docs: add MIT license

2026-01-26 13:21:58 +07:00 · 2026-01-18 16:00:12 +07:00
commit ed3a0d6510
34 changed files with 4575 additions and 0 deletions
--- a/theme/assets/js/alpine.min.js
+++ b/theme/assets/js/alpine.min.js
--- a/theme/assets/js/html5-qrcode.min.js
+++ b/theme/assets/js/html5-qrcode.min.js
--- a/theme/assets/js/i18n.js
+++ b/theme/assets/js/i18n.js
@@ -0,0 +1,55 @@
+class I18n {
+    constructor() {
+        this.currentLang = localStorage.getItem('mivo_lang') || 'en';
+        this.translations = {};
+        this.isLoaded = false;
+        this.init();
+    }
+
+    async init() {
+        await this.loadLanguage(this.currentLang);
+        this.isLoaded = true;
+    }
+
+    async loadLanguage(lang) {
+        try {
+            const response = await fetch(`assets/lang/${lang}.json`);
+            if (!response.ok) throw new Error(`Failed to load: ${lang}`);
+            
+            this.translations = await response.json();
+            this.currentLang = lang;
+            localStorage.setItem('mivo_lang', lang);
+            this.applyTranslations();
+            
+            document.documentElement.lang = lang;
+            window.dispatchEvent(new CustomEvent('language-changed', { detail: { lang } }));
+        } catch (error) {
+            console.error('I18n Error:', error);
+        }
+    }
+
+    applyTranslations() {
+        document.querySelectorAll('[data-i18n]').forEach(element => {
+            const key = element.getAttribute('data-i18n');
+            const translation = this.getNestedValue(this.translations, key);
+            
+            if (translation) {
+                if (element.tagName === 'INPUT' && element.getAttribute('placeholder')) {
+                    element.placeholder = translation;
+                } else {
+                    element.textContent = translation;
+                }
+            }
+        });
+    }
+
+    getNestedValue(obj, path) {
+        return path.split('.').reduce((acc, part) => acc && acc[part], obj);
+    }
+}
+
+window.i18n = new I18n();
+
+function changeLanguage(lang) {
+    window.i18n.loadLanguage(lang);
+}
--- a/theme/assets/js/main.js
+++ b/theme/assets/js/main.js
@@ -0,0 +1,88 @@
+/**
+ * MIVO Theme Configuration & Main Utilities
+ */
+
+// 1. Configuration
+window.MivoConfig = {
+    // API Configuration
+    // Example: "http://192.168.1.1/mivo/public"
+    apiBaseUrl: "", 
+    
+    // Your Mivo Session Name
+    apiSession: "router-jakarta-1",
+
+    // Set to true to force Check Voucher tab even if apiBaseUrl is empty (for dev/test)
+    debugMode: false
+};
+
+// 2. Global Utilities
+window.formatTime = function(str) {
+    if (!str || str === '-') return '-';
+    
+    // Normalize string: specific fix for "7 h 12 m 48 s" (remove spaces between value and unit)
+    // Converts "7 h 12 m" -> "7h12m" for easier parsing, while keeping standard "1w2d" intact.
+    const normalized = str.toLowerCase().replace(/\s+/g, '');
+    
+    // Regex to parse MikroTik time format (e.g. 1w6d20h56m25s)
+    const regex = /(\d+)([wdhms])/g;
+    let match;
+    const parts = [];
+    
+    while ((match = regex.exec(normalized)) !== null) {
+        const val = match[1];
+        const unit = match[2];
+        // Use i18n to get localized unit name. Fallback to code if not found.
