563 lines
27 KiB
HTML
563 lines
27 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<script src="/auth-guard.js?v=4"></script>
|
|
<meta charset="UTF-8"/>
|
|
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1"/>
|
|
<title>My Profile — MITRA ERP Portal</title>
|
|
<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700;800&display=swap" rel="stylesheet"/>
|
|
<style>
|
|
:root{
|
|
--blue:#2563eb;--blue2:#1d4ed8;--blue-light:#eff6ff;
|
|
--text:#111827;--text2:#374151;--text3:#6b7280;--text4:#9ca3af;
|
|
--bg:#f3f4f6;--surface:#fff;--border:#e5e7eb;
|
|
--font:'Space Grotesk',sans-serif;
|
|
--red:#dc2626;--green:#16a34a;--amber:#d97706;--purple:#7c3aed;
|
|
--radius:12px;
|
|
}
|
|
*{box-sizing:border-box;margin:0;padding:0}
|
|
body{font-family:var(--font);background:var(--bg);color:var(--text);min-height:100vh;-webkit-font-smoothing:antialiased;margin-left:200px}
|
|
@media(max-width:768px){body{margin-left:0}}
|
|
|
|
/* ── Topbar ── */
|
|
.topbar{height:54px;background:#fff;border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 24px;gap:12px;position:sticky;top:0;z-index:100}
|
|
.topbar-back{display:flex;align-items:center;gap:6px;font-size:13px;font-weight:600;color:var(--text3);text-decoration:none;transition:color .15s}
|
|
.topbar-back:hover{color:var(--blue)}
|
|
.topbar-back svg{width:16px;height:16px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
|
|
.topbar-title{font-size:15px;font-weight:700;color:var(--text);margin-left:4px}
|
|
.topbar-sep{width:1px;height:18px;background:var(--border)}
|
|
|
|
/* ── Layout ── */
|
|
.page{max-width:820px;margin:32px auto;padding:0 20px 60px}
|
|
|
|
/* ── Profile hero ── */
|
|
.hero{background:linear-gradient(135deg,#1e40af 0%,#2563eb 55%,#3b82f6 100%);border-radius:16px;padding:32px;display:flex;align-items:center;gap:24px;margin-bottom:24px;position:relative;overflow:hidden}
|
|
.hero::before{content:'';position:absolute;top:-50px;right:-50px;width:220px;height:220px;border-radius:50%;background:rgba(255,255,255,.06)}
|
|
.hero::after{content:'';position:absolute;bottom:-60px;right:100px;width:160px;height:160px;border-radius:50%;background:rgba(255,255,255,.04)}
|
|
.hero-avatar{width:72px;height:72px;border-radius:18px;background:rgba(255,255,255,.18);border:2px solid rgba(255,255,255,.3);display:flex;align-items:center;justify-content:center;font-size:26px;font-weight:800;color:#fff;flex-shrink:0;z-index:1}
|
|
.hero-info{z-index:1}
|
|
.hero-name{font-size:22px;font-weight:800;color:#fff;margin-bottom:4px}
|
|
.hero-un{font-size:12px;color:rgba(255,255,255,.6);font-family:monospace;margin-bottom:8px}
|
|
.hero-badges{display:flex;gap:8px;flex-wrap:wrap}
|
|
.hero-badge{padding:3px 10px;border-radius:20px;font-size:11px;font-weight:700;background:rgba(255,255,255,.15);color:#fff;border:1px solid rgba(255,255,255,.2);letter-spacing:.3px}
|
|
.hero-badge.active{background:rgba(16,185,129,.25);border-color:rgba(16,185,129,.4)}
|
|
|
|
/* ── Cards ── */
|
|
.card{background:#fff;border:1px solid var(--border);border-radius:var(--radius);margin-bottom:16px;overflow:hidden}
|
|
.card-hdr{padding:16px 20px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:10px}
|
|
.card-hdr-icon{width:32px;height:32px;border-radius:8px;display:flex;align-items:center;justify-content:center;flex-shrink:0}
|
|
.card-hdr-icon.blue{background:#eff6ff;color:#2563eb}
|
|
.card-hdr-icon.purple{background:#f5f3ff;color:#7c3aed}
