codeforlife-portal 5.33.5__py2.py3-none-any.whl → 8.9.9__py2.py3-none-any.whl

portal/static/portal/js/organisation_manage.js

@@ -1,25 +1,153 @@
 /* global showPopupConfirmation */
 
 function showRemoveConfirmation(path, name) {
-    let title = "Remove teacher";
-    let text = "<div class='popup-text'><p>The teacher " + name + ", will be removed from the school or club. If they have any classes you will be asked to move them to other teachers of this school or club.</p><p>Are you sure?</p></div>";
-    let confirm_handler = "postWithCsrf('" + path + "')";
+  let title = "Remove teacher";
+  let text =
+    "<div class='popup-text'><p>The teacher " +
+    name +
+    ", will be removed from the school or club. If they have any classes you will be asked to move them to other teachers of this school or club.</p><p>Are you sure?</p></div>";
+  let confirm_handler = "postWithCsrf('" + path + "')";
 
-    showPopupConfirmation(title, text, confirm_handler);
+  showPopupConfirmation(title, text, confirm_handler);
 }
 
-function showToggleAdminConfirmation(path, name) {
-    let title = "Make teacher admin";
-    let text = "<div class='popup-text'><p>The teacher " + name + ", will be made an administrator of this school or club. They will gain all of the powers that you currently have.</p><p>Are you sure?</p></div>";
-    let confirm_handler = "postWithCsrf('" + path + "')";
-
-    showPopupConfirmation(title, text, confirm_handler);
+function showToggleAdminConfirmation(path) {
+  let confirm_handler = "postWithCsrf('" + path + "')";
+  const popup = $("#popup-make-admin-teacher")
+  popup.addClass("popup--fade")
+  const add_admin_button = $("#add_admin_button")
+  add_admin_button.attr("onclick", confirm_handler)
 }
 
 function showDisable2FAConfirmation(path, name) {
-    let title = "Disable 2FA for " + name;
-    let text = "<div class='popup-text'><p>The teacher " + name + ", will have their two factor authentication disabled. This will make their account less secure.</p><p>Are you sure?</p></div>";
-    let confirm_handler = "postWithCsrf('" + path + "')";
+  let title = "Disable 2FA for " + name;
+  let text =
+    "<div class='popup-text'><p>The teacher " +
+    name +
+    ", will have their two factor authentication disabled. This will make their account less secure.</p><p>Are you sure?</p></div>";
+  let confirm_handler = "postWithCsrf('" + path + "')";
+
+  showPopupConfirmation(title, text, confirm_handler);
+}
+
+/**
+ * Popup for inviting a teacher
+**/
+function showMakeAdminTeacherPopup(event) {
+  const popup = $("#popup-make-admin-teacher")
+  const is_invite_admin = document.getElementById("id_make_admin_ticked").checked
+  if (is_invite_admin) {
+    event.preventDefault()
+    popup.addClass("popup--fade");
+    const add_admin_button = $("#add_admin_button")
+
+    add_admin_button.on("click", () => event.target.submit())
+  }
+}
 
