Files
sap-erp/dist-1/public/profile.html
T
John 69b4e68baf
SAP-ERP Portal CI/CD / build (push) Failing after 5m20s
first commit
2026-09-23 17:31:02 +05:30

563 lines
27 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<script src="/auth-guard.js?v=4"></script>
<meta charset="UTF-8"/>
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1"/>
<title>My Profile — MITRA ERP Portal</title>
<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700;800&display=swap" rel="stylesheet"/>
<style>
:root{
--blue:#2563eb;--blue2:#1d4ed8;--blue-light:#eff6ff;
--text:#111827;--text2:#374151;--text3:#6b7280;--text4:#9ca3af;
--bg:#f3f4f6;--surface:#fff;--border:#e5e7eb;
--font:'Space Grotesk',sans-serif;
--red:#dc2626;--green:#16a34a;--amber:#d97706;--purple:#7c3aed;
--radius:12px;
}
*{box-sizing:border-box;margin:0;padding:0}
body{font-family:var(--font);background:var(--bg);color:var(--text);min-height:100vh;-webkit-font-smoothing:antialiased;margin-left:200px}
@media(max-width:768px){body{margin-left:0}}
/* ── Topbar ── */
.topbar{height:54px;background:#fff;border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 24px;gap:12px;position:sticky;top:0;z-index:100}
.topbar-back{display:flex;align-items:center;gap:6px;font-size:13px;font-weight:600;color:var(--text3);text-decoration:none;transition:color .15s}
.topbar-back:hover{color:var(--blue)}
.topbar-back svg{width:16px;height:16px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.topbar-title{font-size:15px;font-weight:700;color:var(--text);margin-left:4px}
.topbar-sep{width:1px;height:18px;background:var(--border)}
/* ── Layout ── */
.page{max-width:820px;margin:32px auto;padding:0 20px 60px}
/* ── Profile hero ── */
.hero{background:linear-gradient(135deg,#1e40af 0%,#2563eb 55%,#3b82f6 100%);border-radius:16px;padding:32px;display:flex;align-items:center;gap:24px;margin-bottom:24px;position:relative;overflow:hidden}
.hero::before{content:'';position:absolute;top:-50px;right:-50px;width:220px;height:220px;border-radius:50%;background:rgba(255,255,255,.06)}
.hero::after{content:'';position:absolute;bottom:-60px;right:100px;width:160px;height:160px;border-radius:50%;background:rgba(255,255,255,.04)}
.hero-avatar{width:72px;height:72px;border-radius:18px;background:rgba(255,255,255,.18);border:2px solid rgba(255,255,255,.3);display:flex;align-items:center;justify-content:center;font-size:26px;font-weight:800;color:#fff;flex-shrink:0;z-index:1}
.hero-info{z-index:1}
.hero-name{font-size:22px;font-weight:800;color:#fff;margin-bottom:4px}
.hero-un{font-size:12px;color:rgba(255,255,255,.6);font-family:monospace;margin-bottom:8px}
.hero-badges{display:flex;gap:8px;flex-wrap:wrap}
.hero-badge{padding:3px 10px;border-radius:20px;font-size:11px;font-weight:700;background:rgba(255,255,255,.15);color:#fff;border:1px solid rgba(255,255,255,.2);letter-spacing:.3px}
.hero-badge.active{background:rgba(16,185,129,.25);border-color:rgba(16,185,129,.4)}
/* ── Cards ── */
.card{background:#fff;border:1px solid var(--border);border-radius:var(--radius);margin-bottom:16px;overflow:hidden}
.card-hdr{padding:16px 20px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:10px}
.card-hdr-icon{width:32px;height:32px;border-radius:8px;display:flex;align-items:center;justify-content:center;flex-shrink:0}
.card-hdr-icon.blue{background:#eff6ff;color:#2563eb}
.card-hdr-icon.purple{background:#f5f3ff;color:#7c3aed}
.card-hdr-icon.amber{background:#fffbeb;color:#d97706}
.card-hdr svg{width:16px;height:16px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
.card-hdr-title{font-size:13px;font-weight:700;color:var(--text)}
.card-hdr-sub{font-size:11px;color:var(--text3);margin-top:1px}
.card-body{padding:20px}
/* ── Form ── */
.form-row{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-bottom:16px}
.form-row.single{grid-template-columns:1fr}
.field-label{font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.6px;color:var(--text3);margin-bottom:6px;display:block}
.field-input{width:100%;padding:10px 12px;border:1.5px solid var(--border);border-radius:9px;color:var(--text);font-size:13px;font-family:var(--font);outline:none;transition:border .15s,box-shadow .15s;background:#fff}
