From 3110011596113978de7ec819c8d6e9ec508ee253 Mon Sep 17 00:00:00 2001
From: Skylar Ittner <admin@netsyms.com>
Date: Tue, 25 Apr 2017 18:22:27 -0600
Subject: [PATCH] Add Portal API integration, add icon/style settings, add
 navbar and icon  options to PAGES

---
 app.php               |  70 ++++++--
 composer.json         |   3 +-
 composer.lock         | 230 +++++++++++++++++++++++++-
 index.php             |  15 +-
 lang/en_us.php        |  20 +--
 lib/login.php         | 371 +++++++++++++++++-------------------------
 nbproject/project.xml |   2 +-
 pages.php             |   4 +-
 settings.template.php |  14 ++
 static/img/logo.png   | Bin 0 -> 12620 bytes
 static/img/logo.svg   |  78 +++++++++
 11 files changed, 545 insertions(+), 262 deletions(-)
 create mode 100644 static/img/logo.png
 create mode 100644 static/img/logo.svg

diff --git a/app.php b/app.php
index da0a393..9b6a630 100644
--- a/app.php
+++ b/app.php
@@ -36,10 +36,18 @@ if (!is_empty($_GET['page'])) {
         <div class="container">
             <div class="row">
                 <div class="col-xs-12 col-sm-6 col-md-4 col-lg-4 col-sm-offset-3 col-md-offset-4 col-lg-offset-4">
-                    <img class="img-responsive banner-image" src="static/img/banner.png" />
+                    <?php
+                    if ((SHOW_ICON == "both" || SHOW_ICON == "app") && ICON_POSITION != "menu") {
+                        if (MENU_BAR_STYLE != "fixed") {
+                            ?>
+                            <img class="img-responsive banner-image" src="static/img/logo.png" />
+                            <?php
+                        }
+                    }
+                    ?>
                 </div>
             </div>
-            <nav class="navbar navbar-inverse">
+            <nav class="navbar navbar-inverse navbar-<?php echo MENU_BAR_STYLE; ?>-top">
                 <div class="container-fluid">
                     <div class="navbar-header">
                         <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar-collapse">
@@ -48,34 +56,70 @@ if (!is_empty($_GET['page'])) {
                             <span class="icon-bar"></span>
                             <span class="icon-bar"></span>
                         </button>
-                        <a class="navbar-brand" href="app.php?page=home">
+                        <?php
+                        if (SHOW_ICON == "both" || SHOW_ICON == "app") {
+                            if (MENU_BAR_STYLE == "fixed" || ICON_POSITION == "menu") {
+                                ?>
+                                <a class="navbar-brand" href="app.php">
+                                    <img style="height: 35px; padding-bottom: 12px; padding-left: 5px;" src="static/img/logo.png" />
+                                </a>
+                                <?php
+                            }
+                        }
+                        ?>
+                        <a class="navbar-brand" href="app.php">
                             <?php
+                            echo SITE_TITLE;
                             // add breadcrumb-y thing
                             //lang("home");
                             //echo " <i class=\"fa fa-caret-right\"></i> ";
-                            lang(PAGES[$pageid]['title']);
+                            //lang(PAGES[$pageid]['title']);
                             ?>
                         </a>
                     </div>
 