-    showPopupConfirmation(title, text, confirm_handler);
+function hideMakeAdminTeacherPopup() {
+  $("#popup-make-admin-teacher").removeClass("popup--fade");
 }
+
+/**
+ * Show an account delete confirmation popup with a red delete button and either a Cancel or a Review classes button.
+ * See dashboard.html for the popup declaration.
+ */
+function showDeleteAccountConfirmation(delete_password, unsubscribe_newsletter, has_class = true) {
+  const popup = $("#popup-delete-review");
+
+  if (has_class) {
+    popup.find(".popup-box__title").text("You still have classes associated with this account");
+    popup
+      .find(".popup-box__msg")
+      .append("Review classes if you would like to download the scoreboard or transfer students first.");
+
+    popup.find("#cancel_popup_button").hide();
+  } else {
+    popup.find(".popup-box__title").text("You are about to delete your account");
+    popup.find(".popup-box__msg").append("This action is not reversible. Are you sure you wish to proceed?");
+
+    popup.find("#review_button").hide();
+  }
+
+  const delete_button = popup.find("#delete_button");
+  const delete_path = delete_button.data("delete-path");
+  const handler =
+    "postWithCsrf('" +
+    delete_path +
+    "', {password: '" +
+    delete_password +
+    "', unsubscribe_newsletter: '" +
+    unsubscribe_newsletter +
+    "'})";
+
+  delete_button.attr("onclick", handler);
+
+  popup.addClass("popup--fade");
+}
+
+function hideDeleteAccountPopup() {
+  $("#popup-delete-review").removeClass("popup--fade");
+}
+
+$(document).ready(() => {
+  $('#edit_account_details_password, #student_account_form').on(
+    'click',
+    '#password-field-icon, #confirm-password-field-icon',
+    () => {
+      let inputType;
+      let dataIcon = $('#password-field-icon').attr('data-icon');
+      if (dataIcon === 'material-symbols:visibility') {
+        inputType = 'password';
+        dataIcon = 'material-symbols:visibility-off';
+      } else {
+        inputType = 'text';
+        dataIcon = 'material-symbols:visibility';
+      }
+
+      $('#id_password').attr('type', inputType);
+      $('#id_confirm_password').attr('type', inputType);
+
+      $('#password-field-icon').attr('data-icon', dataIcon);
+      $('#confirm-password-field-icon').attr('data-icon', dataIcon);
+    }
+  );
+
+  $('#edit_account_details_password, #student_account_form').on(
+    'click',
+    '#current-password-field-icon',
+    () => {
+      let inputType;
+      let dataIcon = $('#current-password-field-icon').attr('data-icon');
+      if (dataIcon === 'material-symbols:visibility') {
+        inputType = 'password';
+        dataIcon = 'material-symbols:visibility-off';
+      } else {
+        inputType = 'text';
+        dataIcon = 'material-symbols:visibility';
+      }
+
+      $('#id_current_password').attr('type', inputType);
+      $('#current-password-field-icon').attr('data-icon', dataIcon);
+    }
+  );
+
+  $('#delete-account, #delete-indy-account').on(
+    'click',
+    '#delete-password-field-icon',
+    () => {
+      let inputType;
+      let dataIcon = $('#delete-password-field-icon').attr('data-icon');
+      if (dataIcon === 'material-symbols:visibility') {
+        inputType = 'password';
+        dataIcon = 'material-symbols:visibility-off';
+      } else {
+        inputType = 'text';
+        dataIcon = 'material-symbols:visibility';
+      }
+
+      $('#id_delete_password').attr('type', inputType);
+      $('#delete-password-field-icon').attr('data-icon', dataIcon);
+    }
+  );
+});

portal/static/portal/js/passwordStrength.js

@@ -1,82 +1,172 @@
-var TEACHER_PASSWORD_FIELD_ID = '';
-var INDEP_STUDENT_PASSWORD_FIELD_ID = '';
-let teacher_password_field = '';
-let indep_student_password_field = '';
-let most_used_passwords = ['Abcd1234', 'Password1', 'Qwerty123'];
+const TEACHER_PASSWORD_FIELD = $(`#${TEACHER_PASSWORD_FIELD_ID}`);
+const INDEP_STUDENT_PASSWORD_FIELD = $(`#${INDEP_STUDENT_PASSWORD_FIELD_ID}`);
 
 let password_strengths = [
-    { name: 'No password!', colour: '#FF0000' },
-    { name: 'Password too weak!', colour: '#DBA901' },
-    { name: 'Strong password!', colour: '#088A08' },
-    { name: 'Password too common!', colour: '#DBA901' }
+  { name: 'No password!', colour: '#FF0000' },
+  { name: 'Password too weak!', colour: '#DBA901' },
+  { name: 'Password too common!', colour: '#DBA901' },
+  { name: 'Strong password!', colour: '#088A08' }
 ];
 
