{% extends 'base.html' %}

{% block title %}Авторизация{% endblock %}
{% block header %}Вход{% endblock %}


{% block content %}

<!-- {{ session["jwt"] }} -->

<form action="" method="post" id="form">
    <input type="email" autofocus autocomplete="username" name="login" id="login" placeholder="Логин" required>
    <input type="password" autocomplete="current-password" name="password" id="password" placeholder="Пароль" required>

    <input type="submit" value="Войти" />

    <small>
        Еще нет аккаунта?
        <a href="signup" class="ml-auto">Регистрация</a>
    </small>

</form>

{% endblock %}

{% block scripts %}

<script>
    const form = document.getElementById("form")
    form.addEventListener("submit", async function (event) {
        event.preventDefault()
        const loginElement = document.getElementById("login")
        const passwordElement = document.getElementById("password")

        const login = loginElement.value
        const password = passwordElement.value

        const serverChallengeResponse = await fetch("/auth/signin?action=get_server_challenge&login=" + login)

        const serverChallenge = await serverChallengeResponse.text()

        const randomLength = 32

        const serverRandom = serverChallenge.slice(0, randomLength * 2)
        const serverTimestamp = serverChallenge.slice(randomLength * 2, randomLength * 2 + 10)
        const serverSalt = hexToArrayBuffer(serverChallenge.slice(randomLength * 2 + 10))

        const clientTimestamp = parseInt(new Date().getTime() / 1000)

        if (clientTimestamp - serverTimestamp > 3600 * 24) {
            alert("Время истекло")
            return
        }

        let clientRandom = window.crypto.getRandomValues(new Uint8Array(randomLength));
        clientRandom = arrayBufferToHexDec(clientRandom)

        let secret = serverRandom + clientRandom + serverTimestamp + login
        // secret = "test1234test123"
        // padding делается автоматом по алгоритму 'pkcs7'

        key = await getKey(password, serverSalt)

        const keyHex = await keyToHex(key)

        const iv = window.crypto.getRandomValues(new Uint8Array(16));

        // const iv = new Uint8Array([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0])

        let encryptedMessage = await crypto.subtle.encrypt(
            {
                name: "AES-CBC",
                iv
            },
            key,
            encode(secret)
        );

        const payload = arrayBufferToHexDec(concatTypedArrays(iv, new Uint8Array(encryptedMessage)))

        let res = await post(window.location.href, {
            login,
            challenge_resp: payload
        })

        if (!res.ok) {
            alert("fail")
            console.error(await res.text())
            return
        }

        redirectNextUrl("/auth/profile")

        return false
    })
</script>

{% endblock %}