			}
		},

		wipeInNode: function(conf) {
			var endHeight = domGeom.getMarginBox(conf.node).h;
			fx.animateProperty({




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./TextBox",
	"./LabelPane",
	"./lib",
	"./i18n!."
], function(lang, on, keys, dom, json, xhr, Button, put, TextBox, LabelPane, lib, _) {

	return {
		_createTitle: function() {
			var title = _('Change Password');
			var siteDescription = lang.replace(_('On this page you can change your password. If you have lost your password, use this link to the <a href="/univention-self-service/{0}#passwordreset">password reset</a> page.', [lib.getCurrentLanguageQuery()]));
			document.title = title;
			var titleNode = dom.byId('title');
			put(titleNode, 'h1', title);
			put(titleNode, 'p', { innerHTML : siteDescription });
			put(titleNode, '!.dijitHidden');
		},

		_createContent: function() {
			var contentNode = dom.byId('content');
			var formNode = this._getFormNode();
			put(formNode, '[id=form]!dijitHidden');
			put(contentNode, formNode);
		},

		_getFormNode: function() {
			var formNode = put('div.step');
			put(formNode, 'p > b', _('Please provide the required data to change your password.'));
			var stepContent = put(formNode, 'div.stepContent');

			// create input field for username
			this._username = new TextBox({
				label: _('Username'),
				'class': 'doubleLabelPane block',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			put(stepContent, '>', this._username.label.domNode);
			this._username.startup();

			// create input field for old password
			this._oldPassword = new TextBox({
				label: _('Old password'),
				type: 'password',
				'class': 'doubleLabelPane block',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			put(stepContent, '>', this._oldPassword.label.domNode);
			this._oldPassword.startup();

			// create input fields for new password
			this._newPassword = new TextBox({
				label: _('New password'),
				type: 'password',
				'class': 'doubleLabelPane left',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			put(stepContent, '>', this._newPassword.label.domNode);
			this._newPassword.startup();

			// create input fields for new password
			this._verifyPassword = new TextBox({
				label: _('New password (retype)'),
				type: 'password',
				'class': 'doubleLabelPane',
				isValid: lang.hitch(this, function() {
					return this._newPassword.get('value') ===
						this._verifyPassword.get('value');
				}),
				invalidMessage: _('The passwords do not match, please retype again.'),
				required: true
			});
			put(stepContent, '>', this._verifyPassword.label.domNode);
			this._verifyPassword.startup();

			// create submit button
			this._submitButton = new Button({
				label: _('Change password'),
				onClick: lang.hitch(this, '_submit')
			});
			put(stepContent, '>', this._submitButton.domNode);

			// let the user submit form by pressing ENTER
			on(document, "keyup", lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER && !this._submitButton.get('disabled')) {
					this._submit();
				}
			}));

			return formNode;
		},

		_submit: function() {
			this._showValidStatusOfInputFields();
			this._submitButton.set('disabled', true);
			var allInputFieldsAreValid = this._username.isValid() &&
				this._oldPassword.isValid() &&
				this._newPassword.isValid() &&
				this._verifyPassword.isValid();

			if (allInputFieldsAreValid) {
				data = json.stringify({
					password: {
						'username': this._username.get('value'),
						'password': this._oldPassword.get('value'),
						'new_password': this._newPassword.get('value')
					}
				});

				xhr.post('/univention-management-console/set', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					var callback = function() {
						lib.showLastMessage({
							content: data.message,
							'class': '.success'
						});
					};
					lib.wipeOutNode({
						node: dom.byId('form'),
						callback: callback
					});
					this._clearAllInputFields();
				}), lang.hitch(this, function(err) {
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({content: message, 'class': '.error'});
				})).always(lang.hitch(this, function(){
					this._submitButton.set('disabled', false);
				}));
			} else {
				this._submitButton.set('disabled', false);
			}
		},

		_showValidStatusOfInputFields: function() {
			this._username.setValid(this._username.isValid());
			this._oldPassword.setValid(this._oldPassword.isValid());
			this._newPassword.setValid(this._newPassword.isValid());
			//this._verifyPassword.setValid(this._verifyPassword.isValid());
		},

		_clearAllInputFields: function() {
			this._username.reset();
			this._oldPassword.reset();
			this._newPassword.reset();
			this._verifyPassword.reset();
		},

		start: function() {
			this._createTitle();
			this._createContent();
		}
	};
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./ContainerWidget",
	"./LabelPane",
	"./TextBox",
	"./RadioButton",
	"./lib",
	"./i18n!."
], function(lang, array, on, keys, dom, json, xhr, Button, put, ContainerWidget, LabelPane, TextBox, RadioButton, lib, _) {

	return {
		selectedTokenMethod: null,
		
		_createTitle: function() {
			var title = _('Password Reset');
			var siteDescription = _('On this page you can reset your lost password or provide contact information for setting a new password in the future.');
			document.title = title;
			var titleNode = dom.byId('title');
			put(titleNode, 'h1', title);
			put(titleNode, 'p', siteDescription);
			put(titleNode, '!.dijitHidden');
		},

		_createContent: function() {
			var contentNode = dom.byId('content');
			var formNode = this._getFormNode();
			put(formNode, '[id=form].step!dijitHidden');
			put(contentNode, formNode);
			this._fillContentByUrl();
		},

		_getFormNode: function() {
			var formNode = put('div[style="overflow: hidden;"]');

			// step 1 username and link to contact information
			this.usernameNode = put(formNode, 'div.step');
			put(this.usernameNode, 'p > b', _('Reset your password.'));
			put(this.usernameNode, 'p', _('Please provide your username to receive a token that is required to reset your password.'));
			var stepContent = put(this.usernameNode, 'div.stepContent');
			this._username = new TextBox({
				label: _('Username'),
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._username.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getResetMethods();
				}
			}));
			put(stepContent, this._username.label.domNode);
			this._username.startup();
			this._usernameButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_getResetMethods')
			});
			put(stepContent, this._usernameButton.domNode);

			// contact information
			this.contactNode = put(formNode, 'div.step');
			put(this.contactNode, 'p > b', _('Provide your contact information.'));
			put(this.contactNode, 'p', {
				innerHTML: lang.replace(_('Please click the following link to <a href="/univention-self-service/{0}#setcontactinformation">change your contact information</a> for resetting your password in the future.', [lib.getCurrentLanguageQuery()]))
			});

			// step 2 token
			this.tokenNode = put(formNode, 'div.step.hide-step');
			var skipStep = function() { 
				put(this.newPasswordNode, '!hide-step');
				put(this._requestTokenButton.domNode, '.dijitHidden');
				this._requestTokenButton.set('disabled', true);
			};
			var descRequestToken = put(this.tokenNode, 'p', _('Please choose a method to receive the token.'));
			put(descRequestToken, 'span', {
				innerHTML: _(' If you already have a token you can <a>skip this step</a>.'),
				onclick: lang.hitch(this, skipStep)
			});
			stepContent = put(this.tokenNode, 'div.stepContent');
			this._tokenOptions = new ContainerWidget({});
			put(stepContent, this._tokenOptions.domNode);
			this._requestTokenButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_requestToken')
			});
			put(stepContent, this._requestTokenButton.domNode);

			// step 3 use the token to set a new password
			this.newPasswordNode = put(formNode, 'div.step.hide-step');
			var prevStep = function() { 
				put(this.newPasswordNode, '.hide-step');
				put(this.tokenNode, '!dijitHidden');
				put(this.tokenNode, '!hide-step');
				put(this._requestTokenButton.domNode, '!dijitHidden');
				this._requestTokenButton.set('disabled', false);
			};
			var descNewPassword = put(this.newPasswordNode, 'p', _('Please enter the token and your new password.'));
			put(descNewPassword, 'span', {
				innerHTML: _(' If your token has expired you can <a>request a new token</a>.'),
				onclick: lang.hitch(this, prevStep)
			});
			stepContent = put(this.newPasswordNode, 'div.stepContent');
			this._token = new TextBox({
				label: _('Token'),
				'class': 'soloLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._token.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setPassword();
				}
			}));
			put(stepContent, this._token.label.domNode);
			this._token.startup();

			this._newPassword = new TextBox({
				label: _('New password'),
				type: 'password',
				'class': 'doubleLabelPane left',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._newPassword.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setPassword();
				}
			}));
			put(stepContent, this._newPassword.label.domNode);
			this._newPassword.startup();

			this._verifyPassword = new TextBox({
				label: _('New password (retype)'),
				type: 'password',
				'class': 'doubleLabelPane',
				isValid: lang.hitch(this, function() {
					return this._newPassword.get('value') ===
						this._verifyPassword.get('value');
				}),
				invalidMessage: _('The passwords do not match, please retype again.'),
				required: true
			});
			this._verifyPassword.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setPassword();
				}
			}));
			put(stepContent, this._verifyPassword.label.domNode);
			this._verifyPassword.startup();
			this._setPasswordButton = new Button({
				label: _('Change password'),
				onClick: lang.hitch(this, '_setPassword')
			});
			put(stepContent, this._setPasswordButton.domNode);
			return formNode;
		},

		_getResetMethods: function() {
			this._username.set('disabled', true);
			this._usernameButton.set('disabled', true);

			if (this._username.isValid()) {
				data = json.stringify({
					'username': this._username.get('value')
				});
				xhr.post('passwordreset/get_reset_methods', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					put(this._usernameButton.domNode, '.dijitHidden');
					put(this.contactNode, '!');
					this._buildTokenOptions(data.result);
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.usernameNode,
						'class': '.error'
					});
					this._usernameButton.set('disabled', false);
					this._username.set('disabled', false);
				}));
			} else {
				this._usernameButton.set('disabled', false);
				this._username.set('disabled', false);
			}
		},

		_buildTokenOptions: function(options) {
			array.forEach(options, lang.hitch(this, function(obj, idx){
				var radioButton = new RadioButton({
					name: 'button' + idx,
					label: obj.label,
					method: obj.id,
					checked: idx === 0,
					radioButtonGroup: 'token',
					_categoryID: 'token'
				});
				var label = new LabelPane({
					'class': 'ucsRadioButtonLabel',
					content: radioButton
				});
				this._tokenOptions.addChild(label);
			}));
			put(this.tokenNode, '!hide-step');
		},

