cveInterface.js

/* Clientlib, UI html, css and UI js all are version controlled */
const _version = "1.0.25";
const _tool = "CVE Services Client Interface " + _version;
const _cna_template = {
  descriptions: [
    { lang: "${descriptions.0.lang}", value: "${descriptions.0.value}" },
  ],
  affected: [
    {
      versions: [{ version: "${affected.0.versions.0.version}" }],
      product: "${affected.0.product}",
      vendor: "${affected.0.vendor|client.orgobj.name}",
    },
  ],
  references: [{ name: "${references.0.name}", url: "${references.0.url}" }],
  providerMetadata: {
    orgId: "${client.userobj.org_UUID}",
    shortName: "${client.org}",
  },
};
const schemaUrl =
  "https://cveproject.github.io/cve-schema/schema/docs/CVE_Record_Format_bundled.json";
const valid_states = { PUBLISHED: 1, RESERVED: 1, REJECTED: 1 };
let store;
let store_tag = "cveClient/";
/* User var to access client as window.client global var */
var client;
/* Global variables for dynamic forms */
var autoCompleter;
var allFieldsForm;
function add_option(w, v, f, s) {
  $(w).append($("<option/>").attr({ value: v, selected: s }).text(f));
}
const _ai_providers = {
  chatgpt: "https://chatgpt.com/",
  claude: "https://claude.ai/new",
  gemini: "https://gemini.google.com/app",
};
function buildAIPrompt(CVE_JSON) {
  return (
    'You are a CVE record quality reviewer. Analyze this CVE JSON 5.x record and provide specific, actionable feedback to improve it before publication.\n\nReview the record for:\n\n1. Description Quality — Is the vulnerability description specific about the impact, attack vector, and affected component? Does it follow the pattern: "[Vulnerability type] in [component] in [product] [version] allows [attacker type] to [impact] via [vector]"?\n\n2. Affected Block — Are vendor, product, and version fields precise? Should versionType (e.g., "semver"), lessThan/lessThanOrEqual, or defaultStatus be used instead of listing only exact versions? Are version ranges properly expressed?\n\n3. Schema Compliance — Does this conform to CVE JSON 5.x per the schema guidance at https://github.com/CVEProject/cve-schema/blob/main/schema/docs/versions.md\n\n4. CWE Classification — Is the CWE ID present and correctly formatted? Does it use the cweId field?\n\n5. References — Are reference URLs present and tagged with appropriate types (e.g., "advisory", "patch", "vendor-advisory")?\n\n6. Completeness — Are there missing recommended fields like metrics (CVSS), timeline, or additional affected products?\n\nFor each issue found, explain what is wrong and why it matters. Then provide a corrected version of the complete JSON with all improvements applied.\n\nCVE Record:\n\n' +
    CVE_JSON
  );
}
function showAIReview() {
  var CVE_JSON = ace.edit("mjsoneditor").getValue();
  try {
    if (!check_json(JSON.parse(CVE_JSON))) {
      swal.fire({
        type: "error",
        html: "It seems like your CVE JSON is not ready. Please input required content before sending for validation.",
        title: "CVE JSON not ready or created yet!",
      });
      return;
    }
  } catch (e) {
    swal.fire({
      type: "error",
      html: "Invalid JSON. Please fix syntax errors before requesting AI review.",
      title: "Invalid JSON",
    });
    return;
  }
  var prompt = buildAIPrompt(CVE_JSON);
  document.getElementById("aiReviewPrompt").value = prompt;
  $("#aiReviewModal").modal("show");
}
function copyAndOpenAI() {
  var prompt = document.getElementById("aiReviewPrompt").value;
  var provider = document.getElementById("aiProvider").value;
  var url = _ai_providers[provider] || _ai_providers.chatgpt;
  if (provider == "chatgpt") {
    const prompt_url = new URL(url);
    prompt_url.search = new URLSearchParams({prompt: prompt});
    url = prompt_url.toString();
  }
  navigator.clipboard
    .writeText(prompt)
    .then(function () {
      $("#aiReviewModal").modal("hide");
      window.open(url, "_blank");
      swal.fire({
        type: "success",
        html:
          "Prompt copied to clipboard. Paste it into " +
          provider.charAt(0).toUpperCase() +
          provider.slice(1) +
          " to start your review.",
        title: "Prompt Copied!",
        timer: 3000,
      });
    })
    .catch(function () {
      swal.fire({
        type: "info",
        html: "Could not copy automatically. Please select all text in the prompt box and copy manually.",
        title: "Manual Copy Needed",
      });
    });
}
function checkurl(x) {
  try {
    new URL(x);
    return true;
  } catch (e) {
    console.log("URL Validator failed " + e);
    return false;
  }
}
function clearChat() {
  Swal.fire({
    title: "Start a new CVE chat?",
    html: "This will clear any content entered or downloaded!",
    showDenyButton: true,
    showCancelButton: false,
    confirmButtonText: "Sure",
    denyButtonText: "Cancel",
  }).then(function (result) {
    if (result.isConfirmed) {
      cveChat();
    } else {
      $("#nice-tab").click();
    }
  });
}
function cveChat() {
  document.addEventListener("dblclick", (event) => {
    if (event.target.placeholder)
      event.target.value = event.target.placeholder.replace("e.g..", "");
  });
  const cweUrl =
    location.origin +
    "/" +
    location.pathname.split("/").slice(0, -1).join("/") +
    "/cwe-common.json";
  const questions = [
    {
      key: "title",
      prompt: "Provide a title for the CVE Record.",
      example: "Buffer overflow in FooBar 1.0 ...",
    },
    {
      key: "description",
      prompt: "Describe the vulnerability.",
      example: "Buffer overflow in FooBar 1.0 causes DOS when crafted input...",
    },
    {
      key: "cweObj",
      example: "CWE-121: Stack-based Buffer Overflow.",
      prompt: "Enter the CWE-ID",
      suggestionUrl: cweUrl,
      selector: "cwe-common",
    },
    { key: "vendor", prompt: "What is the vendor name?", example: "Acme" },
    { key: "product", prompt: "What is the product name?", example: "Widget" },
    {
      key: "versions",
      prompt: "What specific version(s) are affected? [comma-separated]",
      example: "1.0.1,2.1.1",
    },
    {
      key: "refUrl",
      prompt: "Provide the reference URL.",
      example: "https://example.com/security/psirt/CVE-1900-0001",
      validator: checkurl,
    },
  ];

  let answers = {};
  const chatbox = document.getElementById("chatbox");
  let step = 0;
  chatbox.innerHTML = "";
  const addMessage = function (text, sender) {
    if (!sender) sender = "bot";
    const msg = document.createElement("div");
    msg.className = sender;
    msg.textContent = text;
    chatbox.appendChild(msg);
    chatbox.scrollTop = chatbox.scrollHeight;
  };
  let chatbutton = document.getElementById("chatmsg");
  let chatinput = document.getElementById("chatinput");
  chatbutton.value = "";
  chatbutton.style.display = "inline-block";
  chatinput.value = "";
  chatinput.style.display = "inline-block";
  document.getElementById("chatsend").classList.add("d-none");
  if (!chatbutton.hasAttribute("handleinputadded")) {
    chatbutton.setAttribute("handleinputadded", "true");
    chatbutton.addEventListener("click", function () {
      let input = document.getElementById("chatinput");
      let step = parseInt(chatbox.getAttribute("data-step"));
      const val = input.value.trim();
      if (!val) return;
      const qn = questions[step - 1];
      if (qn.validator && !qn.validator(val)) {
        input.classList.add("is-invalid");
        return;
      }
      addMessage(val, "user");
      answers[qn.key] = val;
      if (step >= questions.length) {
        buildCVE();
        return;
      }

      const q = questions[step];
      if (q.example) input.placeholder = "e.g.. " + q.example;

      input.value = "";
      input.classList.remove("is-valid", "is-invalid");
      const iclone = input.cloneNode(true);
      input.after(iclone);
      input.remove();
      if (q.suggestionUrl) {
        let _ = new autoCompleter(
          iclone,
          q.suggestionsArray,
          q.suggestionUrl,
          q.selector,
        );
        iclone.addEventListener("input", function (event) {
          iclone.focus();
          console.log("Changed");
        });
      }
      iclone.addEventListener("keydown", function (event) {
        if (event.key === "Enter") {
          console.log("Enter key pressed in the input field!");
          chatbutton.click();
        }
      });
      iclone.focus();
      setTimeout(function () {
        addMessage(questions[step].prompt);
        step++;
        chatbox.setAttribute("data-step", step);
      }, 300);
    });
  }

