disable submit button when the email does not match with any connection

src/connection/enterprise.js

@@ -5,8 +5,15 @@ import { dataFns } from '../utils/data_utils';
 import { emailDomain, emailLocalPart } from '../field/email';
 import { setUsername } from '../field/username';
 import { getFieldValue } from '../field/index';
+import { isEmail } from '../field/email';
+import { isSSOEnabled, matchesEnterpriseConnection } from '../engine/classic';
+import { databaseUsernameValue } from './database/index';
+import * as i18n from '../i18n';
+
+import { swap, updateEntity } from '../store/index';
 
 const { get, initNS, tget, tremove, tset } = dataFns(["enterprise"]);
+const { tremove: tremoveCore, tset: tsetCore, tget: tgetCore } = dataFns(["core"]);
 
 // TODO: Android version also has "google-opendid" in the list, but we
 // consider it to be a social connection. See
@@ -147,3 +154,20 @@ export function toggleHRD(m, email) {
 export function isHRDActive(m) {
   return tget(m, "hrd", isSingleHRDConnection(m));
 }
+
+export function verifyHRDEmail(m, str) {
+  if(isEmail(str)
+          && !l.hasSomeConnections(m, "database")
+          && !findADConnectionWithoutDomain(m)
+          && !matchesEnterpriseConnection(m, str) ) {
+
+    m = tsetCore(m, 'hrdEmailError', true);
+    const errorMessage = i18n.str(m, ["error", "login", "hrd.not_matching_email"]);
+    return tsetCore(m, 'globalError', errorMessage);
+  } else if (databaseUsernameValue(m) !== "" && tgetCore(m, 'hrdEmailError')) {
+    m = tsetCore(m, 'hrdEmailError', false);
+    return tremoveCore(m, 'globalError');
+  }
+
+  return m;
+}

src/core.js

@@ -11,7 +11,6 @@ import {
   setupLock,
   updateLock
 } from './core/actions';
-import { termsAccepted } from './connection/database/index';
 import * as l from './core/index';
 import * as c from './field/index';
 import * as idu from './utils/id_utils';
@@ -80,8 +79,7 @@ export default class Base extends EventEmitter {
       if (l.rendering(m)) {
         const screen = this.engine.render(m);
 
-        const disableSubmitButton = screen.name === "main.signUp"
-          && !termsAccepted(m);
+        const disableSubmitButton = screen.isSubmitDisabled(m);
 
         const i18nProp = {
           group: keyPath => i18n.group(m, keyPath),

src/core/screen.js

@@ -23,6 +23,10 @@ export default class Screen {
     return null;
   }
 
+  isSubmitDisabled(m) {
+    return false;
+  }
+
   renderAuxiliaryPane() {
     return null;
   }

src/engine/classic.js

@@ -43,7 +43,11 @@ import { getFieldValue } from '../field/index';
 import { swap, updateEntity } from '../store/index';
 
 export function isSSOEnabled(m) {
-  return isEnterpriseDomain(m, databaseUsernameValue(m));
+  return matchesEnterpriseConnection(m, databaseUsernameValue(m));
+}
+
+export function matchesEnterpriseConnection(m, usernameValue) {
+  return isEnterpriseDomain(m, usernameValue);
 }
 
 export function usernameStyle(m) {

src/engine/classic/login.jsx

@@ -5,8 +5,8 @@ import LoginPane from '../../connection/database/login_pane';
 import PaneSeparator from '../../core/pane_separator';
 import {
   databaseConnection,
-  databaseUsernameValue,
   databaseUsernameStyle,
+  databaseUsernameValue,
   defaultDatabaseConnection,
   hasInitialScreen,
   hasScreen,
@@ -37,7 +37,6 @@ import {
 } from '../classic';
 import * as i18n from '../../i18n';
 
-
 function shouldRenderTabs(m) {
   if (isSSOEnabled(m)) return false;
   if (l.hasSomeConnections(m, "database")) return hasScreen(m, "signUp");
@@ -132,6 +131,15 @@ export default class Login extends Screen {
     return i18n.str(m, ["loginSubmitLabel"]);
   }
 