		_requestToken: function() {
			// get selected method for requesting a token
			array.some(this._tokenOptions.getChildren(), lang.hitch(this, function(tokenLabel) {
				var radioButton = tokenLabel.getChildren()[0];
				if (radioButton.checked) {
					this.selectedTokenMethod = {
						label: radioButton.get('label'),
						method: radioButton.get('method')
					};
				}
			}));

			if (this.selectedTokenMethod) {
				this._requestTokenButton.set('disabled', true);
				data = json.stringify({
					'username': this._username.get('value'),
					'method': this.selectedTokenMethod.method
				});
				xhr.post('passwordreset/send_token', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib.showMessage({
						content: data.message,
						targetNode: this.tokenNode,
						'class': '.success'
					});
					put(this._requestTokenButton.domNode, '.dijitHidden');
					put(this.newPasswordNode, '!hide-step');
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.tokenNode,
						'class': '.error'
					});
					this._requestTokenButton.set('disabled', false);
				}));
			}
		},

		_setPassword: function() {
			this._setPasswordButton.set('disabled', true);
			this._token.set('disabled', true);
			this._newPassword.set('disabled', true);
			this._verifyPassword.set('disabled', true);

			var isTokenAndNewPassValid = this._token.isValid() &&
				this._newPassword.isValid() &&
				this._verifyPassword.isValid();

			if (isTokenAndNewPassValid) {
				data = json.stringify({
					'username': this._username.get('value'),
					'password': this._verifyPassword.get('value'),
					'token' : this._token.get('value')
				});
				xhr.post('passwordreset/set_password', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					var callback = function() {
						lib.showLastMessage({
							content: data.message,
							'class': '.success'
						});
					};
					lib.wipeOutNode({
						node: dom.byId('form'),
						callback: callback
					});
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.newPasswordNode,
						'class': '.error'
					});
					this._setPasswordButton.set('disabled', false);
					this._token.set('disabled', false);
					this._newPassword.set('disabled', false);
					this._verifyPassword.set('disabled', false);
				}));
			} else {
				this._setPasswordButton.set('disabled', false);
				this._token.set('disabled', false);
				this._newPassword.set('disabled', false);
				this._verifyPassword.set('disabled', false);
			}
		},

		_fillContentByUrl: function() {
			// checks if the url contains a username and a token
			// show and fill the corresponding input fields if true
			var token = lib.getQuery('token');
			var username = lib.getQuery('username');
			if (token && username) {
				this._username.set('value', username);
				this._token.set('value', token);
				put(this.contactNode, '!');
				this._getResetMethods();
				this._requestTokenButton.set('disabled', true);
				put(this.tokenNode, '.dijitHidden');
				put(this.newPasswordNode, '!hide-step');
			}
		},

		start: function() {
			this._createTitle();
			this._createContent();
		}
	};
});




/*
 * Copyright 2015-2016 Univention GmbH
 *
 * http://www.univention.de/
 *
 * All rights reserved.
 *
 * The source code of this program is made available
 * under the terms of the GNU Affero General Public License version 3
 * (GNU AGPL V3) as published by the Free Software Foundation.
 *
 * Binary versions of this program provided by Univention to you as
 * well as other copyrighted, protected or trademarked materials like
 * Logos, graphics, fonts, specific documentations and configurations,
 * cryptographic keys etc. are subject to a license agreement between
 * you and Univention and not subject to the GNU AGPL V3.
 *
 * In the case you use this program under the terms of the GNU AGPL V3,
 * the program is provided in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public
 * License with the Debian GNU/Linux or Univention distribution in file
 * /usr/share/common-licenses/AGPL-3; if not, see
 * <http://www.gnu.org/licenses/>.
 */
/*global define require console window */

define([
	"dojo/_base/lang",
	"dojo/_base/array",
	"dojo/on",
	"dojo/keys",
	"dojo/dom",
	"dojo/json",
	"dojo/request/xhr",
	"dijit/form/Button",
	"put-selector/put",
	"./ContainerWidget",
	"./LabelPane",
	"./TextBox",
	"./RadioButton",
	"./lib",
	"./i18n!."
], function(lang, array, on, keys, dom, json, xhr, Button, put, ContainerWidget, LabelPane, TextBox, RadioButton, lib, _) {

	return {
		selectedTokenMethod: null,
		
		_createTitle: function() {
			var title = _('Contact information for Password reset');
			var siteDescription = _('On this page you can set your contact information to reset your password in the future. During the reset process a token is sent to you. Without contact information it is not possible to reset your password.');
			document.title = title;
			var titleNode = dom.byId('title');
			put(titleNode, 'h1', title);
			put(titleNode, 'p', siteDescription);
			put(titleNode, '!.dijitHidden');
		},

		_createContent: function() {
			var contentNode = dom.byId('content');
			var formNode = this._getFormNode();
			put(formNode, '[id=form].step!dijitHidden');
			put(contentNode, formNode);
		},

		_getFormNode: function() {
			var formNode = put('div[style="overflow: hidden;"]');

			// step 1 username and password
			this.usernameNode = put(formNode, 'div.step');
			put(this.usernameNode, 'p > b', _('Please enter your username and password to display your contact information.'));
			var stepContent = put(this.usernameNode, 'div.stepContent');

			this._username = new TextBox({
				label: _('Username'),
				'class': 'doubleLabelPane left',
				isValid: function() {
					return !!this.get('value');
				},
				required: true
			});
			this._username.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getContactInformation();
				}
			}));
			put(stepContent, this._username.label.domNode);
			this._username.startup();

			this._password = new TextBox({
				label: _('Password'),
				'class': 'doubleLabelPane',
				isValid: function() {
					return !!this.get('value');
				},
				required: true,
				type: 'password'
			});
			this._password.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._getContactInformation();
				}
			}));
			put(stepContent, this._password.label.domNode);
			this._password.startup();

			this._showContactInformationButton = new Button({
				label: _('Next'),
				onClick: lang.hitch(this, '_getContactInformation')
			});
			put(stepContent, this._showContactInformationButton.domNode);

			// step 2 show and set contact information
			this.contactInformationNode = put(formNode, 'div.step.hide-step');
			put(this.contactInformationNode, 'p', _('Feel free to change your contact information. Press "Save" to confirm your changes.'));
			stepContent = put(this.contactInformationNode, 'div.stepContent');

			this._email = new TextBox({
				label: _('EMail'),
				'class': 'doubleLabelPane left',
				id: 'email'
			});
			this._email.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setContactInformation();
				}
			}));
			put(stepContent, this._email.label.domNode);

			this._mobile = new TextBox({
				label: _('Mobile'),
				'class': 'doubleLabelPane',
				id: 'mobile'
			});
			this._mobile.on('keyup', lang.hitch(this, function(evt) {
				if (evt.keyCode === keys.ENTER) {
					this._setContactInformation();
				}
			}));
			put(stepContent, this._mobile.label.domNode);

			this._saveButton = new Button({
				label: _('Save'),
				onClick: lang.hitch(this, '_setContactInformation')
			});
			put(stepContent, this._saveButton.domNode);

			this._cancelButton = new Button({
				label: _('Cancel'),
				onClick: lang.hitch(this, '_deleteContactInformationNode')
			});
			put(stepContent, this._cancelButton.domNode);

			return formNode;
		},

		_getContactInformation: function() {
			this._username.set('disabled', true);
			this._password.set('disabled', true);
			this._showContactInformationButton.set('disabled', true);

			var validCredentials = this._username.isValid() && this._password.isValid();
			if (validCredentials) {
				data = json.stringify({
					'username': this._username.get('value'),
					'password': this._password.get('value')
				});
				xhr.post('passwordreset/get_contact', {
					handleAs: 'json',
					headers: {
						'Content-Type': 'application/json',
						'Accept-Language': lib.getQuery('lang') || 'en-US'
					},
					data: data
				}).then(lang.hitch(this, function(data) {
					lib._removeMessage();
					put(this._showContactInformationButton.domNode, '.dijitHidden');
					this._displayContactInformation(data.result);
				}), lang.hitch(this, function(err){
					var message = err.name + ": " + err.message;
					if (err.response && err.response.data && err.response.data.message) {
						message = err.response.data.message;
					}
					lib.showMessage({
						content: message,
						targetNode: this.usernameNode,
						'class': '.error'
					});
					this._showContactInformationButton.set('disabled', false);
					this._username.set('disabled', false);
					this._password.set('disabled', false);
				}));
			} else {
				this._showContactInformationButton.set('disabled', false);
				this._username.set('disabled', false);
				this._password.set('disabled', false);
			}
		},

		_displayContactInformation: function(contactInformation) {
			var mappingIdAndInput = {
				'email': this._email,
				'mobile': this._mobile
			};

			array.forEach(contactInformation, lang.hitch(this, function(contact){
				var currentInput = mappingIdAndInput[contact.id];
				if (currentInput) {
					currentInput.set('value', contact.value);
					//currentInput._updateInlineLabelVisibility();
				}
			}));
			put(this.contactInformationNode, '!hide-step');
		},

		_setContactInformation: function() {
			this._cancelButton.set('disabled', true);
			this._saveButton.set('disabled', true);

			data = this._getNewContactInformation();
			var isValidMail = this._validateMail(data.email);
			if (isValidMail) {
				xhr.post('passwordreset/set_contact', {
						handleAs: 'json',
						headers: {
							'Content-Type': 'application/json',
							'Accept-Language': lib.getQuery('lang') || 'en-US'
						},
						data: json.stringify(data)
					}).then(lang.hitch(this, function(data) {
						lib._removeMessage();
						var callback = function() {
							lib.showLastMessage({
								content: data.message,
								'class': '.success'
							});
						};
						lib.wipeOutNode({
							node: dom.byId('form'),
							callback: callback
						});
					}), lang.hitch(this, function(err){
						var message = err.name + ": " + err.message;
						if (err.response && err.response.data && err.response.data.message) {
							message = err.response.data.message;
						}
						lib.showMessage({
							content: message,
							targetNode: this.contactInformationNode,
							'class': '.error'
						});
						this._cancelButton.set('disabled', false);
						this._saveButton.set('disabled', false);
					}));
			} else {
				this._cancelButton.set('disabled', false);
				this._saveButton.set('disabled', false);
			}
		},