  const buildCVE = function () {
    console.log(answers);
    let cve = {
      title: answers.title,
      descriptions: [
        {
          lang: "en",
          value: answers.description,
        },
      ],
      problemTypes: [],
      affected: [
        {
          vendor: answers.vendor,
          product: answers.product,
          versions: answers.versions
            .split(",")
            .map((v) => ({ version: v.trim(), status: "affected" })),
        },
      ],
      references: [
        {
          url: answers.refUrl,
        },
      ],
    };
    document.getElementById("chatinput").style.display = "none";
    chatbutton.style.display = "none";
    document.getElementById("chatsend").classList.remove("d-none");
    const match_cwe = answers.cweObj.toUpperCase().match(/^(cwe-[0-9]+)(.*)$/i);
    if (match_cwe && match_cwe.length == 3) {
      cve.problemTypes[0] = {
        descriptions: [
          {
            lang: "en",
            type: "CWE",
            cweId: match_cwe[1],
            description: answers.cweObj,
          },
        ],
      };
    } else {
      cve.problemTypes[0] = {
        descriptions: [
          {
            lang: "en",
            description: answers.cweObj,
          },
        ],
      };
    }
    let output = document.getElementById("chatoutput");
    output.textContent = JSON.stringify(cve, null, 2);
  };
  if (questions[step].example)
    document.getElementById("chatinput").placeholder =
      " e.g.. " + questions[step].example;
  addMessage(questions[step].prompt);
  chatbox.setAttribute("data-step", step + 1);
}

function triggerversionRange(w) {
  if (w.checked) $(w).parent().find(".versionRange").removeClass("d-none");
  else $(w).parent().find(".versionRange").addClass("d-none");
}
function showByClassName(w, c) {
  if (w) $(c).removeClass("d-none");
  else $(c).addClass("d-none");
}
function show_field(w) {
  var fclass = $(w).attr("data-show");
  $("." + fclass).toggleClass("d-none");
  $(w).toggleClass("arrowdown");
}
function load_cwes() {
  /*Load cwes */
  let suggestionUrl =
    location.origin +
    "/" +
    location.pathname.split("/").slice(0, -1).join("/") +
    "/cwe-common.json";
  autoComplete = autoCompleter(
    $(".problemTypeDescription")[0],
    null,
    suggestionUrl,
    "cwe-common",
  );
}
function load_languages() {
  $.getJSON("language-codes.json").done(function (d) {
    var langs = d;
    if ("langs" in d) langs = d.langs;
    for (var i = 0; i < langs.length; i++) {
      if ("alpha2" in langs[i]) {
        if (langs[i].alpha2 == "en") continue;
        if ("English" in langs[i]) {
          var tf = langs[i].English.split(";");
          for (var j = 0; j < tf.length; j++)
            add_option(
              $(".lang"),
              langs[i].alpha2,
              tf[j] + "(" + langs[i].alpha2 + ")",
            );
        } else add_option($(".lang"), langs[i].alpha2, langs[i].alpha2);
      }
    }
  });
}
function chat_tocve() {
  json_edit($("#chatoutput").text(), "mjsoneditor", true);
}
function json_edit(vjson, jselector, noshownice) {
  if (!jselector) {
    jselector = "mjsoneditor";
  }
  let editor = ace.edit(jselector);
  editor.setTheme("ace/theme/xcode");
  editor.session.setMode("ace/mode/json");
  editor.session.setUseWrapMode(true);
  editor.setValue(vjson);
  if (jselector == "mjsoneditor") {
    if (noshownice) {
      $("#mjson-tab").tab("show");
    } else {
      from_json();
      if (!$("#nice").hasClass("active")) $("#nice-tab").click();
    }
  }
}
function get_deep(obj, prop) {
  /* Check if Object obj has all the dot-delimited properties 
       recursively. example get_deep({a:{b:{c:{"good"}}}},"a.b.c") 
       will return good */
  if (typeof obj != "object") return undefined;
  let props = prop.split(".");
  var x = obj;
  for (var i = 0; i < props.length; i++) {
    if (props[i] in x) x = x[props[i]];
    else return undefined;
  }
  return x;
}
function set_deep(obj, prop, val) {
  /* For the Object obj set the property of a prop to val 
       recursively. example set_deep({a:{b:{c:{"good"}}}},"a.b.c","bad") 
       will return {a:{b:{c:{"bad"}}}} */
  if (typeof obj != "object") return undefined;
  let fobj = simpleCopy(obj);
  var x = fobj;
  let props = prop.split(".");
  let fprop = props.pop();
  for (var i = 0; i < props.length; i++) {
    if (props[i] in x) {
      x = x[props[i]];
      continue;
    } else {
      if (i + 1 < props.length) {
        if (props[i + 1].match(/^\d+$/)) x[props[i]] = [];
        else x[props[i]] = {};
      } else if (fprop.match(/^\d+$/)) {
        /* Last element and is an array */
        x[props[i]] = [];
      } else {
        x[props[i]] = {};
      }
      x = x[props[i]];
    }
  }
  /* If the value is being set to be undefined then delete this property
       of this object */
  if (val === undefined) {
    if (fprop.match(/^\d+$/)) {
      x.splice(parseInt(fprop), 1);
    } else {
      delete x[fprop];
    }
  } else {
    x[fprop] = val;
  }
  return fobj;
}

function simpleCopy(injson) {
  return JSON.parse(JSON.stringify(injson));
}
function selectpass(passid) {
  var copyText = document.getElementById(passid);
  if (!copyText) return;
  copyText.select();
  copyText.setSelectionRange(0, 99999);
  document.execCommand("copy");
  $("#error_div")
    .html("Password copied to clipboard!")
    .removeClass()
    .addClass("warn success")
    .show()
    .fadeOut(2000);
}
function duplicate(pe) {
  /* Label has only one class just copy it*/
  let pclass = $(pe).attr("data-rclass");
  let childclass = "." + pclass;
  let orow = $(pe).find(childclass);
  let nrow = $(pe)
    .find(childclass)
    .clone(1)
    .removeClass(pclass)
    .addClass("duplicated");
  let offset = $(pe).find("> > .erow").length;
  nrow.find(".form-control").each(function (_, p) {
    let rv = $(p).attr("data-field");
    if (!rv) {
      rv = $(p).attr("data-relatedfield");
      if (!rv) {
        console.log("Ignoring field with no data attribute", p);
        return;
      }
    }

    let regx = new RegExp("(" + pclass + ")\\.(\\d+)");
    rv = rv.replace(regx, function (s0, s1, s2) {
      try {
        return s1 + "." + String(offset);
      } catch (err) {
        console.log(err);
        console.log("Error while incrementing data-field id");
        return s0;
      }
    });
    if ($(p).attr("data-relatedfield")) {
      $(p).attr("data-relatedfield", rv);
    } else if ($(p).attr("data-field")) {
      $(p).attr("data-field", rv);
    }
    /* jquery data() method is distinct from data- fields so do both*/
    $(p).attr("data-field", rv);
  });
  orow.parent().append(nrow);
}
function unduplicate(pe) {
  let field = $(pe).parent().find(".form-control").attr("data-field");
  let rv = field.replace(/(\d)+\.[^\.]+$/, "$1");
  json_data = set_deep(get_json_data(), rv, undefined);
  let editor = $("#mjson .jsoneditor")[0].env.editor;
  editor.setValue(JSON.stringify(json_data, null, 2));
  if ($(pe).hasClass("duplicated")) $(pe).remove();
}
function data_selector(el, dfield, dvalue) {
  let sel = "[data-" + dfield + '="' + dvalue + '"]';
  return $(el + sel);
}
function top_alert(lvl, msg, tmr) {
  $("#topalert")
    .removeClass("alert-danger alert-warning alert-success")
    .addClass("alert alert-" + lvl)
    .text(msg)
    .fadeIn();
  if (tmr)
    setTimeout(function () {
      $("#topalert").fadeOut();
    }, tmr);
  else
    $("#topalert").append(
      '<button type="button" class="close" ' +
        'data-dismiss="modal" aria-label="Close">' +
        '<span aria-hidden="true">×</span> </button>',
    );
}
function urlprompt(w) {
  if ($(w).val() == "custom") {
    $("#loginModal").removeAttr("tabindex");
    Swal.fire({
      title: "Enter API URL",
      input: "url",
      inputLabel: "API URL",
      inputPlaceholder: "API URL",
      showCancelButton: true,
      inputValidator: function (value) {
        if (!value) {
          return "You need to write something!";
        }
        try {
          var f = new URL(value);
        } catch (err) {
          return "URL is invalid";
        }
        add_option(w, f.toString(), f.host, 1);
        $("#loginModal").attr("tabindex", "-1");
      },
    });
  }
}
function check_admin() {
  /* Either secretrait or CNA Admin can do reset 
       API keys and Add Users */
    if ( Array.isArray(get_deep(client,"orgobj.authority.active_roles")) &&
    client.orgobj.authority.active_roles.findIndex(function (n) {
      return n == "SECRETARIAT";
    }) > -1
  ) {
    $(".admin").show();
    return 1;
  } else if ( Array.isArray(get_deep(client,"userobj.authority.active_roles")) &&
    client.userobj.authority.active_roles.findIndex(function (n) {
      return n == "ADMIN";
    }) > -1
  ) {
    $(".admin").show();
    return 1;
  } else {
    $(".admin").hide();
    return 0;
  }
}
function saveUserOrgInfo(userobj) {
  client.userobj = userobj;
  try {
    /* Collect org information async */
    client.getorg().then(function (y) {
      client.orgobj = y;
      check_admin();
    });
  } catch (err) {
    console.log("Error while fetching User's organization");
    console.log(err);
  }
}

