{% extends "_base.html" %}
{% block title %}Authentication failed{% endblock %}

{% block header %}
{% if error == "unauthorised" %}
<style type="text/css">
    {% include "sso.css" without context %}

    #error_code {
        margin-top: 56px;
    }
</style>
{% endif %}
{% endblock %}

{% block body %}
<div class="error_page">
{# If an error of unauthorised is returned it means we have actively rejected their login #}
{% if error == "unauthorised" %}
        <header>
            <p>You are not allowed to log in here.</p>
        </header>
{% else %}
        <header>
            <h1>There was an error</h1>
            <p>
                <strong id="errormsg">{{ error_description }}</strong>
            </p>
            <p>
                If you are seeing this page after clicking a link sent to you via email,
                make sure you only click the confirmation link once, and that you open
                the validation link in the same client you're logging in from.
            </p>
            <p>
                Try logging in again from your Matrix client and if the problem persists
                please contact the server's administrator.
            </p>
            <div id="error_code">
                <p><strong>Error code</strong></p>
                <p>{{ error }}</p>
            </div>
        </header>
        {% include "sso_footer.html" without context %}

        <script type="text/javascript">
            // Error handling to support Auth0 errors that we might get through a GET request
            // to the validation endpoint. If an error is provided, it's either going to be
            // located in the query string or in a query string-like URI fragment.
            // We try to locate the error from any of these two locations, but if we can't
            // we just don't print anything specific.
            let searchStr = "";
            if (window.location.search) {
                // window.location.searchParams isn't always defined when
                // window.location.search is, so it's more reliable to parse the latter.
                searchStr = window.location.search;
            } else if (window.location.hash) {
                // Replace the # with a ? so that URLSearchParams does the right thing and
                // doesn't parse the first parameter incorrectly.
                searchStr = window.location.hash.replace("#", "?");
            }

            // We might end up with no error in the URL, so we need to check if we have one
            // to print one.
            let errorDesc = new URLSearchParams(searchStr).get("error_description")
            if (errorDesc) {
                document.getElementById("errormsg").innerText = errorDesc;
            }
        </script>
{% endif %}
</div>
{% endblock %}