                     <div class="collapse navbar-collapse" id="navbar-collapse">
                         <ul class="nav navbar-nav">
+                            <?php
+                            foreach (PAGES as $id => $pg) {
+                                if ($pg['navbar'] === TRUE) {
+                                    if ($pageid == $id) {
+                                        ?>
+                                        <li class="active">
+                                            <?php
+                                        } else {
+                                            ?>
+                                        <li>
+                                        <?php } ?>
+                                        <a href="app.php?page=<?php echo $id; ?>">
+                                            <?php
+                                            if (isset($pg['icon'])) {
+                                                ?>
+                                                <i class="fa fa-<?php echo $pg['icon']; ?> fa-fw"></i> 
+                                            <?php } ?>
+                                            <?php lang($pg['title']) ?>
+                                        </a>
+                                    </li>
+                                    <?php
+                                }
+                            }
+                            ?>
                         </ul>
                         <ul class="nav navbar-nav navbar-right">
-                            <li class="dropdown">
-                                <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false"><i class="fa fa-gears fa-fw"></i> <?php lang("options") ?> <span class="caret"></span></a>
-                                <ul class="dropdown-menu" role="menu">
-                                    <li><a href="app.php?page=security"><i class="fa fa-lock fa-fw"></i> <?php lang("account security") ?></a></li>
-                                    <li class="divider"></li>
-                                    <li><a href="action.php?action=signout"><i class="fa fa-sign-out fa-fw"></i> <?php lang("sign out") ?></a></li>
-                                </ul>
-                            </li>
+                            <li><a href="action.php?action=signout"><i class="fa fa-sign-out fa-fw"></i> <?php lang("sign out") ?></a></li>
                         </ul>
                     </div>
                 </div>
             </nav>
             <?php
-            // Alert messages
+            if (MENU_BAR_STYLE == "fixed") {
+                ?>
+                <div style="height: 75px;"></div>
+                <?php
+            }
+            ?>
+            <?php
+// Alert messages
             if (!is_empty($_GET['msg']) && array_key_exists($_GET['msg'], MESSAGES)) {
                 // optional string generation argument
                 if (is_empty($_GET['arg'])) {
diff --git a/composer.json b/composer.json
index 84eef1a..6a29d8c 100644
--- a/composer.json
+++ b/composer.json
@@ -4,7 +4,8 @@
     "type": "project",
     "require": {
         "catfan/medoo": "^1.2",
-        "spomky-labs/otphp": "^8.3"
+        "spomky-labs/otphp": "^8.3",
+        "guzzlehttp/guzzle": "^6.2"
     },
     "license": "MIT",
     "authors": [
diff --git a/composer.lock b/composer.lock
index e5888c9..3b20699 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file",
         "This file is @generated automatically"
     ],
-    "content-hash": "51c1672b4dea32e60865b4c0cd9ff8e1",
+    "content-hash": "e0730a4c33d1a1cbf8738481ba9a1f1e",
     "packages": [
         {
             "name": "beberlei/assert",
@@ -170,6 +170,184 @@
             ],
             "time": "2016-05-05T11:49:03+00:00"
         },
+        {
+            "name": "guzzlehttp/guzzle",
+            "version": "6.2.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/guzzle/guzzle.git",
+                "reference": "8d6c6cc55186db87b7dc5009827429ba4e9dc006"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/8d6c6cc55186db87b7dc5009827429ba4e9dc006",
+                "reference": "8d6c6cc55186db87b7dc5009827429ba4e9dc006",
+                "shasum": ""
+            },
+            "require": {
+                "guzzlehttp/promises": "^1.0",
+                "guzzlehttp/psr7": "^1.4",
+                "php": ">=5.5"
+            },
+            "require-dev": {
+                "ext-curl": "*",
+                "phpunit/phpunit": "^4.0",
+                "psr/log": "^1.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "6.2-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/functions_include.php"
+                ],
+                "psr-4": {
+                    "GuzzleHttp\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Michael Dowling",
+                    "email": "mtdowling@gmail.com",
+                    "homepage": "https://github.com/mtdowling"
+                }
+            ],
+            "description": "Guzzle is a PHP HTTP client library",
+            "homepage": "http://guzzlephp.org/",
+            "keywords": [
+                "client",
+                "curl",
+                "framework",
+                "http",
+                "http client",
+                "rest",
+                "web service"
+            ],
+            "time": "2017-02-28T22:50:30+00:00"
+        },
+        {
+            "name": "guzzlehttp/promises",
+            "version": "v1.3.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/guzzle/promises.git",
+                "reference": "a59da6cf61d80060647ff4d3eb2c03a2bc694646"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/guzzle/promises/zipball/a59da6cf61d80060647ff4d3eb2c03a2bc694646",
+                "reference": "a59da6cf61d80060647ff4d3eb2c03a2bc694646",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.5.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "GuzzleHttp\\Promise\\": "src/"
+                },
+                "files": [
+                    "src/functions_include.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Michael Dowling",
+                    "email": "mtdowling@gmail.com",
+                    "homepage": "https://github.com/mtdowling"
+                }
+            ],
+            "description": "Guzzle promises library",
+            "keywords": [
+                "promise"
+            ],
+            "time": "2016-12-20T10:07:11+00:00"
+        },
+        {
+            "name": "guzzlehttp/psr7",
+            "version": "1.4.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/guzzle/psr7.git",
+                "reference": "f5b8a8512e2b58b0071a7280e39f14f72e05d87c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/guzzle/psr7/zipball/f5b8a8512e2b58b0071a7280e39f14f72e05d87c",