		_getNewContactInformation: function() {
			var contactInformation = {
				'username': this._username.get('value'),
				'password': this._password.get('value'),
				'email': this._email.get('value'),
				'mobile': this._mobile.get('value')
			};
			return contactInformation;
		},

		_validateMail: function(email) {
			var reg = /^([\w-]+(?:\.[\w-]+)*)@((?:[\w-]+\.)*\w[\w-]{0,66})\.([a-z]{2,6}(?:\.[a-z]{2})?)$/i;
			var isValid = !email.length || reg.test(email);
			if(!isValid) {
				lib.showMessage({
					content: _('Please enter a valid email address.'),
					'class': '.error',
					targetNode: this.contactInformationNode
				});
			}
			return isValid;
		},

		_deleteContactInformationNode: function() {
			put(this.contactInformationNode, '.hide-step');
			put(this._showContactInformationButton.domNode, '!dijitHidden');
			this._showContactInformationButton.set('disabled', false);
			this._username.reset();
			this._password.reset();
		},

		start: function() {
			this._createTitle();
			this._createContent();
		}
	};
});




		<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<title>Password Settings</title>
		<link rel="shortcut icon" href="/favicon.ico" />
		<link rel="stylesheet" href="js/dijit/themes/dijit.css">
		<link rel="stylesheet" href="css/bootstrap.css"/>

		<div id="wrapper">
			<div id="site-header">
				<div id="header-top">
					<a id="header-left" href="/ucs-overview">
					</a>
					<a id="header-middle" href="/ucs-overview"></a>
					<div id="header-right">
						<div class="dropdown" id="dropDownButton"></div>
					</div>
				</div>
			</div>
			<div class="container">
				<div id="title">
					Password Settings
				</div>
				<div id="navigation"></div>
				<div id="content" class="tab-content">
					<noscript>
						<div>
							<h1 class="no-js">Welcome to Univention Corporate Server</h1>

						</div>
					</noscript>
				</div>
				<div id="server_msg"></div>
			</div>
			<div class="footer dijitHidden" id="footer"></div>
		</div>
	</body>
</html>

Return to bug 42267

Lines 133-138 div#title > p { Link Here

(-)a/management/univention-self-service/css/document.styl (+64 lines)
133	color: #619410;	133	color: #619410;
134	}	134	}
135		135
		136	div.PasswordServiceContent {
		137	background: #f3f3f3;
		138	padding: 1.3em;
		139	border-radius: 5px 5px 5px 5px;
		140	-moz-border-radius: 5px 5px 5px 5px;
		141	-webkit-border-radius: 5px 5px 5px 5px;
		142	border: 0px solid #000000;
		143	-webkit-box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);
		144	-moz-box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);
		145	box-shadow: 6px 6px 5px 0px rgba(131,131,131,1);
		146
		147	.contentDesc {
		148	font-weight: bold;
		149	}
		150	}
		151
		152	ol.PasswordOl {
		153	margin-left: 0;
		154	padding-right: 0;
		155	padding-left: 0;
		156	list-style-type: none;
		157
		158	li.step {
		159	counter-increment: step-counter;
		160	margin-bottom: 1em;
		161
		162	div {
		163	margin-top: 0.1em;
		164	}
		165
		166	.dijitButton {
		167	margin: 0.6em 0.6em 0 0;
		168	}
		169	}
		170
		171	li.step::before {
		172	content: counter(step-counter);
		173	margin-right: 5px;
		174	font-size: 80%;
		175	background-color: rgb(200,200,200);
		176	color: white;
		177	font-weight: bold;
		178	padding: 3px 8px;
		179	border-radius: 3px;
		180	}
		181
		182	div.stepLabel {
		183	display: inline;
		184	}
		185	}
		186
		187	ol#PasswordChangeSteps li.step::before {
		188	background-color: #8ebe43;
		189	}
		190
		191	ol#PasswordForgottenSteps li.step::before {
		192	background-color: #fd5745;
		193	}
		194
		195	ol#PasswordProtectSteps li.step::before {
		196	background-color: #f8cd23;
		197	}
		198
136	div.stepContent {	199	div.stepContent {
137	margin-top: 1.5em;	200	margin-top: 1.5em;
138	}	201	}
Lines 151-156 div.step { Link Here
151		214
152	div.step.hide-step {	215	div.step.hide-step {
153	opacity: 0;	216	opacity: 0;
		217	display: none;
154	visibility: hidden;	218	visibility: hidden;
155	transition: visibility 0s linear 0.5s, opacity 0.5s ease-in-out;	219	transition: visibility 0s linear 0.5s, opacity 0.5s ease-in-out;
156	}	220	}

Lines 58-68 var profile = { Link Here

(-)a/management/univention-self-service/build_profile.js (-5 / +6 lines)
58		58
59	layers: {	59	layers: {
60	"dojo/dojo": {	60	"dojo/dojo": {
61	customBase: true,	61	customBase: true //,
62	include: [	62	//include: [
63	"ucs/passwordchange",	63	// "ucs/PasswordChange",
64	"ucs/passwordreset"	64	// "ucs/PasswordForgotten",
65	]	65	// "ucs/ProtectAccountAccess"
		66	//]
66	}	67	}
67	}	68	}
68	};	69	};

Line 0 Link Here

(-)a/management/univention-self-service/conffiles/usr/share/univention-self-service/www/entries.json (+33 lines)
	1	@!@
	2	import json
	3
	4	subpages = ['password_change', 'password_forgotten', 'protect_account_access']
	5	subpage_variable_path = "umc/self-service/passwordservice/subpage/{}"
	6	filtered_subpages = [page for page in subpages if configRegistry.is_true(subpage_variable_path.format(page))]
	7
	8
	9	password_qualities = [
	10	'credit/digits',
	11	'credit/lower',
	12	'credit/upper',
	13	'credit/other',
	14	'forbidden/chars',
	15	'required/chars'
	16	]
	17	quality_variable_path = "password/quality/{}"
	18	filtered_password_qualities = []
	19	for quality in password_qualities:
	20	ucr_variable = quality_variable_path.format(quality)
	21	value = configRegistry.get(ucr_variable);
	22	if value:
	23	filtered_password_qualities.append({
	24	'name': quality,
	25	'value': value
	26	})
	27
	28
	29	print json.dumps({
	30	"subpages": filtered_subpages,
	31	"password_quality": filtered_password_qualities
	32	})
	33	@!@

Lines 7-12 Link Here

(-)a/management/univention-self-service/css/header.styl (+16 lines)
7		7
8	}	8	}
9		9
		10	#header-middle {
		11	position: absolute;
		12	left: 50%;
		13	top: 13px;
		14	width: 20px;
		15	height: 20px;
		16	margin-left: -10px;
		17	background: url("../../univention-management-console/js/dijit/themes/umc/images/icons.svg") -40px -20px no-repeat;
		18	}
		19
		20	#header-middle:hover {
		21	background: url("../../univention-management-console/js/dijit/themes/umc/images/icons.svg") -60px -20px no-repeat;
		22	}
		23
		24
		25
10	#header-left {	26	#header-left {
11	//float:left;	27	//float:left;
12	left: 0;	28	left: 0;

Lines 4-53 Link Here

(-)a/management/univention-self-service/css/tabs.styl (-34 / +34 lines)
4	}	4	}
5		5
6	#navigation {	6	#navigation {
7	.button-container {	7	.PasswordServiceNav {
8	display: inline-block;	8	display: inline-block;
		9	width: 14.2857%;
		10	min-width: 95px;
		11	max-width: 160px;
		12	margin: 5px 0;
		13	position: relative;
		14	vertical-align: top;
		15	cursor: pointer;
9	}	16	}
10		17
11	.button {	18	.PasswordServiceNav:active {
		19	font-weight: bold;
		20	}
		21
		22	.PasswordServiceNavBubble {
		23	-webkit-border-radius: 50%;
		24	-moz-border-radius: 50%;
		25	border-radius: 50%;
		26	background-color: aliceblue;
12	width: 70px;	27	width: 70px;
13	height: 70px;	28	height: 70px;
14	margin: 0 2em;	29	margin: auto;
15	background: url(icons/tab-buttons.svg) no-repeat;	30	background-repeat: no-repeat;
16	display: inline-block;	31	background-position: 50% 40%;
17	}	32	}
18		33	.password_change {
19	#register-button {	34	background-color: #8ebe43;
20	background-position: 0 -70px;	35	background-image: url("../../icon/password_change.png");
21	&.focused {
22	background-position: 0 0;
23	}	36	}
24	}	37	.password_forgotten {
25		38	background-color: #fd5745;
26	#upload-button {	39	background-image: url("../../icon/password_forgotten.png");
27	background-position: -70px -70px;
28	&.focused {
29	background-position: -70px 0;
30	}	40	}
31	}	41	.protect_account_access {
32		42	background-color: #f8cd23;
33	#finished-button {	43	background-image: url("../../icon/protect_account_access.png");
34	background-position: -140px -70px;
35	&.focused {
36	background-position: -140px 0;
37	}	44	}
38	}
39
40	.loading-bar {
41	opacity: 0;
42	transition: opacity 1s ease-in-out;
43	width: 100%;
44	height: 32px;
45	background: url(icons/loading-bubbles.gif) no-repeat;
46	background-position: center center;
47	}
48		45
49	.loading-bar.focused {	46	.PasswordServiceNavTitle {
50	opacity: 1;	47	display: block;
		48	font-size: 1em;
		49	margin-top: 0.5em;
		50	white-space: pre-line;
51	}	51	}
52	}	52	}
53		53

