prs/prs.mobile.new/PRS.Mobile/Main/PINLoginPage.xaml.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Comal.Classes;
using InABox.Clients;
using InABox.Configuration;
using InABox.Core;
using InABox.Mobile;
using Xamarin.Essentials;
using Xamarin.Forms;
using XF.Material.Forms.UI.Dialogs;

namespace PRS.Mobile
{
    public partial class PinLoginPage
    {

        private enum SubPage
        {
            Autologin,
            Pin,
            TwoFactor,
            Password
        }
        
        private SubPage _page;
        private String _pin = "";
        private String _2fa = "";

        private Dictionary<String, MobileDatabaseSettings> _settings = new Dictionary<string, MobileDatabaseSettings>();
        private MobileDatabaseSettings _default = new MobileDatabaseSettings();
        
        public PinLoginPage()
        {
            InitializeComponent();
            SelectSubPage(SubPage.Autologin);
            
            Task.Run(AnimateLoading);
        }

        public async void AnimateLoading()
        {
            while (true)
            {
                await _status.FadeTo(0.2, 1000);
                await _status.FadeTo(1.0, 1000);
            }
        }

        protected override async void OnAppearing()
        {
            base.OnAppearing();
            
            bool isenabled = await MobileUtils.IsPermitted<Permissions.LocationWhenInUse>();
            if (!isenabled)
                App.StartMonitoringGPS();

            App.StartMonitoringBlueTooth();

            //TODO this is only for the temporary site app login - needs to be removed
            SelectSubPage(SubPage.Autologin);

            // Is this the first time through?
            // If so, then try to validate         
            if (_page == SubPage.Autologin)
            {
                
                CheckAutoConfigurationLink();
                
                LoadSettings();

                TransportStatus connection = TransportStatus.None;
                
                _status.Text = "Connecting...";
                await Task.Run(() =>
                {
                    if ((_default.URLs?.Any(x => !String.IsNullOrWhiteSpace(x)) == true)
                        && !string.IsNullOrWhiteSpace(_default.UserID)
                        && !string.IsNullOrWhiteSpace(_default.Password)
                       )
                    {
                        CoreRepository.CacheID = _default.CacheID;
                        connection = App.ConnectTransport(_default.URLs);
                    }
                });
                
                if (connection != TransportStatus.OK)
                {
                    if(_default.URLs.Any() && !string.IsNullOrWhiteSpace(_default.UserID))
                        await DisplayAlert("Connection Error", $"Unable to establish a connection!\n\nERR: {connection}", "OK");

                    Navigation.PushAsync(new SettingsPage());
                    return;
                }

                ValidationStatus status = ValidationStatus.INVALID;
                _status.Text = "Validating...";
                await Task.Run(() => 
                {
                    try
                    {
                        status = AutoLogin();
                    }
                    catch (Exception e)
                    {
                        InABox.Mobile.MobileLogging.Log(e,"AutoLogin");
                        status = ValidationStatus.INVALID;
                    }
                    
                });
                
                if (status == ValidationStatus.VALID)
                {
                    if (await CheckPasswordExpiration())
                    {
                        PasswordCancelColumn.Width = new GridLength(1, GridUnitType.Star);
                        SelectSubPage(SubPage.Password);
                    }
                    else
                    {
                        _status.Text = "Starting Up...";
                        LaunchMainPage();
                    }
                }

                else if (status == ValidationStatus.INVALID)
                {
                    
                    // If we _should_ have been able to log in (ie we have a username)
                    // show an error message.  Otherwise, jump to the PIN page
                    if (!String.IsNullOrWhiteSpace(_default.UserID))
                        await DisplayAlert("Error logging in", "Invalid User ID, Password or PIN", "OK");
                    