|
|
.card-hdr-icon.amber{background:#fffbeb;color:#d97706}
|
|
.card-hdr svg{width:16px;height:16px;stroke:currentColor;fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
|
|
.card-hdr-title{font-size:13px;font-weight:700;color:var(--text)}
|
|
.card-hdr-sub{font-size:11px;color:var(--text3);margin-top:1px}
|
|
.card-body{padding:20px}
|
|
|
|
/* ── Form ── */
|
|
.form-row{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-bottom:16px}
|
|
.form-row.single{grid-template-columns:1fr}
|
|
.field-label{font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.6px;color:var(--text3);margin-bottom:6px;display:block}
|
|
.field-input{width:100%;padding:10px 12px;border:1.5px solid var(--border);border-radius:9px;color:var(--text);font-size:13px;font-family:var(--font);outline:none;transition:border .15s,box-shadow .15s;background:#fff}
|
|
.field-input:focus{border-color:var(--blue);box-shadow:0 0 0 3px rgba(37,99,235,.1)}
|
|
.field-input:disabled{background:#f9fafb;color:var(--text3);cursor:not-allowed}
|
|
.field-input.readonly{background:#f9fafb;color:var(--text2)}
|
|
.field-hint{font-size:11px;color:var(--text4);margin-top:4px}
|
|
|
|
/* ── Divider ── */
|
|
.divider{height:1px;background:var(--border);margin:20px 0}
|
|
|
|
/* ── Buttons ── */
|
|
.btn-row{display:flex;gap:10px;justify-content:flex-end;margin-top:4px}
|
|
.btn{padding:9px 20px;border-radius:9px;font-size:13px;font-weight:700;font-family:var(--font);cursor:pointer;transition:all .15s;border:none}
|
|
.btn-primary{background:var(--blue);color:#fff}
|
|
.btn-primary:hover:not(:disabled){background:var(--blue2)}
|
|
.btn-primary:disabled{opacity:.5;cursor:not-allowed}
|
|
.btn-ghost{background:none;border:1.5px solid var(--border);color:var(--text3)}
|
|
.btn-ghost:hover{border-color:#d1d5db;color:var(--text)}
|
|
|
|
/* ── Info row (read-only meta) ── */
|
|
.info-grid{display:grid;grid-template-columns:1fr 1fr;gap:0}
|
|
.info-item{padding:12px 0;border-bottom:1px solid var(--border)}
|
|
.info-item:nth-last-child(-n+2){border-bottom:none}
|
|
.info-lbl{font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.5px;color:var(--text4);margin-bottom:3px}
|
|
.info-val{font-size:13px;font-weight:600;color:var(--text)}
|
|
.info-item:nth-child(odd){padding-right:20px}
|
|
.info-item:nth-child(even){padding-left:20px;border-left:1px solid var(--border)}
|
|
|
|
/* ── Password strength ── */
|
|
.pw-meter{height:3px;border-radius:2px;margin-top:6px;background:var(--border);transition:background .2s}
|
|
.pw-meter.weak{background:#ef4444}
|
|
.pw-meter.fair{background:var(--amber)}
|
|
.pw-meter.good{background:var(--green)}
|
|
|
|
/* ── Toast ── */
|
|
.toast-c{position:fixed;top:64px;right:20px;z-index:9999;display:flex;flex-direction:column;gap:6px}
|
|
.toast{padding:10px 14px;border-radius:9px;font-size:12px;font-weight:600;box-shadow:0 4px 16px rgba(0,0,0,.12);display:flex;align-items:center;gap:7px;max-width:320px;animation:tIn .2s ease}
|
|
.toast.ok{background:var(--green);color:#fff}
|
|
.toast.err{background:var(--red);color:#fff}
|
|
@keyframes tIn{from{transform:translateX(16px);opacity:0}to{transform:translateX(0);opacity:1}}
|
|
|
|
/* ── Spinner ── */
|
|
.sp{width:13px;height:13px;border:2px solid rgba(255,255,255,.3);border-top-color:#fff;border-radius:50%;animation:spin .65s linear infinite;display:inline-block;vertical-align:middle;margin-right:6px}
|