Lines 52-78 touch $ACCESS_LOG $ERROR_LOG Link Here

(-)a/management/univention-self-service/debian/univention-self-service.postinst (-19 / +18 lines)
52	chown self-service:adm $ACCESS_LOG $ERROR_LOG	52	chown self-service:adm $ACCESS_LOG $ERROR_LOG
53	chmod 640 $ACCESS_LOG $ERROR_LOG	53	chmod 640 $ACCESS_LOG $ERROR_LOG
54		54
55	univention-config-registry set \	55	# UCR Variable für Passwort Service
56	self-service/passwordreset/web/enabled?yes \	56	# default: Passwort Service aktiviert
57	"ucs/web/overview/entries/service/passwordreset/description=Reset your password or provide contact information" \	57	univention-config-registry set self-service/passwordchange/web/enabled?yes
58	"ucs/web/overview/entries/service/passwordreset/description/de=Setzen Sie Ihr Passwort zurück oder hinterlegen Sie Kontaktinformationen." \
59	"ucs/web/overview/entries/service/passwordreset/label=Password Reset" \
60	"ucs/web/overview/entries/service/passwordreset/label/de=Passwort zurücksetzen" \
61	"ucs/web/overview/entries/service/passwordreset/link=/univention-self-service/?lang=en-US#passwordreset" \
62	"ucs/web/overview/entries/service/passwordreset/link/de=/univention-self-service/?lang=de-DE#passwordreset" \
63	"ucs/web/overview/entries/service/passwordreset/port_http=" \
64	"ucs/web/overview/entries/service/passwordreset/port_https=443"
65		58
66	univention-config-registry set \	59	# UCR Variablen für Unterseiten des Passwort Services
67	self-service/passwordchange/web/enabled?yes \	60	univention-config-registry set "umc/self-service/passwordservice/subpage/password_change=yes" \
68	"ucs/web/overview/entries/service/passwordchange/description=Change your (expired) password." \	61	"umc/self-service/passwordservice/subpage/password_forgotten=yes" \
69	"ucs/web/overview/entries/service/passwordchange/description/de=Ändern Sie Ihr (abgelaufenes) Passwort." \	62	"umc/self-service/passwordservice/subpage/protect_account_access=yes"
70	"ucs/web/overview/entries/service/passwordchange/label=Change Password" \	63
71	"ucs/web/overview/entries/service/passwordchange/label/de=Passwort ändern" \	64	# Link für Passwort Service
72	"ucs/web/overview/entries/service/passwordchange/link=/univention-self-service/?lang=en-US#passwordchange" \	65	# Informationen für den Link zum Passwort Service
73	"ucs/web/overview/entries/service/passwordchange/link/de=/univention-self-service/?lang=de-DE#passwordchange" \	66	univention-config-registry set "ucs/web/overview/entries/service/passwordchange/label=Password settings" \
		67	"ucs/web/overview/entries/service/passwordchange/label/de=Passwort-Einstellungen" \
		68	"ucs/web/overview/entries/service/passwordchange/description=Password change and protection." \
		69	"ucs/web/overview/entries/service/passwordchange/description/de=Passwort ändern und Kontozugang schützen." \
		70	"ucs/web/overview/entries/service/passwordchange/link=/univention-self-service/?lang=en-US" \
		71	"ucs/web/overview/entries/service/passwordchange/link/de=/univention-self-service/?lang=de-DE" \
74	"ucs/web/overview/entries/service/passwordchange/port_http=" \	72	"ucs/web/overview/entries/service/passwordchange/port_http=" \
75	"ucs/web/overview/entries/service/passwordchange/port_https=443"	73	"ucs/web/overview/entries/service/passwordchange/port_https=443" \
		74	"ucs/web/overview/entries/service/passwordchange/icon=/icon/password.png"
76		75
77		76
78	if [ "$1" = "configure" ]; then	77	if [ "$1" = "configure" ]; then

Lines 38-55 case "$1" in Link Here

(-)a/management/univention-self-service/debian/univention-self-service.postrm (-12 / +10 lines)
38	;;	38	;;
39	esac	39	esac
40		40
		41	# UCR Variablen bei Deinstallation löschen
41	if [ "$1" = "remove" -o "$1" = "purge" ]; then	42	if [ "$1" = "remove" -o "$1" = "purge" ]; then
42	univention-config-registry unset \	43	# Informationen für den Link zum Passwort Service löschen
43	ucs/web/overview/entries/service/passwordreset/description \
44	ucs/web/overview/entries/service/passwordreset/description/de \
45	ucs/web/overview/entries/service/passwordreset/icon \
46	ucs/web/overview/entries/service/passwordreset/label \
47	ucs/web/overview/entries/service/passwordreset/label/de \
48	ucs/web/overview/entries/service/passwordreset/link \
49	ucs/web/overview/entries/service/passwordreset/link/de \
50	ucs/web/overview/entries/service/passwordreset/port_http \
51	ucs/web/overview/entries/service/passwordreset/port_https
52
53	univention-config-registry unset \	44	univention-config-registry unset \
54	ucs/web/overview/entries/service/passwordchange/description \	45	ucs/web/overview/entries/service/passwordchange/description \
55	ucs/web/overview/entries/service/passwordchange/description/de \	46	ucs/web/overview/entries/service/passwordchange/description/de \
Lines 59-65 if [ "$1" = "remove" -o "$1" = "purge" ]; then Link Here
59	ucs/web/overview/entries/service/passwordchange/link \	50	ucs/web/overview/entries/service/passwordchange/link \
60	ucs/web/overview/entries/service/passwordchange/link/de \	51	ucs/web/overview/entries/service/passwordchange/link/de \
61	ucs/web/overview/entries/service/passwordchange/port_http \	52	ucs/web/overview/entries/service/passwordchange/port_http \
62	ucs/web/overview/entries/service/passwordchange/port_https	53	ucs/web/overview/entries/service/passwordchange/port_https \
		54	ucs/web/overview/entries/service/passwordchange/icon
		55
		56	# UCR Variablen für die Unterseiten des Passwort Services löschen
		57	univention-config-registry unset \
		58	umc/self-service/passwordservice/subpage/password_change \
		59	umc/self-service/passwordservice/subpage/password_forgotten \
		60	umc/self-service/passwordservice/subpage/protect_account_access
63		61
64	# restart, so apache unloads WSGI and deactivats plugin in its config	62	# restart, so apache unloads WSGI and deactivats plugin in its config
65	# retry if fail because of to quick successive restarts (from other frontend packages)	63	# retry if fail because of to quick successive restarts (from other frontend packages)

Lines 15-17 Description[de]=Die Webseite des Password-Self-Service Moduls einschalten (Stand Link Here

(-)a/management/univention-self-service/debian/univention-self-service.univention-config-registry-variables (+18 lines)
15	Description[en]=Enable the web page of the password self service module (default "yes").	15	Description[en]=Enable the web page of the password self service module (default "yes").
16	Type=bool	16	Type=bool
17	Categories=self-service	17	Categories=self-service
		18
		19	[umc/self-service/passwordservice/subpage/password_change]
		20	Description[de]=Die Unterseite "Passwort ändern" des Password-Self-Service Moduls einschalten (Standard: "yes").
		21	Description[en]=Enable the sub page "Password change" of the password self service module (default "yes").
		22	Type=bool
		23	Categories=self-service
		24
		25	[umc/self-service/passwordservice/subpage/password_forgotten]
		26	Description[de]=Die Unterseite "Passwort vergessen" des Password-Self-Service Moduls einschalten (Standard: "yes").
		27	Description[en]=Enable the sub page "Password forgotten" of the password self service module (default "yes").
		28	Type=bool
		29	Categories=self-service
		30
		31	[umc/self-service/passwordservice/subpage/protect_account_access]
		32	Description[de]=Die Unterseite "Kontozugäng schützen" des Password-Self-Service Moduls einschalten (Standard: "yes").
		33	Description[en]=Enable the sub page "Protect account access" of the password self service module (default "yes").
		34	Type=bool
		35	Categories=self-service

Lines 1-43 Link Here

(-)a/management/univention-self-service/js/config.js (-23 / +23 lines)
1	// get locale from query string	1	/**
2	function getQuery(/String/ param, /mixed/ defaultVal) {	2	* Search the value of the QueryString for an given key.
3	// parse the URI query string	3	* @param: {string} key - Key for the searched value.
4	var query = window.location.search.substring(1);	4	* @param: {mixed} defaultVal - default value if no value is found.
5	var vars = query.split('&');	5	* */
6	for (var i = 0; i < vars.length; i++) {	6	function getQuery(key, defaultVal) {
7	// parse the tuple	7	var queryString = window.location.search.substring(1);
8	var tuple = vars[i].split('=');	8	var items = queryString.split('&');
9	// check whether we found the particular parameter we are interested in	9	for (var i = 0; i < items.length; i++) {
10	if (2 == tuple.length && param == tuple[0]) {	10	var tuple = items[i].split('=');
		11	if (2 == tuple.length && key == tuple[0]) {
11	return tuple[1];	12	return tuple[1];
12	}	13	}
13	}	14	}
		15	return defaultVal;
14	}	16	}
15		17
16	locale = getQuery('lang');	18
17	if (locale) {	19	/**
		20	* Get the current language from the queryString
		21	* */
		22	function getLocale() {
		23	var locale = getQuery('lang', 'en-US');
18	locale = locale.replace('_', '-');	24	locale = locale.replace('_', '-');
		25	return locale;
19	}	26	}
20		27
21	// load the javascript module that is specified in the hash
22	var selfService = document.location.hash.substr(1);
23		28
24	var dojoConfig = {	29	var dojoConfig = {
25	isDebug: false,	30	isDebug: false,
26	locale: locale,	31	locale: getLocale(),
27	async: true,	32	async: true,
28	callback: function() {	33	callback: function() {
29	require([	34	require([
30	"dojo/hash",	35	"ucs/PasswordService",
31	"dojo/topic",
32	"ucs/" + selfService,
33	"ucs/LanguagesDropDown",	36	"ucs/LanguagesDropDown",
34	"dojo/domReady!"	37	"dojo/domReady!"
35	], function(hash, topic, app, LanguagesDropDown) {	38	], function(PasswordService, LanguagesDropDown) {
36	app.start();	39	PasswordService.start();
37	LanguagesDropDown.start();	40	LanguagesDropDown.start();
38	topic.subscribe("/dojo/hashchange", function(changedHash) {
39	window.location.reload();
40	});
41	});	41	});
42	}	42	}
43	};	43	};