                    SelectSubPage(SubPage.Pin);
                }
                
                else if (status == ValidationStatus.REQUIRE_2FA)
                {
                    SelectSubPage(SubPage.TwoFactor);
                }
                
                else if (status == ValidationStatus.PASSWORD_EXPIRED)
                {
                    await DisplayAlert("Alert", "Your password has expired - please change it", "OK");
                    PasswordCancelColumn.Width = new GridLength(0, GridUnitType.Absolute);
                    SelectSubPage(SubPage.Password);
                }
            }
            
            else if (_page == SubPage.Pin)
            {
                UpdatePIN('\0');
            }
            
            else if (_page == SubPage.TwoFactor)
            {
                // Has the user left the app to go and get the 2fa code from sms or google authenticator?
                // If so, then try to retrieve the 2fa code from the clipboard
                var text = Clipboard.GetTextAsync().Result;
                if ((text?.Length == 6) && (text?.All(Char.IsDigit) == true))
                {
                    _2fa = text;
                    TwoFA0.Text = text.Substring(0, 1);
                    TwoFA1.Text = text.Substring(1, 1);
                    TwoFA2.Text = text.Substring(2, 1);
                    TwoFA3.Text = text.Substring(3, 1);
                    TwoFA4.Text = text.Substring(4, 1);
                    TwoFA5.Text = text.Substring(5, 1);
                }
                else
                    UpdateTwoFA('\0');
            }
            else if (_page == SubPage.Password)
            {
                NewPassword.Text = "";
                NewPassword2.Text = "";
                ChangePasswordButton.IsEnabled = false;
            }
        }
        
        private void CheckAutoConfigurationLink()
        {
            try
            {
                var parameters = App.LaunchParameters;
                App.LaunchParameters = "";

                if (String.IsNullOrWhiteSpace(parameters))
                    return;

                var decrypted = Encryption.Decrypt(parameters, "logindetailslink");
                if (decrypted?.ToUpper()?.Contains("ENDURLS") == true)
                {
                    var comps = decrypted.Split("ENDURLS");
                    if (comps.Length == 2)
                    {
                        var urls = comps.First().Split(',').Where(x => x != "").ToArray();
                        var settings = comps.Last().Split(',').Where(x => x != "").ToArray();
                        if (urls.Any() && (settings.Length > 3))
                        {
                            String user = settings[0];
                            String password = settings[1];
                            DateTime expiry = DateTime.Parse(settings[2]);
                            var profilename = settings.Length > 3 ? settings[3] : "Default Profile";
                            if (expiry > DateTime.Now)
                            {
                                _default = new MobileDatabaseSettings();
                                _default.URLs = urls;
                                _default.UserID = user;
                                _default.Password = password;
                                _default.IsDefault = true;
                                _default.CacheID = Guid.NewGuid();
                                _settings.Clear();
                                _settings[profilename] = _default;
                                new LocalConfiguration<MobileDatabaseSettings>().SaveAll(_settings, true);
                                DisplayAlert("Autoconfiguration", "Configuration Updated Successfully!!", "OK");
                            }
                            else
                                DisplayAlert("AutoConfiguration", "AutoConfiguration Link has expired!", "OK");
                        }
                        else
                            DisplayAlert("AutoConfiguration", "Invalid AutoConfiguration content!", "OK");
                    }
                    else
                        DisplayAlert("AutoConfiguration", "Invalid AutoConfiguration structure!", "OK");
                }
                else
                    DisplayAlert("AutoConfiguration", "Invalid AutoConfiguration format!", "OK");
            }
            catch (Exception e)
            {
                DisplayAlert("Error loading from link", e.Message, "OK");
            }
        }

        private void LoadSettings()
        {

            // var old = new DatabaseSettings()
            // {
            //     URLs = new String[]
            //     {
            //         "demo.prsdigital.com.au:8033",
            //         "demo2.prsdigital.com.au:8033",
            //     },
            //     UserID = "GUEST",
            //     Password = "guest"
            // };
            // new LocalConfiguration<DatabaseSettings>().Save(old);
            // _settings = new LocalConfiguration<MobileDatabaseSettings>().LoadAll();
            // foreach (var key in _settings.Keys)
            //     new LocalConfiguration<MobileDatabaseSettings>(key).Delete();
                 
            _settings = new LocalConfiguration<MobileDatabaseSettings>().LoadAll();
            
