// ===== SERVICE CREDENTIALS ===== (function() { const errorHandler = new ErrorHandler(); injectModal('folder-browser-modal', ``); injectModal('service-creds-modal', ``); const modal = document.getElementById('service-creds-modal'); let currentService = null; let credentialReturnUrl = null; let currentServiceHadCreds = false; const arrServices = ['sonarr', 'radarr', 'prowlarr', 'overseerr']; const qualityProfileServices = ['sonarr', 'radarr']; function getServiceUrl(service) { return service.externalUrl || service.url || ''; } function showError(msg) { const el = document.getElementById('svc-creds-error'); el.textContent = msg; el.style.display = ''; } function hideError() { const el = document.getElementById('svc-creds-error'); el.textContent = ''; el.style.display = 'none'; } async function requireSuccessfulWrite(response, label) { if (!response) throw new Error(`${label} failed: no response`); let data; try { data = await response.json(); } catch (_) { throw new Error(`${label} failed: invalid server response`); } if (!response.ok || data?.success !== true) { throw new Error(data?.error || `${label} failed (${response.status || 'unknown status'})`); } return data; } function isAllowedCredentialReturnUrl(returnUrl, serviceId) { return !!window.DCCredentialVault?.isAllowedReturnUrl(returnUrl, serviceId); } window.openServiceCredsModal = async function(service, options = {}) { currentService = service; credentialReturnUrl = isAllowedCredentialReturnUrl(options.returnUrl, service.id) ? options.returnUrl : null; currentServiceHadCreds = false; hideError(); const title = document.getElementById('svc-creds-title'); const desc = document.getElementById('svc-creds-desc'); const seedhostSection = document.getElementById('svc-creds-seedhost'); const apikeySection = document.getElementById('svc-creds-apikey'); const basicSection = document.getElementById('svc-creds-basic'); const qualitySection = document.getElementById('svc-creds-quality'); title.textContent = service.name + ' — Encrypted Vault'; document.getElementById('svc-creds-save').textContent = credentialReturnUrl ? 'Save to vault & open service' : 'Save to encrypted vault'; // Determine which sections to show const isExt = !!service.isExternal; const isArr = arrServices.includes(service.id) || arrServices.includes(service.appTemplate); const hasQuality = qualityProfileServices.includes(service.id) || qualityProfileServices.includes(service.appTemplate); seedhostSection.style.display = isExt ? '' : 'none'; apikeySection.style.display = isArr ? '' : 'none'; qualitySection.style.display = hasQuality ? '' : 'none'; basicSection.style.display = !isExt ? '' : 'none'; // Reset quality dropdown const qualSelect = document.getElementById('svc-quality-select'); qualSelect.innerHTML = ''; document.getElementById('svc-quality-status').textContent = ''; if (isExt) { desc.textContent = 'Seedhost credentials auto-login past the HTTP prompt. API key bypasses the app login.'; // Update password placeholder with service name document.getElementById('svc-seedhost-pass').placeholder = `Password for ${service.name}`; } else if (isArr) { desc.textContent = 'API key bypasses the app login screen automatically.'; } else { desc.textContent = 'Credentials are injected automatically when accessing this service.'; } // Load existing credentials await loadServiceCreds(service); modal.classList.add('show'); }; async function loadServiceCreds(service) { const dot = document.getElementById('svc-creds-dot'); const status = document.getElementById('svc-creds-status'); const clearBtn = document.getElementById('svc-creds-clear'); let hasCreds = false; // Load seedhost creds (shared username + per-service password) if (service.isExternal) { try { const res = await fetch(`/api/v1/seedhost-creds?serviceId=${service.id}`); const data = await res.json(); if (data.success) { document.getElementById('svc-seedhost-user').value = data.username || ''; if (data.hasCredentials) hasCreds = true; } else { document.getElementById('svc-seedhost-user').value = ''; } } catch (e) { /* ignore */ } document.getElementById('svc-seedhost-pass').value = ''; } // Load per-service creds try { const res = await fetch(`/api/v1/services/${service.id}/credentials`); const data = await res.json(); if (data.success) { if (data.hasApiKey) { document.getElementById('svc-apikey-input').value = '••••••••'; hasCreds = true; } else { document.getElementById('svc-apikey-input').value = ''; } if (data.hasBasicAuth && !service.isExternal) { document.getElementById('svc-basic-user').value = data.username || ''; hasCreds = true; } else { document.getElementById('svc-basic-user').value = ''; } } } catch (e) { /* ignore */ } if (document.getElementById('svc-basic-pass')) document.getElementById('svc-basic-pass').value = ''; // Load quality profile for arr services const svcId = service.id || service.appTemplate; if (qualityProfileServices.includes(svcId)) { await loadQualityProfiles(service); } if (hasCreds) { currentServiceHadCreds = true; dot.style.background = 'var(--ok-fg, #74dfc4)'; status.style.color = 'var(--ok-fg, #74dfc4)'; status.textContent = 'Credentials stored'; clearBtn.style.display = ''; // Update the card button const btn = document.getElementById(`creds-btn-${service.id}`); if (btn) btn.classList.add('has-creds'); } else { dot.style.background = 'var(--muted)'; status.style.color = 'var(--muted)'; status.textContent = 'No credentials stored'; clearBtn.style.display = 'none'; } } // Fetch and populate quality profiles dropdown async function loadQualityProfiles(service) { const qualSelect = document.getElementById('svc-quality-select'); const qualStatus = document.getElementById('svc-quality-status'); const svcId = service.id || service.appTemplate; const svcUrl = getServiceUrl(service); if (!svcUrl) { qualSelect.innerHTML = ''; return; } qualSelect.innerHTML = ''; qualStatus.textContent = ''; try { const params = new URLSearchParams({ service: svcId, url: svcUrl }); const res = await fetch(`/api/v1/arr/quality-profiles?${params}`); const data = await res.json(); if (!data.success || !data.profiles?.length) { qualSelect.innerHTML = ''; return; } qualSelect.innerHTML = ''; for (const p of data.profiles) { const opt = document.createElement('option'); opt.value = p.id; opt.textContent = p.name; qualSelect.appendChild(opt); } // Pre-select stored profile or best match for "720" if (data.storedProfileId) { qualSelect.value = String(data.storedProfileId); } if (!qualSelect.value) { // Try to find a 720p-ish profile const match720 = data.profiles.find(p => /720/i.test(p.name)); if (match720) qualSelect.value = String(match720.id); } if (!qualSelect.value && data.profiles.length) { qualSelect.value = String(data.profiles[0].id); } qualStatus.innerHTML = `${data.profiles.length} profiles loaded`; } catch (e) { qualSelect.innerHTML = ''; qualStatus.innerHTML = `Error: ${e.message}`; } } // Fetch button for quality profiles document.getElementById('svc-quality-fetch')?.addEventListener('click', async () => { if (!currentService) return; const svcId = currentService.id || currentService.appTemplate; const svcUrl = getServiceUrl(currentService); const apiKeyInput = document.getElementById('svc-apikey-input'); const apiKey = apiKeyInput?.value.trim(); const qualSelect = document.getElementById('svc-quality-select'); const qualStatus = document.getElementById('svc-quality-status'); if (!svcUrl) { qualStatus.innerHTML = 'No service URL available'; return; } if (!apiKey || apiKey === '••••••••') { qualStatus.innerHTML = 'Enter an API key first'; return; } qualSelect.innerHTML = ''; qualStatus.textContent = ''; try { const params = new URLSearchParams({ service: svcId, url: svcUrl, apiKey }); const res = await fetch(`/api/v1/arr/quality-profiles?