|
@keyframes spin{to{transform:rotate(360deg)}}
|
|
|
|
@media(max-width:600px){
|
|
.form-row{grid-template-columns:1fr}
|
|
.info-grid{grid-template-columns:1fr}
|
|
.info-item:nth-child(even){padding-left:0;border-left:none}
|
|
.info-item:nth-last-child(-n+2){border-bottom:1px solid var(--border)}
|
|
.info-item:last-child{border-bottom:none}
|
|
.hero{flex-direction:column;align-items:flex-start;gap:16px}
|
|
}
|
|
</style>
|
|
<link rel="stylesheet" href="/theme.css?v=3"/>
|
|
</head>
|
|
<body>
|
|
<div class="toast-c" id="toastC"></div>
|
|
|
|
<div class="topbar">
|
|
<a href="/" class="topbar-back">
|
|
<svg viewBox="0 0 24 24"><polyline points="15 18 9 12 15 6"/></svg>
|
|
Dashboard
|
|
</a>
|
|
<div class="topbar-sep"></div>
|
|
<span class="topbar-title">My Profile</span>
|
|
</div>
|
|
|
|
<div class="page">
|
|
|
|
<!-- Hero -->
|
|
<div class="hero" id="hero">
|
|
<div class="hero-avatar" id="heroAvatar">?</div>
|
|
<div class="hero-info">
|
|
<div class="hero-name" id="heroName">Loading…</div>
|
|
<div class="hero-un" id="heroUn"></div>
|
|
<div class="hero-badges" id="heroBadges"></div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Account Info (read-only) -->
|
|
<div class="card">
|
|
<div class="card-hdr">
|
|
<div class="card-hdr-icon blue">
|
|
<svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M4 20c0-4 3.6-7 8-7s8 3 8 7"/></svg>
|
|
</div>
|
|
<div>
|
|
<div class="card-hdr-title">Account Information</div>
|
|
<div class="card-hdr-sub">Read-only account details</div>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div class="info-grid" id="infoGrid">
|
|
<div class="info-item"><div class="info-lbl">Username</div><div class="info-val" id="iUsername">—</div></div>
|
|
<div class="info-item"><div class="info-lbl">Role</div><div class="info-val" id="iRole">—</div></div>
|
|
<div class="info-item"><div class="info-lbl">Member Since</div><div class="info-val" id="iCreated">—</div></div>
|
|
<div class="info-item"><div class="info-lbl">Last Login</div><div class="info-val" id="iLastLogin">—</div></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Edit Profile -->
|
|
<div class="card">
|
|
<div class="card-hdr">
|
|
<div class="card-hdr-icon purple">
|
|
<svg viewBox="0 0 24 24"><path d="M11 4H4a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7"/><path d="M18.5 2.5a2.121 2.121 0 0 1 3 3L12 15l-4 1 1-4 9.5-9.5z"/></svg>
|
|
</div>
|
|
<div>
|
|
<div class="card-hdr-title">Edit Profile</div>
|
|
<div class="card-hdr-sub">Update your name and email address</div>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div class="form-row">
|
|
<div>
|
|
<label class="field-label">Full Name</label>
|
|
<input id="inpName" class="field-input" type="text" placeholder="Your full name"/>
|
|
</div>
|
|
<div>
|
|
<label class="field-label">Email Address</label>
|
|
<input id="inpEmail" class="field-input" type="email" placeholder="your@email.com"/>
|
|
</div>
|
|
</div>
|
|
<div class="btn-row">
|
|
<button class="btn btn-ghost" id="btnResetInfo">Reset</button>
|
|
<button class="btn btn-primary" id="btnSaveInfo">Save Changes</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Change Password -->
|
|
<div class="card">
|
|
<div class="card-hdr">
|
|
<div class="card-hdr-icon amber">
|
|
<svg viewBox="0 0 24 24"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>
|
|
</div>
|
|
<div>
|
|
<div class="card-hdr-title">Change Password</div>