function timefile() {
  var d = new Date();
  return (
    d.getDate() +
    "-" +
    (d.getMonth() + 1) +
    "-" +
    d.getFullYear() +
    "-" +
    d.getHours() +
    "-" +
    d.getMinutes()
  );
}
async function get_cve() {
  let cve = $("#nice .cve").val();
  if (!cve.match(/^CVE-\d{4}-\d{4,7}$/)) {
    $("#nice .cve").addClass("is-invalid").focus();
    return;
  }
  if (!client || !client.url) {
    client = new cveClient();
    let loc = await Swal.fire({
      title: "CVE Download",
      input: "select",
      inputOptions: $("#url option")
        .toArray()
        .reduce(function (a, x, i) {
          a[x.value] = x.innerHTML;
          return a;
        }, {}),
      inputPlaceholder: "Download Location",
      showCancelButton: true,
    });
    console.log(loc);
    let value = loc.value;
    if (!value) return;
    if (value == "custom") {
      let url = await Swal.fire({
        title: "Enter API URL",
        input: "url",
        inputLabel: "API URL",
        inputPlaceholder: "API URL",
        showCancelButton: true,
        inputValidator: function (rvalue) {
          try {
            new URL(rvalue);
            client.url = rvalue;
          } catch (err) {
            console.log(err);
            return "URL is invalid";
          }
        },
      });
    } else {
      client.url = value;
    }
  }
  get_display_cve(cve);
}
function get_display_cve(cve) {
  client.getcvedetail(cve).then(
    function (x) {
      if (get_deep(x, "containers.cna")) {
        $(".duplicated").remove();
        json_edit(JSON.stringify(x.containers.cna));
      } else {
        swal_error(
          "Could not find data to load! " + "See console for details.",
        );
      }
      //console.log(x);
      client["cveDownload"] = x;
    },
    function (y) {
      swal_error(
        "Unable to collect CVE information! " + "See console for details",
      );
      //console.log(y);
    },
  );
}
async function skip() {
  $("#loginModal").modal("hide");
  $("#morjson li.adp").hide();
  const template = _cna_template;
  let xj = JSON.stringify(template);
  json_edit(xj);
  $("#cveUpdateModal").modal();
  $("#cveUpdateModal .cveupdate").html("Download JSON");
  $("#cveUpdateModal .cveupdate").removeAttr("onclick");
  $("#cveUpdateModal .cveupdate").on("click", download_json);
  $(".nologin").show();
}

async function download_json() {
  let cve = $("#nice .cve").val();
  if (!cve.match(/^CVE-\d{4}-\d{4,7}$/)) {
    $("#nice .cve").addClass("is-invalid").focus();
    return;
  }
  try {
    client = new cveClient();
    if ($("#nice-or-json").find(".active.show").attr("id") == "nice") {
      if (to_json() == false) {
        $("#cveform .is-invalid").focus();
        swal_error("Some required fields are missing or incomplete");
        return;
      }
    }
    let editor = $("#mjson .jsoneditor")[0].env.editor;
    let returnJSON = { containers: { cna: JSON.parse(editor.getValue()) } };
    returnJSON["cveMetadata"] = {
      cveId: cve,
      assignerOrgId: "00000000-0000-0000-0000-000000000000",
      requesterUserId: "00000000-0000-0000-0000-000000000000",
      serial: 1,
      state: "PUBLISHED",
    };
    returnJSON["containers"]["cna"]["providerMetadata"] = {
      orgId: "00000000-0000-0000-0000-000000000000",
      shortName: "none",
    };
    returnJSON["x_generator"] = { engine: "cveClient/" + _version };
    $("#cveUpdateModal .cveupdate").attr("download", cve + ".json");
    let cson = encodeURIComponent(JSON.stringify(returnJSON));
    $("#cveUpdateModal .cveupdate").attr(
      "href",
      "data:text/plain;charset=utf-8," + cson,
    );
  } catch (err) {
    console.log(err);
    swal_error("Could not create this CVE. Fix the errors please!");
  }
}

async function login() {
  let vids = ["org", "user", "key"];
  for (var i = 0; i < vids.length; i++) {
    var el = $("#" + vids[i]);
    if (!el.val()) {
      el.addClass("is-invalid");
      return;
    }
  }
  client = new cveClient(
    $("#org").val(),
    $("#user").val(),
    $("#key").val(),
    $("#url").val(),
  );
  let d;
  try {
    d = await client.getuser();
  } catch (err) {
    console.log(err);
    swal_error("Login failed. Perhaps Network error. See console for details!");
    return;
  }
  let messages = "Unknown";
  let title = "CVE CNA Login";
  let mtype = "error";
  try {
    let robj = await d.json();
    if ("name" in robj) {
      messages = "Welcome " + robj.name.first + " " + robj.name.last;
      saveUserOrgInfo(robj);
    } else if ("message" in robj) {
      messages = robj.message;
    } else if ("error" in robj) {
      messages = robj.error;
    }
  } catch (err) {
    console.log("Could not find json text");
    swal_error("Login failed or network error! See console for details!");
    console.log(err);
  }
  if (d.status == 401) {
    title = "Login Failed!";
    if (messages == "Unknown") messages = "Perhaps your API key is wrong";
  } else if (d.status == 200) {
    mtype = "success";
    title = "Login Success";
    /* By default enable encryption */
    enable_encryption();
    setTimeout(function () {
      Swal.close();
      $("#loginModal").modal("hide");
      show_cve_table();
    }, 2300);
    if ($("#storeLocal").is(":checked")) {
      store = localStorage;
    } else {
      store = sessionStorage;
    }
    $("#loginModal .form-control").each(function (_, x) {
      /* Skip storing API key in plaintext; enable_encryption()
	       will store it after encryption completes */
      if ($(x).attr("id") === "key") return;
      store.setItem(store_tag + $(x).attr("id"), $(x).val());
    });
  } else {
    title = "Unspecified Error!";
    if (messages == "Unknown")
      messages = "Unknown error! See console for more information";
    //console.log(d);
  }
  Swal.fire({
    title: title,
    text: messages,
    icon: mtype,
    confirmButtonText: "OK",
  });
}
function logout() {
  Swal.fire({
    title: "Are you sure?",
    showDenyButton: true,
    showCancelButton: false,
    confirmButtonText: "Logout",
    denyButtonText: "Cancel",
  }).then((result) => {
    if (result.isConfirmed) {
      $("#loginModal .form-control").each(function (_, x) {
        if (store) store.removeItem(store_tag + $(x).attr("id"), $(x).val());
        else {
          sessionStorage.removeItem(store_tag + $(x).attr("id"), $(x).val());
          localStorage.removeItem(store_tag + $(x).attr("id"), $(x).val());
        }
      });
      location.reload();
    } else if (result.isDenied) {
      console.log("User is still on");
    }
  });
}
function swal_error(err_msg, err_type) {
  if (!err_type) err_type = "error";
  Swal.fire({
    title: "Error!",
    text: err_msg,
    icon: err_type,
    confirmButtonText: "OK",
  });
}
function do_login() {
  client
    .getuser()
    .then(function (x) {
      x.json().then(function (y) {
        if ("error" in y) {
          swal_error(
            "Automatic Login failed! Error: " +
              y.error +
              ", If credentials have changed" +
              ", please logout and refresh" +
              " for a new login. Failure message is " +
              y.message,
          );
          return;
        } else {
          show_cve_table();
        }
        saveUserOrgInfo(y);
      });
    })
    .catch(function (err) {
      console.log(err);
      swal_error(
        "Automatic Login failed! " +
          "If credentials have changed" +
          ", please logout and refresh" +
          " for a new login",
      );
    });
}
$(function () {
  store = null;
  let year = new Date().getFullYear();
  add_option("#year", String(year), "(Default: " + String(year) + ")", true);
  while (year > 1998) {
    year = year - 1;
    add_option("#year", String(year), String(year), false);
  }
  if (localStorage.getItem(store_tag + "url")) {
    store = localStorage;
  } else if (sessionStorage.getItem(store_tag + "url")) {
    store = sessionStorage;
  }
  let qparams = queryParser();
  try {
    load_languages();
    load_cwes();
    allFieldsForm = schemaToForm(schemaUrl, "allFields");
  } catch (err) {
    console.error(err);
    console.log("Failed to create autocompleters");
  }
  if (store == null) {
    if ("skip" in qparams) skip();
    else $("#loginModal").modal();
  } else {
    $("#loginModal .form-control").each(function (_, x) {
      var vid = $(x).attr("id");
      var val = store.getItem(store_tag + vid);
      $(x).val(val);
      if ($(x).val() != val) {
        let f = new URL(val);
        add_option(x, f.toString(), f.host, 1);
      }
    });
    client = new cveClient(
      $("#org").val(),
      $("#user").val(),
      $("#key").val(),
      $("#url").val(),
    );
    try {
      /* If the key value is a URL it is an encrypted data URI */
      let _ = new URL($("#key").val());
      $.getScript("encrypt-storage.js").done(function () {
        console.log("Already encrypted key");
        activate_encryption();
        do_login();
      });
    } catch (_) {
      do_login();
    }
  }

