Bug 21526: Use the 'url' filter when needed
[koha.git] / koha-tmpl / opac-tmpl / bootstrap / en / modules / opac-auth.tt
index 1174f59..71edf3c 100644 (file)
@@ -1,6 +1,7 @@
+[% USE raw %]
 [% USE Koha %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo;
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle | html %][% ELSE %]Koha online[% END %] catalog &rsaquo;
 [% IF Koha.Preference( 'opacuserlogin' ) == 1 %]
     Log in to your account
 [% ELSE %]
                     <!--CONTENT-->
                     [% IF Koha.Preference( 'opacuserlogin' ) == 1 %]
                         [% IF ( nopermission ) %]
-                            <!-- This is what is displayed if user doesnt have permission -->
+                            <!-- This is what is displayed if user doesn't have permission -->
                             <div class="alert">
                                 <h3>Access denied</h3>
                                 <p>Sorry, the system doesn't think you have permission to access this page. </p>
+                                [% IF SCO_login %]
+                                    <p><a href="/cgi-bin/koha/sco/sco-main.pl?logout.x=1">Log out and try again with a different user.</a></p>
+                                [% ELSIF SCI_login %]
+                                    <p><a href="/cgi-bin/koha/sci/sci-main.pl?logout.x=1">Log out and try again with a different user.</a></p>
+                                [% END %]
                             </div>
                         [% END %]
 
                             [% IF ( timed_out ) %]
                                 <!-- This is what is displayed if login has timed out -->
                                 <div class="alert alert-info">
-                                    <p>Sorry, your session has timed out.  Please log in again.</p>
+                                    <p>Sorry, your session has timed out. Please log in again.</p>
                                 </div>
                             [% END %]
 
                             [% IF ( different_ip ) %]
-                                <!-- This is what is displayed if user doesnt have permission -->
+                                <!-- This is what is displayed if user doesn't have permission -->
                                 <div class="alert alert-info">
-                                    <p>You are logging from a different IP address.  Please log in again.</p>
+                                    <p>You are logging from a different IP address. Please log in again.</p>
                                 </div>
                             [% END %]
 
-                            [% IF ( invalid_username_or_password ) %]
-                                <!-- This is what is displayed if user doesnt have permission -->
+
+                            [% IF invalid_username_or_password || too_many_login_attempts %]
+                                <!-- This is what is displayed if user doesn't have permission or account is locked. (Do not expose more information than needed.) -->
                                 <div class="alert alert-info">
-                                    <p>You entered an incorrect username or password. Please try again! And remember, passwords are case sensitive.</p>
+                                    <p>You entered an incorrect username or password. Please try again! But note that passwords are case sensitive[% IF Koha.Preference('FailedLoginAttempts') %] and that your account will be locked out after a fixed number of failed login attempts[% END %]. Please contact a library staff member if you continue to have problems.</p>
                                 </div>
                             [% END %]
 
                             [% IF ( shibbolethAuthentication ) %]
-
                                 [% IF ( invalidShibLogin ) %]
-                                <!-- This is what is displayed if shibboleth login has failed to match a koha user -->
-                                <div class="alert alert-info">
-                                    <p>
-                                    Sorry, your Shibboleth identity does not match a valid library identity.
+                                    <!-- This is what is displayed if shibboleth login has failed to match a koha user -->
+                                    <div class="alert alert-info">
+                                    <p>Sorry, your Shibboleth identity does not match a valid library identity.</p>
                                     [% IF ( casAuthentication ) %]
-                                    [% IF ( invalidCasLogin ) %]
-                                    <!-- This is what is displayed if cas login has failed -->
-                                    <p>Sorry, the CAS login also failed, if you have a local login you may use that below.</p>
-                                    [% ELSE %]
-                                    If you have a CAS account, you may use that below.
-                                    [% END %]
+                                        [% IF ( invalidCasLogin ) %]
+                                            <!-- This is what is displayed if cas login has failed -->
+                                            <p>Sorry, the CAS login also failed. If you have a local login you may use that below.</p>
+                                        [% ELSE %]
+                                            <p>If you have a CAS account, you may use that below.</p>
+                                        [% END %]
                                     [% ELSE %]
-                                    If you have a local account, you may use that below.
+                                        <p>If you have a local account, you may use that below.</p>
                                     [% END %]
-                                    </p>
-                                </div>
-                                [% ELSE %]
+                                    </div>
+                            [% ELSE %]
                                 <h4>Shibboleth Login</h4>
-
-                                <p>If you have a Shibboleth account,
-                                please <a href="[% shibbolethLoginUrl %]">click here to login</a>.</p>
-                                [% END %]
-                                [% IF ( casAuthentication ) %]
+                                <p><a href="[% shibbolethLoginUrl | url %]">If you have a Shibboleth account, please click here to log in.</a></p>
+                            [% END %]
+                            [% IF ( casAuthentication ) %]
                                 <h4>CAS login</h4>
-                                <p>If you do not have a Shibboleth account, but you do have a CAS account,
-                                [% ELSE %]
+                                <p>If you do not have a Shibboleth account, but you do have a CAS account, you can use CAS.</p>
+                            [% ELSE %]
                                 <h4>Local login</h4>
-                                <p>If you do not have a Shibboleth account, but you do have a local login, then you may login below:</p>
-                                [% END %]
-
+                                <p>If you do not have a Shibboleth account, but you do have a local login, then you may login below.</p>
                             [% END %]
 