|
|
<div class="card-hdr-sub">Leave blank to keep your current password</div>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div class="form-row single" style="margin-bottom:16px">
|
|
<div>
|
|
<label class="field-label">Current Password</label>
|
|
<input id="inpCurPw" class="field-input" type="password" placeholder="Enter current password"/>
|
|
</div>
|
|
</div>
|
|
<div class="form-row">
|
|
<div>
|
|
<label class="field-label">New Password</label>
|
|
<input id="inpNewPw" class="field-input" type="password" placeholder="Min 6 characters"/>
|
|
<div class="pw-meter" id="pwMeter"></div>
|
|
</div>
|
|
<div>
|
|
<label class="field-label">Confirm New Password</label>
|
|
<input id="inpConPw" class="field-input" type="password" placeholder="Repeat new password"/>
|
|
</div>
|
|
</div>
|
|
<div class="btn-row">
|
|
<button class="btn btn-ghost" id="btnResetPw">Clear</button>
|
|
<button class="btn btn-primary" id="btnSavePw">Update Password</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- SAP Account (per-user SAP Service-Layer login) -->
|
|
<div class="card">
|
|
<div class="card-hdr">
|
|
<div class="card-hdr-icon amber">
|
|
<svg viewBox="0 0 24 24"><path d="M4 7V4h16v3"/><path d="M9 20h6"/><path d="M12 4v16"/></svg>
|
|
</div>
|
|
<div>
|
|
<div class="card-hdr-title">My SAP Account</div>
|
|
<div class="card-hdr-sub">Your SAP User ID & Password — used to post your work to SAP under your name. Each SAP company has its own users, so the same SAP username can need a <b>different password per company</b> — set one login per company below.</div>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div id="sapList" style="margin-bottom:14px"></div>
|
|
<div class="form-row">
|
|
<div>
|
|
<label class="field-label">Company</label>
|
|
<select id="inpSapCompany" class="field-input"><option value="">Loading…</option></select>
|
|
</div>
|
|
<div>
|
|
<label class="field-label">SAP User ID</label>
|
|
<input id="inpSapUser" class="field-input" placeholder="e.g. your SAP login" autocomplete="off"/>
|
|
</div>
|
|
<div>
|
|
<label class="field-label">SAP Password</label>
|
|
<input id="inpSapPw" class="field-input" type="password" placeholder="Enter SAP password" autocomplete="new-password"/>
|
|
</div>
|
|
</div>
|
|
<div style="font-size:11px;color:var(--text3);margin-top:6px">Your password is verified against the selected SAP company and stored encrypted. It is never shown back to you.</div>
|
|
<div class="btn-row">
|
|
<button class="btn btn-primary" id="btnSaveSap">Verify & Save</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="card">
|
|
<div class="card-hdr">
|
|
<div class="card-hdr-icon purple">
|
|
<svg viewBox="0 0 24 24"><path d="M3 17s2-4 6-4 6 4 10 0"/><path d="M2 21h20"/></svg>
|
|
</div>
|
|
<div>
|
|
<div class="card-hdr-title">My Signature</div>
|
|
<div class="card-hdr-sub">Upload your signature image — printed on Work Orders wherever you sign an approval step</div>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<div style="display:flex;align-items:center;gap:16px;flex-wrap:wrap">
|
|
<div style="width:200px;height:80px;border:1px dashed var(--border,#cbd5e1);border-radius:8px;display:flex;align-items:center;justify-content:center;background:#fff;overflow:hidden">
|
|
<img id="sigPreview" alt="" style="max-width:100%;max-height:100%;object-fit:contain;display:none"/>
|
|
<span id="sigEmpty" style="font-size:11px;color:var(--text3)">No signature</span>