.field-input:focus{border-color:var(--blue);box-shadow:0 0 0 3px rgba(37,99,235,.1)}
.field-input:disabled{background:#f9fafb;color:var(--text3);cursor:not-allowed}
.field-input.readonly{background:#f9fafb;color:var(--text2)}
.field-hint{font-size:11px;color:var(--text4);margin-top:4px}
/* ── Divider ── */
.divider{height:1px;background:var(--border);margin:20px 0}
/* ── Buttons ── */
.btn-row{display:flex;gap:10px;justify-content:flex-end;margin-top:4px}
.btn{padding:9px 20px;border-radius:9px;font-size:13px;font-weight:700;font-family:var(--font);cursor:pointer;transition:all .15s;border:none}
.btn-primary{background:var(--blue);color:#fff}
.btn-primary:hover:not(:disabled){background:var(--blue2)}
.btn-primary:disabled{opacity:.5;cursor:not-allowed}
.btn-ghost{background:none;border:1.5px solid var(--border);color:var(--text3)}
.btn-ghost:hover{border-color:#d1d5db;color:var(--text)}
/* ── Info row (read-only meta) ── */
.info-grid{display:grid;grid-template-columns:1fr 1fr;gap:0}
.info-item{padding:12px 0;border-bottom:1px solid var(--border)}
.info-item:nth-last-child(-n+2){border-bottom:none}
.info-lbl{font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.5px;color:var(--text4);margin-bottom:3px}
.info-val{font-size:13px;font-weight:600;color:var(--text)}
.info-item:nth-child(odd){padding-right:20px}
.info-item:nth-child(even){padding-left:20px;border-left:1px solid var(--border)}
/* ── Password strength ── */
.pw-meter{height:3px;border-radius:2px;margin-top:6px;background:var(--border);transition:background .2s}
.pw-meter.weak{background:#ef4444}
.pw-meter.fair{background:var(--amber)}
.pw-meter.good{background:var(--green)}
/* ── Toast ── */
.toast-c{position:fixed;top:64px;right:20px;z-index:9999;display:flex;flex-direction:column;gap:6px}
.toast{padding:10px 14px;border-radius:9px;font-size:12px;font-weight:600;box-shadow:0 4px 16px rgba(0,0,0,.12);display:flex;align-items:center;gap:7px;max-width:320px;animation:tIn .2s ease}
.toast.ok{background:var(--green);color:#fff}
.toast.err{background:var(--red);color:#fff}
@keyframes tIn{from{transform:translateX(16px);opacity:0}to{transform:translateX(0);opacity:1}}
/* ── Spinner ── */
.sp{width:13px;height:13px;border:2px solid rgba(255,255,255,.3);border-top-color:#fff;border-radius:50%;animation:spin .65s linear infinite;display:inline-block;vertical-align:middle;margin-right:6px}
@keyframes spin{to{transform:rotate(360deg)}}
@media(max-width:600px){
.form-row{grid-template-columns:1fr}
.info-grid{grid-template-columns:1fr}
.info-item:nth-child(even){padding-left:0;border-left:none}
.info-item:nth-last-child(-n+2){border-bottom:1px solid var(--border)}
.info-item:last-child{border-bottom:none}
.hero{flex-direction:column;align-items:flex-start;gap:16px}
}
</style>
<link rel="stylesheet" href="/theme.css?v=3"/>
</head>
<body>
<div class="toast-c" id="toastC"></div>
<div class="topbar">
<a href="/" class="topbar-back">
<svg viewBox="0 0 24 24"><polyline points="15 18 9 12 15 6"/></svg>
Dashboard
</a>
<div class="topbar-sep"></div>
<span class="topbar-title">My Profile</span>
</div>
<div class="page">
<!-- Hero -->
<div class="hero" id="hero">
<div class="hero-avatar" id="heroAvatar">?</div>
<div class="hero-info">
<div class="hero-name" id="heroName">Loading…</div>
<div class="hero-un" id="heroUn"></div>
<div class="hero-badges" id="heroBadges"></div>
</div>
</div>
<!-- Account Info (read-only) -->
<div class="card">
<div class="card-hdr">
<div class="card-hdr-icon blue">
<svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M4 20c0-4 3.6-7 8-7s8 3 8 7"/></svg>
</div>
<div>
<div class="card-hdr-title">Account Information</div>
<div class="card-hdr-sub">Read-only account details</div>
</div>
</div>
<div class="card-body">
<div class="info-grid" id="infoGrid">
<div class="info-item"><div class="info-lbl">Username</div><div class="info-val" id="iUsername">—</div></div>
<div class="info-item"><div class="info-lbl">Role</div><div class="info-val" id="iRole">—</div></div>
<div class="info-item"><div class="info-lbl">Member Since</div><div class="info-val" id="iCreated">—</div></div>