  $("#allfields-tab").on("shown.bs.tab", function (event) {
    allFields(event.target, event.relatedTarget);
  });
});
async function get_pages(m, tag, fld, tbn, fun, fvars) {
  let itime = 0;
  for (var i = m.itemsPerPage; i < m.totalCount; i = i + m.itemsPerPage) {
    setTimeout(
      async function (i) {
        let ipage = Math.floor(i / m.itemsPerPage) + 1;
        let popts = { page: ipage };
        if (fvars) {
          /* Append year or other options apart from page */
          Object.assign(popts, fvars[2]);
        }
        let x = await client[fun](null, null, popts);
        for (var j = 0; j < x[fld].length; j++) {
          client[tbn].bootstrapTable("updateByUniqueId", {
            id: tag + String(i + j),
            row: x[fld][j],
          });
        }
      },
      itime * 1000,
      i,
    );
    itime = itime + 1;
  }
}
function rowStyle(r) {
  if (r.warn) {
    return {
      classes: "hwarn",
    };
  }
  if (r.new) {
    return {
      classes: "hnew",
    };
  }
  return { classes: "normal" };
}
function doRefresh() {
  let tableid = $("#svTab a.active").attr("data-tableid");
  client[tableid].bootstrapTable("destroy");
  $("#svTab a.active").parent().find("a.refresh").click();
}
function objwalk(h, d, r, s) {
  /* add a Class to some of the rows */
  let rowClass = "normal";
  if (d in { new: 1, warn: 1 }) {
    rowClass = "h" + d;
    /* Unique case of internal data no need to display it */
    if (r[d] == 1) return h;
  }
  if (d in { secret: 1, password: 1, "API-secret": 1, "API-key": 1 })
    rowClass = "hdanger";
  if (typeof r[d] == "object") {
    let mr = r[d];
    let ls = d;
    if (s) ls = s + "/" + d;
    let f = Object.keys(mr).reduce(function (hr, dr) {
      return objwalk(hr, dr, mr, ls);
    }, "");
    return h + f;
  } else {
    if (!r[d]) return h;
    dp = d;
    if (s) dp = s + "/" + d;
    return (
      h +
      $("<div>")
        .append(
          $("<tr>")
            .addClass(rowClass)
            .append(
              $("<td>")
                .html(safeHTML(dp))
                .append($("<td>").html(safeHTML(r[d]))),
            ),
        )
        .html()
    );
  }
}
function deepdive(_a, _b, row, el) {
  try {
    var tinfo = el.closest("tr").attr("data-uniqueid");
    if (tinfo) $("#detailtag").text("(" + tinfo + ")");
    else $("#detailtag").text("");
  } catch (err) {
    console.log("Ignore this error");
    $("#detailtag").text("");
  }
  /* Show the updaterecord button by default and hide it later
       if user is not admin and not self */
  $("#updaterecord").show();
  $("#cvereject").addClass("d-none");
  $("#cvedetails").addClass("d-none");
  if ("username" in row) {
    if (check_admin() || row.username == client.user) {
      $("#updaterecord").show();
      $(".selfadmin").show();
    } else {
      $("#updaterecord").hide();
      $(".selfadmin").hide();
    }
    $("#updaterecord").html("Update User");
  } else if ("cve_id" in row && "state" in row) {
    $("#cveUpdateModal .mtitle").text("(" + row.cve_id + ")");
    if (row.state == "RESERVED") {
      $("#updaterecord").html("Edit & Publish CVE").show();
      $("#cveUpdateModal .cveupdate").html("Publish CVE");
      $("#cvedetails").addClass("d-none");
      $("#cvereject").removeClass("d-none");
    } else if (row.state == "PUBLISHED") {
      $("#updaterecord").html("Update CVE").show();
      $("#cvedetails").removeClass("d-none");
      $("#cveUpdateModal .cveupdate").html("Update CVE");
      $("#cvereject").removeClass("d-none");
    } else {
      if (row.state == "REJECTED") {
        $("#cvereject").addClass("d-none");
        $("#cvedetails").removeClass("d-none");
      }
      $("#updaterecord").hide();
    }
  } else $("#updaterecord").hide();
  display_object(row);
  $("#deepDive").attr("data-crecord", JSON.stringify(row)).modal();
}
async function display_cvedetails(cve) {
  $("#deepDive .nav-default").click();
  if (!cve) {
    let crecord = JSON.parse($("#deepDive").attr("data-crecord"));
    cve = crecord.cve_id;
  }
  let f = await client.getcvedetail(cve);
  if ("error" in f) {
    swal_error(
      "Unable to view CVE due to error: " + f.error + ": " + f.message,
    );
    return;
  }
  let adp = get_deep(f, "containers.adp");
  if (get_deep(f, "containers.cna")) display_object(f.containers.cna, adp);
  else
    swal_error(
      "Required information in cna.container is not " + "available or missing ",
    );
}
function swapout(w) {
  $(w).parent().find("table tbody tr.normal").toggleClass("d-none");
  if ($(w).html().indexOf("View") > -1) $(w).html("Hide JSON");
  else $(w).html("View JSON");
}
function display_object() {
  $("#deepDive .tab-pane").removeClass("active show");
  $("#f0").addClass("active show");
  for (let i = 0; i < arguments.length; i++) {
    let obj = arguments[i];
    if (obj) {
      let tjson =
        '<tr class="d-none normal"> <td colspan="2"> ' +
        '<div style="white-space: break-spaces;">' +
        safeHTML(JSON.stringify(obj, null, 3)) +
        "</div></td></tr>";
      let alink =
        '<a href="javascript:void(0)" class="link float-right" ' +
        'onclick="swapout(this)">View JSON </a>';
      let ttable = '<table class="table table-striped">';
      var html = Object.keys(obj).reduce(
        function (h, d) {
          return objwalk(h, d, obj);
        },
        alink + ttable + "<tbody>" + tjson,
      );
      $("#f" + String(i)).html(html + "</tbody></table>");
    }
  }
  if (arguments[1]) $("#display_tabs").removeClass("d-none");
  else $("#display_tabs").addClass("d-none");
}
function add_user_modal() {
  $("#addUserModal").modal();
  $("#addUserModal form").trigger("reset");
  $(".addUserModal .form-control").removeClass("is-valid is-invalid");
  $("#addUserModal .mtitle").html("Add User");
  $("#addUserModal").removeClass("updateUser").addClass("addUser");
  $("#addUserModal .updateuser").hide();
  $("#addUserModal .adduser").show();
  if (!("usertable" in client)) {
    console.log("Creating users table in the background");
    show_users_table();
    $("#users-tab").tab("show");
  }
}
function user_active_view(active) {
  if (active) {
    $("#addUserModal .active").prop({ checked: true }).addClass("enabled");
    $("#addUserModal span.round").prop({ title: "Active" });
    $("#addUserModal span.uspan")
      .removeClass("text-danger")
      .addClass("text-primary")
      .html(" [Active] ");
  } else {
    $("#addUserModal .active").prop({ checked: false }).removeClass("enabled");
    $("#addUserModal span.round").prop({ title: "Inactive" });
    $("#addUserModal span.uspan")
      .removeClass("text-primary")
      .addClass("text-danger")
      .html(" [Inactive] ");
  }
}
function user_update_modal(mr) {
  $("#addUserModal").modal();
  $("#addUserModal").removeClass("addUser").addClass("updateUser");
  /* update button remains hidden until some values change in the form*/
  $("#updateButton").hide();
  $("#addUserModal .adduser").hide();
  $("#addUserModal .mtitle").text("Update User (" + mr.username + ")");
  $("#addUserModal .username")
    .val(mr.username)
    .attr("data-oldvalue", mr.username);
  $("#addUserModal .form-control").removeClass("is-valid is-invalid");
  if ("name" in mr) {
    if ("first" in mr.name)
      $("#addUserModal .name_first")
        .val(mr.name.first)
        .attr("data-oldvalue", mr.name.first);
    if ("last" in mr.name)
      $("#addUserModal .name_last")
        .val(mr.name.last)
        .attr("data-oldvalue", mr.name.last);
  }
  if ("active" in mr) user_active_view(mr.active);
  if (mr.authority.active_roles.length) {
    /* Handle user roles currently only ADMIN or Nothing*/
    let vroles = mr.authority.active_roles.join(",");
    $("#addUserModal .active_roles").val(vroles).attr("data-oldvalue", vroles);
  } else {
    $("#addUserModal .active_roles").val("");
  }
}
function checkchange(w) {
  if (get_deep(w, "validity.valid") != undefined) {
    if (w.validity.valid == false)
      $(w).removeClass("is-valid").addClass("is-invalid");
    if (w.validity.valid == true)
      $(w).removeClass("invalid").addClass("is-valid");
  }
  if ($("#addUserModal").hasClass("updateUser")) {
    if ($(w).attr("data-oldvalue") != $(w).val() && $(w).hasClass("is-valid"))
      $("#updateButton").show();
  }
}
function vreplace(s, v) {
  var vr = v.split("|");
  for (var i = 0; i < vr.length; i++) {
    let ret = get_deep(window, vr[i]);
    if (ret) return ret;
  }
  return s;
}
async function cve_update_modal() {
  $("#cveform .form-control").removeClass("is-valid");