|
|
</div>
|
|
<div style="display:flex;flex-direction:column;gap:8px">
|
|
<input type="file" id="sigFile" accept="image/*" style="font-size:12px"/>
|
|
<div style="font-size:11px;color:var(--text3)">PNG/JPG with a transparent or white background works best.</div>
|
|
</div>
|
|
</div>
|
|
<div class="btn-row">
|
|
<button class="btn btn-primary" id="btnSaveSig">Save Signature</button>
|
|
<button class="btn btn-secondary" id="btnClearSig">Remove</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<script src="/company-list.js"></script>
|
|
<script>
|
|
'use strict';
|
|
|
|
const tok = sessionStorage.getItem('portal_token') || '';
|
|
const BACKEND = '';
|
|
let _origName = '', _origEmail = '';
|
|
|
|
function esc(s){ return String(s||'').replace(/&/g,'&').replace(/</g,'<').replace(/>/g,'>'); }
|
|
|
|
function toast(msg, type='ok'){
|
|
const c = document.getElementById('toastC');
|
|
const t = document.createElement('div');
|
|
t.className = `toast ${type}`;
|
|
t.textContent = msg;
|
|
c.appendChild(t);
|
|
setTimeout(()=>t.remove(), 3500);
|
|
}
|
|
|
|
function fmtDate(iso){
|
|
if(!iso) return '—';
|
|
return new Date(iso).toLocaleDateString('en-IN',{day:'numeric',month:'short',year:'numeric',hour:'2-digit',minute:'2-digit'});
|
|
}
|
|
|
|
function initials(name){
|
|
return (name||'').split(' ').map(w=>w[0]||'').join('').slice(0,2).toUpperCase() || '?';
|
|
}
|
|
|
|
const ROLE_LABELS = {admin:'Admin',manager:'Manager',sr_manager:'Sr. Manager',sap_adder:'SAP Adder',system_admin:'System Admin',board_member:'Board Member',user:'User',project_approver:'Project Approver'};
|
|
|
|
async function loadProfile(){
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/profile`,{headers:{Authorization:`Bearer ${tok}`}});
|
|
const d = await r.json();
|
|
if(!d.success) throw new Error(d.message||'Failed');
|
|
const u = d.user;
|
|
|
|
_origName = u.fullName || '';
|
|
_origEmail = u.email || '';
|
|
|
|
// Hero
|
|
document.getElementById('heroAvatar').textContent = initials(u.fullName);
|
|
document.getElementById('heroName').textContent = u.fullName || u.username;
|
|
document.getElementById('heroUn').textContent = '@' + u.username;
|
|
document.getElementById('heroBadges').innerHTML =
|
|
`<span class="hero-badge">${esc(ROLE_LABELS[u.role]||u.role)}</span>`+
|
|
`<span class="hero-badge active">● Active</span>`;
|
|
|
|
// Info grid
|
|
document.getElementById('iUsername').textContent = u.username;
|
|
document.getElementById('iRole').textContent = ROLE_LABELS[u.role] || u.role;
|
|
document.getElementById('iCreated').textContent = fmtDate(u.createdAt);
|
|
document.getElementById('iLastLogin').textContent = fmtDate(u.lastLogin);
|
|
|
|
// Form
|
|
document.getElementById('inpName').value = _origName;
|
|
document.getElementById('inpEmail').value = _origEmail;
|
|
} catch(e){
|
|
toast('Failed to load profile: ' + e.message, 'err');
|
|
}
|
|
}
|
|
|
|
// ── Password strength meter ──────────────────────────────────────────────────
|
|
document.getElementById('inpNewPw').addEventListener('input', function(){
|
|
const v = this.value;
|
|
const m = document.getElementById('pwMeter');
|
|
if(!v){ m.className='pw-meter'; return; }
|
|
let score = 0;
|
|
if(v.length >= 6) score++;
|
|
if(v.length >= 10) score++;
|
|
if(/[A-Z]/.test(v) && /[0-9]/.test(v)) score++;
|
|
if(/[^A-Za-z0-9]/.test(v)) score++;
|
|