Line 0 Link Here

(-)a/management/univention-self-service/js/ucs/PasswordBox.js (+161 lines)
		1	/*
		2	* Copyright 2011-2016 Univention GmbH
		3	*
		4	* http://www.univention.de/
		5	*
		6	* All rights reserved.
		7	*
		8	* The source code of this program is made available
		9	* under the terms of the GNU Affero General Public License version 3
		10	* (GNU AGPL V3) as published by the Free Software Foundation.
		11	*
		12	* Binary versions of this program provided by Univention to you as
		13	* well as other copyrighted, protected or trademarked materials like
		14	* Logos, graphics, fonts, specific documentations and configurations,
		15	* cryptographic keys etc. are subject to a license agreement between
		16	* you and Univention and not subject to the GNU AGPL V3.
		17	*
		18	* In the case you use this program under the terms of the GNU AGPL V3,
		19	* the program is provided in the hope that it will be useful,
		20	* but WITHOUT ANY WARRANTY; without even the implied warranty of
		21	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
		22	* GNU Affero General Public License for more details.
		23	*
		24	* You should have received a copy of the GNU Affero General Public
		25	* License with the Debian GNU/Linux or Univention distribution in file
		26	* /usr/share/common-licenses/AGPL-3; if not, see
		27	* <http://www.gnu.org/licenses/>.
		28	*/
		29	/global define/
		30
		31	define([
		32	"dojo/_base/declare",
		33	"dojo/_base/lang",
		34	"dojo/_base/array",
		35	"dojo/when",
		36	"dojo/json",
		37	"dijit/form/ValidationTextBox",
		38	"./_FormWidgetMixin",
		39	"./LabelPane",
		40	"./lib",
		41	"./i18n!."
		42	], function(declare, lang, array, when, json, ValidationTextBox, _FormWidgetMixin, LabelPane, lib, _) {
		43	return declare('umc.widgets.PasswordBox', [ ValidationTextBox, _FormWidgetMixin ], {
		44	label: null,
		45	type: 'password',
		46	required: true,
		47	missingMessage: _('This value is required.'),
		48	promptMessage: '',
		49	invalidMessage: '',
		50	tooltipPosition: ['below', 'after'],
		51	active_password_qualities: null,
		52	password_qualities: {
		53	'credit/digits': {
		54	reg: '.{%[0]}',
		55	promptMessage: _('Required length:')
		56	},
		57	'credit/lower': {
		58	reg: '^(.*?[a-z]){%[0],}',
		59	promptMessage: _('Required number of lower case letters:')
		60	},
		61	'credit/upper': {
		62	reg: '^(.*?[A-Z]){%[0],}',
		63	promptMessage: _('Required number of upper case letters:')
		64	},
65	'credit/other': {
66	reg: '^(.*?[^a-zA-Z0-9]){%[0],}',
67	promptMessage: _('Required number of special characters (nor digit or letters):')
68	},
69	'forbidden/chars': {
70	reg: "^((?![%[0]]).)*$",
71	promptMessage: _('Forbidden chars:')
72	},
73	'required/chars': {
74	reg: '[%[0]]',
75	promptMessage: _('Required chars:')
76	}
77	},
78
79	buildRendering: function() {
80	this.inherited(arguments);
81	if (this.label !== undefined) {
82	this._createLabelNode();
83	}
84	when(lib.getBackendInformation()).then(lang.hitch(this, function(data) {
85	var result = JSON.parse(data, true);
86	this.active_password_qualities = result.password_quality;
87	this.setPromptMessage(result.password_quality);
88	}));
89	},
90
91	isValid: function() {
92	return this.validator();
93	},
94
95	_hasValue: function(password) {
96	if (password) {
97	return true;
98	} else {
99	this.setPromptMessage();
100	this.invalidMessage = _('This value is required.');
101	return false;
102	}
103	},
104
105	/** Checks if the password meets the active password qualities.
106	* @param {string} password - Current value of the input box.
107	* **/
108	_hasValidPasswordQuality: function(password) {
109	var result = array.filter(this.active_password_qualities, lang.hitch(this, function(iqual) {
110	var quality = this.password_qualities[iqual.name];
111	var reg_str = lang.replace(quality.reg, [iqual.value], /\%\[([^\]]+)\]/g);
112	var reg = new RegExp(reg_str);
113	if (reg.test(password)) {
114	return true;
115	} else {
116	this.invalidMessage += lang.replace('{0} {1}{2}', [quality.promptMessage, iqual.value, '</br>']);
117	this.promptMessage = this.invalidMessage;
118	return false;
119	}
120	}));
121	if (result.length === this.active_password_qualities.length) {
122	this.setValid(true);
123	return true;
124	} else {
125	return false;
126	}
127	},
128
129	validator: function() {
130	this.invalidMessage = '';
131	this.promptMessage = '';
132	var password = this.get('value');
133	return this._hasValue(password) && this._hasValidPasswordQuality(password);
134	},
135
136	setPromptMessage: function(active_qualities) {
137	var qualities = active_qualities \|\| this.active_password_qualities;
138	if (qualities && qualities.length) {
139	this.promptMessage = _('The password must fullfill following conditions:');
140	array.forEach(qualities, lang.hitch(this, function(iqual) {
141	var quality = this.password_qualities[iqual.name];
142	this.promptMessage += lang.replace('{0}{1} {2}', ['</br>', quality.promptMessage, iqual.value]);
143	}));
144	}
145	},
146
147	_createLabelNode: function() {
148	this.label = new LabelPane({
149	content: this,
150	'class': this['class']
151	});
152	this.set('class', '');
153	},
154
155	reset: function() {
156	this.set('value', '');
157	this.set('disabled', false);
158	this.setValid();
159	}
160	});
161	});

Line 0 Link Here

(-)a/management/univention-self-service/js/ucs/PasswordChange.js (+246 lines)
		1	/*
		2	* Copyright 2015-2016 Univention GmbH
		3	*
		4	* http://www.univention.de/
		5	*
		6	* All rights reserved.
		7	*
		8	* The source code of this program is made available
		9	* under the terms of the GNU Affero General Public License version 3
		10	* (GNU AGPL V3) as published by the Free Software Foundation.
		11	*
		12	* Binary versions of this program provided by Univention to you as
		13	* well as other copyrighted, protected or trademarked materials like
		14	* Logos, graphics, fonts, specific documentations and configurations,
		15	* cryptographic keys etc. are subject to a license agreement between
		16	* you and Univention and not subject to the GNU AGPL V3.
		17	*
		18	* In the case you use this program under the terms of the GNU AGPL V3,
		19	* the program is provided in the hope that it will be useful,
		20	* but WITHOUT ANY WARRANTY; without even the implied warranty of
		21	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
		22	* GNU Affero General Public License for more details.
		23	*
		24	* You should have received a copy of the GNU Affero General Public
		25	* License with the Debian GNU/Linux or Univention distribution in file
		26	* /usr/share/common-licenses/AGPL-3; if not, see
		27	* <http://www.gnu.org/licenses/>.
		28	*/
		29	/global define require console window /
		30
		31	define([
		32	"dojo/_base/lang",
		33	"dojo/on",
		34	"dojo/keys",
		35	"dojo/dom",
		36	"dojo/json",
		37	"dojo/request/xhr",
		38	"dijit/form/Button",
		39	"put-selector/put",
		40	"./TextBox",
		41	"./PasswordBox",
		42	"./lib",
		43	"./i18n!."
		44	], function(lang, on, keys, dom, json, xhr, Button, put, TextBox, PasswordBox, lib, _) {
		45
		46	return {
		47	title: _('Password change'),
		48	desc: _('Change your (expired) password.'),
		49	hash: 'passwordchange',
		50	contentContainer: null,
		51	steps: null,
		52
		53	/**
		54	* Returns the title of the subpage.
		55	* */
		56	getTitle: function() {
		57	return _(this.title);
		58	},
		59
		60	/**
		61	* Returns the description of the subpage.
		62	* */
		63	getDesc: function() {
		64	return _(this.desc);
65	},
66
67	/**
68	* Return the content node of the subpage.
69	* If the content does not exists, it will be generated.
70	* */
71	getContent: function() {
72	if (!this.contentContainer) {
73	this.contentContainer = put('div.contentWrapper');
74	put(this.contentContainer, 'div.contentDesc', this.getDesc());
75	put(this.contentContainer, this._getSteps());
76	}
77	return this.contentContainer;
78	},
79
80	/**
81	* Return the steps for the content node.
82	* If the steps do not exists, they will be generated.
83	* Note: Please call getContent for generating the steps.
84	* */
85	_getSteps: function() {
86	if (!this.steps) {
87	this.steps = put('ol#PasswordChangeSteps.PasswordOl');
88	this._createUsername();
89	this._createOldPassword();
90	this._createNewPassword();
91	this._createSubmit();
92	}
93	return this.steps;
94	},
95
96	/**
97	* Creates input field for username.
98	* */
99	_createUsername: function() {
100	var step = put('li.step');
101	var label = put('div.stepLabel', _('Username'));
102	put(step, label);
103	this._username = new TextBox({
104	'class': 'soloLabelPane',
105	isValid: function() {
106	return !!this.get('value');
107	},
108	required: true
109	});
110	this._username.startup();
111	put(step, this._username.domNode);
112	put(this.steps, step);
113	},
114
115	/**
116	* Creates input field for old password.
117	* */
118	_createOldPassword: function() {
119	var step = put('li.step');
120	var label = put('div.stepLabel', _('Old Password'));
121	put(step, label);
122	this._oldPassword = new TextBox({
123	'class': 'soloLabelPane',
124	type: 'password',
125	isValid: function() {
126	return !!this.get('value');
127	},
128	required: true
129	});
130	this._oldPassword.startup();
131	put(step, this._oldPassword.domNode);
132	put(this.steps, step);
133	},
134
135	/**
136	* Creates input fields for new password.
137	* */
138	_createNewPassword: function() {
139	var step = put('li.step');
140	var label = put('div.stepLabel', _('New Password'));
141	put(step, label);
142	this._newPassword = new PasswordBox({
143	'class': 'soloLabelPane left'
144	});
145	this._newPassword.startup();
146	put(step, this._newPassword.domNode);
147	put(this.steps, step);
148
149	step = put('li.step');
150	label = put('div.stepLabel', _('New Password (retype)'));
151	put(step, label);
152	this._verifyPassword = new TextBox({
153	type: 'password',
154	'class': 'soloLabelPane',
155	isValid: lang.hitch(this, function() {
156	return this._newPassword.get('value') ===
157	this._verifyPassword.get('value');
158	}),
159	invalidMessage: _('The passwords do not match, please retype again.'),
160	required: true
161	});
162	this._verifyPassword.startup();
163	put(step, this._verifyPassword.domNode);
164	put(this.steps, step);
165	},
166
167	/**
168	* Creates submit button.
169	* */
170	_createSubmit: function() {
171	var step = put('div');
172	this._submitButton = new Button({
173	label: _('Change password'),
174	onClick: lang.hitch(this, '_setPassword')
175	});
176	put(step, '>', this._submitButton.domNode);
177
178	// let the user submit the form by pressing ENTER
179	on(document, "keyup", lang.hitch(this, function(evt) {
180	if (evt.keyCode === keys.ENTER && !this._submitButton.get('disabled')) {
181	this._setPassword();
182	}
183	}));
184	put(this.steps, step);
185	},
186
187	/**
188	* Changes the current password if all input fields are valid.
189	* */
190	_setPassword: function() {
191	this._submitButton.set('disabled', true);
192	var allInputFieldsAreValid = this._username.isValid() &&
193	this._oldPassword.isValid() &&
194	this._newPassword.isValid() &&
195	this._verifyPassword.isValid();
196
197	if (allInputFieldsAreValid) {
198	data = json.stringify({
199	password: {
200	'username': this._username.get('value'),
201	'password': this._oldPassword.get('value'),
202	'new_password': this._newPassword.get('value')
203	}
204	});
205
206	xhr.post('/univention-management-console/set', {
207	handleAs: 'json',
208	headers: {
209	'Content-Type': 'application/json',
210	'Accept-Language': lib.getQuery('lang') \|\| 'en-US'
211	},
212	data: data
213	}).then(lang.hitch(this, function(data) {
214	lib.showLastMessage({
215	content: data.message,
216	'class': '.success'
217	});
218	this._clearAllInputFields();
219	}), lang.hitch(this, function(err) {
220	var message = err.name + ": " + err.message;
221	if (err.response && err.response.data && err.response.data.message) {
222	message = err.response.data.message;
223	}
224	lib.showMessage({
225	content: message,
226	'class': '.error'
227	});
228	})).always(lang.hitch(this, function(){
229	this._submitButton.set('disabled', false);
230	}));
231	} else {
232	this._submitButton.set('disabled', false);
233	}
234	},
235
236	/**
237	* Clears all input field values of the subpage.
238	* */
239	_clearAllInputFields: function() {
240	this._username.reset();
241	this._oldPassword.reset();
242	this._newPassword.reset();
243	this._verifyPassword.reset();
244	}
245	};
246	});