  /* remove all additional fields */
  $("#cveform ol > li.erow:nth-of-type(n+2)").remove();
  $("#cveform").trigger("reset");
  $("#cveUpdateModal").modal();
  var mr = JSON.parse($("#deepDive").attr("data-crecord"));
  $("#adpjson").removeData();
  if ("state" in mr && mr.state == "PUBLISHED") {
    let c = await client.getcvedetail(mr.cve_id);
    if ("containers" in c && c.containers.cna)
      json_edit(JSON.stringify(c.containers.cna, null, 3));
    else if ("error" in c)
      swal_error(
        "Error in fetching details of CVE " + c.error + " : " + c.message,
      );
    else
      swal_error(
        "Unknown error when fetching details of CVE. " +
          "See console log for details",
      );
    if (c.containers.adp)
      $("#adpjson").attr("data-adp", JSON.stringify(c.containers.adp));
    $("#morjson .adp").show();
  } else {
    let mjson = JSON.stringify(_cna_template, null, 2).replace(
      /\$\{([^\}]+)\}/g,
      vreplace,
    );
    json_edit(mjson);
    $("#morjson .adp").hide();
  }
}
function mupdate() {
  var mr = JSON.parse($("#deepDive").attr("data-crecord"));
  if (!mr) return;
  $("#deepDive").modal("hide");
  if ("username" in mr) {
    user_update_modal(mr);
  } else {
    cve_update_modal(mr);
  }
}
async function show_table(fun, fvars, msg, tag, fld, pmd, clm, tbn, uid, show) {
  if (show) {
    if (tbn in client) {
      top_alert(
        "success",
        "Showing Cached data. If needed click on Refresh Icon.",
        1000,
      );
      return;
    }
  }
  let m;
  try {
    m = await client[fun].apply(client, fvars);
  } catch (err) {
    swal_error(
      "Error in collecting data, potentially network error OR " +
        " asynchronous decryption in progress.  " +
        "Try again in a few seconds.",
    );
    console.log(err);
    return;
  }
  if (!(fld in m)) {
    Swal.fire({
      title: "No data to display!",
      text: msg,
      icon: "warning",
      confirmButtonText: "OK",
      timer: 1800,
    });
    return;
  }
  /* totalCount itemsPerPage pageCount currentPage prevPage nextPage */
  if ("totalCount" in m && m.totalCount > m[fld].length) {
    for (var i = m[fld].length; i < m.totalCount; i++) {
      var tempm = simpleCopy(pmd);
      tempm[uid] = tag + String(i);
      m[fld].push(tempm);
    }
  }
  let tbdiv = "#" + tbn;
  var dtemp = $(tbdiv).bootstrapTable("getData");
  if (Array.isArray(dtemp)) {
    $(tbdiv).bootstrapTable("load", m[fld]);
  } else {
    client[tbn] = $(tbdiv).bootstrapTable({
      columns: clm,
      uniqueId: uid,
      striped: true,
      pagination: true,
      paginationVAlign: "both",
      searchOnEnterKey: false,
      pageSize: 20,
      pageList: [20, 50, 100],
      search: true,
      showHeader: true,
      showColumns: false,
      showRefresh: true,
      onRefresh: function () {
        doRefresh(tbn);
      },
      onClickCell: deepdive,
      sortable: true,
      rowStyle: rowStyle,
      data: m[fld],
    });
  }
  if (m.nextPage) get_pages(m, tag, fld, tbn, fun, fvars);
}
function safeHTML(uinput) {
  return $("<div>").text(uinput).html();
}
function gname(name, row) {
  var append = "";
  if (row.secret) append = " &#128273; ";
  if (!name && row.username) return safeHTML(row.username) + append;
  if (!name.first) {
    if (!name.last) return safeHTML(row.username) + append;
    else return safeHTML(name.last) + append;
  }
  if (!name.last) return safeHTML(name.first) + append;
  return safeHTML(name.first + " " + name.last) + append;
}
function gsort(name1, name2, row1, row2) {
  let nameA = gname(name1, row1).toUpperCase();
  let nameB = gname(name2, row2).toUpperCase();
  if (nameA < nameB) {
    return -1;
  }
  if (nameA > nameB) {
    return 1;
  }
  return 0;
}
function show_users_table(show) {
  let fun = "listusers";
  let tag = "USER-";
  let fld = "users";
  let uid = "username";
  let tbn = "usertable";
  let msg = "No Users to display";
  let pmd = { active: "UNKNOWN" };
  let clm = [
    {
      field: "name",
      title: "Full name",
      formatter: gname,
      sortable: true,
      sorter: gsort,
    },
    {
      field: "username",
      title: "Username",
      sortable: true,
      formatter: safeHTML,
    },
    { field: "active", title: "Active", sortable: true, formatter: safeHTML },
  ];
  show_table(fun, undefined, msg, tag, fld, pmd, clm, tbn, uid, show);
}
function wdate(reserved, row) {
  if (get_deep(row, "time.modified")) {
    try {
      let x = Date.parse(get_deep(row, "time.modified"));
      return new Date(x).toLocaleString();
    } catch (err) {
      try {
        let y = Date.parse(reserved);
        return new Date(y).toLocaleString();
      } catch (err) {
        return safeHTML(reserved);
      }
    }
  }
  return safeHTML(reserved);
}
function wsort(d1, d2, row1, row2) {
  let dateA = wdate(d1, row1);
  let dateB = wdate(d2, row2);
  if (dateA < dateB) {
    return -1;
  }
  if (dateA > dateB) {
    return 1;
  }
  return 0;
}
function show_cve_table(show) {
  let fun = "getcveids";
  let year = $("#year").val();
  let fvars = undefined;
  if (parseInt(year) > 0) {
    /* Add Year to the getcveids API endpoint */
    fvars = [undefined, undefined, { cve_id_year: year }];
  }
  let tag = "CVE-9999-";
  let fld = "cve_ids";
  let uid = "cve_id";
  let tbn = "cvetable";
  let msg = "No CVE data to display";
  let pmd = { state: "UNKNOWN", reserved: new Date(0).toISOString() };
  let clm = [
    { field: "cve_id", title: "CVE", sortable: true, formatter: safeHTML },
    { field: "state", title: "State", sortable: true, formatter: safeHTML },
    {
      field: "reserved",
      title: "Date",
      sortable: true,
      formatter: wdate,
      sorter: wsort,
    },
  ];
  show_table(fun, fvars, msg, tag, fld, pmd, clm, tbn, uid, show);
}
async function reserve() {
  let vars = {};
  $("#reserveCVEModal .form-control").each(function (_, x) {
    vars[x.name] = $(x).val();
  });
  $("#reserveCVEModal").modal("hide");
  let y = await client.reservecve(vars.amount, vars.cve_year, vars.batch_type);
  if ("error" in y) {
    swal_error("Error while logging in: " + y.error + " " + y.message);
    return;
  } else if ("cve_ids" in y) {
    Swal.fire({
      title: "CVE Reserve success!",
      text: "Reserved " + y.cve_ids.length + " CVE's.",
      icon: "success",
      timer: 1800,
    });
    for (var i = 0; i < y.cve_ids.length; i++) {
      let new_cve = y.cve_ids[i];
      new_cve["new"] = 1;
      client.cvetable.bootstrapTable("insertRow", { index: 0, row: new_cve });
    }
    setTimeout(function () {
      $("tr.hnew")
        .removeClass("hnew")
        .each(function (_, x) {
          let cve = $(x).attr("data-uniqueid");
          let g = client.cvetable.bootstrapTable("getRowByUniqueId", cve);
          g.new = 0;
          client.cvetable.bootstrapTable("updateByUniqueId", {
            id: cve,
            row: g,
            replace: true,
          });
        });
    }, 2800);
  } else {
    swal_error("Unknown error, see console for details");
    console.log(y);
  }
}
async function reset_user(w, confirmed) {
  if (!confirmed) {
    Swal.fire({
      title: "Are you sure?",
      text: "The user's current API-Key will be revoked",
      showDenyButton: true,
      showCancelButton: false,
      confirmButtonText: "Reset",
      denyButtonText: "Cancel",
    }).then(function (result) {
      if (result.isConfirmed) {
        reset_user(w, true);
      }
    });
  } else {
    lock_unlock(1, w);
    let username = $("#addUserModal .username").attr("data-oldvalue");
    let d = await client.resetuser(username);
    if ("API-secret" in d) {
      let f = client.usertable.bootstrapTable("getRowByUniqueId", username);
      f.secret = d["API-secret"];
      f.warn = 1;
      client.usertable.bootstrapTable("updateByUniqueId", {
        id: username,
        row: f,
      });
      set_copy_pass(f.secret);
      if (f.username == client.user) {
        /* Check if encryption was enabled and update the key */
        try {
          let _ = new URL(client.key);
          client.key = f.secret;
          console.log("Old key was encrypted, Encrypting this new key");
          enable_encryption();
        } catch (_) {
          client.key = f.secret;
          if (store) store.setItem(store_tag + "key", f.secret);
        }
      }
      Swal.fire({
        title: "Reset API-Key!",
        text:
          "API-Key secret has been reset and " + "copied to your clipboard!",
        icon: "success",
        timer: 3800,
      }).then(function () {
        $("#addUserModal").modal("hide");