m.className = 'pw-meter ' + ['','weak','fair','good','good'][score];
|
|
});
|
|
|
|
// ── Save profile info ────────────────────────────────────────────────────────
|
|
document.getElementById('btnResetInfo').addEventListener('click',()=>{
|
|
document.getElementById('inpName').value = _origName;
|
|
document.getElementById('inpEmail').value = _origEmail;
|
|
});
|
|
|
|
document.getElementById('btnSaveInfo').addEventListener('click', async()=>{
|
|
const fullName = document.getElementById('inpName').value.trim();
|
|
const email = document.getElementById('inpEmail').value.trim();
|
|
if(!fullName){ toast('Full name is required','err'); return; }
|
|
|
|
const btn = document.getElementById('btnSaveInfo');
|
|
btn.disabled = true;
|
|
btn.innerHTML = '<span class="sp"></span>Saving…';
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/profile`,{
|
|
method:'PUT',
|
|
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
|
|
body: JSON.stringify({fullName, email}),
|
|
});
|
|
const d = await r.json();
|
|
if(!d.success) throw new Error(d.message||'Failed');
|
|
_origName = fullName;
|
|
_origEmail = email;
|
|
// Update hero live
|
|
document.getElementById('heroName').textContent = fullName;
|
|
document.getElementById('heroAvatar').textContent = initials(fullName);
|
|
toast('Profile updated successfully');
|
|
}catch(e){
|
|
toast('Error: ' + e.message,'err');
|
|
}finally{
|
|
btn.disabled = false;
|
|
btn.textContent = 'Save Changes';
|
|
}
|
|
});
|
|
|
|
// ── Change password ──────────────────────────────────────────────────────────
|
|
document.getElementById('btnResetPw').addEventListener('click',()=>{
|
|
document.getElementById('inpCurPw').value = '';
|
|
document.getElementById('inpNewPw').value = '';
|
|
document.getElementById('inpConPw').value = '';
|
|
document.getElementById('pwMeter').className = 'pw-meter';
|
|
});
|
|
|
|
document.getElementById('btnSavePw').addEventListener('click', async()=>{
|
|
const currentPassword = document.getElementById('inpCurPw').value;
|
|
const newPassword = document.getElementById('inpNewPw').value;
|
|
const confirmPassword = document.getElementById('inpConPw').value;
|
|
|
|
if(!currentPassword){ toast('Enter your current password','err'); return; }
|
|
if(!newPassword) { toast('Enter a new password','err'); return; }
|
|
if(newPassword.length < 6){ toast('New password must be at least 6 characters','err'); return; }
|
|
if(newPassword !== confirmPassword){ toast('Passwords do not match','err'); return; }
|
|
|
|
const btn = document.getElementById('btnSavePw');
|
|
btn.disabled = true;
|
|
btn.innerHTML = '<span class="sp"></span>Updating…';
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/profile`,{
|
|
method:'PUT',
|
|
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
|
|
body: JSON.stringify({currentPassword, newPassword}),
|
|
});
|
|
const d = await r.json();
|
|
if(!d.success) throw new Error(d.message||'Failed');
|
|
toast('Password updated successfully');
|
|
document.getElementById('btnResetPw').click();
|
|
}catch(e){
|
|
toast('Error: ' + e.message,'err');
|
|
}finally{
|
|
btn.disabled = false;
|
|
btn.textContent = 'Update Password';
|
|
}
|
|
});
|
|
|
|
// ── SAP Account (per-user, PER-COMPANY SAP logins) ──────────────────────────
|
|
// SAP B1 companies each have their own OUSR table, so the same SAP username
|
|
// can need a different password per company — one login is stored per company.