<div class="info-item"><div class="info-lbl">Last Login</div><div class="info-val" id="iLastLogin">—</div></div>
</div>
</div>
</div>
<!-- Edit Profile -->
<div class="card">
<div class="card-hdr">
<div class="card-hdr-icon purple">
<svg viewBox="0 0 24 24"><path d="M11 4H4a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7"/><path d="M18.5 2.5a2.121 2.121 0 0 1 3 3L12 15l-4 1 1-4 9.5-9.5z"/></svg>
</div>
<div>
<div class="card-hdr-title">Edit Profile</div>
<div class="card-hdr-sub">Update your name and email address</div>
</div>
</div>
<div class="card-body">
<div class="form-row">
<div>
<label class="field-label">Full Name</label>
<input id="inpName" class="field-input" type="text" placeholder="Your full name"/>
</div>
<div>
<label class="field-label">Email Address</label>
<input id="inpEmail" class="field-input" type="email" placeholder="your@email.com"/>
</div>
</div>
<div class="btn-row">
<button class="btn btn-ghost" id="btnResetInfo">Reset</button>
<button class="btn btn-primary" id="btnSaveInfo">Save Changes</button>
</div>
</div>
</div>
<!-- Change Password -->
<div class="card">
<div class="card-hdr">
<div class="card-hdr-icon amber">
<svg viewBox="0 0 24 24"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>
</div>
<div>
<div class="card-hdr-title">Change Password</div>
<div class="card-hdr-sub">Leave blank to keep your current password</div>
</div>
</div>
<div class="card-body">
<div class="form-row single" style="margin-bottom:16px">
<div>
<label class="field-label">Current Password</label>
<input id="inpCurPw" class="field-input" type="password" placeholder="Enter current password"/>
</div>
</div>
<div class="form-row">
<div>
<label class="field-label">New Password</label>
<input id="inpNewPw" class="field-input" type="password" placeholder="Min 6 characters"/>
<div class="pw-meter" id="pwMeter"></div>
</div>
<div>
<label class="field-label">Confirm New Password</label>
<input id="inpConPw" class="field-input" type="password" placeholder="Repeat new password"/>
</div>
</div>
<div class="btn-row">
<button class="btn btn-ghost" id="btnResetPw">Clear</button>
<button class="btn btn-primary" id="btnSavePw">Update Password</button>
</div>
</div>
</div>
<!-- SAP Account (per-user SAP Service-Layer login) -->
<div class="card">
<div class="card-hdr">
<div class="card-hdr-icon amber">
<svg viewBox="0 0 24 24"><path d="M4 7V4h16v3"/><path d="M9 20h6"/><path d="M12 4v16"/></svg>
</div>
<div>
<div class="card-hdr-title">My SAP Account</div>
<div class="card-hdr-sub">Your SAP User ID &amp; Password — used to post your work to SAP under your name. Each SAP company has its own users, so the same SAP username can need a <b>different password per company</b> — set one login per company below.</div>
</div>
</div>
<div class="card-body">
<div id="sapList" style="margin-bottom:14px"></div>
<div class="form-row">
<div>
<label class="field-label">Company</label>
<select id="inpSapCompany" class="field-input"><option value="">Loading…</option></select>
</div>
<div>
<label class="field-label">SAP User ID</label>
<input id="inpSapUser" class="field-input" placeholder="e.g. your SAP login" autocomplete="off"/>
</div>
<div>
<label class="field-label">SAP Password</label>
<input id="inpSapPw" class="field-input" type="password" placeholder="Enter SAP password" autocomplete="new-password"/>
</div>
</div>
<div style="font-size:11px;color:var(--text3);margin-top:6px">Your password is verified against the selected SAP company and stored encrypted. It is never shown back to you.</div>
<div class="btn-row">
<button class="btn btn-primary" id="btnSaveSap">Verify &amp; Save</button>
</div>
</div>
</div>
<div class="card">
<div class="card-hdr">
<div class="card-hdr-icon purple">
<svg viewBox="0 0 24 24"><path d="M3 17s2-4 6-4 6 4 10 0"/><path d="M2 21h20"/></svg>
</div>
<div>
<div class="card-hdr-title">My Signature</div>
<div class="card-hdr-sub">Upload your signature image — printed on Work Orders wherever you sign an approval step</div>
</div>
</div>
<div class="card-body">
<div style="display:flex;align-items:center;gap:16px;flex-wrap:wrap">