      });
    } else if ("error" in d)
      swal_error("Reset failed " + d.error + " : " + d.message);
    else swal_error("Unknown error see console log for details");
    lock_unlock(0, w);
  }
}
function update_user() {
  /* await client.updateuser('rajo@sendmail.org', 
       {'active_roles.remove':'ADMIN'})
       await client.updateuser('rajo@sendmail.org',
       {'active_roles.add':'ADMIN'})
    */
  var row = JSON.parse($("#deepDive").attr("data-crecord"));
  let updates = {};
  $("#addUserModal .form-control").each(function (_, x) {
    //console.log($(x).attr('data-update'));
    var field = $(x).attr("data-update");
    if (
      ($(x).val() || $(x).prop("tagName").toUpperCase() == "SELECT") &&
      $(x).attr("data-oldvalue") != $(x).val()
    )
      updates[field] = $(x).val();
  });
  if (Object.keys(updates).length) {
    if ("active_roles" in updates && updates.active_roles != "") {
      updates["active_roles.add"] = updates.active_roles;
    }
    if (get_deep(row, "authority.active_roles.length")) {
      /* User has a role check if we need to remove it*/
      if ($("#addUserModal .active_roles").val() == "") {
        updates["active_roles.remove"] = row.authority.active_roles.join(",");
      }
    }
    if ("name.first" in updates || "name.last" in updates) {
      /* We need both values for the child properties of 'name' */
      updates["name.first"] = $("#addUserModal .name_first").val() || " ";
      updates["name.last"] = $("#addUserModal .name_last").val() || " ";
    }
    /* The active_roles field should not be sent on update only 
	   active_roles.add and active_roles.remove is valid for update user */
    delete updates.active_roles;
    if ("new_username" in updates) {
      Swal.fire({
        title: "Username Change!",
        text:
          "User needs to be notified to login with the " +
          "new username as " +
          updates.new_username,
        icon: "warning",
        showDenyButton: true,
        showCancelButton: false,
        confirmButtonText: "Proceed!",
        denyButtonText: "Cancel",
      }).then(function (result) {
        if (result.isConfirmed) {
          do_update_user(row.username, updates);
        }
      });
    } else {
      do_update_user(row.username, updates);
    }
  } else {
    swal_error("Nothing needs to be updated", "warning");
  }
}
async function do_update_user(username, updates) {
  let d = await client.updateuser(username, updates);
  if ("error" in d) {
    swal_error("Error in updating user " + d.error + " : " + d.message);
  } else if ("updated" in d) {
    let nrow = simpleCopy(d.updated);
    nrow["warn"] = 1;
    client.usertable.bootstrapTable("updateByUniqueId", {
      id: username,
      row: nrow,
    });
    Swal.fire({
      icon: "success",
      title: "Update Updated!",
      text: d.message || "Update success.",
      timer: 2000,
    }).then(function () {
      $("#addUserModal").modal("hide");
    });
  } else {
    swal_error("Unknown error, please see console.log for details");
  }
}
function lock_unlock(dolock, w) {
  if (dolock) {
    $("body").css({ opacity: 0.6 });
    if (w) w.disabled = 1;
  } else {
    $("body").css({ opacity: 1 });
    if (w) w.disabled = 0;
  }
}
async function update_user_status(w) {
  lock_unlock(1, w);
  let username = $("#addUserModal .username").attr("data-oldvalue");
  let model = {};
  model.active = w.checked;
  let d = await client.updateuser(username, model);
  if ("error" in d) {
    lock_unlock(0, w);
    swal_error(
      "Error managing user " + username + " " + d.error + " : " + d.message,
    );
  } else {
    let f = client.usertable.bootstrapTable("getRowByUniqueId", username);
    f.active = w.checked;
    f.warn = 1;
    user_active_view(f.active);
    client.usertable.bootstrapTable("updateByUniqueId", username, f);
    top_alert(
      "success",
      "User (" +
        safeHTML(username) +
        ") Active status has been " +
        "updated to [" +
        String(f.active) +
        "]",
      4000,
    );
    setTimeout(function () {
      /* Just clear out warning */
      lock_unlock(0, w);
      $("#addUserModal").modal("hide");
    }, 2000);
    setTimeout(function () {
      f.warn = 0;
      client.usertable.bootstrapTable("updateByUniqueId", username, f);
    }, 4000);
  }
}
function set_copy_pass(secret) {
  $("#cpassword").remove();
  var ppass = $("<input>")
    .val(secret)
    .attr("id", "cpassword")
    .addClass("passform")
    .on("click", selectpass)
    .attr("readonly", "readonly");
  $("#addUserModal").append(ppass);
  selectpass("cpassword");
}
async function adduser() {
  let usermodel = {
    username: "",
    name: { first: "", last: "" },
    active: true,
    authority: { active_roles: [] },
  };
  let username = $("#addUserModal .username").val();
  let fname = $("#addUserModal .name_first").val() || "";
  let lname = $("#addUserModal .name_last").val() || "";
  let role = $("#addUserModal .active_roles").val();
  if (!username) {
    $("#addUserModal .username").addClass("is-invalid");
    return;
  }
  $("#addUserModal .username").removeClass("is-invalid");
  usermodel["username"] = username.toLowerCase();
  usermodel["name"] = { first: fname, last: lname };
  if (role) usermodel["authority"]["active_roles"].push(role);
  let f = await client.createuser(usermodel);
  if ("error" in f) {
    swal_error(f.error + ": " + f.message);
    return;
  }
  if ("created" in f) {
    let fn = simpleCopy(f.created);
    fn.new = 1;
    client.usertable.bootstrapTable("insertRow", { index: 0, row: fn });
    set_copy_pass(fn.secret);
    Swal.fire({
      title: "User Created!",
      text: f.message + " API-Key secret is copied to your clipboard!",
      icon: "success",
      timer: 3800,
    }).then(function () {
      $("#users-tab").click();
      setTimeout(function () {
        fn.new = 0;
        client.usertable.bootstrapTable("updateByUniqueId", {
          id: username,
          row: fn,
          replace: true,
        });
      }, 1000);
    });
  }
  $("#addUserModal").modal("hide");
}
function get_json_data() {
  try {
    return JSON.parse($("#mjson .jsoneditor")[0].env.editor.getValue());
  } catch (err) {
    console.log(err);
    swal_error("Error in collecting JSON. See console log for details");
    return {};
  }
}
function show_adp(w) {
  let json_data = JSON.parse($("#adpjson").attr("data-adp"));
  if (!json_data) json_data = [];
  json_edit(JSON.stringify(json_data, null, 3), "adpjsoneditor");
  $(".cveupdate").addClass("d-none");
  $(".adpupdate").removeClass("d-none");
}
function apply_diff(diff, el) {
  if (diff > 0) {
    /* Add elements */
    for (let i = 1; i <= diff; i++) $(el).find("> .addrow").click();
  } else if (diff < 0) {
    /* Remove elements */
    for (let i = 1; i <= Math.abs(diff); i++)
      $(el).find(">li > .deleterow").click();
  }
}
function show_optional(v) {
  /* Show optional fields if present*/
  if ($(v).hasClass("d-none") && $(v).parent().find(".toggler").length)
    $(v).parent().find(".toggler").click();
}
function from_json(w) {
  $(".cveupdate").removeClass("d-none");
  $(".adpupdate").addClass("d-none");
  let json_data = get_json_data();
  if (!json_data) return;
  $("#nice .drow").each(function (_, el) {
    var field = $(el).attr("data-rclass");
    if (field && field in json_data) {
      let diff = json_data[field].length - $(el).find(" .erow").length;
      if (diff != 0) apply_diff(diff, el);
      $(el)
        .find(".childarray")
        .each(function (i, elx) {
          let x = elx.parentNode;
          elfield = $(x).attr("data-rclass");
          if (elfield in json_data[field][i]) {
            let idiff =
              json_data[field][i][elfield].length - $(x).find(".erow").length;
            if (idiff != 0) apply_diff(idiff, x);
          }
        });
      /* Handling versions the child field */
      if (field == "affected") {
        json_data[field].forEach(function (x, i) {
          let elf = $(el).find(".childarray").parent();
          if ("versions" in x) {
            if (x.versions.length) {
              let diff = x.versions.length - $(elf).find(" .erow").length;
              if (diff != 0) apply_diff(diff, elf);
            }
            x.versions.forEach(function (y, j) {
              let q;
              ["lessThan", "lessThanOrEqual"].forEach(function (r) {
                if (r in y) q = r;
              });
              let w = $(elf[i]).find(".versionRangeEnabled")[j];
              if (w) {
                if (q) {
                  w.checked = true;