${params}`); const data = await res.json(); if (!data.success) { qualSelect.innerHTML = ''; qualStatus.innerHTML = `${data.error || 'Failed to fetch profiles'}`; return; } if (!data.profiles?.length) { qualSelect.innerHTML = ''; return; } qualSelect.innerHTML = ''; for (const p of data.profiles) { const opt = document.createElement('option'); opt.value = p.id; opt.textContent = p.name; qualSelect.appendChild(opt); } // Pre-select 720p match const match720 = data.profiles.find(p => /720/i.test(p.name)); if (match720) qualSelect.value = String(match720.id); else if (data.profiles.length) qualSelect.value = String(data.profiles[0].id); qualStatus.innerHTML = `${data.profiles.length} profiles loaded`; } catch (e) { qualSelect.innerHTML = ''; qualStatus.innerHTML = `${e.message}`; } }); // Save button document.getElementById('svc-creds-save')?.addEventListener('click', async () => { if (!currentService) return; const saveBtn = document.getElementById('svc-creds-save'); saveBtn.textContent = 'Saving...'; saveBtn.disabled = true; hideError(); try { const isArr = arrServices.includes(currentService.id) || arrServices.includes(currentService.appTemplate); const svcId = currentService.id || currentService.appTemplate; if (credentialReturnUrl && !currentServiceHadCreds) { const externalUser = document.getElementById('svc-seedhost-user').value.trim(); const externalPass = document.getElementById('svc-seedhost-pass').value; const apiKeyInput = document.getElementById('svc-apikey-input'); const requestedApiKey = apiKeyInput?.value.trim(); const basicUser = document.getElementById('svc-basic-user').value.trim(); const basicPass = document.getElementById('svc-basic-pass').value; const hasExternalLogin = currentService.isExternal && externalUser && externalPass; const hasApiKey = isArr && requestedApiKey && requestedApiKey !== '••••••••'; const hasBasicLogin = !currentService.isExternal && basicUser && basicPass; if (!hasExternalLogin && !hasApiKey && !hasBasicLogin) { showError('Enter the login or API key DashCaddy should store for this service.'); saveBtn.textContent = 'Save to vault & open service'; saveBtn.disabled = false; return; } } // Save seedhost creds (shared username + per-service password) if (currentService.isExternal) { const user = document.getElementById('svc-seedhost-user').value.trim(); const pass = document.getElementById('svc-seedhost-pass').value; if (user) { const response = await secureFetch('/api/v1/seedhost-creds', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: user, password: pass || undefined, serviceId: currentService.id }) }); await requireSuccessfulWrite(response, 'Seedhost credential save'); } } // Save API key — for arr services, use the arr credentials endpoint (correct namespace) const apiKeyInput = document.getElementById('svc-apikey-input'); const apiKey = apiKeyInput?.value.trim(); if (apiKey && apiKey !== '••••••••') { if (isArr) { // Use arr credentials endpoint — validates key, tests connection, stores in arr.* namespace const svcUrl = getServiceUrl(currentService); const qualSelect = document.getElementById('svc-quality-select'); const qualityProfileId = qualSelect?.value ? parseInt(qualSelect.value) : undefined; const qualityProfileName = qualSelect?.selectedOptions?.[0]?.textContent || undefined; const res = await secureFetch('/api/v1/arr/credentials', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ service: svcId, apiKey, url: svcUrl || undefined, qualityProfileId: qualityProfileId || undefined, qualityProfileName: qualityProfileName || undefined }) }); const data = await requireSuccessfulWrite(res, 'ARR credential save'); if (data.connectionTest && !data.connectionTest.success) { showError(`API key saved but connection test failed: ${data.connectionTest.error}`); } } else { // Non-arr services use the generic endpoint const response = await secureFetch(`/api/v1/services/${currentService.id}/credentials`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ apiKey }) }); await requireSuccessfulWrite(response, 'API key save'); } } else if (isArr && qualityProfileServices.includes(svcId)) { // API key unchanged but user may have changed quality profile — save profile only const qualSelect = document.getElementById('svc-quality-select'); const qualityProfileId = qualSelect?.value ? parseInt(qualSelect.value) : undefined; const qualityProfileName = qualSelect?.selectedOptions?.