            // Migrate from Old Database Settings (if present)
            if (!_settings.Any())
            {
                var oldsettings = new LocalConfiguration<DatabaseSettings>().LoadAll();
                foreach (var key in oldsettings.Keys)
                {
                    if (oldsettings[key].URLs?.Any() == true)
                    {
                        var newsetting = new MobileDatabaseSettings()
                        {
                            URLs = oldsettings[key].URLs,
                            UserID = oldsettings[key].UserID,
                            Password = oldsettings[key].Password,
                            IsDefault = String.IsNullOrWhiteSpace(key),
                            CacheID = Guid.NewGuid()
                        };
                        _settings[String.IsNullOrWhiteSpace(key) ? "Default Profile" : key] = newsetting;
                    }

                    new LocalConfiguration<MobileDatabaseSettings>().SaveAll(_settings);
                    new LocalConfiguration<DatabaseSettings>().Delete();
                }
            }
            
            // Contruct Defaults if required
            if (!_settings.Any())
            {
                _default = new MobileDatabaseSettings();
                _default.URLs = new String[]
                {
                    "demo.prsdigital.com.au:8033",
                    "demo2.prsdigital.com.au:8033",
                };
                _default.UserID = "GUEST";
                _default.Password = "guest";
                _default.IsDefault = true;
                _default.CacheID = Guid.NewGuid();
                _settings["Demo Database"] = _default;
                new LocalConfiguration<MobileDatabaseSettings>().SaveAll(_settings);
            }

            // Retrieve the Default (or the first, if there is no default)
            _default = _settings.Any(x => x.Value.IsDefault)
                ? _settings.FirstOrDefault(x => x.Value.IsDefault).Value
                : _settings.First().Value;
            if (_default.CacheID == Guid.Empty)
            {
                _default.CacheID = Guid.NewGuid();
                new LocalConfiguration<MobileDatabaseSettings>().SaveAll(_settings);
            }

            //TODO - re enable this when this app is not just the site module
            //App.IsSharedDevice = String.IsNullOrWhiteSpace(_settings.UserID);

        }
        
        public ValidationStatus AutoLogin(string pin = "")
        {
            
            ValidationStatus result = ValidationStatus.INVALID;

            Guid sessionID = App.Current.Properties.ContainsKey("SessionID")
                ? Guid.Parse(App.Current.Properties["SessionID"].ToString())
                : Guid.Empty;
            
            if (!Guid.Equals(sessionID, Guid.Empty))
                result = ClientFactory.Validate(sessionID);

            if (result == ValidationStatus.INVALID)
            {
                if (!String.IsNullOrWhiteSpace(_default.UserID) && !String.IsNullOrWhiteSpace(_default.Password))
                    result = ClientFactory.Validate(_default.UserID, _default.Password);
            }
            
            return result;
            
        }
        
        private async Task<bool> CheckPasswordExpiration()
        {
            if (!ClientFactory.PasswordExpiration.IsEmpty())
            {
                var timeUntilExpiration = ClientFactory.PasswordExpiration - DateTime.Now;
                if (timeUntilExpiration.Days < 14)
                {
                    string chosenOption = await DisplayActionSheet("Alert",
                        $"Password will expire in {timeUntilExpiration.Days} days. Change password now?", null, "Yes", "No");
                    return String.Equals(chosenOption, "Yes");
                }
            }

            return false;
        }

        private void LaunchMainPage()
        {
            Device.BeginInvokeOnMainThread(() => SelectSubPage(String.IsNullOrWhiteSpace(_default.UserID) ? SubPage.Pin : SubPage.Autologin));
            
            App.Data.Setup();
            
            //Guid jobid = new LocalConfiguration<SiteModuleSettings>().Load().JobID;
            //Navigation.PushAsync(new SiteModule() { JobID = jobid });
            var mainpage = new MainPage();
            Navigation.PushAsync(mainpage);
        }
        
        private void SelectSubPage(SubPage page)
        {
            _page = page;
            
            MasterGrid.SelectedItem = _page switch
            {
                SubPage.Pin => PINLayout,
                SubPage.TwoFactor => TwoFALayout,
                SubPage.Password => PasswordLayout,
                _ => SplashLayout
            };
            
            UpdatePIN('\0');
            UpdateTwoFA('\0');
            
            NewPassword.Text = "";
            NewPassword2.Text = "";
            ChangePasswordButton.IsEnabled = false;
            