|
|
let _sapCompanies = [];
|
|
let _sapLogins = {};
|
|
|
|
async function loadSapCompanyOptions(){
|
|
const sel = document.getElementById('inpSapCompany');
|
|
try{ _sapCompanies = await window.fetchCompanyList(); }catch(_e){ _sapCompanies = []; }
|
|
if(!_sapCompanies.length){ sel.innerHTML = '<option value="">No companies found</option>'; return; }
|
|
sel.innerHTML = _sapCompanies.map(c=>`<option value="${esc(c.value)}">${esc(c.label||c.value)}</option>`).join('');
|
|
}
|
|
|
|
function renderSapList(){
|
|
const el = document.getElementById('sapList');
|
|
const companies = Object.keys(_sapLogins);
|
|
if(!companies.length){
|
|
el.innerHTML = '<div style="font-size:12px;padding:9px 12px;border-radius:8px;background:#fffbeb;border:1px solid #fde68a;color:#92400e">⚠ No SAP login set yet for any company. Pick a company below and add your SAP User ID & Password before you can post to SAP.</div>';
|
|
return;
|
|
}
|
|
el.innerHTML = companies.map(c=>{
|
|
const info = _sapLogins[c];
|
|
const label = (_sapCompanies.find(x=>x.value===c)||{}).label || c;
|
|
return `<div style="display:flex;align-items:center;gap:10px;font-size:12px;padding:9px 12px;border-radius:8px;background:#f0fdf4;border:1px solid #bbf7d0;color:#166534;margin-bottom:6px">
|
|
<span style="flex:1">✓ <b>${esc(label)}</b> — acting as <b>${esc(info.user)}</b></span>
|
|
<button type="button" class="btn-sap-rm" data-company="${esc(c)}" style="border:none;background:none;color:#166534;cursor:pointer;font-size:11px;font-weight:700;text-decoration:underline">Remove</button>
|
|
</div>`;
|
|
}).join('');
|
|
el.querySelectorAll('.btn-sap-rm').forEach(btn=>btn.onclick=async()=>{
|
|
if(!confirm(`Remove your SAP login for ${btn.dataset.company}?`))return;
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/sap-credentials?company=${encodeURIComponent(btn.dataset.company)}`,{method:'DELETE',headers:{Authorization:`Bearer ${tok}`}});
|
|
const d = await r.json();
|
|
if(!d.success) throw new Error(d.message||'Failed');
|
|
if(d.token) sessionStorage.setItem('portal_token', d.token);
|
|
toast('SAP login removed');
|
|
loadSapStatus();
|
|
}catch(e){ toast('Error: ' + e.message,'err'); }
|
|
});
|
|
}
|
|
|
|
async function loadSapStatus(){
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/sap-credentials`,{headers:{Authorization:`Bearer ${tok}`}});
|
|
const d = await r.json();
|
|
_sapLogins = d.sapLogins || {};
|
|
renderSapList();
|
|
}catch(e){ document.getElementById('sapList').textContent = 'Could not load SAP status: ' + e.message; }
|
|
}
|
|
|
|
document.getElementById('btnSaveSap').addEventListener('click', async()=>{
|
|
const company = document.getElementById('inpSapCompany').value;
|
|
const sapUser = document.getElementById('inpSapUser').value.trim();
|
|
const sapPassword = document.getElementById('inpSapPw').value;
|
|
if(!company){ toast('Pick a company first','err'); return; }
|
|
if(!sapUser || !sapPassword){ toast('Enter both SAP User ID and Password','err'); return; }
|
|
const btn = document.getElementById('btnSaveSap');
|
|
btn.disabled = true; btn.innerHTML = '<span class="sp"></span>Verifying…';
|
|
try{
|
|
const r = await fetch(`${BACKEND}/api/auth/sap-credentials`,{
|
|
method:'PUT',
|
|
headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},
|
|
body: JSON.stringify({company, sapUser, sapPassword}),
|
|
});
|
|
const d = await r.json();
|
|
if(!d.success) throw new Error(d.message||'Failed');
|
|
// A fresh token carrying the updated SAP-login map is returned — swap it
|
|
// in so the change takes effect immediately (this session posts as the
|
|
// new SAP user for that company).