+                "reference": "f5b8a8512e2b58b0071a7280e39f14f72e05d87c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.4.0",
+                "psr/http-message": "~1.0"
+            },
+            "provide": {
+                "psr/http-message-implementation": "1.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "~4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.4-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "GuzzleHttp\\Psr7\\": "src/"
+                },
+                "files": [
+                    "src/functions_include.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Michael Dowling",
+                    "email": "mtdowling@gmail.com",
+                    "homepage": "https://github.com/mtdowling"
+                },
+                {
+                    "name": "Tobias Schultze",
+                    "homepage": "https://github.com/Tobion"
+                }
+            ],
+            "description": "PSR-7 message implementation that also provides common utility methods",
+            "keywords": [
+                "http",
+                "message",
+                "request",
+                "response",
+                "stream",
+                "uri",
+                "url"
+            ],
+            "time": "2017-03-20T17:10:46+00:00"
+        },
         {
             "name": "paragonie/random_compat",
             "version": "v2.0.10",
@@ -218,6 +396,56 @@
             ],
             "time": "2017-03-13T16:27:32+00:00"
         },
+        {
+            "name": "psr/http-message",
+            "version": "1.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/php-fig/http-message.git",
+                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/php-fig/http-message/zipball/f6561bf28d520154e4b0ec72be95418abe6d9363",
+                "reference": "f6561bf28d520154e4b0ec72be95418abe6d9363",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Psr\\Http\\Message\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP-FIG",
+                    "homepage": "http://www.php-fig.org/"
+                }
+            ],
+            "description": "Common interface for HTTP messages",
+            "homepage": "https://github.com/php-fig/http-message",
+            "keywords": [
+                "http",
+                "http-message",
+                "psr",
+                "psr-7",
+                "request",
+                "response"
+            ],
+            "time": "2016-08-06T14:39:51+00:00"
+        },
         {
             "name": "spomky-labs/otphp",
             "version": "v8.3.0",
diff --git a/index.php b/index.php
index c86ad87..8de8dd3 100644
--- a/index.php
+++ b/index.php
@@ -39,9 +39,12 @@ if ($VARS['progress'] == "1") {
     }
 } else if ($VARS['progress'] == "2") {
     if (verifyTOTP($VARS['username'], $VARS['authcode'])) {
-        doLoginUser($VARS['username'], $VARS['password']);
-        header('Location: app.php');
-        die("Logged in, go to app.php");
+        if (doLoginUser($VARS['username'])) {
+            header('Location: app.php');
+            die("Logged in, go to app.php");
+        } else {
+            $alert = lang("login server user data error", false);
+        }
     } else {
         $alert = lang("2fa incorrect", false);
     }
@@ -64,7 +67,11 @@ if ($VARS['progress'] == "1") {
             <div class="row">
                 <div class="col-xs-12 col-sm-6 col-md-4 col-lg-4 col-sm-offset-3 col-md-offset-4 col-lg-offset-4">
                     <div>
-                        <img class="img-responsive banner-image" src="static/img/banner.png" />
+                        <?php
+                        if (SHOW_ICON == "both" || SHOW_ICON == "index") {
+                            ?>
+                            <img class="img-responsive banner-image" src="static/img/logo.png" />
+                        <?php } ?>
                     </div>
                     <div class="panel panel-primary">
                         <div class="panel-heading">
diff --git a/lang/en_us.php b/lang/en_us.php
index 526fdad..9ddff0b 100644
--- a/lang/en_us.php
+++ b/lang/en_us.php
@@ -13,30 +13,14 @@ define("STRINGS", [
     "password expired" => "You must change your password before continuing.",
     "account terminated" => "Account terminated.  Access denied.",
     "account state error" => "Your account state is not stable.  Log out, restart your browser, and try again.",
-    "password on 500 list" => "The given password is ranked number {arg} out of the 500 most common passwords.  Try a different one.",
     "welcome user" => "Welcome, {user}!",
-    "change password" => "Change password",
-    "security options" => "Security options",
-    "account security" => "Account security",
     "sign out" => "Sign out",
     "settings" => "Settings",
     "options" => "Options",
     "404 error" => "404 Error",
     "page not found" => "Page not found.",
-    "current password incorrect" => "The current password is incorrect.  Try again.",
-    "new password mismatch" => "The new passwords did not match.  Try again.",
-    "weak password" => "Password does not meet requirements.",
-    "password updated" => "Password updated successfully.",
-    "setup 2fa" => "Setup 2-factor authentication",
-    "2fa removed" => "2-factor authentication disabled.",
-    "2fa enabled" => "2-factor authentication activated.",
-    "remove 2fa" => "Disable 2-factor authentication",
-    "2fa explained" => "2-factor authentication adds more security to your account. You'll need an app such as Google Authenticator on your smartphone. When you have the app installed, you can enable 2-factor authentication by clicking the button below and scanning a QR code with the app. Whenever you sign in in the future, you'll need to input a six-digit code from your phone into the login page when prompted. You can disable 2-factor authentication from this page if you change your mind.",
-    "2fa active" => "2-factor authentication is active on your account.  To remove 2fa, reset your authentication secret, or change to a new security device, click the button below.",
-    "enable 2fa" => "Enable 2-factor authentication",
-    "scan 2fa qrcode" => "Scan the QR Code with the authenticator app, or enter the secret key manually.",
-    "confirm 2fa" => "Finish setup",
     "invalid parameters" => "Invalid request parameters.",
-    "ldap server error" => "The LDAP server returned an error: {arg}",
+    "login server error" => "The login server returned an error: {arg}",
+    "login server user data error" => "The login server refused to provide account information.  Try again or contact technical support.",
     "home" => "Home",
 ]);
\ No newline at end of file
diff --git a/lib/login.php b/lib/login.php
index 67fdf90..a9e635b 100644
--- a/lib/login.php
+++ b/lib/login.php
@@ -1,147 +1,98 @@
 <?php
 
