From b42f7f566b87823f84d7445b10ce9553baa73adf Mon Sep 17 00:00:00 2001
From: MaysWind <i@mayswind.net>
Date: Sun, 2 Jul 2023 21:57:22 +0800
Subject: [PATCH] add unlock page for desktop

---
 src/components/common/PinCodeInput.vue |   3 +-
 src/desktop-main.js                    |   4 +
 src/locales/en.js                      |   2 +
 src/locales/zh_Hans.js                 |   2 +
 src/styles/desktop/global.scss         |  10 ++
 src/views/desktop/UnlockPage.vue       | 227 ++++++++++++++++++++++++-
 6 files changed, 244 insertions(+), 4 deletions(-)

diff --git a/src/components/common/PinCodeInput.vue b/src/components/common/PinCodeInput.vue
index 85aec9d9..35fb9320 100644
--- a/src/components/common/PinCodeInput.vue
+++ b/src/components/common/PinCodeInput.vue
@@ -244,9 +244,10 @@ export default {
     --ebk-pin-code-focued-color: #c67e48;
     --ebk-pin-code-border-radius: 8px;
     --ebk-pin-code-input-height: 46px;
+    --ebk-pin-code-input-gap: 8px;
     --ebk-pin-code-transition-duration: 200ms;
     display: grid;
-    gap: 8px;
+    gap: var(--ebk-pin-code-input-gap);
 }
 
 .pin-code-input {
diff --git a/src/desktop-main.js b/src/desktop-main.js
index 781a0b04..73e5a213 100644
--- a/src/desktop-main.js
+++ b/src/desktop-main.js
@@ -54,6 +54,8 @@ import {
     i18nFunctions
 } from '@/lib/i18n.js';
 
+import PinCodeInput from '@/components/common/PinCodeInput.vue';
+
 import AmountInput from '@/components/desktop/AmountInput.vue';
 import ConfirmDialog from '@/components/desktop/ConfirmDialog.vue';
 import SnackBar from '@/components/desktop/SnackBar.vue';
@@ -327,6 +329,8 @@ app.use(router);
 app.component('PerfectScrollbar', PerfectScrollbar);
 app.component('VueDatePicker', VueDatePicker);
 
+app.component('PinCodeInput', PinCodeInput);
+
 app.component('AmountInput', AmountInput);
 app.component('ConfirmDialog', ConfirmDialog);
 app.component('SnackBar', SnackBar);
diff --git a/src/locales/en.js b/src/locales/en.js
index 3f17bc88..ca55597a 100644
--- a/src/locales/en.js
+++ b/src/locales/en.js
@@ -768,6 +768,8 @@ export default {
     'Welcome to ezBookkeeping': 'Welcome to ezBookkeeping',
     'Please log in with your ezBookkeeping account': 'Please log in with your ezBookkeeping account',
     'Unlock Application': 'Unlock Application',
+    'Please input your PIN code or use Webauth to unlock application': 'Please input your PIN code or use Webauth to unlock application',
+    'Can\'t Unlock?': 'Can\'t Unlock?',
     'Re-login': 'Re-login',
     'Username': 'Username',
     'Your username': 'Your username',
diff --git a/src/locales/zh_Hans.js b/src/locales/zh_Hans.js
index 6251116a..001d32be 100644
--- a/src/locales/zh_Hans.js
+++ b/src/locales/zh_Hans.js
@@ -768,6 +768,8 @@ export default {
     'Welcome to ezBookkeeping': '欢迎使用 ezBookkeeping',
     'Please log in with your ezBookkeeping account': '请使用您的 ezBookkeeping 账号登录',
     'Unlock Application': '解锁应用',
+    'Please input your PIN code or use Webauth to unlock application': '请输入您的 PIN 码，或使用 Webauth 解锁应用',
+    'Can\'t Unlock?': '无法登录？',
     'Re-login': '重新登录',
     'Username': '用户名',
     'Your username': '你的用户名',
diff --git a/src/styles/desktop/global.scss b/src/styles/desktop/global.scss
index a17684e8..64a416e3 100644
--- a/src/styles/desktop/global.scss
+++ b/src/styles/desktop/global.scss
@@ -12,6 +12,16 @@
 }
 