-                            [% IF ( casAuthentication ) %]
-                                [% IF ( shibbolethAuthentication ) %]
+                        [% END %]
+
+                        [% IF ( casAuthentication ) %]
+                            [% IF ( shibbolethAuthentication ) %]
                                 [% IF ( casServerUrl ) %]
-                                    please <a href="[% casServerUrl %]">click here to login</a>.<p>
+                                    <p><a href="[% casServerUrl | url %]">Please click here to log in.</a><p>
                                 [% END %]
 
                                 [% IF ( casServersLoop ) %]
-                                    please choose against which one you would like to authenticate: </p>
+                                    <p>Please choose against which one you would like to authenticate: </p>
                                     <ul>
                                         [% FOREACH casServer IN casServersLoop %]
-                                        <li><a href="[% casServer.value %]">[% casServer.name %]</a></li>
+                                            <li><a href="[% casServer.value | url %]">[% casServer.name | html %]</a></li>
                                         [% END %]
                                     </ul>
                                 [% END %]
-                                [% ELSE %]
+                            [% ELSE %]
                                 <h4>CAS login</h4>
 
                                 [% IF ( invalidCasLogin ) %]
                                     <p>Sorry, the CAS login failed.</p>
                                 [% END %]
 
-                                <p>If you have a CAS account,
                                 [% IF ( casServerUrl ) %]
-                                    please <a href="[% casServerUrl %]">click here to login</a>.<p>
+                                   <p><a href="[% casServerUrl | url %]">If you have a CAS account, please click here to log in.</a><p>
                                 [% END %]
 
                                 [% IF ( casServersLoop ) %]
-                                    please choose against which one you would like to authenticate: </p>
+                                    <p>If you have a CAS account, please choose against which one you would like to authenticate:</p>
                                     <ul>
                                         [% FOREACH casServer IN casServersLoop %]
-                                        <li><a href="[% casServer.value %]">[% casServer.name %]</a></li>
+                                        <li><a href="[% casServer.value | url %]">[% casServer.name | html %]</a></li>
                                         [% END %]
                                     </ul>
                                 [% END %]
-                                [% END %]
+                            [% END %]
 
-                                [% IF ( shibbolethAuthentication ) %]
+                            [% IF ( shibbolethAuthentication ) %]
                                 <p>Nothing</p>
-                                [% ELSE %]
+                            [% ELSE %]
                                 <h4>Local login</h4>
                                 <p>If you do not have a CAS account, but do have a local account, you can still log in: </p>
-                                [% END %]
+                            [% END %]
 
-                            [% END # / IF casAuthentication %]
+                        [% END # / IF casAuthentication %]
 
