From e4164cbf67132355697fa2b3d6465d63914e612f Mon Sep 17 00:00:00 2001
From: Matt Baer <matt@write.as>
Date: Thu, 22 Apr 2021 10:08:05 -0400
Subject: [PATCH] Move admin user deletion confirmation to modal

Ref T319
---
 less/core.less                      | 13 ++++++
 less/pad.less                       |  9 +++++
 static/js/modals.js                 | 24 +++++++++++
 templates/user/admin/view-user.tmpl | 62 ++++++++++++++++++++++++-----
 templates/user/collection.tmpl      | 17 +-------
 5 files changed, 100 insertions(+), 25 deletions(-)
 create mode 100644 static/js/modals.js

diff --git a/less/core.less b/less/core.less
index 9d2e1ab..6401ceb 100644
--- a/less/core.less
+++ b/less/core.less
@@ -1044,6 +1044,19 @@ li {
 		background-color: #dff0d8;
 		border-color: #d6e9c6;
 	}
+	&.danger {
+		border-color: #856404;
+		background-color: white;
+		h3 {
+			margin: 0 0 0.5em 0;
+			font-size: 1em;
+			font-weight: bold;
+			color: black !important;
+		}
+		h3 + p, button {
+			font-size: 0.86em;
+		}
+	}
 
 	p {
 		margin: 0;
diff --git a/less/pad.less b/less/pad.less
index 6cdd383..486e2ea 100644
--- a/less/pad.less
+++ b/less/pad.less
@@ -340,6 +340,15 @@ body#pad {
 		}
 	}
 
+	.body {
+		line-height: 1.5;
+
+		input[type=text].confirm {
+			width: 100%;
+			box-sizing: border-box;
+		}
+	}
+
 	.short {
 		text-align: center;
 	}
diff --git a/static/js/modals.js b/static/js/modals.js
new file mode 100644
index 0000000..6705afa
--- /dev/null
+++ b/static/js/modals.js
@@ -0,0 +1,24 @@
+/*
+ * Copyright © 2016-2021 A Bunch Tell LLC.
+ *
+ * This file is part of WriteFreely.
+ *
+ * WriteFreely is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License, included
+ * in the LICENSE file in this source code package.
+ */
+
+function showModal(id) {
+    document.getElementById('overlay').style.display = 'block';
+    document.getElementById('modal-'+id).style.display = 'block';
+}
+
+var closeModals = function(e) {
+    e.preventDefault();
+    document.getElementById('overlay').style.display = 'none';
+    var modals = document.querySelectorAll('.modal');
+    for (var i=0; i<modals.length; i++) {
+        modals[i].style.display = 'none';
+    }
+};
+H.getEl('overlay').on('click', closeModals);
\ No newline at end of file
diff --git a/templates/user/admin/view-user.tmpl b/templates/user/admin/view-user.tmpl
index 236df0c..dac88bf 100644
--- a/templates/user/admin/view-user.tmpl
+++ b/templates/user/admin/view-user.tmpl
@@ -32,8 +32,13 @@ input.copy-text {
 	width: 100%;
 	box-sizing: border-box;
 }
+.modal {
+	position: fixed;
+}
 </style>
 <div class="snug content-container">
+	<div id="overlay"></div>
+
 	{{template "admin-header" .}}
 
 	<h2 id="posts-header">{{.User.Username}}</h2>
@@ -141,19 +146,58 @@ input.copy-text {
 	{{end}}
 
 	{{ if not .User.IsAdmin }}
-	<hr/>
-	<h2>Delete Account</h2>
-	<h3><strong>Danger Zone - This cannot be undone</strong></h3>
-	<p>This will delete the user {{.User.Username}} and all their blogs AND posts.</p>
-	<form action="/admin/user/{{.User.Username}}/delete" method="post">
-		<p>Type their username to confirm deletion.<p>
-		<input name="confirm-username" type="text" title="confirm username to delete" placeholder="confirm username">
-		<input class="danger" type="submit" value="DELETE">
-	</form>
+	<h2>Incinerator</h2>
+	<div class="alert danger">
+		<div class="row">
+			<div>
+				<h3>Delete this user</h3>
+				<p>Permanently erase all user data, with no way to recover it.</p>
+			</div>
+			<button class="cta danger" onclick="prepareDeleteUser()">Delete this user...</button>
+		</div>
+	</div>
 	{{end}}
 </div>
 
+<div id="modal-delete-user" class="modal">
+	<h2>Are you sure?</h2>
+	<div class="body">
+		<p style="text-align:left">This action <strong>cannot</strong> be undone. It will permanently erase all traces of this user, <strong>{{.User.Username}}</strong>, including their account information, blogs, and posts.</p>
+		<p>Please type <strong>{{.User.Username}}</strong> to confirm.</p>
+
+		<ul id="delete-errors" class="errors"></ul>
+
+		<form action="/admin/user/{{.User.Username}}/delete" method="post" onsubmit="confirmDeletion()">
+			<input id="confirm-text" placeholder="{{.User.Username}}" type="text" class="confirm boxy" name="confirm-username" style="margin-top: 0.5em;" />
+			<div style="text-align:right; margin-top: 1em;">
+				<a id="cancel-delete" style="margin-right:2em" href="#">Cancel</a>
+				<input class="danger" type="submit" id="confirm-delete" value="Delete this user" disabled />
+			</div>
+	</div>
+</div>
+
+<script src="/js/h.js"></script>
+<script src="/js/modals.js"></script>
 <script type="text/javascript">
+H.getEl('cancel-delete').on('click', closeModals);
+
+let $confirmDelBtn = document.getElementById('confirm-delete');
+let $confirmText = document.getElementById('confirm-text')
+$confirmText.addEventListener('input', function() {
+	$confirmDelBtn.disabled = this.value !== '{{.User.Username}}'
+});
+
+function prepareDeleteUser() {
+	$confirmText.value = ''
+	showModal('delete-user')
+	$confirmText.focus()
+}
+
+function confirmDeletion() {
+	$confirmDelBtn.disabled = true
+	$confirmDelBtn.value = 'Deleting...'
+}
+
 function confirmSilence() {
 	return confirm("Silence this user? They'll still be able to log in and access their posts, but no one else will be able to see them anymore. You can reverse this decision at any time.");
 }
diff --git a/templates/user/collection.tmpl b/templates/user/collection.tmpl
index 2bfa033..1783b7c 100644
--- a/templates/user/collection.tmpl
+++ b/templates/user/collection.tmpl
@@ -193,25 +193,10 @@ textarea.section.norm {
 		</div>
 
 <script src="/js/h.js"></script>
+<script src="/js/modals.js"></script>
 <script src="/js/ace.js" type="text/javascript" charset="utf-8"></script>
 <script>
-// Begin shared modal code
-function showModal(id) {
-	document.getElementById('overlay').style.display = 'block';
-	document.getElementById('modal-'+id).style.display = 'block';
-}
-
-var closeModals = function(e) {
-	e.preventDefault();
-	document.getElementById('overlay').style.display = 'none';
-	var modals = document.querySelectorAll('.modal');
-	for (var i=0; i<modals.length; i++) {
-		modals[i].style.display = 'none'; 
-	}
-};
-H.getEl('overlay').on('click', closeModals);
 H.getEl('cancel-delete').on('click', closeModals);
-// end
 var deleteBlog = function(e) {
 	if (document.getElementById('confirm-text').value != '{{.Alias}}') {
 		document.getElementById('delete-errors').innerHTML = '<li class="urgent">Enter <strong>{{.Alias}}</strong> in the box below.</li>';