 /** custom class **/
+.pin-codes-input {
+    --ebk-pin-code-input-height: 56px;
+    --ebk-pin-code-input-gap: 20px;
+    --ebk-pin-code-transition-duration: 0ms;
+}
+
+.pin-code-input input {
+    font-size: 1.25rem;
+}
+
 .auth-logo {
     position: absolute;
     z-index: 1;
diff --git a/src/views/desktop/UnlockPage.vue b/src/views/desktop/UnlockPage.vue
index 21fb2dfa..1f8027c4 100644
--- a/src/views/desktop/UnlockPage.vue
+++ b/src/views/desktop/UnlockPage.vue
@@ -1,13 +1,234 @@
 <template>
-    <div class="auth-wrapper d-flex align-center justify-center pa-4">
+    <div class="layout-wrapper">
+        <div class="auth-logo d-flex align-start gap-x-3">
+            <v-img alt="logo" class="login-page-logo" src="/img/ezbookkeeping-192.png" />
+            <h1 class="font-weight-medium leading-normal text-2xl">{{ $t('global.app.title') }}</h1>
+        </div>
+        <v-row no-gutters class="auth-wrapper">
+            <v-col cols="12" md="8" class="d-none d-md-flex align-center justify-center position-relative">
 
+            </v-col>
+            <v-col cols="12" md="4" class="auth-card d-flex align-center justify-center">
+                <v-card variant="flat" class="mt-12 mt-sm-0 pa-4" max-width="500">
+                    <v-card-text>
+                        <h5 class="text-h5 mb-1">{{ $t('Unlock Application') }}</h5>
+                        <p class="mb-0">{{ $t('Please input your PIN code or use Webauth to unlock application') }}</p>
+                    </v-card-text>
+
+                    <v-card-text>
+                        <v-form>
+                            <v-row>
+                                <v-col cols="12">
+                                    <pin-code-input :secure="true" :length="6" v-model="pinCode" @pincode:confirm="unlockByPin" />
+                                </v-col>
+
+                                <v-col cols="12">
+                                    <v-btn block :class="{ 'disabled': !isPinCodeValid(pinCode) }"
+                                           @click="unlockByPin(pinCode)">
+                                        {{ $t('Unlock By PIN Code') }}
+                                    </v-btn>
+                                </v-col>
+
+                                <v-col cols="12" v-if="isWebAuthnAvailable">
+                                    <v-btn block variant="tonal"
+                                           @click="unlockByWebAuthn">
+                                        {{ $t('Unlock By WebAuthn') }}
+                                    </v-btn>
+                                </v-col>
+
+                                <v-col cols="12" class="text-center">
+                                    <span class="me-1">{{ $t('Can\'t Unlock?') }}</span>
+                                    <a class="text-primary" href="javascript:void(0);" @click="relogin">
+                                        {{ $t('Re-login') }}
+                                    </a>
+                                </v-col>
+
+                                <v-col cols="12" class="text-center">
+                                    <v-menu location="bottom">
+                                        <template #activator="{ props }">
+                                            <v-btn variant="text" v-bind="props">{{ currentLanguageName }}</v-btn>
+                                        </template>
+                                        <v-list>
+                                            <v-list-item v-for="(lang, locale) in allLanguages" :key="locale">
+                                                <v-list-item-title
+                                                    class="cursor-pointer"
+                                                    @click="changeLanguage(locale)">
+                                                    {{ lang.displayName }}
+                                                </v-list-item-title>
+                                            </v-list-item>
+                                        </v-list>
+                                    </v-menu>
+                                </v-col>
+
+                                <v-col cols="12" class="d-flex align-center">
+                                    <v-divider />
+                                </v-col>
+
+                                <v-col cols="12" class="text-center text-sm">
+                                    <span>Powered by </span>
+                                    <a href="https://github.com/mayswind/ezbookkeeping" target="_blank">ezBookkeeping</a>&nbsp;<span>{{ version }}</span>
+                                </v-col>
+                            </v-row>
+                        </v-form>
+                    </v-card-text>
+                </v-card>
+            </v-col>
+        </v-row>
+
+        <confirm-dialog ref="confirmDialog"/>
+        <snack-bar ref="snackbar" />
+
+        <v-overlay class="justify-center align-center" :persistent="true" v-model="verifying">
+            <v-progress-circular indeterminate></v-progress-circular>
+        </v-overlay>
     </div>
 </template>
 
 <script>
-export default {
-    created() {
+import { mapStores } from 'pinia';
+import { useRootStore } from '@/stores/index.js';
+import { useSettingsStore } from '@/stores/setting.js';
+import { useUserStore } from '@/stores/user.js';
+import { useTokensStore } from '@/stores/token.js';
+import { useExchangeRatesStore } from '@/stores/exchangeRates.js';
 