<div style="width:200px;height:80px;border:1px dashed var(--border,#cbd5e1);border-radius:8px;display:flex;align-items:center;justify-content:center;background:#fff;overflow:hidden">
<img id="sigPreview" alt="" style="max-width:100%;max-height:100%;object-fit:contain;display:none"/>
<span id="sigEmpty" style="font-size:11px;color:var(--text3)">No signature</span>
</div>
<div style="display:flex;flex-direction:column;gap:8px">
<input type="file" id="sigFile" accept="image/*" style="font-size:12px"/>
<div style="font-size:11px;color:var(--text3)">PNG/JPG with a transparent or white background works best.</div>
</div>
</div>
<div class="btn-row">
<button class="btn btn-primary" id="btnSaveSig">Save Signature</button>
<button class="btn btn-secondary" id="btnClearSig">Remove</button>
</div>
</div>
</div>
</div>
<script src="/company-list.js"></script>
<script>
'use strict';
const tok = sessionStorage.getItem('portal_token') || '';
const BACKEND = '';
let _origName = '', _origEmail = '';
function esc(s){ return String(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'); }
function toast(msg, type='ok'){
const c = document.getElementById('toastC');
const t = document.createElement('div');
t.className = `toast ${type}`;
t.textContent = msg;
c.appendChild(t);
setTimeout(()=>t.remove(), 3500);
}
function fmtDate(iso){
if(!iso) return '—';
return new Date(iso).toLocaleDateString('en-IN',{day:'numeric',month:'short',year:'numeric',hour:'2-digit',minute:'2-digit'});
}
function initials(name){
return (name||'').split(' ').map(w=>w[0]||'').join('').slice(0,2).toUpperCase() || '?';
}
const ROLE_LABELS = {admin:'Admin',manager:'Manager',sr_manager:'Sr. Manager',sap_adder:'SAP Adder',system_admin:'System Admin',board_member:'Board Member',user:'User',project_approver:'Project Approver'};
async function loadProfile(){
try{
const r = await fetch(`${BACKEND}/api/auth/profile`,{headers:{Authorization:`Bearer ${tok}`}});
const d = await r.json();
if(!d.success) throw new Error(d.message||'Failed');
const u = d.user;
_origName = u.fullName || '';
_origEmail = u.email || '';
// Hero
document.getElementById('heroAvatar').textContent = initials(u.fullName);
document.getElementById('heroName').textContent = u.fullName || u.username;
document.getElementById('heroUn').textContent = '@' + u.username;
document.getElementById('heroBadges').innerHTML =
`<span class="hero-badge">${esc(ROLE_LABELS[u.role]||u.role)}</span>`+
`<span class="hero-badge active">&#9679; Active</span>`;
// Info grid
document.getElementById('iUsername').textContent = u.username;
document.getElementById('iRole').textContent = ROLE_LABELS[u.role] || u.role;
document.getElementById('iCreated').textContent = fmtDate(u.createdAt);
document.getElementById('iLastLogin').textContent = fmtDate(u.lastLogin);
// Form
document.getElementById('inpName').value = _origName;
document.getElementById('inpEmail').value = _origEmail;
} catch(e){
toast('Failed to load profile: ' + e.message, 'err');
}
}
// ── Password strength meter ──────────────────────────────────────────────────
document.getElementById('inpNewPw').addEventListener('input', function(){
const v = this.value;
const m = document.getElementById('pwMeter');
if(!v){ m.className='pw-meter'; return; }
let score = 0;
if(v.length >= 6) score++;
if(v.length >= 10) score++;
if(/[A-Z]/.test(v) && /[0-9]/.test(v)) score++;
if(/[^A-Za-z0-9]/.test(v)) score++;
m.className = 'pw-meter ' + ['','weak','fair','good','good'][score];
});
// ── Save profile info ────────────────────────────────────────────────────────
document.getElementById('btnResetInfo').addEventListener('click',()=>{
document.getElementById('inpName').value = _origName;
document.getElementById('inpEmail').value = _origEmail;
});
document.getElementById('btnSaveInfo').addEventListener('click', async()=>{
const fullName = document.getElementById('inpName').value.trim();
const email = document.getElementById('inpEmail').value.trim();
if(!fullName){ toast('Full name is required','err'); return; }
const btn = document.getElementById('btnSaveInfo');
btn.disabled = true;
btn.innerHTML = '<span class="sp"></span>Saving…';