Lines 3-9 msgid "" Link Here

(-)a/management/univention-self-service/js/ucs/de.po (-140 / +56 lines)
3	msgstr ""	3	msgstr ""
4	"Project-Id-Version: univention-apache\n"	4	"Project-Id-Version: univention-apache\n"
5	"Report-Msgid-Bugs-To: packages@univention.de\n"	5	"Report-Msgid-Bugs-To: packages@univention.de\n"
6	"POT-Creation-Date: 2015-11-19 09:19+0100\n"	6	"POT-Creation-Date: 2016-04-01 13:30+0200\n"
7	"PO-Revision-Date: 2016-01-14 11:26+0100\n"	7	"PO-Revision-Date: 2016-01-14 11:26+0100\n"
8	"Last-Translator: Univention GmbH <packages@univention.de>\n"	8	"Last-Translator: Univention GmbH <packages@univention.de>\n"
9	"Language-Team: Univention GmbH <packages@univention.de>\n"	9	"Language-Team: Univention GmbH <packages@univention.de>\n"
Lines 12-22 msgstr "" Link Here
12	"Content-Type: text/plain; charset=UTF-8\n"	12	"Content-Type: text/plain; charset=UTF-8\n"
13	"Content-Transfer-Encoding: 8bit\n"	13	"Content-Transfer-Encoding: 8bit\n"
14		14
15	msgid " If you already have a token you can <a>skip this step</a>."	15	msgid " (retype)"
16	msgstr " Wenn Sie bereits über einen Token verfügen, dann können Sie <a>diesen Schritt überspringen</a>."	16	msgstr " (Wiederholung)"
17
18	msgid " If your token has expired you can <a>request a new token</a>."
19	msgstr " Wenn Ihr Token abgelaufen ist, können Sie einen <a>neuen Token anfordern</a>."
20		17
21	msgid "</br><a href='/{0}'>Back to the overview.</a>"	18	msgid "</br><a href='/{0}'>Back to the overview.</a>"
22	msgstr "</br><a href='/{0}'>Zurück zur Übersicht.</a>"	19	msgstr "</br><a href='/{0}'>Zurück zur Übersicht.</a>"
Lines 24-46 msgstr "</br><a href='/{0}'>Zurück zur Übersicht.</a>" Link Here
24	msgid "</br><div>You will be redirected {0} in <a id='redirectTimer'> {1} </a> second(s).</div>"	21	msgid "</br><div>You will be redirected {0} in <a id='redirectTimer'> {1} </a> second(s).</div>"
25	msgstr "</br><div>Sie werden in <a id='redirectTimer'> {1} </a> Sekunden {0} weitergeleitet.</div>"	22	msgstr "</br><div>Sie werden in <a id='redirectTimer'> {1} </a> Sekunden {0} weitergeleitet.</div>"
26		23
		24	msgid "Activate renew options."
		25	msgstr "Wiederherstellungsoptionen aktivieren."
		26
27	msgid "Cancel"	27	msgid "Cancel"
28	msgstr "Abbrechen"	28	msgstr "Abbrechen"
29		29
30	msgid "Change Password"
31	msgstr "Passwort ändern"
32
33	msgid "Change password"	30	msgid "Change password"
34	msgstr "Passwort ändern"	31	msgstr "Passwort ändern"
35		32
36	msgid "Contact information for Password reset"	33	msgid "Change your (expired) password."
37	msgstr "Kontaktinformationen zum Zurücksetzen des Passworts"	34	msgstr "Ändern Sie Ihr (abgelaufenes) Passwort."
38		35
39	msgid "EMail"	36	msgid "Everyone forgets their password now and then. Protect yourself and activate the opportunity to set a new password."
40	msgstr "E-Mail"	37	msgstr "Jeder vergißt mal das Passwort. Schützen Sie sich und aktivieren Sie die Möglichkeit ihr Passwort erneuern zu können."
41		38
42	msgid "Feel free to change your contact information. Press \"Save\" to confirm your changes."	39	msgid "Forbidden chars:"
43	msgstr "Bitte tragen Sie Ihre Kontaktinformationen ein und drücken Sie anschließend \"Speichern\", um Ihre Änderungen zu bestätigen."	40	msgstr "Vorbotene Zeichen:"
44		41
45	msgid ""	42	msgid ""
46	"Forbidden redirect to: {0}\n"	43	"Forbidden redirect to: {0}\n"
Lines 49-54 msgstr "" Link Here
49	"Verbotene Weiterleitung nach: {0}\n"	46	"Verbotene Weiterleitung nach: {0}\n"
50	" Die URL muss mit (nur) einem \"/\" beginnen."	47	" Die URL muss mit (nur) einem \"/\" beginnen."
51		48
		49	msgid "Forgot your password? Set a new one: "
		50	msgstr "Haben Sie ihr Passwort vergessen? Setzen Sie ein Neues:"
		51
52	#, python-format	52	#, python-format
53	msgid "Hello %(last)s, %(first)s!"	53	msgid "Hello %(last)s, %(first)s!"
54	msgstr "Hallo %(last)s, %(first)s!"	54	msgstr "Hallo %(last)s, %(first)s!"
Lines 57-125 msgstr "Hallo %(last)s, %(first)s!" Link Here
57	msgid "Hello %s %s!"	57	msgid "Hello %s %s!"
58	msgstr "Hallo %s %s!"	58	msgstr "Hallo %s %s!"
59		59
		60	msgid "If you did not received an e-mail please check your spam directory or use this link to go back to step 2."
		61	msgstr "Sollten Sie keine E-Mail erhalten haben, dann prüfen Sie bitte Ihr SPAM-Verzeichnis oder nutzen Sie diesen Link und kehren zu Schritt 2 zurück."
		62
60	msgid "Language"	63	msgid "Language"
61	msgstr "Sprache"	64	msgstr "Sprache"
62		65
63	msgid "Mobile"	66	msgid "New Password"
64	msgstr "Mobilfunknummer"
65
66	msgid "New password"
67	msgstr "Neues Passwort"	67	msgstr "Neues Passwort"
68		68
69	msgid "New password (retype)"	69	msgid "New Password (retype)"
70	msgstr "Neues Passwort (Wiederholung)"	70	msgstr "Neues Passwort (Wiederholung)"
71		71
72	msgid "Next"	72	msgid "Next"
73	msgstr "Weiter"	73	msgstr "Weiter"
74		74
75	msgid "Old password"	75	msgid "Old Password"
76	msgstr "Altes Passwort"	76	msgstr "Altes Passwort"
77		77
78	msgid "On this page you can change your password. If you have lost your password, use this link to the <a href=\"/univention-self-service/{0}#passwordreset\">password reset</a> page."
79	msgstr "Auf dieser Seite können Sie Ihr Passwort ändern. Wenn Sie Ihr Passwort vergessen haben, nutzen Sie bitte den folgenden Link: <a href=\"/univention-self-service/{0}#passwordreset\">Passwort zurücksetzen.</a>"
80
81	msgid "On this page you can reset your lost password or provide contact information for setting a new password in the future."
82	msgstr "Auf dieser Seite können Sie Ihr Passwort zurücksetzen oder Ihre Kontaktinformationen angeben, um zukünftig Ihr Passwort zurücksetzen zu können."
83
84	msgid "On this page you can set your contact information to reset your password in the future. During the reset process a token is sent to you. Without contact information it is not possible to reset your password."
85	msgstr "Auf dieser Seite können Sie Ihre Kontaktinformationen angeben. Diese Informationen werden benötigt, um Ihnen einen Token (Sicherheitsschlüssel) zuzusenden. Nur mit Hilfe eines Tokens ist es möglich das Passwort zurückzusetzen."
86
87	msgid "Password"	78	msgid "Password"
88	msgstr "Passwort"	79	msgstr "Passwort"
89		80
90	msgid "Password Reset"	81	msgid "Password change"
91	msgstr "Passwort zurücksetzen"	82	msgstr "Passwort ändern"
92		83
93	msgid "Please choose a method to receive the token."	84	msgid "Password forgotten"
94	msgstr "Bitte wählen Sie eine Benachrichtigungsart über die Sie einen Token (Sicherheitsschlüssel) erhalten möchten."	85	msgstr "Passwort vergessen"
95		86
96	msgid "Please click the following link to <a href=\"/univention-self-service/{0}#setcontactinformation\">change your contact information</a> for resetting your password in the future."	87	msgid "Please choose an option to renew your password."
97	msgstr "Bitte nutzen Sie den folgenden Link, um Ihre <a href=\"/univention-self-service/{0}#setcontactinformation\"> Kontaktinformationen zu ändern</a> damit Sie zukünftig Ihr Passwort zurücksetzen können."	88	msgstr "Bitte wählen Sie eine Wiederherstellungsoption aus."
98		89
99	msgid "Please enter a valid email address."	90	msgid "Please enter a valid email address."
100	msgstr "Keine gültige E-Mail-Adresse."	91	msgstr "Keine gültige E-Mail-Adresse."
101		92
102	msgid "Please enter the token and your new password."	93	msgid "Protect Account Access"
103	msgstr "Bitte geben Sie den Token (Sicherheitsschlüssel) und ein neues Passwort ein."	94	msgstr "Kontozugang schützen"
104		95
105	msgid "Please enter your username and password to display your contact information."	96	msgid "Required chars:"
106	msgstr "Bitte geben Sie Ihren Benutzernamen und Ihr Passwort ein, um Ihre Kontaktinformationen einsehen und ändern zu können."	97	msgstr "Erforderliche Zeichen:"
107		98
108	msgid "Please provide the required data to change your password."	99	msgid "Required length:"
109	msgstr "Bitte geben Sie die notwendigen Daten ein, um Ihr Passwort zu ändern."	100	msgstr "Erforderliche Passwortlänge:"
110		101
111	msgid "Please provide your username to receive a token that is required to reset your password."	102	msgid "Required number of lower case letters:"
112	msgstr "Bitte geben Sie Ihren Benutzernamen ein. Sie erhalten anschließend einen Token (Sicherheitsschlüssel) mit dem Sie Ihr Passwort zurücksetzen können."	103	msgstr "Erforderliche Anzahl von Kleinbuchstaben:"