|
|
if(d.token){ sessionStorage.setItem('portal_token', d.token); }
|
|
document.getElementById('inpSapPw').value = '';
|
|
toast(`SAP login for ${company} verified and saved`);
|
|
loadSapStatus();
|
|
}catch(e){
|
|
toast('Error: ' + e.message,'err');
|
|
}finally{
|
|
btn.disabled = false; btn.textContent = 'Verify & Save';
|
|
}
|
|
});
|
|
|
|
// ── Signature ────────────────────────────────────────────────────────────────
|
|
let _sigData = null; // null = unchanged, '' = clear, else new base64
|
|
function showSig(dataUri){
|
|
const img=document.getElementById('sigPreview'), empty=document.getElementById('sigEmpty');
|
|
if(dataUri){ img.src=dataUri; img.style.display=''; empty.style.display='none'; }
|
|
else { img.src=''; img.style.display='none'; empty.style.display=''; }
|
|
}
|
|
async function loadSignature(){
|
|
try{
|
|
const r=await fetch(`${BACKEND}/api/auth/signature`,{headers:{Authorization:`Bearer ${tok}`}});
|
|
const d=await r.json(); if(d.success) showSig(d.signature||'');
|
|
}catch(_e){}
|
|
}
|
|
document.getElementById('sigFile').addEventListener('change', function(){
|
|
const f=this.files&&this.files[0]; if(!f) return;
|
|
const rd=new FileReader();
|
|
rd.onload=e=>{ const img=new Image(); img.onload=()=>{
|
|
const maxW=360, scale=Math.min(1, maxW/img.width);
|
|
const cv=document.createElement('canvas'); cv.width=Math.round(img.width*scale); cv.height=Math.round(img.height*scale);
|
|
cv.getContext('2d').drawImage(img,0,0,cv.width,cv.height);
|
|
_sigData=cv.toDataURL('image/png'); showSig(_sigData);
|
|
}; img.src=e.target.result; };
|
|
rd.readAsDataURL(f);
|
|
});
|
|
document.getElementById('btnClearSig').addEventListener('click', ()=>{ _sigData=''; showSig(''); document.getElementById('sigFile').value=''; });
|
|
document.getElementById('btnSaveSig').addEventListener('click', async()=>{
|
|
if(_sigData===null){ toast('Choose a signature image first','err'); return; }
|
|
const btn=document.getElementById('btnSaveSig'); btn.disabled=true; btn.innerHTML='<span class="sp"></span>Saving…';
|
|
try{
|
|
const r=await fetch(`${BACKEND}/api/auth/profile`,{method:'PUT',headers:{Authorization:`Bearer ${tok}`,'Content-Type':'application/json'},body:JSON.stringify({signature:_sigData})});
|
|
const d=await r.json(); if(!d.success) throw new Error(d.message||'Failed');
|
|
_sigData=null; toast('Signature saved');
|
|
}catch(e){ toast('Error: '+e.message,'err'); }
|
|
finally{ btn.disabled=false; btn.textContent='Save Signature'; }
|
|
});
|
|
|
|
loadProfile();
|
|
loadSapCompanyOptions().then(loadSapStatus);
|
|
loadSignature();
|
|
</script>
|
|
<script src="/sidebar.js?v=31"></script>
|
|
</body>
|
|
</html>
|