[0]?.textContent || undefined; if (qualityProfileId) { const response = await secureFetch('/api/v1/arr/quality-profiles', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ service: svcId, qualityProfileId, qualityProfileName }) }); await requireSuccessfulWrite(response, 'Quality profile save'); } } // Save per-service basic auth if (!currentService.isExternal) { const user = document.getElementById('svc-basic-user').value.trim(); const pass = document.getElementById('svc-basic-pass').value; if (user && pass) { const response = await secureFetch(`/api/v1/services/${currentService.id}/credentials`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: user, password: pass }) }); await requireSuccessfulWrite(response, 'Service credential save'); } } await loadServiceCreds(currentService); if (credentialReturnUrl) { const returnUrl = credentialReturnUrl; const resumed = await window.DCCredentialVault?.resume(returnUrl, currentService.id); if (!resumed) throw new Error('Credential saved, but the secure service handoff failed. Try opening the service again.'); credentialReturnUrl = null; return; } } catch (e) { errorHandler.logError('[ServiceCredentials] Save', e, { function: 'saveCredentials' }); showError('Failed to save: ' + (e.message || 'Unknown error')); } saveBtn.textContent = credentialReturnUrl ? 'Save to vault & open service' : 'Save to encrypted vault'; saveBtn.disabled = false; }); // Clear button document.getElementById('svc-creds-clear')?.addEventListener('click', async () => { if (!currentService) return; if (!confirm(`Remove stored credentials for ${currentService.name}?`)) return; hideError(); try { const svcId = currentService.id || currentService.appTemplate; const isArr = arrServices.includes(svcId); if (currentService.isExternal) { const response = await secureFetch(`/api/v1/seedhost-creds?serviceId=${currentService.id}`, { method: 'DELETE' }); await requireSuccessfulWrite(response, 'Seedhost credential removal'); } // Delete from both namespaces const response = await secureFetch(`/api/v1/services/${currentService.id}/credentials`, { method: 'DELETE' }); await requireSuccessfulWrite(response, 'Service credential removal'); if (isArr) { const arrResponse = await secureFetch(`/api/v1/arr/credentials/${svcId}`, { method: 'DELETE' }); await requireSuccessfulWrite(arrResponse, 'ARR credential removal'); } const btn = document.getElementById(`creds-btn-${currentService.id}`); if (btn) btn.classList.remove('has-creds'); await loadServiceCreds(currentService); } catch (e) { errorHandler.logError('[ServiceCredentials] Clear', e, { function: 'clearCredentials' }); showError('Failed to clear: ' + (e.message || 'Unknown error')); } }); // Close button / backdrop document.getElementById('svc-creds-close')?.addEventListener('click', () => { modal.classList.remove('show'); currentService = null; credentialReturnUrl = null; }); modal?.addEventListener('click', (e) => { if (e.target === modal) { modal.classList.remove('show'); currentService = null; credentialReturnUrl = null; } }); // Check credential status for all services on page load (update key button highlights) window.refreshCredsButtons = async function() { try { for (const app of (window.APPS || [])) { if (!app.isExternal && !app.appTemplate && !app.url) continue; let hasCreds = false; if (app.isExternal) { try { const seedRes = await fetch(`/api/v1/seedhost-creds?serviceId=${app.id}`); const seedData = await seedRes.json(); if (seedData.success && seedData.hasCredentials) hasCreds = true; } catch (e) { /* ignore */ } } try { const r = await fetch(`/api/v1/services/${app.id}/credentials`); const d = await r.json(); if (d.success && (d.hasApiKey || d.hasBasicAuth)) hasCreds = true; } catch (e) { /* ignore */ } const btn = document.getElementById(`creds-btn-${app.id}`); if (btn) btn.classList.toggle('has-creds', hasCreds); } } catch (e) { /* ignore */ } }; // Protected service login pages send missing credentials here. Reuse the // normal vault form, then resume through the existing one-time SSO handoff. window.openRequestedCredentialForm = function() { const params = new URLSearchParams(window.location.search); const serviceId = params.get('credentials'); if (!serviceId) return false; const service = (window.APPS || []).find(app => app.id === serviceId || app.appTemplate === serviceId); if (!service) return false; const returnUrl = params.get('return'); window.history.replaceState({}, '', window.location.pathname); window.openServiceCredsModal(service, { returnUrl }); return true; }; })();