From 64db6a0c381bf7f3a60e2dedbfd1268d667a099d Mon Sep 17 00:00:00 2001
From: Jonas Hungershausen <jonas.hungershausen@ory.sh>
Date: Thu, 14 Sep 2023 15:45:04 +0200
Subject: [PATCH] feat: add org login switcher

---
 src/routes/login.ts              |  3 +-
 views/login.hbs                  |  1 +
 views/partials/organizations.hbs | 49 ++++++++++++++++++++++++++++++++
 3 files changed, 52 insertions(+), 1 deletion(-)
 create mode 100644 views/partials/organizations.hbs

diff --git a/src/routes/login.ts b/src/routes/login.ts
index c97dc432..e03ac1b6 100644
--- a/src/routes/login.ts
+++ b/src/routes/login.ts
@@ -82,7 +82,7 @@ export const createLoginRoute: RouteCreator =
         })
         .then(({ headers, data: verificationFlow }) => {
           // we need the csrf cookie from the verification flow
-          res.setHeader("set-cookie", headers["set-cookie"])
+          res.setHeader("set-cookie", headers["set-cookie"] || "")
           // encode the verification flow id in the query parameters
           const verificationParameters = new URLSearchParams({
             flow: verificationFlow.id,
@@ -168,6 +168,7 @@ export const createLoginRoute: RouteCreator =
 
         res.render("login", {
           nodes: flow.ui.nodes,
+          organizations: JSON.stringify(res.locals.organizations),
           webAuthnHandler: filterNodesByGroups({
             nodes: flow.ui.nodes,
             groups: ["webauthn"],
diff --git a/views/login.hbs b/views/login.hbs
index c2d013a6..bd662657 100644
--- a/views/login.hbs
+++ b/views/login.hbs
@@ -2,4 +2,5 @@
   {{{card}}}
 
   {{> webauthn_setup nodes=nodes webAuthnHandler=webAuthnHandler webauthnTriggerName="webauthn_login_trigger"}}
+  {{> organizations}}
 </div>
diff --git a/views/partials/organizations.hbs b/views/partials/organizations.hbs
new file mode 100644
index 00000000..5aaecc2d
--- /dev/null
+++ b/views/partials/organizations.hbs
@@ -0,0 +1,49 @@
+<script type="text/javascript">
+  function hash(string) {
+    const utf8 = new TextEncoder().encode(string);
+    return crypto.subtle.digest('SHA-256', utf8).then((hashBuffer) => {
+      const hashArray = Array.from(new Uint8Array(hashBuffer));
+      const hashHex = hashArray
+        .map((bytes) => bytes.toString(16).padStart(2, '0'))
+        .join('');
+      return hashHex;
+    });
+  }
+
+  function toggleSSO(ssoEnabled, orgId) {
+    var passwordInput = document.querySelector('div[data-testid="node/input/password"]')
+    var passwordSubmit = document.querySelector('button[type="submit"][value="password"]')
+    var forgotPassword = document.querySelector('[data-testid="forgot-password-link"]')
+    if (ssoEnabled) {
+      passwordInput.style.display = "none";
+      forgotPassword.style.display = "none";
+      passwordSubmit.textContent = "Sign in with SSO"
+      passwordSubmit.onclick = function (e) {
+        e.preventDefault();
+        location.replace("/ui/login?organization=" + orgId)
+      }
+    } else {
+      passwordInput.style.display = "";
+      forgotPassword.style.display = "";
+      passwordSubmit.textContent = "Sign in"
+    }
+  }
+
+  var organizations = {{{organizations}}}
+
+  document.querySelector('input[name="identifier"]').addEventListener('input', function(e) {
+    var v = e.target.value;
+    if (!v.includes("@")) {
+      return
+    }
+    var parts = v.split("@");
+    var domain = parts[1];
+
+    hash(domain).then((h) => {
+      toggleSSO(h in organizations, organizations[h]);
+    }).catch((e) => {
+      console.log(e)
+    })
+  });
+
+</script>
\ No newline at end of file