 /**
- * Authentication and account functions
+ * Authentication and account functions.  Connects to a Portal instance.
  */
-use Base32\Base32;
-use OTPHP\TOTP;
-use LdapTools\LdapManager;
-use LdapTools\Connection\ADResponseCodes;
-
 ////////////////////////////////////////////////////////////////////////////////
 //                           Account handling                                 //
 ////////////////////////////////////////////////////////////////////////////////
 
 /**
- * Add a user to the system.  /!\ Assumes input is OK /!\
- * @param string $username Username, saved in lowercase.
- * @param string $password Password, will be hashed before saving.
- * @param string $realname User's real legal name
- * @param string $email User's email address.
- * @return int The new user's ID number in the database.
- */
-function adduser($username, $password, $realname, $email = null, $phone1 = "", $phone2 = "") {
-    global $database;
-    $database->debug()->insert('accounts', [
-        'username' => strtolower($username),
-        'password' => (is_null($password) ? null : encryptPassword($password)),
-        'realname' => $realname,
-        'email' => $email,
-        'phone1' => $phone1,
-        'phone2' => $phone2,
-        'acctstatus' => 1
-    ]);
-
-    return $database->id();
-}
-
-/**
- * Get where a user's account actually is.
- * @param string $username
- * @return string "LDAP", "LOCAL", "LDAP_ONLY", or "NONE".
- */
-function account_location($username, $password) {
-    global $database;
-    $user_exists = user_exists($username);
-    if (!$user_exists && !LDAP_ENABLED) {
-        return false;
-    }
-    if ($user_exists) {
-        $userinfo = $database->select('accounts', ['password'], ['username' => $username])[0];
-        // if password empty, it's an LDAP user
-        if (is_empty($userinfo['password']) && LDAP_ENABLED) {
-            return "LDAP";
-        } else if (is_empty($userinfo['password']) && !LDAP_ENABLED) {
-            return "NONE";
-        } else {
-            return "LOCAL";
-        }
-    } else {
-        if (user_exists_ldap($username, $password)) {
-            return "LDAP_ONLY";
-        } else {
-            return "NONE";
-        }
-    }
-}
-
-/**
- * Checks the given credentials against the database.
+ * Checks the given credentials against the API.
  * @param string $username
  * @param string $password
  * @return boolean True if OK, else false
  */
 function authenticate_user($username, $password) {
-    global $database;
-    global $ldap_config;
-    if (is_empty($username) || is_empty($password)) {
-        return false;
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "auth",
+            'username' => $username,
+            'password' => $password
+        ]
+    ]);
+
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
     }
-    $loc = account_location($username, $password);
-    if ($loc == "NONE") {
-        return false;
-    } else if ($loc == "LOCAL") {
-        $hash = $database->select('accounts', ['password'], ['username' => $username, "LIMIT" => 1])[0]['password'];
-        return (comparePassword($password, $hash));
-    } else if ($loc == "LDAP") {
-        return authenticate_user_ldap($username, $password);
-    } else if ($loc == "LDAP_ONLY") {
-        if (authenticate_user_ldap($username, $password) === TRUE) {
-            try {
-                $user = (new LdapManager($ldap_config))->getRepository('user')->findOneByUsername($username);
-                var_dump($user);
-                adduser($user->getUsername(), null, $user->getName(), ($user->hasEmailAddress() ? $user->getEmailAddress() : null));
-                return true;
-            } catch (Exception $e) {
-                sendError("LDAP error: " . $e->getMessage());
-            }
-        } else {
-            return false;
-        }
+
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK") {
+        return true;
     } else {
         return false;
     }
 }
 