+        const unitName = (window.i18n && window.i18n.translations?.time?.[unit]) || unit;
+        parts.push(`${val} ${unitName}`);
+    }
+    
+    return parts.length > 0 ? parts.join(' ') : str;
+};
+
+// Helper to parse time string into total seconds for Live Timer
+window.parseTimeSeconds = function(str) {
+    if (!str || str === '-') return 0;
+    const normalized = str.toLowerCase().replace(/\s+/g, '');
+    const regex = /(\d+)([wdhms])/g;
+    let match;
+    let totalSeconds = 0;
+    
+    while ((match = regex.exec(normalized)) !== null) {
+        const val = parseInt(match[1]);
+        const unit = match[2];
+        
+        switch(unit) {
+            case 'w': totalSeconds += val * 604800; break;
+            case 'd': totalSeconds += val * 86400; break;
+            case 'h': totalSeconds += val * 3600; break;
+            case 'm': totalSeconds += val * 60; break;
+            case 's': totalSeconds += val; break;
+        }
+    }
+    return totalSeconds;
+};
+
+// Helper to format seconds back to string (e.g. 70s -> 1m 10s)
+window.formatSeconds = function(seconds) {
+    if (seconds <= 0) return '0s';
+    
+    const w = Math.floor(seconds / 604800);
+    seconds %= 604800;
+    const d = Math.floor(seconds / 86400);
+    seconds %= 86400;
+    const h = Math.floor(seconds / 3600);
+    seconds %= 3600;
+    const m = Math.floor(seconds / 60);
+    const s = seconds % 60;
+    
+    const parts = [];
+    const t = window.i18n?.translations?.time || {};
+    
+    if (w > 0) parts.push(`${w} ${t.w || 'w'}`);
+    if (d > 0) parts.push(`${d} ${t.d || 'd'}`);
+    if (h > 0) parts.push(`${h} ${t.h || 'h'}`);
+    if (m > 0) parts.push(`${m} ${t.m || 'm'}`);
+    if (s > 0) parts.push(`${s} ${t.s || 's'}`);
+    
+    return parts.join(' ');
+};
--- a/theme/assets/js/md5.js
+++ b/theme/assets/js/md5.js
@@ -0,0 +1,62 @@
+/*
+ * A JavaScript implementation of the RSA Data Security, Inc. MD5 Message
+ * Digest Algorithm, as defined in RFC 1321.
+ * Version 2.1 Copyright (C) Paul Johnston 1999 - 2002.
+ * Other contributors: Greg Holt, Andrew Kepert, Yoni Elere, David Ivanees
+ */
+var hexcase = 0; var b64pad = ""; var chrsz = 8;
+function hexMD5(s){ return binl2hex(core_md5(str2binl(s), s.length * chrsz));}
+function b64_md5(s){ return binl2b64(core_md5(str2binl(s), s.length * chrsz));}
+function str_md5(s){ return binl2str(core_md5(str2binl(s), s.length * chrsz));}
+function hex_hmac_md5(key, data) { return binl2hex(core_hmac_md5(key, data)); }
+function b64_hmac_md5(key, data) { return binl2b64(core_hmac_md5(key, data)); }
+function str_hmac_md5(key, data) { return binl2str(core_hmac_md5(key, data)); }
+function md5_vm_test() { return hexMD5("abc") == "900150983cd24fb0d6963f7d28e17f72"; }
+function core_md5(x, len)
+{
+  x[len >> 5] |= 0x80 << ((len) % 32);
+  x[(((len + 64) >>> 9) << 4) + 14] = len;
+  var a =  1732584193; var b = -271733879; var c = -1732584194; var d =  271733878;
+  for(var i = 0; i < x.length; i += 16)
+  {
+    var olda = a; var oldb = b; var oldc = c; var oldd = d;
+    a = md5_ff(a, b, c, d, x[i+ 0], 7 , -680876936); d = md5_ff(d, a, b, c, x[i+ 1], 12, -389564586); c = md5_ff(c, d, a, b, x[i+ 2], 17,  606105819); b = md5_ff(b, c, d, a, x[i+ 3], 22, -1044525330);
+    a = md5_ff(a, b, c, d, x[i+ 4], 7 , -176418897); d = md5_ff(d, a, b, c, x[i+ 5], 12,  1200080426); c = md5_ff(c, d, a, b, x[i+ 6], 17, -1473231341); b = md5_ff(b, c, d, a, x[i+ 7], 22, -45705983);
+    a = md5_ff(a, b, c, d, x[i+ 8], 7 ,  1770035416); d = md5_ff(d, a, b, c, x[i+ 9], 12, -1958414417); c = md5_ff(c, d, a, b, x[i+10], 17, -42063); b = md5_ff(b, c, d, a, x[i+11], 22, -1990404162);
+    a = md5_ff(a, b, c, d, x[i+12], 7 ,  1804603682); d = md5_ff(d, a, b, c, x[i+13], 12, -40341101); c = md5_ff(c, d, a, b, x[i+14], 17, -1502002290); b = md5_ff(b, c, d, a, x[i+15], 22,  1236535329);