+import logger from '@/lib/logger.js';
+import webauthn from '@/lib/webauthn.js';
+
+export default {
+    data() {
+        return {
+            pinCode: '',
+            verifying: false
+        };
+    },
+    computed: {
+        ...mapStores(useRootStore, useSettingsStore, useUserStore, useTokensStore, useExchangeRatesStore),
+        version() {
+            return 'v' + this.$version;
+        },
+        allLanguages() {
+            return this.$locale.getAllLanguageInfos();
+        },
+        isWebAuthnAvailable() {
+            return this.settingsStore.appSettings.applicationLockWebAuthn
+                && this.$user.getWebAuthnCredentialId()
+                && webauthn.isSupported();
+        },
+        currentLanguageName() {
+            const currentLocale = this.$i18n.locale;
+            let lang = this.$locale.getLanguageInfo(currentLocale);
+
+            if (!lang) {
+                lang = this.$locale.getLanguageInfo(this.$locale.getDefaultLanguage());
+            }
+
+            return lang.displayName;
+        }
+    },
+    methods: {
+        unlockByWebAuthn() {
+            const self = this;
+
+            if (!self.settingsStore.appSettings.applicationLockWebAuthn || !self.$user.getWebAuthnCredentialId()) {
+                self.$refs.snackbar.showMessage('WebAuthn is not enabled');
+                return;
+            }
+
+            if (!webauthn.isSupported()) {
+                self.$refs.snackbar.showMessage('This device does not support WebAuthn');
+                return;
+            }
+
+            this.verifying = true;
+
+            webauthn.verifyCredential(
+                self.userStore.currentUserInfo,
+                self.$user.getWebAuthnCredentialId()
+            ).then(({ id, userName, userSecret }) => {
+                this.verifying = false;
+
+                self.$user.unlockTokenByWebAuthn(id, userName, userSecret);
+                self.tokensStore.refreshTokenAndRevokeOldToken().then(response => {
+                    if (response.user) {
+                        const localeDefaultSettings = self.$locale.setLanguage(response.user.language);
+                        self.settingsStore.updateLocalizedDefaultSettings(localeDefaultSettings);
+                    }
+                });
+
+                if (self.settingsStore.appSettings.autoUpdateExchangeRatesData) {
+                    self.exchangeRatesStore.getLatestExchangeRates({ silent: true, force: false });
+                }
+
+                self.$router.replace('/');
+            }).catch(error => {
+                this.verifying = false;
+                logger.error('failed to use webauthn to verify', error);
+
+                if (error.notSupported) {
+                    self.$refs.snackbar.showMessage('This device does not support WebAuthn');
+                } else if (error.name === 'NotAllowedError') {
+                    self.$refs.snackbar.showMessage('User has canceled authentication');
+                } else if (error.invalid) {
+                    self.$refs.snackbar.showMessage('Failed to authenticate by WebAuthn');
+                } else {
+                    self.$refs.snackbar.showMessage('User has canceled or this device does not support WebAuthn');
+                }
+            });
+        },
+        unlockByPin(pinCode) {
+            const self = this;
+
+            if (!self.isPinCodeValid(pinCode)) {
+                return;
+            }
+
+            const user = self.userStore.currentUserInfo;
+
+            if (!user || !user.username) {
+                self.$refs.snackbar.showMessage('An error has occurred');
+                return;
+            }
+
+            try {
+                self.$user.unlockTokenByPinCode(user.username, pinCode);
+                self.tokensStore.refreshTokenAndRevokeOldToken().then(response => {
+                    if (response.user) {
+                        const localeDefaultSettings = self.$locale.setLanguage(response.user.language);
+                        self.settingsStore.updateLocalizedDefaultSettings(localeDefaultSettings);
+                    }
+                });
+
+                if (self.settingsStore.appSettings.autoUpdateExchangeRatesData) {
+                    self.exchangeRatesStore.getLatestExchangeRates({ silent: true, force: false });
+                }
+
+                self.$router.replace('/');
+            } catch (ex) {
+                logger.error('failed to unlock by pin code', ex);
+                self.$refs.snackbar.showMessage('PIN code is wrong');
+            }
+        },
+        relogin() {
+            const self = this;
+
+            self.$refs.confirmDialog.open('Are you sure you want to re-login?').then(() => {
+                self.rootStore.forceLogout();
+                self.settingsStore.clearAppSettings();
+
+                const localeDefaultSettings = self.$locale.initLocale(self.userStore.currentUserLanguage, self.settingsStore.appSettings.timeZone);
+                self.settingsStore.updateLocalizedDefaultSettings(localeDefaultSettings);
+
+                self.$router.replace('/login');
+            });
+        },
+        isPinCodeValid(pinCode) {
+            return pinCode && pinCode.length === 6;
+        },
+        changeLanguage(locale) {
+            const localeDefaultSettings = this.$locale.setLanguage(locale);
+            this.settingsStore.updateLocalizedDefaultSettings(localeDefaultSettings);
+        }
     }
 }
 </script>