1/**
  2 * Interim login dialog.
  3 *
  4 * @output wp-includes/js/wp-auth-check.js
  5 */
  6
  7( function( $ ) {
  8	var wrap,
  9		tempHidden,
 10		tempHiddenTimeout;
 11
 12	/**
 13	 * Shows the authentication form popup.
 14	 *
 15	 * @since 3.6.0
 16	 * @private
 17	 */
 18	function show() {
 19		var parent = $( '#wp-auth-check' ),
 20			form = $( '#wp-auth-check-form' ),
 21			noframe = wrap.find( '.wp-auth-fallback-expired' ),
 22			frame, loaded = false;
 23
 24		if ( form.length ) {
 25			// Add unload confirmation to counter (frame-busting) JS redirects.
 26			$( window ).on( 'beforeunload.wp-auth-check', function( event ) {
 27				event.originalEvent.returnValue = window.wp.i18n.__( 'Your session has expired. You can log in again from this page or go to the login page.' );
 28			});
 29
 30			frame = $( '<iframe id="wp-auth-check-frame" frameborder="0">' ).attr( 'title', noframe.text() );
 31			frame.on( 'load', function() {
 32				var height, body;
 33
 34				loaded = true;
 35				// Remove the spinner to avoid unnecessary CPU/GPU usage.
 36				form.removeClass( 'loading' );
 37
 38				try {
 39					body = $( this ).contents().find( 'body' );
 40					height = body.height();
 41				} catch( er ) {
 42					wrap.addClass( 'fallback' );
 43					parent.css( 'max-height', '' );
 44					form.remove();
 45					noframe.focus();
 46					return;
 47				}
 48
 49				if ( height ) {
 50					if ( body && body.hasClass( 'interim-login-success' ) ) {
 51						hide();
 52					} else {
 53						parent.css( 'max-height', height + 40 + 'px' );
 54					}
 55				} else if ( ! body || ! body.length ) {
 56					// Catch "silent" iframe origin exceptions in WebKit
 57					// after another page is loaded in the iframe.
 58					wrap.addClass( 'fallback' );
 59					parent.css( 'max-height', '' );
 60					form.remove();
 61					noframe.focus();
 62				}
 63			}).attr( 'src', form.data( 'src' ) );
 64
 65			form.append( frame );
 66		}
 67
 68		$( 'body' ).addClass( 'modal-open' );
 69		wrap.removeClass( 'hidden' );
 70
 71		if ( frame ) {
 72			frame.focus();
 73			/*
 74			 * WebKit doesn't throw an error if the iframe fails to load
 75			 * because of "X-Frame-Options: DENY" header.
 76			 * Wait for 10 seconds and switch to the fallback text.
 77			 */
 78			setTimeout( function() {
 79				if ( ! loaded ) {
 80					wrap.addClass( 'fallback' );
 81					form.remove();
 82					noframe.focus();
 83				}
 84			}, 10000 );
 85		} else {
 86			noframe.focus();
 87		}
 88	}
 89
 90	/**
 91	 * Hides the authentication form popup.
 92	 *
 93	 * @since 3.6.0
 94	 * @private
 95	 */
 96	function hide() {
 97		var adminpage = window.adminpage,
 98			wp        = window.wp;
 99
100		$( window ).off( 'beforeunload.wp-auth-check' );
101
102		// When on the Edit Post screen, speed up heartbeat
103		// after the user logs in to quickly refresh nonces.
104		if ( ( adminpage === 'post-php' || adminpage === 'post-new-php' ) && wp && wp.heartbeat ) {
105			wp.heartbeat.connectNow();
106		}
107
108		wrap.fadeOut( 200, function() {
109			wrap.addClass( 'hidden' ).css( 'display', '' );
110			$( '#wp-auth-check-frame' ).remove();
111			$( 'body' ).removeClass( 'modal-open' );
112		});
113	}
114
115	/**
116	 * Set or reset the tempHidden variable used to pause showing of the modal
117	 * after a user closes it without logging in.
118	 *
119	 * @since 5.5.0
120	 * @private
121	 */
122	function setShowTimeout() {
123		tempHidden = true;
124		window.clearTimeout( tempHiddenTimeout );
125		tempHiddenTimeout = window.setTimeout(
126			function() {
127				tempHidden = false;
128			},
129			300000 // 5 min.
130		);
131	}
132
133	/**
134	 * Binds to the Heartbeat Tick event.
135	 *
136	 * - Shows the authentication form popup if user is not logged in.
137	 * - Hides the authentication form popup if it is already visible and user is
138	 *   logged in.
139	 *
140	 * @ignore
141	 *
142	 * @since 3.6.0
143	 *
144	 * @param {Object} e The heartbeat-tick event that has been triggered.
145	 * @param {Object} data Response data.
146	 */
147	$( function() {
148
149		/**
150		 * Hides the authentication form popup when the close icon is clicked.
151		 *
152		 * @ignore
153		 *
154		 * @since 3.6.0
155		 */
156		wrap = $( '#wp-auth-check-wrap' );
157		wrap.find( '.wp-auth-check-close' ).on( 'click', function() {
158			hide();
159			setShowTimeout();
160		});
161	}).on( 'heartbeat-tick.wp-auth-check', function( e, data ) {
162		if ( 'wp-auth-check' in data ) {
163			if ( ! data['wp-auth-check'] && wrap.hasClass( 'hidden' ) && ! tempHidden ) {
164				show();
165			} else if ( data['wp-auth-check'] && ! wrap.hasClass( 'hidden' ) ) {
166				hide();
167			}
168		}
169	});
170
171}(jQuery));
172