+    a = md5_gg(a, b, c, d, x[i+ 1], 5 , -165796510); d = md5_gg(d, a, b, c, x[i+ 6], 9 , -1069501632); c = md5_gg(c, d, a, b, x[i+11], 14,  643717713); b = md5_gg(b, c, d, a, x[i+ 0], 20, -373897302);
+    a = md5_gg(a, b, c, d, x[i+ 5], 5 , -701558691); d = md5_gg(d, a, b, c, x[i+10], 9 ,  38016083); c = md5_gg(c, d, a, b, x[i+15], 14, -660478335); b = md5_gg(b, c, d, a, x[i+ 4], 20, -405537848);
+    a = md5_gg(a, b, c, d, x[i+ 9], 5 ,  568446438); d = md5_gg(d, a, b, c, x[i+14], 9 , -1019803690); c = md5_gg(c, d, a, b, x[i+ 3], 14, -187363961); b = md5_gg(b, c, d, a, x[i+ 8], 20,  1163531501);
+    a = md5_gg(a, b, c, d, x[i+13], 5 , -1444681467); d = md5_gg(d, a, b, c, x[i+ 2], 9 , -51403784); c = md5_gg(c, d, a, b, x[i+ 7], 14,  1735328473); b = md5_gg(b, c, d, a, x[i+12], 20, -1926607734);
+    a = md5_hh(a, b, c, d, x[i+ 5], 4 , -378558); d = md5_hh(d, a, b, c, x[i+ 8], 11, -2022574463); c = md5_hh(c, d, a, b, x[i+11], 16,  1839030562); b = md5_hh(b, c, d, a, x[i+14], 23, -35309556);
+    a = md5_hh(a, b, c, d, x[i+ 1], 4 , -1530992060); d = md5_hh(d, a, b, c, x[i+ 4], 11,  1272893353); c = md5_hh(c, d, a, b, x[i+ 7], 16, -155497632); b = md5_hh(b, c, d, a, x[i+10], 23, -1094730640);
+    a = md5_hh(a, b, c, d, x[i+13], 4 ,  681279174); d = md5_hh(d, a, b, c, x[i+ 0], 11, -358537222); c = md5_hh(c, d, a, b, x[i+ 3], 16, -722521979); b = md5_hh(b, c, d, a, x[i+ 6], 23,  76029189);
+    a = md5_hh(a, b, c, d, x[i+ 9], 4 , -640364487); d = md5_hh(d, a, b, c, x[i+12], 11, -421815835); c = md5_hh(c, d, a, b, x[i+15], 16,  530742520); b = md5_hh(b, c, d, a, x[i+ 2], 23, -995338651);
+    a = md5_ii(a, b, c, d, x[i+ 0], 6 , -198630844); d = md5_ii(d, a, b, c, x[i+ 7], 10,  1126891415); c = md5_ii(c, d, a, b, x[i+14], 15, -1416354905); b = md5_ii(b, c, d, a, x[i+ 5], 21, -57434055);
+    a = md5_ii(a, b, c, d, x[i+12], 6 ,  1700485571); d = md5_ii(d, a, b, c, x[i+ 3], 10, -1894986606); c = md5_ii(c, d, a, b, x[i+10], 15, -1051523); b = md5_ii(b, c, d, a, x[i+ 1], 21, -2054922799);
+    a = md5_ii(a, b, c, d, x[i+ 8], 6 ,  1873313359); d = md5_ii(d, a, b, c, x[i+15], 10, -30611744); c = md5_ii(c, d, a, b, x[i+ 6], 15, -1560198380); b = md5_ii(b, c, d, a, x[i+13], 21,  1309151649);
+    a = md5_ii(a, b, c, d, x[i+ 4], 6 , -145523070); d = md5_ii(d, a, b, c, x[i+11], 10, -1120210379); c = md5_ii(c, d, a, b, x[i+ 2], 15,  718787259); b = md5_ii(b, c, d, a, x[i+ 9], 21, -343485551);
+    a = safe_add(a, olda); b = safe_add(b, oldb); c = safe_add(c, oldc); d = safe_add(d, oldd);
+  }
+  return Array(a, b, c, d);
+}
+function md5_cmn(q, a, b, x, s, t) { return safe_add(bit_rol(safe_add(safe_add(a, q), safe_add(x, t)), s),b); }
+function md5_ff(a, b, c, d, x, s, t) { return md5_cmn((b & c) | ((~b) & d), a, b, x, s, t); }
+function md5_gg(a, b, c, d, x, s, t) { return md5_cmn((b & d) | (c & (~d)), a, b, x, s, t); }
+function md5_hh(a, b, c, d, x, s, t) { return md5_cmn(b ^ c ^ d, a, b, x, s, t); }
+function md5_ii(a, b, c, d, x, s, t) { return md5_cmn(c ^ (b | (~d)), a, b, x, s, t); }
+function core_hmac_md5(key, data)
+{
+  var bkey = str2binl(key);
+  if(bkey.length > 16) bkey = core_md5(bkey, key.length * chrsz);
+  var ipad = Array(16), opad = Array(16);
+  for(var i = 0; i < 16; i++) { ipad[i] = bkey[i] ^ 0x36363636; opad[i] = bkey[i] ^ 0x5C5C5C5C; }
+  var hash = core_md5(ipad.concat(str2binl(data)), (16 * 32) + data.length * chrsz);
+  return core_md5(opad.concat(hash), (16 * 32) + 512);
+}
+function safe_add(x, y) { var lsw = (x & 0xFFFF) + (y & 0xFFFF); var msw = (x >> 16) + (y >> 16) + (lsw >> 16); return (msw << 16) | (lsw & 0xFFFF); }
+function bit_rol(num, cnt) { return (num << cnt) | (num >>> (32 - cnt)); }
+function str2binl(str) { var bin = Array(); var mask = (1 << chrsz) - 1; for(var i = 0; i < str.length * chrsz; i += chrsz) bin[i>>5] |= (str.charCodeAt(i / chrsz) & mask) << (i%32); return bin; }