try{
const r = await fetch(`${BACKEND}/api/auth/profile`,{
method:'PUT',
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
body: JSON.stringify({fullName, email}),
});
const d = await r.json();
if(!d.success) throw new Error(d.message||'Failed');
_origName = fullName;
_origEmail = email;
// Update hero live
document.getElementById('heroName').textContent = fullName;
document.getElementById('heroAvatar').textContent = initials(fullName);
toast('Profile updated successfully');
}catch(e){
toast('Error: ' + e.message,'err');
}finally{
btn.disabled = false;
btn.textContent = 'Save Changes';
}
});
// ── Change password ──────────────────────────────────────────────────────────
document.getElementById('btnResetPw').addEventListener('click',()=>{
document.getElementById('inpCurPw').value = '';
document.getElementById('inpNewPw').value = '';
document.getElementById('inpConPw').value = '';
document.getElementById('pwMeter').className = 'pw-meter';
});
document.getElementById('btnSavePw').addEventListener('click', async()=>{
const currentPassword = document.getElementById('inpCurPw').value;
const newPassword = document.getElementById('inpNewPw').value;
const confirmPassword = document.getElementById('inpConPw').value;
if(!currentPassword){ toast('Enter your current password','err'); return; }
if(!newPassword) { toast('Enter a new password','err'); return; }
if(newPassword.length < 6){ toast('New password must be at least 6 characters','err'); return; }
if(newPassword !== confirmPassword){ toast('Passwords do not match','err'); return; }
const btn = document.getElementById('btnSavePw');
btn.disabled = true;
btn.innerHTML = '<span class="sp"></span>Updating…';
try{
const r = await fetch(`${BACKEND}/api/auth/profile`,{
method:'PUT',
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
body: JSON.stringify({currentPassword, newPassword}),
});
const d = await r.json();
if(!d.success) throw new Error(d.message||'Failed');
toast('Password updated successfully');
document.getElementById('btnResetPw').click();
}catch(e){
toast('Error: ' + e.message,'err');
}finally{
btn.disabled = false;
btn.textContent = 'Update Password';
}
});
// ── SAP Account (per-user, PER-COMPANY SAP logins) ──────────────────────────
// SAP B1 companies each have their own OUSR table, so the same SAP username
// can need a different password per company — one login is stored per company.
let _sapCompanies = [];
let _sapLogins = {};
async function loadSapCompanyOptions(){
const sel = document.getElementById('inpSapCompany');
try{ _sapCompanies = await window.fetchCompanyList(); }catch(_e){ _sapCompanies = []; }
if(!_sapCompanies.length){ sel.innerHTML = '<option value="">No companies found</option>'; return; }
sel.innerHTML = _sapCompanies.map(c=>`<option value="${esc(c.value)}">${esc(c.label||c.value)}</option>`).join('');
}
function renderSapList(){
const el = document.getElementById('sapList');
const companies = Object.keys(_sapLogins);
if(!companies.length){
el.innerHTML = '<div style="font-size:12px;padding:9px 12px;border-radius:8px;background:#fffbeb;border:1px solid #fde68a;color:#92400e">&#9888; No SAP login set yet for any company. Pick a company below and add your SAP User ID &amp; Password before you can post to SAP.</div>';
return;
}
el.innerHTML = companies.map(c=>{
const info = _sapLogins[c];
const label = (_sapCompanies.find(x=>x.value===c)||{}).label || c;
return `<div style="display:flex;align-items:center;gap:10px;font-size:12px;padding:9px 12px;border-radius:8px;background:#f0fdf4;border:1px solid #bbf7d0;color:#166534;margin-bottom:6px">
<span style="flex:1">&#10003; <b>${esc(label)}</b> — acting as <b>${esc(info.user)}</b></span>
<button type="button" class="btn-sap-rm" data-company="${esc(c)}" style="border:none;background:none;color:#166534;cursor:pointer;font-size:11px;font-weight:700;text-decoration:underline">Remove</button>
</div>`;
}).join('');
el.querySelectorAll('.btn-sap-rm').forEach(btn=>btn.onclick=async()=>{
if(!confirm(`Remove your SAP login for ${btn.dataset.company}?`))return;
try{