+  isSubmitDisabled(m) {
+    // it should disable the submit button if there is any connection that
+    // requires username/password and there is no enterprise with domain
+    // that matches with the email domain entered for HRD
+    return !l.hasSomeConnections(m, "database") // no database connection
+            && !findADConnectionWithoutDomain(m) // no enterprise without domain
+            && !isSSOEnabled(m); // no matching domain
+  }
+
   submitHandler(model) {
     if (hasOnlyClassicConnections(model, "social")) {
       return null;

src/engine/classic/sign_up_screen.jsx

@@ -90,6 +90,10 @@ export default class SignUp extends Screen {
     return signUp;
   }
 
+  isSubmitDisabled(m) {
+    return !termsAccepted(m)
+  }
+
   renderAuxiliaryPane(lock) {
     return renderSignedInConfirmation(lock)
       || renderSignedUpConfirmation(lock)

src/field/email.js

@@ -1,15 +1,21 @@
 import trim from 'trim';
 import { setField } from './index';
 import { endsWith } from '../utils/string_utils';
+import { verifyHRDEmail } from '../connection/enterprise';
 
 const regExp = /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
 
 export function validateEmail(str) {
+  return isEmail(str);
+}
+
+export function isEmail(str) {
   const result = regExp.exec(trim(str.toLowerCase()));
   return result && result[0];
 }
 
 export function setEmail(m, str) {
+  m = verifyHRDEmail(m, str);
   return setField(m, "email", str, validateEmail);
 }
 

src/i18n/en.js

@@ -19,7 +19,8 @@ export default {
       "password_change_required": "You need to update your password because this is the first time you are logging in, or because your password has expired.", // TODO: verify error code
       "password_leaked": "This login has been blocked because your password has been leaked in another website. We’ve sent you an email with instructions on how to unblock it.",
       "too_many_attempts": "Your account has been blocked after multiple consecutive login attempts.",
-      "session_missing": "Couldn't complete your authentication request. Please try again after closing all open dialogs"
+      "session_missing": "Couldn't complete your authentication request. Please try again after closing all open dialogs",
+      "hrd.not_matching_email": "Please, use your corporate email to login."
     },
     passwordless: {
       "bad.email": "The email is invalid",

support/index.html

@@ -16,10 +16,7 @@
     const cid = "ixeOHFhD7NSPxEQK6CFcswjUsa5YkcXS";
     const domain = "auth0-tests-lock.auth0.com";
     const options = {
-      auth: {
-        responseType: 'id_token'
-      },
-      oidcConformant: true
+      rememberLastLogin:false
     };
 
     const lock = new Auth0Lock(cid, domain, options);
@@ -38,11 +35,7 @@
       console.log('authorization_error', error);
     });
 
-    lock.show({
-      languageDictionary: {
-        title: "sarlanga"
-      }
-    });
+    lock.show();
 
   </script>
 </body>

webpack.config.js

@@ -4,11 +4,11 @@ var path = require('path');
 module.exports = {
   entry: './src/browser.js',
   output: {
-    path: path.join(__dirname, "../build"),
+    path: path.join(__dirname, '../build'),
     filename: 'lock.js'
   },
   resolve: {
-    extensions: ["", ".webpack.js", ".web.js", ".js", ".jsx", ".styl"]
+    extensions: ['', '.webpack.js', '.web.js', '.js', '.jsx', '.styl']
   },
   progress: true,
   watch: true,
@@ -25,23 +25,23 @@ module.exports = {
     reasons: true
   },
   stylus: {
-    preferPathResolver: 'webpack',
+    preferPathResolver: 'webpack'
   },
   module: {
     loaders: [
       {
         test: /\.jsx?$/,
         loader: 'babel-loader',
-        exclude: __dirname + './node_modules',
+        exclude: path.join(__dirname, 'node_modules'),
         query: {
-          plugins: ["version-inline", "transform-css-import-to-string"],
-          presets: ["es2015-loose", "stage-0", "react"]
+          plugins: ['version-inline', 'transform-css-import-to-string'],
+          presets: ['es2015-loose', 'stage-0', 'react']
         }
       },
       {
         test: /\.styl$/,
         loader: 'css-loader!stylus-loader?paths=node_modules/bootstrap-stylus/stylus/'
       }
     ]
-  },
-};
+  }
+};