                  $(elf[i]).find(".versionRangeType").val(q);
                  $(elf[i]).find(".versionRangeValue").val(y[q]);
                  if ("versionType" in y)
                    $(elf[i]).find(".versionTypeValue").val(y["versionType"]);
                } else {
                  w.checked = false;
                }
                triggerversionRange(w);
              }
            });
          }
        });
      }
    }
  });
  /* populate the fields. raw_json is used to capture fields
       that are not part of cveInterface but present in CVE data*/
  let raw_json = simpleCopy(json_data);
  $("#nice .form-control").each(function (_, v) {
    let props = $(v).attr("data-field");
    if (props) {
      show_optional(v);
      let oval = get_deep(json_data, props);
      let field = props.split(".").shift();
      delete raw_json[field];
      if (oval && oval[0] != "$") {
        /* Value map exists and does not begin with $ */
        $(v).val(oval);
        if (!$(v).is(":visible")) {
          let dshow = $(v).closest(".frow").attr("data-rshow");
          if (dshow) {
            let el = $('[data-show="' + dshow + '"]');
            if (el.length) {
              show_field(el);
            }
          }
        }
        if (oval != $(v).val()) {
          /* In case of select field */
          add_option(v, oval, oval, 1);
        }
        clearoff(v);
      }
    }
  });
  delete raw_json["providerMetadata"];
  if (Object.keys(raw_json).length) {
    show_optional("#nice .rawjson");
    $("#nice .rawjson").val(JSON.stringify(raw_json, null, 2));
  }
}
async function publish_adp() {
  try {
    let editor = $("#adpjson .jsoneditor")[0].env.editor;
    let alladp = JSON.parse(editor.getValue());
    let adp;
    for (let i = 0; i < alladp.length; i++) {
      if (get_deep(alladp[i], "providerMetadata.shortName") == client.org) {
        adp = { adpContainer: alladp[i] };
      }
    }
    let mr = JSON.parse($("#deepDive").attr("data-crecord"));
    let cve_id = mr.cve_id;
    if (get_deep(adp, "adp.adpContainer.metrics")) {
      /* In case of metrics match ID value to CVE*/
      adp.adpContainer.metrics[0].id = cve_id;
      adp.adpContainer.metrics[0].other.content.id = cve_id;
    }
    let d = await client.publishadp(cve_id, adp);
    if ("error" in d) {
      swal_error("Failed to publish ADP, Error : " + d.error);
      console.log(d);
      return;
    }
    if ("created" in d || "updated" in d) {
      Swal.fire({
        title: "ADP data created/updated successfully!",
        text: d.message,
        icon: "success",
        timer: 1800,
      });
      $("#cveUpdateModal").modal("hide");
    } else {
      console.log(d);
      swal_error(
        "Unknown error CVE could not be updated. See console " +
          " log for details!",
      );
    }
  } catch (err) {
    console.log(err);
    swal_error("Could not publish this ADP data. Fix the errors please!");
  }
}
function add_validators(pubcve) {
  let validStatus = { affected: true, unknown: true };
  if ("affected" in pubcve)
    for (let i = 0; i < pubcve.affected.length; i++) {
      let m = pubcve.affected[i];
      if ("defaultStatus" in m && m.defaultStatus in validStatus) return true;
      if ("versions" in m)
        for (let j = 0; j < m.versions.length; j++)
          if ("status" in m.versions[j] && m.versions[j].status in validStatus)
            return true;
    }
  swal_error(
    'At least one product that has Status "affected" or ' +
      '"unknown" is required. Optionally, you can make the ' +
      'Default Status as "affected" or "unknown".',
  );
  return false;
}
async function publish_cve() {
  $("#topalert").hide();
  try {
    if ($("#nice-or-json").find(".active.show").attr("id") == "nice") {
      if (to_json() == false) {
        $("#cveform .is-invalid").focus();
        swal_error("Some required fields are missing or incomplete");
        return;
      }
    }
    let editor = $("#mjson .jsoneditor")[0].env.editor;
    let pubcve = JSON.parse(editor.getValue());
    if (add_validators(pubcve) != true) return;
    let mr = JSON.parse($("#deepDive").attr("data-crecord"));
    /* Override some fields on submit*/
    if (get_deep(client, "userobj.org_UUID") && client.org)
      pubcve["providerMetadata"] = {
        orgId: client.userobj.org_UUID,
        shortName: client.org,
      };
    pubcve["x_generator"] = { engine: "cveClient/" + _version };
    let cve = mr.cve_id;
    let ispublic = mr.state != "RESERVED";
    let rejected = false;
    let d = await client.publishcve(cve, pubcve, ispublic, rejected);
    if ("error" in d) {
      swal_error("Failed to publish CVE, Error : " + d.error);
      //console.log(d);
      return;
    }
    if ("created" in d || "updated" in d) {
      let note = "Published";
      let fnote = "created";
      if (ispublic) {
        note = "Updated";
        fnote = "updated";
      }
      Swal.fire({
        title: "CVE " + note + " Successfully!",
        text: d.message,
        icon: "success",
        timer: 1800,
      });
      let u = client.cvetable.bootstrapTable("getRowByUniqueId", cve);
      u.state = get_deep(d, fnote + ".cveMetadata.state");
      let modified = get_deep(d, fnote + ".cveMetadata.datePublished");
      if (modified) set_deep(u, "time.modified", modified);
      u.new = 1;
      client.cvetable.bootstrapTable("updateByUniqueId", { id: cve, row: u });
      $("#cveUpdateModal").modal("hide");
    } else {
      //console.log(d);
      swal_error(
        "Unknown error CVE could not be updated. See console " +
          " log for details!",
      );
    }
  } catch (err) {
    console.log(err);
    swal_error("Could not publish this CVE. Fix the errors please!");
  }
}
function check_json(cjson) {
  return (
    cjson.affected &&
    cjson.affected.length > 0 &&
    cjson.affected[0].versions &&
    cjson.affected[0].versions.length > 0
  );
}