-                            <form action="/cgi-bin/koha/opac-user.pl" name="auth" id="auth" method="post">
-                                <input type="hidden" name="koha_login_context" value="opac" />
-                                <fieldset class="brief">
-                                    [% FOREACH INPUT IN INPUTS %]
-                                        <input type="hidden" name="[% INPUT.name |html %]" value="[% INPUT.value |html %]" />
-                                    [% END %]
-                                    <label for="userid">Login</label>
-                                    <input type="text"  size="25" id="userid"  name="userid" />
-                                    <label for="password">Password</label><input type="password"  size="25" id="password"  name="password" />
-                                </fieldset>
-
-                                <input type="submit" value="Log in" class="btn" />
-                                [% IF Koha.Preference('OpacPasswordChange') && Koha.Preference('OpacResetPassword') %]
-                                    <div id="forgotpassword">
-                                        <h5>Forgot your password?</h5>
-                                        <p>If you do not remember your password, click <a href="/cgi-bin/koha/opac-password-recovery.pl">here</a> to create a new one.</p>
-                                    </div>
-                                [% END %]
-                                <div id="nologininstructions">
-                                    [% IF Koha.Preference('NoLoginInstructions') %]
-                                        [% Koha.Preference('NoLoginInstructions') %]
-                                    [% ELSE %]
-                                        <h5>Don't have a password yet?</h5><p> If you don't have a password yet, stop by the circulation desk the next time you're in the library. We'll happily set one up for you.</p>
-                                        <h5>Don't have a library card?</h5><p> If you don't have a library card, stop by your local library to sign up.</p>
-                                    [% END # / IF Koha.Preference('NoLoginInstructions') %]
-                                    [% IF PatronSelfRegistration && PatronSelfRegistrationDefaultCategory %]<span id="registrationinstructions">You may <a href="/cgi-bin/koha/opac-memberentry.pl">register here</a>.</span>[% END %]
+                        [% IF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
+                            [% IF ( invalidGoogleOpenIDConnectLogin ) %]
+                                <h4>Google login</h4>
+                                <p>Sorry, your Google login failed. <span class="error">[% invalidGoogleOpenIDConnectLogin | html %]</span></p>
+                                <p>Please note that the Google login will only work if you are using the e-mail address registered with this library.</p>
+                                <p>If you want to, you can try to <a href="/cgi-bin/koha/svc/auth/googleopenidconnect?reauthenticate=select_account">log in using a different account</a>
+                            [% END %]
+                                <a href="/cgi-bin/koha/svc/auth/googleopenidconnect" class="btn btn-primary" id="openid_connect">Log in with Google</a>
+                                <p>If you do not have a Google account, but do have a local account, you can still log in: </p>
+                        [% END %]
+
+                        [% IF SCO_login %]
+                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="auth" id="auth" method="post" autocomplete="off">
+                        [% ELSIF SCI_login %]
+                            <form action="/cgi-bin/koha/sci/sci-main.pl" name="auth" id="auth" method="post" autocomplete="off">
+                        [% ELSE %]
+                            <form action="[% script_name | html %]" name="auth" id="auth" method="post" autocomplete="off">
+                        [% END %]
+                            <input type="hidden" name="koha_login_context" value="opac" />
+                            <fieldset class="brief">
+                            [% FOREACH INPUT IN INPUTS %]
+                                <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
+                            [% END %]
+                            <label for="userid">Login</label>
+                            <input type="text"  size="25" id="userid"  name="userid" />
+                            <label for="password">Password</label><input type="password"  size="25" id="password"  name="password" />
+                            </fieldset>
+
+                            <input type="submit" value="Log in" class="btn" />
+                            <p/>
+                            [% IF Koha.Preference('OpacPasswordChange') && Koha.Preference('OpacResetPassword') %]
+                                <div id="forgotpassword">
+                                    <a href="/cgi-bin/koha/opac-password-recovery.pl">Forgot your password?</a>
                                 </div>
+                            [% END %]
+                            <div id="nologininstructions">
+                            [% IF Koha.Preference('OpacLoginInstructions') %]
+                                [% Koha.Preference('OpacLoginInstructions') | $raw %]
+                            [% ELSE %]
+                                <h5>Don't have a password yet?</h5>
+                                <p>If you don't have a password yet, stop by the circulation desk the next time you're in the library. We'll happily set one up for you.</p>
+                                <h5>Don't have a library card?</h5>
+                                <p>If you don't have a library card, stop by your local library to sign up.</p>
+                            [% END # / IF Koha.Preference('OpacLoginInstructions') %]
+
+                            [% IF PatronSelfRegistration && PatronSelfRegistrationDefaultCategory %]<span id="registrationinstructions"><a href="/cgi-bin/koha/opac-memberentry.pl">You may register here.</a></span>
+                            [% END %]
+                            </div>
                             </form>
                         [% END # / IF loginprompt %]
 
                     [% ELSE %]
                         <h4>Logging on to the catalog has not been enabled by the library.</h4>
                         <ul>
-                            <li>To report this error, you can <a href="mailto:[% admin %]">email the Koha Administrator</a>.</li>
+                            <li>To report this error, you can email the Koha Administrator.<a href="mailto:[% admin | uri %]">Email</a></li>
                             <li>Use top menu bar to navigate to another part of Koha.</li>
                         </ul>
                     [% END # / IF opacuserlogin %]
 
-                    [% IF persona %]
-                        <p><a href="#" class="persona-button" id="browserid" ><span>Sign in with your Email</span></a></p>
-                    [% END %]
-
                 </div> <!-- /.opac-auth -->
             </div> <!-- /.span12 -->
         </div> <!-- /.row-fluid -->
 
 [% INCLUDE 'opac-bottom.inc' %]
 [% BLOCK jsinclude %]
-<script type="text/javascript">
+<script>
 //<![CDATA[
     // Hide circular 'Log in to Your Account' link in opac-auth.pl
     $(document).ready(function() {