113		104
114	msgid "Provide your contact information."	105	msgid "Required number of special characters (nor digit or letters):"
115	msgstr "Geben Sie Ihre Kontaktinformationen an."	106	msgstr "Erforderliche Anzahl von Sonderzeichen:"
116		107
117	msgid "Reset your password."	108	msgid "Required number of upper case letters:"
118	msgstr "Passwort zurücksetzen."	109	msgstr "Erforderliche Anzahl von Großbuchstaben:"
119		110
120	msgid "Save"	111	msgid "Save"
121	msgstr "Speichern"	112	msgstr "Speichern"
122		113
		114	msgid "Set a new password!"
		115	msgstr "Setzen Sie ein neues Passwort!"
		116
		117	msgid "The entries do not match, please retype again."
		118	msgstr "Die Eingaben stimmen nicht überein. Bitte versuchen Sie es erneut."
		119
		120	msgid "The password must fullfill following conditions:"
		121	msgstr "Das Passwort muss folgende Bedingungen erfüllen:"
		122
123	msgid "The passwords do not match, please retype again."	123	msgid "The passwords do not match, please retype again."
124	msgstr "Die Passwörter stimmen nicht überein. Bitte versuchen Sie es erneut."	124	msgstr "Die Passwörter stimmen nicht überein. Bitte versuchen Sie es erneut."
125		125
Lines 127-134 msgstr "Die Passwörter stimmen nicht überein. Bitte versuchen Sie es erneut." Link Here
127	msgid "The total cost was %.2f EUR!"	127	msgid "The total cost was %.2f EUR!"
128	msgstr "Die Gesamtkosten waren %.2f EUR!"	128	msgstr "Die Gesamtkosten waren %.2f EUR!"
129		129
130	msgid "Token"	130	msgid "This value is required."
131	msgstr "Token (Sicherheitsschlüssel)"	131	msgstr "Pflichtfeld."
132		132
133	msgid "Translate me!"	133	msgid "Translate me!"
134	msgstr "Übersetz mich!"	134	msgstr "Übersetz mich!"
Lines 136-230 msgstr "Übersetz mich!" Link Here
136	msgid "Username"	136	msgid "Username"
137	msgstr "Benutzername"	137	msgstr "Benutzername"
138		138
139	msgid "to '{0}'"	139	msgid "We have send you an e-mail to your alternative e-mail address, that you have provided on the page \"Protect Account Access\". Please check your mails and follow the link to renew your password."
140	msgstr "zu '{0}'"	140	msgstr "Wir haben Ihnen eine E-Mail an Ihre alternative E-Mailadresse geschickt. Diese haben Sie auf der Seite \"Kontugang schützen\" hinterlegt. Bitte prüfen Sie Ihre E-Mails und folgen Sie den Link, um Ihr Passwort zu erneuern."
141
142	#~ msgid "A license file has been sent to <strong id=\"email-address\">{0}</strong>. This file is necessary to activate the system. For this, please carry out the following steps: <ol><li>Open the email.</li><li>Save the attachement (ucs.license) on your computer.</li><li>Click the button 'Upload license file'.</li><li>Select the file (ucs.license) you just saved.</li><li>Confirm the selection.</li></ol>Once the activation has been finished your email address will be sent to the app provider. The app provider may contact you."
143	#~ msgstr "Eine Lizenzdatei wurde an <strong id=\"email-address\">{0}</strong> gesendet. Sie wird benötigt um das System zu aktivieren. Bitte führen Sie dazu folgende Schritte aus: <ol><li>Öffnen Sie die E-Mail.</li><li>Speichern Sie den Anhang (ucs.license) auf Ihren Computer.</li><li>Klicken Sie auf die Schaltfläche 'Lizenzdatei hochladen'.</li><li>Wählen Sie die soeben gespeicherte Datei (ucs.license) aus.</li><li>Bestätigen Sie die Auswahl.</li></ol> Sobald die Aktivierung durchgeführt ist, wird Ihre E-Mail-Adresse an den App-Anbieter weitergeleitet. Der App-Anbieter wird Sie ggf. kontaktieren."
144
145	#~ msgid "Activation of {appliance_name} Univention App"
146	#~ msgstr "Aktivierung von {appliance_name} Univention App"
147
148	#~ msgid "Activation successful!"
149	#~ msgstr "Aktivierung erfolgreich!"
150
151	#~ msgid "An unknown error has occurred."
152	#~ msgstr "Ein unbekannter Fehler trat auf."
153
154	#~ msgid "An unknown error occured. Please try it again later!"
155	#~ msgstr "Ein unbekannter Fehler trat auf. Bitte versuchen sie es später noch einmal!"
156
157	#~ msgid "Confirm username"
158	#~ msgstr "Benutzername bestätigen"
159
160	#~ msgid "Continue"
161	#~ msgstr "Weiter"
162		141
163	#~ msgid "E-mail address"	142	msgid "You have mail!"
164	#~ msgstr "E-Mail-Adresse"	143	msgstr "Sie haben eine neue E-Mail!"
165		144
166	#~ msgid "Error "	145	msgid "to '{0}'"
167	#~ msgstr "Fehler "	146	msgstr "zu '{0}'"
168
169	#~ msgid "I have forgotten my password."
170	#~ msgstr "Ich habe mein Passwort vergessen."
171
172	#~ msgid "I want to change my (expired) password."
173	#~ msgstr "Ich will mein (abgelaufenes) Passwort ändern."
174
175	#~ msgid "I would like to set my contact information for resetting my password."
176	#~ msgstr "Ich möchte meine Kontaktinformationen ändern, um zukünftig mein Password zurücksetzen zu können."
177
178	#~ msgid "If you did not receive an email, please check your SPAM directory or <a href=\"#register\"> request the email again</a>."
179	#~ msgstr "Sollten Sie keine E-Mail erhalten haben, prüfen Sie Ihr SPAM-Verzeichnis oder <a href=\"#register\">fordern Sie die Lizenzdatei noch einmal an</a>."
180
181	#~ msgid "If you encounter problems during the activation, please send an email to: <strong><a href=\"mailto:feedback@univention.de\" style=\"color:#000\">feedback@univention.de</a></strong>"
182	#~ msgstr "Sollten Probleme bei der Aktivierung auftreten, senden Sie bitte eine E-Mail an: <strong><a href=\"mailto:feedback@univention.de\" style=\"color:#000\">feedback@univention.de</a></strong>"
183
184	#~ msgid "In order to reset your password please carry out the following steps: "
185	#~ msgstr "Um Ihr Passwort zurückzusetzen führen Sie bitte die folgenden Schritte aus: "
186
187	#~ msgid "License request."
188	#~ msgstr "Anforderung einer Lizenz."
189
190	#~ msgid "More details about the activation can be found in the <a href=\"http://docs.univention.de/manual.html#central:license\" target=\"_blank\">UCS manual</a>."
191	#~ msgstr "Weitere Informationen zu der Aktivierung können im <a href=\"http://docs.univention.de/handbuch.html#central:license\" target=\"_blank\">UCS-Handbuch</a> gefunden werden."
192
193	#~ msgid "Password self-service"
194	#~ msgstr "Passwort verwalten"
195
196	#~ msgid "Please enter a valid email address in order to activate {appliance_name} Univention App. The activation is mandatory to deploy the system. In the next step you can upload the license file that has been sent to your email address."
197	#~ msgstr "Bitte geben Sie eine gültige E-Mail-Adresse ein, um {appliance_name} Univention App zu aktivieren. Die Aktivierung ist Voraussetzung, um das System in Gebrauch zu nehmen. Im nächsten Schritt können sie die Lizenzdatei hochladen, die an Ihre E-Mail-Adresse gesendet wurde."
198
199	#~ msgid "Please enter your username."
200	#~ msgstr "Bitte geben Sie Ihren Benutzernamen ein."
201
202	#~ msgid "Request token"
203	#~ msgstr "Token anfordern"
204
205	#~ msgid "Show contact information"
206	#~ msgstr "Kontaktinformationen anzeigen"
207
208	#~ msgid "The following error occurred:"
209	#~ msgstr "Der folgende Fehler trat auf:"
210
211	#~ msgid "The server is not responding. Please restart the system."
212	#~ msgstr "Der Webserver antwortet nicht. Bitte starten Sie das System neu."
213
214	#~ msgid "Upload license file"
215	#~ msgstr "Lizenzdatei hochladen"
216
217	#~ msgid "Welcome to the Password self-service. On this site you can reset and change your password. Please select an option to get more information."
218	#~ msgstr "Willkommen zur Passwortverwaltung. Auf dieser Seite können Sie Ihr Passwort zurücksetzen oder ändern. Bitte wählen Sie eine Option, um mehr Informationen zu erhalten."
219
220	#~ msgid "You have got mail!"
221	#~ msgstr "Sie haben eine neue E-Mail!"
222
223	#~ msgid "You have received a license file by email!"
224	#~ msgstr "Sie haben eine Lizendatei per E-Mail erhalten!"
225
226	#~ msgid "your email address"
227	#~ msgstr "Ihre E-Mail-Adresse"
228
229	#~ msgid "{appliance_name} Univention App is now activated. Click \"Continue\" to access the management interface (which may take a while)."
230	#~ msgstr "{appliance_name} Univention App ist nun aktiviert. Klicken sie auf \"Weiter\", um auf die Verwaltungsoberfläche zuzugreifen. (Das kann einige Zeit benötigen.)"