+function binl2str(bin) { var str = ""; var mask = (1 << chrsz) - 1; for(var i = 0; i < bin.length * 32; i += chrsz) str += String.fromCharCode((bin[i>>5] >>> (i % 32)) & mask); return str; }
+function binl2hex(binarray) { var hex_tab = hexcase ? "0123456789ABCDEF" : "0123456789abcdef"; var str = ""; for(var i = 0; i < binarray.length * 4; i++) { str += hex_tab.charAt((binarray[i>>2] >> ((i%4)*8+4)) & 0xF) + hex_tab.charAt((binarray[i>>2] >> ((i%4)*8  )) & 0xF); } return str; }
+function binl2b64(binarray) { var tab = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; var str = ""; for(var i = 0; i < binarray.length * 4; i += 3) { var triplet = (((binarray[i   >> 2] >> 8 * ( i   % 4)) & 0xFF) << 16) | (((binarray[i+1 >> 2] >> 8 * ((i+1) % 4)) & 0xFF) << 8 ) | ((binarray[i+2 >> 2] >> 8 * ((i+2) % 4)) & 0xFF); for(var j = 0; j < 4; j++) { if(i * 8 + j * 6 > binarray.length * 32) str += b64pad; else str += tab.charAt((triplet >> 6*(3-j)) & 0x3F); } } return str; }
--- a/theme/assets/js/qr.js
+++ b/theme/assets/js/qr.js
@@ -0,0 +1,164 @@
+function qrMixin() {
+    return {
+        showQr: false,
+        qrScanner: null,
+        qrType: 'login', // 'login' or 'check'
+        scanTarget: 'voucher', // 'voucher', 'member', 'check'
+        qrResult: null,
+        qrError: '',
+        facingMode: 'environment', // 'environment' or 'user'
+
+        initQr(target) {
+            this.scanTarget = target;
+            this.qrType = target === 'check' ? 'check' : 'login';
+            this.showQr = true;
+            this.qrResult = null;
+            this.qrError = '';
+            
+            this.$nextTick(() => {
+                this.startCamera();
+            });
+        },
+
+        async startCamera() {
+            if (this.qrScanner) {
+                await this.stopCamera();
+            }
+
+            // Create instance (using Html5Qrcode directly, NOT Scanner widget)
+            this.qrScanner = new Html5Qrcode("reader");
+            
+            const config = { fps: 10, qrbox: { width: 250, height: 250 } };
+            
+            try {
+                await this.qrScanner.start(
+                    { facingMode: this.facingMode },
+                    config,
+                    this.onScanSuccess.bind(this),
+                    this.onScanFailure.bind(this)
+                );
+            } catch (err) {
+                console.error("Error starting scanner", err);
+                this.qrError = "Camera error: " + (err.message || err);
+            }
+        },
+
+        async stopCamera() {
+            if (this.qrScanner) {
+                try {
+                    if(this.qrScanner.isScanning) {
+                        await this.qrScanner.stop();
+                    }
+                    this.qrScanner.clear();
+                } catch (e) {
+                    console.warn("Error stopping scanner", e);
+                }
+                this.qrScanner = null;
+            }
+        },
+
+        async switchCamera() {
+            this.facingMode = this.facingMode === 'environment' ? 'user' : 'environment';
+            await this.startCamera();
+        },
+
+        async scanFile(event) {
+            const file = event.target.files[0];
+            if (!file) return;
+
+            // Stop camera temporarily if running
+            await this.stopCamera();
+            
+            // Create temp instance for file scan
+            const fileScanner = new Html5Qrcode("reader");
+            
+            try {
+                const decodedText = await fileScanner.scanFile(file, true);
+                this.onScanSuccess(decodedText, null);
+            } catch (err) {
+                this.qrError = "File scan failed: " + (err.message || "No QR found");
+                // Resume camera if failed
+                await this.startCamera();
+            }
+            
+            // Clear file input
+            event.target.value = '';
+        },
+
