From 876a9351ac12543f21c81c7e6ea438572b0e28d9 Mon Sep 17 00:00:00 2001
From: Jeremy Mahieu <JeremyM@dynamics.be>
Date: Thu, 19 Dec 2019 22:37:32 +0100
Subject: [PATCH] Validate token field

---
 index.html        | 4 ++--
 js/glowingbear.js | 4 ++++
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index e66f13c..b66a6ae 100644
--- a/index.html
+++ b/index.html
@@ -120,7 +120,7 @@
                     </div>
                     <div class="col-sm-3" ng-Show="settings.useTotp">
                       <label class="control-label" for="totp">Token</label>
-                      <input type="text" class="form-control favorite-font" id="totp" ng-model="totp" autocomplete="off">
+                      <input type="text" class="form-control favorite-font" id="totp" ng-model="totp" ng-change="parseTotp()" ng-class="{'is-invalid': totpInvalid}" autocomplete="off">
                     </div>
                   </div>
                   <div class="alert alert-danger" ng-show="passwordError" ng-cloak>
@@ -152,7 +152,7 @@
                     </label>
                   </div>
                 </div>
-                <button class="btn btn-lg btn-primary" ng-disabled="hostInvalid" ng-click="connect()" ng-cloak>{{ connectbutton }}  <i ng-class="connectbuttonicon" class="glyphicon"></i></button>
+                <button class="btn btn-lg btn-primary" ng-disabled="hostInvalid || (totpInvalid && settings.useTotp)" ng-click="connect()" ng-cloak>{{ connectbutton }}  <i ng-class="connectbuttonicon" class="glyphicon"></i></button>
               </form>
             </div>
           </div>
diff --git a/js/glowingbear.js b/js/glowingbear.js
index d85114c..ee8540e 100644
--- a/js/glowingbear.js
+++ b/js/glowingbear.js
@@ -694,6 +694,10 @@ weechat.controller('WeechatCtrl', ['$rootScope', '$scope', '$store', '$timeout',
         }
     });
 
+    $scope.parseTotp = function() {
+        $scope.totpInvalid = !/^\d{6}$/.test($scope.totp);
+    };
+
     $scope.connect = function() {
         notifications.requestNotificationPermission();
         $rootScope.sslError = false;