-$(function() {
-
-    teacher_password_field = $('#' + TEACHER_PASSWORD_FIELD_ID);
-    indep_student_password_field = $('#' + INDEP_STUDENT_PASSWORD_FIELD_ID);
-
-    setUpDynamicUpdates(teacher_password_field, true);
-    setUpDynamicUpdates(indep_student_password_field, false);
-
-    updatePasswordStrength(true);
-    updatePasswordStrength(false);
-});
-
-function setUpDynamicUpdates(password_field, isTeacher) {
-    password_field.on('keyup', function(){
-        updatePasswordStrength(isTeacher)
-    });
-    password_field.on('paste', function(){
-        updatePasswordStrength(isTeacher)
-    });
-    password_field.on('cut', function(){
-        updatePasswordStrength(isTeacher)
-    });
+async function handlePasswordStrength() {
+  const teacherPwd = TEACHER_PASSWORD_FIELD.val();
+  const studentPwd = INDEP_STUDENT_PASSWORD_FIELD.val();
+
+  const isTeacherPwdTyped = teacherPwd.length > 0;
+  const isStudentPwdTyped = studentPwd.length > 0;
+
+  const isTeacherPwdStrong =
+    isTeacherPwdTyped && isPasswordStrong(teacherPwd, true);
+  const isStudentPwdStrong =
+    isStudentPwdTyped && isPasswordStrong(studentPwd, false);
+
+  const isTeacherPwdSafe =
+    isTeacherPwdStrong && !(await isPasswordPwned(teacherPwd));
+  const isStudentPwdSafe =
+    isStudentPwdStrong && !(await isPasswordPwned(studentPwd));
+
+  const teacherPwdStrength = [
+    isTeacherPwdTyped,
+    isTeacherPwdStrong,
+    isTeacherPwdSafe
+  ].filter(Boolean).length;
+  const studentPwdStrength = [
+    isStudentPwdTyped,
+    isStudentPwdStrong,
+    isStudentPwdSafe
+  ].filter(Boolean).length;
+
+  $('#teacher-password-sign').css(
+    'background-color',
+    password_strengths[teacherPwdStrength].colour
+  );
+  $('#teacher-password-text').html(password_strengths[teacherPwdStrength].name);
+  $('#student-password-sign').css(
+    'background-color',
+    password_strengths[studentPwdStrength].colour
+  );
+  $('#student-password-text').html(password_strengths[studentPwdStrength].name);
 }
 
-function updatePasswordStrength(isTeacher) {
-    // The reason for the timeout is that if we just got $('#...').val() we'd get the
-    // old value before the keypress / change. Apparently even jQuery itself implements
-    // things this way, so maybe there is no better workaround.
+const isPasswordPwned = async (password) => {
+  const computeSHA1Hash = (password) =>
+    CryptoJS.SHA1(password).toString().toUpperCase();
 
-    setTimeout(function() {
-        let password;
+  try {
+    const hashedPassword = computeSHA1Hash(password);
+    const prefix = hashedPassword.substring(0, 5);
+    const suffix = hashedPassword.substring(5);
+    const apiUrl = `https://api.pwnedpasswords.com/range/${prefix}`;
 
-        if (isTeacher) {
-            password = $('#' + TEACHER_PASSWORD_FIELD_ID).val();
-        }
-        else {
-            password = $('#' + INDEP_STUDENT_PASSWORD_FIELD_ID).val();
-        }
+    const response = await fetch(apiUrl);
 
-        let strength = 0;
-        if (password.length > 0) { strength++; }
-        if (isPasswordStrong(password, isTeacher)) { strength++; }
+    if (!response.ok) {
+      return false; // ignore the check if the server is down as the popup warns
+      // the user that we cannot check the password
+    }
 
-        if ($.inArray(password, most_used_passwords) >= 0 && strength == 2) { strength = 3; }
+    const data = await response.text();
 
-        if (isTeacher) {
-            updatePasswordCSS('#teacher-password-sign', '#teacher-password-text', strength);
-        }
-        else {
-            updatePasswordCSS('#student-password-sign', '#student-password-text', strength);
-        }
+    return data.includes(suffix);
+  } catch (error) {
+    console.error(`Request failed with error: ${error.message}`);
+    return false;
+  }
+};
 
-    });
+function isPasswordStrong(password, isTeacher) {
+  if (isTeacher) {
+    return (
+      password.length >= 10 &&
+      !(
+        password.search(/[A-Z]/) === -1 ||
+        password.search(/[a-z]/) === -1 ||
+        password.search(/[0-9]/) === -1 ||
+        password.search(/[!@#$%^&*()_+\-=\[\]{};':\"\\|,.<>\/?]/) === -1
+      )
+    );
+  } else {
+    return (
+      password.length >= 8 &&
+      !(
+        password.search(/[A-Z]/) === -1 ||
+        password.search(/[a-z]/) === -1 ||
+        password.search(/[0-9]/) === -1
+      )
+    );
+  }
 }
 