+        onScanSuccess(decodedText, decodedResult) {
+            this.qrError = '';
+            try {
+                // Strict Validation
+                const url = new URL(decodedText);
+                const currentHost = window.location.hostname;
+                const qrHost = url.hostname;
+
+                // 1. Hostname Check (Strict)
+                // Skip check for file uploads if they might come from anywhere? 
+                // No, adhere to strict security even for files.
+                if (qrHost !== currentHost && currentHost !== '127.0.0.1' && currentHost !== 'localhost') {
+                     // Check allowed domains if implemented, otherwise strictly block
+                     throw new Error('Invalid Hostname. QR is for: ' + qrHost);
+                }
+
+                // 2. Parse Data
+                const params = new URLSearchParams(url.search);
+                
+                if (this.qrType === 'login') {
+                    const u = params.get('user') || params.get('username');
+                    const p = params.get('password');
+                    
+                    if (!u || !p) throw new Error('Invalid Login QR. Missing username/password.');
+                    
+                    this.qrResult = { type: 'login', username: u, password: p, display: `User: ${u}` };
+                    this.stopCamera();
+                } else if (this.qrType === 'check') {
+                    const c = params.get('code') || params.get('user') || params.get('username');
+                    
+                    if (!c) throw new Error('Invalid Check QR. Missing voucher code.');
+                    
+                    // Directly verify without confirmation step
+                    this.stopCamera();
+                    this.checkCode = c;
+                    this.loginType = 'check';
+                    this.closeQr();
+                    this.checkVoucher();
+                    return; 
+                }
+                
+            } catch (e) {
+                console.warn(e);
+                this.qrError = 'Security Error: ' + e.message;
+            }
+        },
+
+        onScanFailure(error) {
+            // Ignore frame read errors
+        },
+
+        confirmQr() {
+            if (!this.qrResult) return;
+            
+            if (this.scanTarget === 'voucher') {
+                this.auth.voucher = this.qrResult.username;
+                this.loginType = 'voucher';
+                this.submit();
+            } else if (this.scanTarget === 'member') {
+                    this.auth.username = this.qrResult.username;
+                    this.auth.password = this.qrResult.password;
+                    this.loginType = 'member';
+                    this.submit();
+            } else if (this.scanTarget === 'check') {
+                this.checkCode = this.qrResult.code;
+                this.loginType = 'check'; // Switch tab
+                this.checkVoucher();
+            }
+            this.closeQr();
+        },
+
+        closeQr() {
+            this.showQr = false;
+            this.stopCamera();
+        }
+    }
+}
--- a/theme/assets/js/theme.js
+++ b/theme/assets/js/theme.js
@@ -0,0 +1,24 @@
+function initTheme() {
+    return {
+        theme: localStorage.getItem('mivo_theme') || 'dark',
+        toggle() {
+            this.theme = this.theme === 'dark' ? 'light' : 'dark';
+            this.apply();
+        },
+        setTheme(val) {
+            this.theme = val;
+            this.apply();
+        },
+        apply() {
+            localStorage.setItem('mivo_theme', this.theme);
+            if (this.theme === 'dark') {
+                document.documentElement.classList.add('dark');
+            } else {
+                document.documentElement.classList.remove('dark');
+            }
+        },
+        init() {
+            this.apply();
+        }
+    }
+}