Lines 36-51 define([ Link Here

(-)a/management/univention-self-service/js/ucs/lib.js (-9 / +48 lines)
36	"dojo/io-query",	36	"dojo/io-query",
37	"dojox/html/entities",	37	"dojox/html/entities",
38	"put-selector/put",	38	"put-selector/put",
		39	"dojo/request",
39	"./i18n!."	40	"./i18n!."
40	], function(lang, fx, dom, domGeom, ioQuery, htmlEntities, put, _) {	41	], function(lang, fx, dom, domGeom, ioQuery, htmlEntities, put, request, _) {
41		42
42	return {	43	return {
43	getCurrentLanguageQuery: function() {	44	getCurrentLanguageQuery: function() {
44	return '?lang=' + (this.getQuery('lang') \|\| 'en-US');	45	return '?lang=' + (this.getQuery('lang') \|\| 'en-US');
45	},	46	},
46		47
		48	/**
		49	* Displays given message.
		50	* @param {object} msg - Provides targetNode, class and content
		51	* for the message.
		52	*/
47	showMessage: function(msg) {	53	showMessage: function(msg) {
48	var targetNode = msg.targetNode \|\| dom.byId("content");	54	var targetNode = msg.targetNode \|\| dom.byId("server_msg");
49	var msgNode = dom.byId('msg');	55	var msgNode = dom.byId('msg');
50		56
51	if (msgNode) {	57	if (msgNode) {
Lines 64-70 define([ Link Here
64	},	70	},
65		71
66	showLastMessage: function(msg) {	72	showLastMessage: function(msg) {
67	var targetNode = msg.targetNode \|\| dom.byId("title");	73	var targetNode = msg.targetNode \|\| dom.byId("server_msg");
68	var msgNode = dom.byId('msg');	74	var msgNode = dom.byId('msg');
69		75
70	if (msgNode) {	76	if (msgNode) {
Lines 107-128 define([ Link Here
107	return message;	113	return message;
108	},	114	},
109		115
		116	/**
		117	* Returns relative url from query string.
		118	*/
110	_getUrlForRedirect: function() {	119	_getUrlForRedirect: function() {
111	var queryUrl = this.getQuery('url');	120	var queryUrl = this.getQuery('url');
112	if (queryUrl) {	121	if (queryUrl) {
113	// checking if queryUrl is relative = has to start wit only one '/'	122	if (this._isUrlRelative(queryUrl)) {
114	var reg = /^\/([^\/]\|$)/;
115	var isUrlRelative = reg.test(queryUrl);
116	if (isUrlRelative) {
117	return queryUrl;	123	return queryUrl;
118	} else {	124	} else {
119	// forbidden to provide absolute urls	125	var msg = {
120	console.error(lang.replace(_('Forbidden redirect to: {0}\n The url has to start with (only) one "/".', [queryUrl])));	126	content: lang.replace(_('Forbidden redirect to: {0}\n The url has to start with (only) one "/".', [queryUrl])),
		127	'class': 'error'
		128	};
		129	this.showMessage(msg);
121	}	130	}
122	}	131	}
123	return;	132	return;
124	},	133	},
125		134
		135	/** Returns boolean if given url is relative.
		136	* @param {string} url - url to test
		137	* */
		138	_isUrlRelative: function(url) {
		139	var reg = /^\/([^\/]\|$)/;
		140	var isUrlRelative = reg.test(url);
		141	return isUrlRelative;
		142	},
		143
126	_getUrlLabelForRedirect: function() {	144	_getUrlLabelForRedirect: function() {
127	var label = this.getQuery('urlLabel');	145	var label = this.getQuery('urlLabel');
128	if (label) {	146	if (label) {
Lines 133-138 define([ Link Here
133	}	151	}
134	},	152	},
135		153
		154	/**
		155	* Returns the value of the query string for a given key.
		156	* */
136	getQuery: function(key) {	157	getQuery: function(key) {
137	var queryString = window.location.search.substring(1);	158	var queryString = window.location.search.substring(1);
138	var queryObject = ioQuery.queryToObject(queryString);	159	var queryObject = ioQuery.queryToObject(queryString);
Lines 146-151 define([ Link Here
146	}	167	}
147	},	168	},
148		169
		170	/**
		171	* Returns the needed backend information for the Password Service
		172	* as a promise or as an object.
		173	* The information is requested once and will be cached in
		174	* this._backend_info.
		175	* */
		176	getBackendInformation: function() {
		177	if (!this._backend_info) {
		178	var promise = request.get("/univention-self-service/entries.json");
		179	promise.then(lang.hitch(this, function(data){
		180	this._backend_info = data;
		181	}));
		182	return promise;
		183	} else {
		184	return this._backend_info;
		185	}
		186	},
		187
149	wipeInNode: function(conf) {	188	wipeInNode: function(conf) {
150	var endHeight = domGeom.getMarginBox(conf.node).h;	189	var endHeight = domGeom.getMarginBox(conf.node).h;
151	fx.animateProperty({	190	fx.animateProperty({

Lines 4-10 Link Here

(-)a/management/univention-self-service/www/index.html (-5 / +10 lines)
4	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />	4	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
5	<meta http-equiv="X-UA-Compatible" content="IE=edge" />	5	<meta http-equiv="X-UA-Compatible" content="IE=edge" />
6	<meta name="viewport" content="width=device-width, initial-scale=1.0">	6	<meta name="viewport" content="width=device-width, initial-scale=1.0">
7	<title></title>	7	<title>Password Settings</title>
8	<link rel="shortcut icon" href="/favicon.ico" />	8	<link rel="shortcut icon" href="/favicon.ico" />
9	<link rel="stylesheet" href="js/dijit/themes/dijit.css">	9	<link rel="stylesheet" href="js/dijit/themes/dijit.css">
10	<link rel="stylesheet" href="css/bootstrap.css"/>	10	<link rel="stylesheet" href="css/bootstrap.css"/>
Lines 16-32 Link Here
16	<div id="wrapper">	16	<div id="wrapper">
17	<div id="site-header">	17	<div id="site-header">
18	<div id="header-top">	18	<div id="header-top">
19	<div id="header-left">	19	<a id="header-left" href="/ucs-overview">
20	</div>	20	</a>
		21	<a id="header-middle" href="/ucs-overview"></a>
21	<div id="header-right">	22	<div id="header-right">
22	<div class="dropdown" id="dropDownButton"></div>	23	<div class="dropdown" id="dropDownButton"></div>
23	</div>	24	</div>
24	</div>	25	</div>
25	</div>	26	</div>
26	<div class="container">	27	<div class="container">
27	<div id="title" class="dijitHidden">	28	<div id="title">
		29	Password Settings
28	</div>	30	</div>
29	<div id="content">	31	<div id="navigation"></div>
		32	<div id="content" class="tab-content">
30	<noscript>	33	<noscript>
31	<div>	34	<div>
32	<h1 class="no-js">Welcome to Univention Corporate Server</h1>	35	<h1 class="no-js">Welcome to Univention Corporate Server</h1>
Lines 39-45 Link Here
39	</div>	42	</div>
40	</noscript>	43	</noscript>
41	</div>	44	</div>
		45	<div id="server_msg"></div>
42	</div>	46	</div>
		47	<div class="footer dijitHidden" id="footer"></div>
43	</div>	48	</div>
44	</body>	49	</body>
45	</html>	50	</html>