-function isPasswordStrong(password, isTeacher) {
-    if (isTeacher) {
-        return password.length >= 10 && !(password.search(/[A-Z]/) === -1 || password.search(/[a-z]/) === -1 || password.search(/[0-9]/) === -1 || password.search(/[!@#$%^&*()_+\-=\[\]{};':\"\\|,.<>\/?]/) === -1)
-    }
-    else {
-        return password.length >= 8 && !(password.search(/[A-Z]/) === -1 || password.search(/[a-z]/) === -1 || password.search(/[0-9]/) === -1)
-    }
+async function isPwnedPasswordApiAvailable(url) {
+  try {
+    const response = await fetch(url, { metheod: 'GET' });
+    return response.ok;
+  } catch (error) {
+    console.error(error);
+    return false;
+  }
+}
+async function handlePwnedPasswordApiAvailability() {
+  const url = 'https://api.pwnedpasswords.com/range/00000';
+  const isAvailable = await isPwnedPasswordApiAvailable(url);
+  const errorTitle = 'Password Vulnerability Check Unavailable';
+  const errorMessage =
+    'We are currently unable to check your password vulnerability. Please ensure that you are using a strong password. If you are happy to continue, please confirm.';
+  if (!isAvailable) {
+    showServiceUnavailable(errorTitle, errorMessage);
+  }
 }
 
-function updatePasswordCSS(passwordStrengthSign, passwordStrengthText, strength) {
-    $(passwordStrengthSign).css('background-color', password_strengths[strength].colour);
-    $(passwordStrengthText).html(password_strengths[strength].name);
+function onClickPasswordVisibility(
+  formId,
+  passwordIconId,
+  confirmPasswordIconId,
+  passwordId,
+  confirmPasswordId
+) {
+  // Delegate event listeners.
+  $(formId).on('click', '[data-icon^="material-symbols:visibility"]', function () {
+    // Get icons and input types.
+    let inputType;
+    let dataIcon;
+    if ($(this).attr('data-icon') === 'material-symbols:visibility') {
+      inputType = 'password';
+      dataIcon = 'material-symbols:visibility-off';
+    } else {
+      inputType = 'text';
+      dataIcon = 'material-symbols:visibility';
+    }
+
+    // Set icons.
+    $(passwordIconId).attr('data-icon', dataIcon);
+    $(confirmPasswordIconId).attr('data-icon', dataIcon);
+
+    // Set input types.
+    $(passwordId).attr('type', inputType);
+    $(confirmPasswordId).attr('type', inputType);
+  })
 }
 
+$(document).ready(function () {
+  handlePasswordStrength(); // the password strength text is updated dynamically hence this is the initial first call
+  handlePwnedPasswordApiAvailability();
+  $(
+    `#${TEACHER_PASSWORD_FIELD_ID}, #${INDEP_STUDENT_PASSWORD_FIELD_ID}`
+  ).on('input change focus blur', handlePasswordStrength);
+
+  onClickPasswordVisibility(
+    '#teacher-register-form',
+    '#teacher-password-field-icon',
+    '#teacher-confirm-password-field-icon',
+    '#id_teacher_signup-teacher_password',
+    '#id_teacher_signup-teacher_confirm_password'
+  );
+
+  onClickPasswordVisibility(
+    '#independent-student-register-form',
+    '#independent-student-password-field-icon',
+    '#independent-student-confirm-password-field-icon',
+    '#id_independent_student_signup-password',
+    '#id_independent_student_signup-confirm_password'
+  );
+});

portal/static/portal/js/resetPassword.js

@@ -0,0 +1,23 @@
+$(document).ready(() => {
+  $('#reset-password-form').on(
+    'click',
+    '#password-field-icon, #confirm-password-field-icon',
+    () => {
+      let inputType;
+      let dataIcon = $('#password-field-icon').attr('data-icon');
+      if (dataIcon === 'material-symbols:visibility') {
+        inputType = 'password';
+        dataIcon = 'material-symbols:visibility-off';
+      } else {
+        inputType = 'text';
+        dataIcon = 'material-symbols:visibility';
+      }
+
+      $('#id_new_password1').attr('type', inputType);
+      $('#id_new_password2').attr('type', inputType);
+
+      $('#password-field-icon').attr('data-icon', dataIcon);
+      $('#confirm-password-field-icon').attr('data-icon', dataIcon);
+    }
+  );
+});