const r = await fetch(`${BACKEND}/api/auth/sap-credentials?company=${encodeURIComponent(btn.dataset.company)}`,{method:'DELETE',headers:{Authorization:`Bearer ${tok}`}});
const d = await r.json();
if(!d.success) throw new Error(d.message||'Failed');
if(d.token) sessionStorage.setItem('portal_token', d.token);
toast('SAP login removed');
loadSapStatus();
}catch(e){ toast('Error: ' + e.message,'err'); }
});
}
async function loadSapStatus(){
try{
const r = await fetch(`${BACKEND}/api/auth/sap-credentials`,{headers:{Authorization:`Bearer ${tok}`}});
const d = await r.json();
_sapLogins = d.sapLogins || {};
renderSapList();
}catch(e){ document.getElementById('sapList').textContent = 'Could not load SAP status: ' + e.message; }
}
document.getElementById('btnSaveSap').addEventListener('click', async()=>{
const company = document.getElementById('inpSapCompany').value;
const sapUser = document.getElementById('inpSapUser').value.trim();
const sapPassword = document.getElementById('inpSapPw').value;
if(!company){ toast('Pick a company first','err'); return; }
if(!sapUser || !sapPassword){ toast('Enter both SAP User ID and Password','err'); return; }
const btn = document.getElementById('btnSaveSap');
btn.disabled = true; btn.innerHTML = '<span class="sp"></span>Verifying…';
try{
const r = await fetch(`${BACKEND}/api/auth/sap-credentials`,{
method:'PUT',
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
body: JSON.stringify({company, sapUser, sapPassword}),
});
const d = await r.json();
if(!d.success) throw new Error(d.message||'Failed');
// A fresh token carrying the updated SAP-login map is returned — swap it
// in so the change takes effect immediately (this session posts as the
// new SAP user for that company).
if(d.token){ sessionStorage.setItem('portal_token', d.token); }
document.getElementById('inpSapPw').value = '';
toast(`SAP login for ${company} verified and saved`);
loadSapStatus();
}catch(e){
toast('Error: ' + e.message,'err');
}finally{
btn.disabled = false; btn.textContent = 'Verify & Save';
}
});
// ── Signature ────────────────────────────────────────────────────────────────
let _sigData = null; // null = unchanged, '' = clear, else new base64
function showSig(dataUri){
const img=document.getElementById('sigPreview'), empty=document.getElementById('sigEmpty');
if(dataUri){ img.src=dataUri; img.style.display=''; empty.style.display='none'; }
else { img.src=''; img.style.display='none'; empty.style.display=''; }
}
async function loadSignature(){
try{
const r=await fetch(`${BACKEND}/api/auth/signature`,{headers:{Authorization:`Bearer ${tok}`}});
const d=await r.json(); if(d.success) showSig(d.signature||'');
}catch(_e){}
}
document.getElementById('sigFile').addEventListener('change', function(){
const f=this.files&&this.files[0]; if(!f) return;
const rd=new FileReader();
rd.onload=e=>{ const img=new Image(); img.onload=()=>{
const maxW=360, scale=Math.min(1, maxW/img.width);
const cv=document.createElement('canvas'); cv.width=Math.round(img.width*scale); cv.height=Math.round(img.height*scale);
cv.getContext('2d').drawImage(img,0,0,cv.width,cv.height);
_sigData=cv.toDataURL('image/png'); showSig(_sigData);
}; img.src=e.target.result; };
rd.readAsDataURL(f);
});
document.getElementById('btnClearSig').addEventListener('click', ()=>{ _sigData=''; showSig(''); document.getElementById('sigFile').value=''; });
document.getElementById('btnSaveSig').addEventListener('click', async()=>{
if(_sigData===null){ toast('Choose a signature image first','err'); return; }
const btn=document.getElementById('btnSaveSig'); btn.disabled=true; btn.innerHTML='<span class="sp"></span>Saving…';
try{
const r=await fetch(`${BACKEND}/api/auth/profile`,{method:'PUT',headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},body:JSON.stringify({signature:_sigData})});
const d=await r.json(); if(!d.success) throw new Error(d.message||'Failed');
_sigData=null; toast('Signature saved');
}catch(e){ toast('Error: '+e.message,'err'); }
finally{ btn.disabled=false; btn.textContent='Save Signature'; }
});
loadProfile();
loadSapCompanyOptions().then(loadSapStatus);
loadSignature();
</script>
<script src="/sidebar.js?v=25"></script>
</body>
</html>