 /**
- * Check if a username exists in the local database.
+ * Check if a username exists.
  * @param String $username
  */
 function user_exists($username) {
-    global $database;
-    return $database->has('accounts', ['username' => $username, "LIMIT" => QUERY_LIMIT]);
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "userexists",
+            'username' => $username
+        ]
+    ]);
+
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
+    }
+
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK" && $resp['exists'] === true) {
+        return true;
+    } else {
+        return false;
+    }
 }
 
 /**
  * Get the account status: NORMAL, TERMINATED, LOCKED_OR_DISABLED,
  * CHANGE_PASSWORD, or ALERT_ON_ACCESS
- * @global $database $database
  * @param string $username
  * @return string
  */
 function get_account_status($username) {
-    global $database;
-    $loc = account_location($username);
-    if ($loc == "LOCAL") {
-        $statuscode = $database->select('accounts', [
-                    '[>]acctstatus' => [
-                        'acctstatus' => 'statusid'
-                    ]
-                        ], [
-                    'accounts.acctstatus',
-                    'acctstatus.statuscode'
-                        ], [
-                    'username' => $username,
-                    "LIMIT" => 1
-                        ]
-                )[0]['statuscode'];
-        return $statuscode;
-    } else if ($loc == "LDAP") {
-        // TODO: Read actual account status from AD servers
-        return "NORMAL";
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "acctstatus",
+            'username' => $username
+        ]
+    ]);
+
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
+    }
+
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK") {
+        return $resp['account'];
     } else {
-        // account isn't setup properly
-        return "LOCKED_OR_DISABLED";
+        return false;
     }
 }
 
@@ -150,93 +101,64 @@ function get_account_status($username) {
 ////////////////////////////////////////////////////////////////////////////////
 
 /**
- * Setup $_SESSION values to log in a user
+ * Setup $_SESSION values with user data and set loggedin flag to true
  * @param string $username
  */
-function doLoginUser($username, $password) {
-    global $database;
-    $userinfo = $database->select('accounts', ['email', 'uid', 'realname'], ['username' => $username])[0];
-    $_SESSION['username'] = $username;
-    $_SESSION['uid'] = $userinfo['uid'];
-    $_SESSION['email'] = $userinfo['email'];
-    $_SESSION['realname'] = $userinfo['realname'];
-    $_SESSION['password'] = $password; // needed for things like EWS
-    $_SESSION['loggedin'] = true;
-}
-
-/**
- * Send an alert email to the system admin
- * 
- * Used when an account with the status ALERT_ON_ACCESS logs in
- * @param String $username the account username
- */
-function sendLoginAlertEmail($username) {
-    // TODO: add email code
-}
-
-////////////////////////////////////////////////////////////////////////////////
-//                              LDAP handling                                 //
-////////////////////////////////////////////////////////////////////////////////
+function doLoginUser($username) {
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "userinfo",
+            'username' => $username
+        ]
+    ]);
 