function to_json(w) {
  $(".cveupdate").removeClass("d-none");
  $(".adpupdate").addClass("d-none");
  let json_data = {};
  let value_check = true;
  $("#nice .form-control")
    .not(".d-none")
    .each(function (_, v) {
      if ($(v).val()) {
        if ($(v).attr("data-related")) {
          v = update_related(v);
          if (!$(v).val()) return;
        }
        let props = $(v).attr("data-field");
        if (!props) return;
        json_data = set_deep(json_data, props, $(v).val());
        $(v).removeClass("is-invalid").addClass("is-valid");
      } else {
        if (v.required) {
          value_check = false;
          $(v).removeClass("is-valid").addClass("is-invalid");
        } else {
          let props = $(v).attr("data-field");
          if (!props) return;
          /* Delete the field if exists */
          json_data = set_deep(json_data, props, undefined);
        }
      }
    });
  let editor = $("#mjson .jsoneditor")[0].env.editor;
  let raw_json = {};
  if ($("#nice .rawjson").val()) {
    try {
      raw_json = JSON.parse($("#nice .rawjson").val());
    } catch (err) {
      top_alert(
        "danger",
        "Additional Fields JSON is invalid, please fix this!",
      );
      return false;
    }
  }
  let full_json = Object.assign({}, json_data, raw_json);
  if (check_json(full_json)) {
    editor.setValue(JSON.stringify(full_json, null, 2));
  } else {
    //console.log(full_json);
    editor.setValue("{}");
    return false;
  }
  return value_check;
}
function update_related(w) {
  /* Function to update the data-field of a related item 
       data-related="versionRangeValue"
       data-relatedfield="affected.0.versions.0.$" */
  let related = $(w).attr("data-related");
  if (
    $(w).val() &&
    $(w)
      .parent()
      .find("." + related).length
  ) {
    let field = $(w).attr("data-relatedfield").replace("$", $(w).val());
    $(w)
      .parent()
      .find("." + related)
      .attr("data-field", field);
  } else {
    $(w)
      .parent()
      .find("." + related)
      .removeAttr("data-field");
  }
  return $(w)
    .parent()
    .find("." + related);
}
function cweUpdate(w) {
  if ($(w).val() && $(w).attr("data-field")) {
    const match_cwe = $(w)
      .val()
      .toUpperCase()
      .match(/^(cwe-[0-9]+)(.*)$/i);
    if (match_cwe && match_cwe.length == 3) {
      let ufield = { cweId: match_cwe[1], type: "CWE" };
      let path = $(w).attr("data-field").split(".");
      Object.keys(ufield).forEach(function (f) {
        path[path.length - 1] = f;
        $('[data-field="' + path.join(".") + '"]').val(ufield[f]);
      });
    }
  }
}
function clearoff(w) {
  if ($(w).val() && get_deep(w, "validity.valid") == true)
    $(w).removeClass("is-invalid").addClass("is-valid");
  if ($(w).attr("data-update") && $(w).attr("data-update") in window) {
    let f = window[$(w).attr("data-update")];
    if (typeof f == "function")
      setTimeout(function () {
        f(w);
      }, 500);
  }
}
function disable_encryption() {
  if (!("dfetch" in client)) {
    console.log("Encryption seems to be disabled already");
    return;
  }
  check_create_key(client.user).then(function (ekey) {
    let encBuffer = URItoarrayBuffer(client.key);
    decryptMessage(encBuffer, ekey.privateKey).then(function (encKey) {
      client.key = encKey;
      store.setItem(store_tag + "key", client.key);
      $(".encryption").toggleClass("d-none");
      client.rfetch = client.dfetch;
      delete client.dfetch;
      top_alert("warning", "Encryption is now disabled for your API keys!");
    });
  });
}
function activate_encryption() {
  if ("dfetch" in client) {
    console.log("Encrypt/Decrypt API is already enabled ");
    return;
  }
  client.dfetch = client.rfetch;
  client.rfetch = function (path, opts, qvars) {
    return check_create_key(client.user).then(function (ekey) {
      let encKey = client.key;
      let encBuffer = URItoarrayBuffer(client.key);
      return decryptMessage(encBuffer, ekey.privateKey).then(function (rawKey) {
        client.key = rawKey;
        return client.dfetch(path, opts, qvars).then(function (u) {
          client.key = encKey;
          return u;
        });
      });
    });
  };
  $(".encryption").toggleClass("d-none");
  top_alert("success", "Encryption is now enabled for your API Key", 4000);
}
function enable_encryption() {
  $.getScript("encrypt-storage.js")
    .done(function () {
      try {
        let m = new URL(client.key);
        console.log("Already Encrypted");
        return;
      } catch (_) {
        /* Encrypt storage using RSA keys*/
        try {
          check_create_key(client.user).then(function (newkey) {
            encryptMessage(client.key, newkey.publicKey).then(
              function (encBuffer) {
                arrayBuffertoURI(encBuffer).then(function (encURL) {
                  client.key = encURL;
                  store.setItem(store_tag + "key", encURL);
                  activate_encryption();
                });
              },
            );
          });
        } catch (err) {
          console.log(err);
          top_alert(
            "warning",
            "Encrypting API key failed, see console log for errors",
          );
        }
      }
    })
    .fail(function () {
      /* If encryption script fails to load, store key in session only */
      sessionStorage.setItem(store_tag + "key", client.key);
      top_alert(
        "warning",
        "Encryption unavailable. API key stored in session only.",
      );
    });
}
async function showorg() {
  let m = await client.getorg(client.org);
  display_object(m);
  $("#deepDive").modal();
  $("#updaterecord").hide();
}
async function reject_cve(confirm) {
  $("#deepDive").modal("hide");
  var mr = JSON.parse($("#deepDive").attr("data-crecord"));
  if (!("cve_id" in mr))
    swal_error("Error there seems to no CVE number selected");
  if (confirm) {
    let reason = $("#rejectcveModal .description").val();
    if (reason.length < 3) {
      swal_error(
        "Please provide a description or reason for rejection of this CVE",
      );
      return;
    }
    let rejcve = { rejectedReasons: [{ lang: "en", value: reason }] };
    if (get_deep(client, "userobj.org_UUID") && client.org)
      rejcve["providerMetadata"] = {
        orgId: client.userobj.org_UUID,
        shortName: client.org,
      };
    rejcve["x_generator"] = { engine: "cveClient/" + _version };
    let cve = mr.cve_id;
    let ispublic = mr.state != "RESERVED";
    let rejected = true;
    let d = await client.publishcve(cve, rejcve, ispublic, rejected);
    if ("error" in d) {
      swal_error("Failed to publish CVE, Error : " + d.error);
      //console.log(d);
      return;
    }
    if ("created" in d || "updated" in d) {
      let note = "Rejected";
      let fnote = "created";
      if (ispublic) {
        note = "Updated";
        fnote = "updated";
      }
      Swal.fire({
        title: "CVE " + note + " Successfully!",
        text: d.message,
        icon: "success",
        timer: 1800,
      });
      $("#rejectcveModal").modal("hide");
      let u = client.cvetable.bootstrapTable("getRowByUniqueId", cve);
      u.state = get_deep(d, fnote + ".cveMetadata.state");
      let modified = get_deep(d, fnote + ".cveMetadata.datePublished");
      if (modified) set_deep(u, "time.modified", modified);
      u.new = 1;
      client.cvetable.bootstrapTable("updateByUniqueId", { id: cve, row: u });
      $("#cveUpdateModal").modal("hide");
    } else {
      //console.log(d);
      swal_error(
        "Unknown error CVE could not be updated. See console " +
          " log for details!",
      );
    }
  } else {
    $("#rejectcveModal").modal();
    $("#rejectcveModal").find(".cve").val(mr.cve_id);
  }
}
function queryParser(query) {
  const urlParams = {};
  let match;
  const pl = /\+/g;
  const search = /([^&=:]+)[=:]?([^&]*)/g;
  const decode = function (s) {
    return decodeURIComponent(s.replace(pl, " "));
  };
  if (!query) query = window.location.search.substring(1);
  if (location.search == "" && location.hash != "")
    query = location.hash.substring(1);
  while ((match = search.exec(query))) {
    let key = decode(match[1]);
    if (key === "__proto__" || key === "constructor" || key === "prototype")
      continue;
    urlParams[key] = decode(match[2]);
  }
  return urlParams;
}
function allFields(newTab, oldTab) {
  top_alert(
    "warning",
    "All Fields is experimental and useful in seeing the full CVE JSON schema representation!",
    8000,
  );
  let cveData = {};
  const href = oldTab.getAttribute("href");
  if (href == "#nice") {
    if (to_json()) {
      cveData = { containers: { cna: get_json_data() } };
    }
  } else if (href == "#mjson") {
    cveData = { containers: { cna: get_json_data() } };
  }
  if (Object.keys(cveData).length) {
    allFieldsForm.populate(cveData, null);
  }
}
function add_new(opt) {
  if (opt.parentElement && opt.parentElement.tagName == "SELECT") {
    Swal.fire({
      title: "Enter New Option",
      input: "text",
      inputPlaceholder: "New option",
      showCancelButton: true,
      inputValidator: function (value) {
        if (!value) {
          return "You need to write something!";
        }
        add_option(opt.parentElement, value, value, 1);
      },
    }).then(function (result) {
      if ("dismiss" in result)
        opt.parentElement.selectedIndex = opt.parentElement.selectedIndex - 1;
    });
  }
}

/* Node.js / test environment exports */
if (typeof module !== "undefined" && module.exports) {
  module.exports = {
    get_deep,
    set_deep,
    simpleCopy,
    checkurl,
    check_json,
    queryParser,
    safeHTML,
  };
}