@*******************************************************************************************************//  Login.cshtml - Gbtc////  Copyright © 2017, Grid Protection Alliance.  All Rights Reserved.////  Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See//  the NOTICE file distributed with this work for additional information regarding copyright ownership.//  The GPA licenses this file to you under the MIT License (MIT), the "License"; you may//  not use this file except in compliance with the License. You may obtain a copy of the License at:////      http://opensource.org/licenses/MIT////  Unless agreed to in writing, the subject software distributed under the License is distributed on an//  "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the//  License for the specific language governing permissions and limitations.////  Code Modification History://  ----------------------------------------------------------------------------------------------------//  08/22/2017 - J. Ritchie Carroll//       Generated original version of source code.////*****************************************************************************************************@@using System.Net@using System.Net.Http@using System.Text@using GSF.Web@using GSF.Web.Model@using GSF.Web.Security@using GSF.Web.Shared@using Microsoft.Ajax.Utilities@inherits ExtendedTemplateBase@{    HttpRequestMessage request = ViewBag.Request;     string redirectPage;    string authTestPage = AuthenticationOptions.DefaultAuthTestPage;    string loginPage = AuthenticationOptions.DefaultLoginPage;    string logoutPage = AuthenticationOptions.DefaultLogoutPage;    string clearCredentials = AuthenticationOptions.DefaultClearCredentialsParameter;    string verificationHeader = AuthenticationOptions.DefaultRequestVerificationToken;    string verificationValue = Html.RequestVerificationHeaderToken();    string useAjaxVerfication = AuthenticationOptions.DefaultAjaxRequestVerificationToken;    string loginHeader = "";    bool unsecureConnection = request.RequestUri.Scheme != "https" && !request.RequestUri.IsLoopback;    string oIDCError = "";      if (request.QueryParameters().TryGetValue("redir", out redirectPage)) {        string base64Path = WebUtility.UrlDecode(redirectPage);        byte[] pathBytes = Convert.FromBase64String(base64Path);        redirectPage = Encoding.UTF8.GetString(pathBytes);    }    else {        redirectPage = "/";    }     if (request.QueryParameters().TryGetValue("oidcError", out oIDCError))    {        oIDCError = WebUtility.UrlDecode(oIDCError);    }    else    {        oIDCError = "";    }     string redirectPageLabel = redirectPage == "/" ? "main" : "target";    ReadonlyAuthenticationOptions options = ViewBag.AuthenticationOptions;     if ((object)options != null) {        if (!string.IsNullOrWhiteSpace(options.AuthTestPage)) {            authTestPage = options.AuthTestPage;        }         if (!string.IsNullOrWhiteSpace(options.LoginPage)) {            loginPage = options.LoginPage;        }         if (!string.IsNullOrWhiteSpace(options.LogoutPage)) {            logoutPage = options.LogoutPage;        }         if (!string.IsNullOrWhiteSpace(options.ClearCredentialsParameter)) {            clearCredentials = options.ClearCredentialsParameter;        }         if (!string.IsNullOrWhiteSpace(options.RequestVerificationToken)) {            verificationHeader = options.RequestVerificationToken;        }         if (!string.IsNullOrWhiteSpace(options.AjaxRequestVerificationToken)) {            useAjaxVerfication = options.AjaxRequestVerificationToken;        }         // Login header is used set custom logo and application title for page        loginHeader = options.LoginHeader;    }     bool useAlternateSecurityProvider = false;    string p;    if (request.QueryParameters().TryGetValue("useAlternateSecurityProvider", out p))    {        useAlternateSecurityProvider = true;    }      string constants = string.Format(@"        const redirectPage = ""{0}"";        const securePage = ""{1}"";        const loginPage = ""{2}"";        const logoutPage = ""{3}"" + ""?{4}=true"";        const unsecureConnection = {5};        const verificationHeader = ""{6}"";        const verificationValue = ""{7}"";        const useAjaxVerfication = ""{8}"";        const redirectPageLabel = ""{9}"";        const useAlternateSecurityProvider = {10};        const oidcError = ""{11}"";    ",/* 0 */ redirectPage.JavaScriptEncode(),/* 1 */ authTestPage.JavaScriptEncode(),/* 2 */ loginPage.JavaScriptEncode(),/* 3 */ logoutPage.JavaScriptEncode(),/* 4 */ clearCredentials.JavaScriptEncode(),/* 5 */ unsecureConnection.ToString().ToLowerInvariant(),/* 6 */ verificationHeader.JavaScriptEncode(),/* 7 */ verificationValue.JavaScriptEncode(),/* 8 */ useAjaxVerfication.JavaScriptEncode(),/* 9 */ redirectPageLabel.JavaScriptEncode(),/* 10 */ useAlternateSecurityProvider.ToString().ToLowerInvariant(),/* 11 */ oIDCError.JavaScriptEncode());}<!DOCTYPE html><html><head>    <meta charset="utf-8" />    <meta http-equiv="X-UA-Compatible" content="IE=edge">    <meta name="viewport" content="width=device-width, initial-scale=1">    <meta http-equiv="content-type" content="text/html; charset=UTF-8" />    <title>Login</title>    <link href="@Resources.Root/Shared/Content/bootstrap.css" rel="stylesheet">    @Raw(Resources.HeaderIcons)    <style>        body {            padding-top: 30px;        }         table {            width: 100%;            table-layout: fixed;            border-radius: 0px;            margin: 0px auto;            float: none;        }         td {            vertical-align: top;        }         label.inline {            display: inline;        }         label.disabled {            color: #ccc;        }         .panel-red {            color: #a94442;            background-color: #f2dede;            border-color: #ebccd1;        }         .pre-cache {            position: absolute;            left: -999em;            visibility: hidden        }         .glyphicon-spin {            -webkit-animation: spin 1.25s infinite linear;            -moz-animation: spin 1.25s infinite linear;            -o-animation: spin 1.25s infinite linear;            animation: spin 1.25s infinite linear;        }         @@-moz-keyframes spin {            0% {                -moz-transform: rotate(0deg);            }             100% {                -moz-transform: rotate(359deg);            }        }         @@-webkit-keyframes spin {            0% {                -webkit-transform: rotate(0deg);            }             100% {                -webkit-transform: rotate(359deg);            }        }         @@-o-keyframes spin {            0% {                -o-transform: rotate(0deg);            }             100% {                -o-transform: rotate(359deg);            }        }         @@keyframes spin {            0% {                -webkit-transform: rotate(0deg);                transform: rotate(0deg);            }             100% {                -webkit-transform: rotate(359deg);                transform: rotate(359deg);            }        }    </style>    <script>        @Raw(new Minifier().MinifyJavaScript(constants));    </script></head><body role="document">    <span class="glyphicon glyphicon-refresh pre-cache"></span>    <div class="container" role="main" id="bodyContainer">        <div class="row">            <div class="col-lg-12 col-md-12 col-sm-12">                @Raw(loginHeader)                <div class="panel panel-default">                    <div class="panel-heading text-center">                        <h4><span id="response">Enter credentials:                        </span>&nbsp;&nbsp;<span id="workingIcon" class="glyphicon glyphicon-refresh glyphicon-spin" style="display: none"></span></h4>                    </div>                    <div class="panel-body" id="credentialsForm">                        @if (string.IsNullOrEmpty(oIDCError))                        {                             <form role="form">                            <div class="form-group">                                <label for="username">User name:</label>                                <input type="text" class="form-control" id="username" />                            </div>                            <div class="form-group">                                <label for="password">Password:</label>                                <input type="password" class="form-control" id="password" />                            </div>                            <table>                                <tr>                                    <td>                                        <div class="form-group">                                            <input type="checkbox" id="iwa" />                                            <label class="inline" for="iwa">Use Integrated Windows Authentication</label>                                        </div>                                    </td>                                    <td style="text-align: center">                                        <div class="form-group">                                            <input type="checkbox" id="remember" />                                            <label class="inline" for="remember">Keep&nbsp;me signed&nbsp;in</label>                                        </div>                                    </td>                                    <td style="text-align: right">                                        <div class="form-group" id="ntlmRegion" title="Uncheck this box if you are logging in with cached domain&#13;credentials and do not have domain access - e.g., roaming&#13;with a laptop">                                            <input type="checkbox" id="ntlm" checked disabled />                                            <label class="inline disabled" for="ntlm" id="ntlmLabel">Use&nbsp;NTLM authentication</label>                                            <div id="ntlmMessage" style="color: red; display: none; max-width: 200px; float: right; overflow: hidden; margin-bottom: 10px">                                                <small>                                                    WARNING: Unsecured&nbsp;connection,<br />any&nbsp;credentials passed&nbsp;to&nbsp;host                                                    <span style="white-space: nowrap">"@request.RequestUri.Host"</span> will&nbsp;be&nbsp;sent                                                    <span style="white-space: nowrap">in clear-text</span>                                                </small>                                            </div>                                        </div>                                    </td>                                </tr>                            </table>                            <button type="button" class="btn btn-primary pull-right" id="login">Login</button>                        </form>                        }                    </div>                    <div class="panel-body" id="reloginForm" style="display: none">                        <button type="button" class="btn btn-primary pull-right" id="returnToLogin">Return to Login</button>                    </div>                    <div class="panel-footer panel-red text-center" id="responsePanel" style="display: none">                        <h5 id="message"></h5>                    </div>                </div>            </div>        </div>    </div>    <script src="@Resources.Root/Shared/Scripts/jquery.js"></script>    <script src="@Resources.Root/Shared/Scripts/bootstrap.js"></script>    <script src="@Resources.Root/Shared/Scripts/gsf.web.client.js?ver=1"></script>    <script src="@Resources.Root/Security/Scripts/core.js"></script>    <script src="@Resources.Root/Security/Scripts/sha256.js"></script>    <script src="@Resources.Root/Security/Scripts/enc-base64.js"></script>    <script src="@Resources.Root/Security/Scripts/ntlm.js?ver=1"></script>    <script src="@Resources.Root/Security/Scripts/Login.js?ver=2"></script></body></html>