-/**
- * Checks the given credentials against the LDAP server.
- * @param string $username
- * @param string $password
- * @return mixed True if OK, else false or the error code from the server
- */
-function authenticate_user_ldap($username, $password) {
-    global $ldap_config;
-    if (is_empty($username) || is_empty($password)) {
-        return false;
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
     }
-    $ldapManager = new LdapManager($ldap_config);
-    $msg = "";
-    $code = 0;
-    if ($ldapManager->authenticate($username, $password, $msg, $code)) {
+
+    $resp = json_decode($response->getBody(), TRUE);
+    var_dump($resp);
+    if ($resp['status'] == "OK") {
+        $userinfo = $resp['data'];
+        $_SESSION['username'] = $username;
+        $_SESSION['uid'] = $userinfo['uid'];
+        $_SESSION['email'] = $userinfo['email'];
+        $_SESSION['realname'] = $userinfo['name'];
+        $_SESSION['password'] = $password;
+        $_SESSION['loggedin'] = true;
         return true;
     } else {
-        return $code;
+        return false;
     }
 }
 
-/**
- * Check if a username exists on the LDAP server.
- * @global type $ldap_config
- * @param type $username
- * @return boolean true if yes, else false
- */
-function user_exists_ldap($username, $password) {
-    global $ldap_config;
-    $ldap = new LdapManager($ldap_config);
-    if (!$ldap->authenticate($username, $password, $message, $code)) {
-        switch ($code) {
-            case ADResponseCodes::ACCOUNT_INVALID:
-                return false;
-            case ADResponseCodes::ACCOUNT_CREDENTIALS_INVALID:
-                return true;
-            case ADResponseCodes::ACCOUNT_RESTRICTIONS:
-                return true;
-            case ADResponseCodes::ACCOUNT_RESTRICTIONS_TIME:
-                return true;
-            case ADResponseCodes::ACCOUNT_RESTRICTIONS_DEVICE:
-                return true;
-            case ADResponseCodes::ACCOUNT_PASSWORD_EXPIRED:
-                return true;
-            case ADResponseCodes::ACCOUNT_DISABLED:
-                return true;
-            case ADResponseCodes::ACCOUNT_CONTEXT_IDS:
-                return true;
-            case ADResponseCodes::ACCOUNT_EXPIRED:
-                return false;
-            case ADResponseCodes::ACCOUNT_PASSWORD_MUST_CHANGE:
-                return true;
-            case ADResponseCodes::ACCOUNT_LOCKED:
-                return true;
-            default:
-                return false;
-        }
+function simLogin($username, $password) {
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "login",
+            'username' => $username,
+            'password' => $password
+        ]
+    ]);
+
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
+    }
+
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK") {
+        return true;
+    } else {
+        return $resp['msg'];
     }
-    return true;
 }
 
 ////////////////////////////////////////////////////////////////////////////////
@@ -245,43 +167,31 @@ function user_exists_ldap($username, $password) {
 
 /**
  * Check if a user has TOTP setup
- * @global $database $database
  * @param string $username
  * @return boolean true if TOTP secret exists, else false
  */
 function userHasTOTP($username) {
-    global $database;
-    $secret = $database->select('accounts', 'authsecret', ['username' => $username])[0];
-    if (is_empty($secret)) {
-        return false;
-    }
-    return true;
-}
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "hastotp",
+            'username' => $username
+        ]
+    ]);
 
-/**
- * Generate a TOTP secret for the given user.
- * @param string $username
- * @return string OTP provisioning URI (for generating a QR code)
- */
-function newTOTP($username) {
-    global $database;
-    $secret = random_bytes(20);
-    $encoded_secret = Base32::encode($secret);
-    $userdata = $database->select('accounts', ['email', 'authsecret', 'realname'], ['username' => $username])[0];
-    $totp = new TOTP((is_null($userdata['email']) ? $userdata['realname'] : $userdata['email']), $encoded_secret);
-    $totp->setIssuer(SYSTEM_NAME);
-    return $totp->getProvisioningUri();
-}
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
+    }
 