        }
        
        #region PIN Page
        
        private void UpdatePIN(char digit)
        {
            _pin = digit switch
            {
                '\0' => "",
                '\b' => _pin.Length > 0 ? _pin.Substring(0, _pin.Length - 1) : "",
                _ => String.Concat(_pin, digit)
            };
            Pin0.Text = _pin.Length > 0 ? "*" : "";
            Pin1.Text = _pin.Length > 1 ? "*" : "";
            Pin2.Text = _pin.Length > 2 ? "*" : "";
            Pin3.Text = _pin.Length > 3 ? "*" : "";
            PinBack.IsEnabled = !String.IsNullOrEmpty(_pin);
            PinOK.IsEnabled = _pin?.Length == 4;
        }

        void Pin_Button_Click(object sender, EventArgs args)
        {
            UpdatePIN((sender as Button).Text.ToCharArray().First());
        }
        
        void Pin_Back_Click(object sender, EventArgs args)
        {
            UpdatePIN('\b'); 
        }

        async void Pin_OK_Click(object sender, EventArgs args)
        {
            var status = ClientFactory.Validate(_pin);

            if (status == ValidationStatus.INVALID)
            {
                DisplayAlert("PIN Error", "Invalid PIN Entered!", "OK").Wait();
                UpdatePIN('\0');
            }
            else if (status == ValidationStatus.REQUIRE_2FA)
                SelectSubPage(SubPage.TwoFactor);
            else
                LaunchMainPage();
        }
        
        #endregion
        
        #region Two Factor Page
        
        private void UpdateTwoFA(char digit)
        {
            _2fa = digit switch
            {
                '\0' => "",
                '\b' => _2fa.Length > 0 ? _2fa.Substring(0, _2fa.Length - 1) : "",
                _ => String.Concat(_2fa, digit)
            };
            TwoFA0.Text = _2fa.Length > 0 ? _2fa.Substring(0,1) : "";
            TwoFA1.Text = _2fa.Length > 1 ? _2fa.Substring(1,1) : "";
            TwoFA2.Text = _2fa.Length > 2 ? _2fa.Substring(2,1) : "";
            TwoFA3.Text = _2fa.Length > 3 ? _2fa.Substring(3,1) : "";
            TwoFA4.Text = _2fa.Length > 4 ? _2fa.Substring(4,1) : "";
            TwoFA5.Text = _2fa.Length > 5 ? _2fa.Substring(5,1) : "";
            TwoFABack.IsEnabled = !String.IsNullOrEmpty(_2fa);
            TwoFAOK.IsEnabled = _2fa?.Length == 6;
        }

        void TwoFA_Button_Click(object sender, EventArgs args)
        {
            UpdateTwoFA((sender as Button).Text.ToCharArray().First());
        }
        
        void TwoFA_Back_Click(object sender, EventArgs args)
        {
            UpdateTwoFA('\b'); 
        }

        void TwoFA_OK_Click(object sender, EventArgs args)
        {
            if (ClientFactory.Check2FA(_2fa))
                LaunchMainPage();
            DisplayAlert("2FA Error", "Invalid 2FA Code", "OK").Wait();
            UpdateTwoFA('\0');
        }
        
        #endregion
        
        #region Change Password Page
        
        private void NewPassword_OnTextChanged(object sender, TextChangedEventArgs e)
        {
            ChangePasswordButton.IsEnabled = 
                !String.IsNullOrWhiteSpace(NewPassword.Text)
                && NewPassword.Text.Length >= 5
                && !String.IsNullOrWhiteSpace(NewPassword2.Text)
                && String.Equals(NewPassword.Text, NewPassword2.Text);
        }
        
        private async void ChangePasswordButton_OnClicked(object sender, EventArgs e)
        {
            using (await MaterialDialog.Instance.LoadingDialogAsync(message: "Saving"))
            {
                var user = new User() { ID = ClientFactory.UserGuid };
                user.Password = NewPassword.Text;
                new Client<User>().Save(user, "Password updated by User from Timebench");
                _default.Password = user.Password;
                new LocalConfiguration<MobileDatabaseSettings>().SaveAll(_settings);
                
                LaunchMainPage();
            }
        }
        
        private void CancelPasswordButton_OnClicked(object sender, EventArgs e)
        {
            LaunchMainPage();
        }
        
        #endregion


        private void Settings_OnClicked(object sender, EventArgs e)
        {
            // Always try autologin when returning from Settings Page
            SelectSubPage(SubPage.Autologin);
            Navigation.PushAsync(new SettingsPage());
        }
    }
    
}