main.js

function init() {
    var script = document.createElement("script");
    script.src = "https://fido.moi.gov.tw//pt/assets/ChtICToken.js";
    document.head.appendChild(script);
    var pkilogin = document.getElementsByClassName("pkilogin")[0];
    var newElementHTML = '<input type="button" id="hicos" value="HiCOS登入">';
    if (pkilogin) {
        pkilogin.insertAdjacentHTML('afterend', newElementHTML);
        document.getElementById("hicos").addEventListener("click", loginClicked);
    }
 
    // register
    var registerHTML = '<input type="button" id="new-register" value="跨平台版卡號註冊">';
    var registerInputElem = document.querySelector("body > div > div.content.clear_pdTop > div > form > div.btn > div.left > input")
    if (registerInputElem) {
        registerInputElem.insertAdjacentHTML('afterend', registerHTML);
        document.getElementById("new-register").addEventListener("click", registerClicked);
    }
}
 
function makerandomletter() {
    var a = "",
        b = new Uint32Array(1);
    window.crypto.getRandomValues(b);
    for (var c = 0; c < b.length; c++)
        a += b[c];
    return a
}
 
function registerClicked() {
    loginClicked({mode: 'register'});
}
 
 
function loginClicked({mode = 'login'}) {
    var cardnum = "",
        tbs = "",
        B64Signature = "";
    var pkcs1 = "";
    var pkcs7 = "";
    let pin = prompt("請輸入PIN碼", "");
    makeSignature(pin);
 
    function makeSignature(a) {
        tbs = batchsign2.random;
        getICToken().goodDay(SignDo)
    }
 
    function CardNumMsg() {
        var l_oToken = getICToken();
        console.log(l_oToken.RetObj);
        if (l_oToken.RetObj.RCode == 0) {
            console.log(l_oToken.RetObj.RCode);
            cardnum = l_oToken.RetObj.CardID;
        } else {
            consoloe.log(l_oToken.RetObj.RMsg);
            //alert("簽章時發生錯誤，錯誤碼：" + l_oToken.RetObj.RCode+", 錯誤原因：" + l_oToken.RetObj.RMsg);
        }
 
        var returnCode = l_oToken.RetObj.RCode;
    }
 
    function SignDo() {
        var a = getICToken();
        if (0 == a.RetObj.RCode) {
            var b = btoa(tbs);
            //b = encodeURIComponent(b);
            a.getSmartCardID(CardNumMsg);
            a.sign(b, pin, "SHA1", SignRetMsg, "PKCS1");
        } else
            console.log(a.RetObj.RCode, a.RetObj.RMsg);
    }
 
    function SignRetMsg() {
        var a = getICToken();
        var l_oToken = getICToken();
        if (l_oToken.RetObj.RCode == 0) {
            B64Signature = l_oToken.RetObj.B64Signature;
            pkcs1 = B64Signature;
            console.log("pkcs1: " +pkcs1);
            var b = btoa(tbs);
            //b = encodeURIComponent(b);
            a.getSmartCardID(CardNumMsg);
            if (mode === 'login') {
                a.sign(b, pin, "SHA1", SignRetMsg2, "PKCS7");
            } else {
                a.sign(b, pin, "SHA1", doRegister, "PKCS7");
            }
        } else {
            console.log(l_oToken.RetObj.RMsg);
        }
    }
 
    function SignRetMsg2() {
        var a = getICToken();
        var l_oToken = getICToken();
        if (l_oToken.RetObj.RCode == 0) {
            B64Signature = l_oToken.RetObj.B64Signature;
            pkcs7 = B64Signature;
            console.log("pkcs7: " + pkcs7);
            const req = {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8'
                },
                body: "action=checkLoginLock&f_id="
            };
            fetch('/iftop/ajax_server/ajax_login.server.php', req);
 
            const requestOptions = {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    fun_name: "va_verify_p7",
                    f_sysno: "EAS",
                    p7: pkcs7 + pkcs1
                }).toString()
            };
            fetch('/iftop/ajax_server/ajax_pki.server.php', requestOptions)
                .then(response => response.json())
                .then(data => {
                    console.log("data");
                    console.log(data);
                    if (data.flag) {
                        window.location = "/eas/EA13R01.php?f_menuname=%E5%B7%A5%E4%BD%9C%E5%84%80%E8%A1%A8%E6%9D%BF";
                    } else {
                        alert(data.msg);
                    }
                });
 
 
        } else {
            console.log(l_oToken.RetObj.RMsg);
        }
    }
 
    function doRegister() {
        var a = getICToken();
        var l_oToken = getICToken();
        if (l_oToken.RetObj.RCode == 0) {
            B64Signature = l_oToken.RetObj.B64Signature;
            pkcs7 = B64Signature;
            console.log("pkcs7: " + pkcs7);
 
            const requestOptions = {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    action: "register",
                    organ_code: 'A29000000G', // TODO
                    idcardno: document.querySelector('[name="f_idcardno"]').value, // TODO
                    f_id: undefined,
                    f_pw: undefined,
                    cardno: a.SmrtCrdID[0],
                    open_window: 'Y',
                    mode: '1',
                    p7: pkcs7 + pkcs1
                }).toString()
            };
            fetch('/iftop/ajax_server/OP16T22_ajax.php', requestOptions)
                .then(response => response.json())
                .then(data => {
                    console.log("data");
                    console.log(data);
                    if (data.flag) {
                        // window.location = "/eas/EA13R01.php?f_menuname=%E5%B7%A5%E4%BD%9C%E5%84%80%E8%A1%A8%E6%9D%BF";
                    } else {
                        alert(data.msg);
                    }
                });
 
 
        } else {
            console.log(l_oToken.RetObj.RMsg);
        }
    }
}
 
init();