-/**
- * Save a TOTP secret for the user.
- * @global $database $database
- * @param string $username
- * @param string $secret
- */
-function saveTOTP($username, $secret) {
-    global $database;
-    $database->update('accounts', ['authsecret' => $secret], ['username' => $username]);
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK") {
+        return $resp['otp'];
+    } else {
+        return false;
+    }
 }
 
 /**
@@ -292,11 +202,26 @@ function saveTOTP($username, $secret) {
  * @return boolean true if it's legit, else false
  */
 function verifyTOTP($username, $code) {
-    global $database;
-    $userdata = $database->select('accounts', ['email', 'authsecret'], ['username' => $username])[0];
-    if (is_empty($userdata['authsecret'])) {
+    $client = new GuzzleHttp\Client();
+
+    $response = $client
+            ->request('POST', PORTAL_API, [
+        'form_params' => [
+            'key' => PORTAL_KEY,
+            'action' => "verifytotp",
+            'username' => $username,
+            'code' => $code
+        ]
+    ]);
+
+    if ($response->getStatusCode() > 299) {
+        sendError("Login server error: " . $response->getBody());
+    }
+
+    $resp = json_decode($response->getBody(), TRUE);
+    if ($resp['status'] == "OK") {
+        return $resp['valid'];
+    } else {
         return false;
     }
-    $totp = new TOTP(null, $userdata['authsecret']);
-    return $totp->verify($code);
 }
diff --git a/nbproject/project.xml b/nbproject/project.xml
index f94ab98..3edeb05 100644
--- a/nbproject/project.xml
+++ b/nbproject/project.xml
@@ -3,7 +3,7 @@
     <type>org.netbeans.modules.php.project</type>
     <configuration>
         <data xmlns="http://www.netbeans.org/ns/php-project/1">
-            <name>WebAppTemplate</name>
+            <name>BusinessAppTemplate</name>
         </data>
     </configuration>
 </project>
diff --git a/pages.php b/pages.php
index b22e658..6c876d4 100644
--- a/pages.php
+++ b/pages.php
@@ -3,7 +3,9 @@
 // List of pages and metadata
 define("PAGES", [
     "home" => [
-        "title" => "home"
+        "title" => "home",
+        "navbar" => true,
+        "icon" => "home"
     ],
     "404" => [
         "title" => "404 error"
diff --git a/settings.template.php b/settings.template.php
index d8e11e7..8bfd650 100644
--- a/settings.template.php
+++ b/settings.template.php
@@ -18,6 +18,20 @@ define("SITE_TITLE", "Web App Template");
 // Used to identify the system in OTP and other places
 define("SYSTEM_NAME", "Web App Template");
 
+// Which pages to show the app icon on:
+// index, app, both, none
+define("SHOW_ICON", "both");
+// Where to put the icon: top or menu
+// Overridden to 'menu' if MENU_BAR_STYLE is 'fixed'.
+define("ICON_POSITION", "menu");
+// App menu bar style: fixed or static
+define("MENU_BAR_STYLE", "fixed");
+
+// URL of the Business Portal API endpoint
+define("PORTAL_API", "http://localhost/api.php");
+// Business Portal API Key
+define("PORTAL_KEY", "123");
+
 // For supported values, see http://php.net/manual/en/timezones.php
 define("TIMEZONE", "America/Denver");
 
diff --git a/static/img/logo.png b/static/img/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..d950420a362d7d823f5546fa1189e337209c82a9
GIT binary patch
literal 12620
zcmeHOhd<T-_kY<+qD6LzB&$NQWyB?9Z<5H~vbhzdVMN@rm9j^+o7Ggw$hx*98P~|(
z{LZb<U-5nXdOV8izF+Ux>zwm?p67X<<Ng&bRr<ZGdl5qP7&T>GgvjArazslFUzYqj
zH{c7Umm)@=7JdcMUXOsk?{QZ%@q*72NWaMxPbK-mKeBkM7<=ov*?Id~d)gvjUteJd
zS0^tUYj;~=H_sbMvofp*9YYx9i~4@aGlPNN2Fod{^R04wFj)6Jl)NKM7hU&Y8qn<@
zm&@hO*^}j*n|BqEOL*PKt4Eyr=IxVuLpFG)c;-Sy#qzlYV+|+zQxp%F1zlVOj>V$m
z%xYK#^5X;VyUb~OTe)JM#w9n%eUS_tPafVZ?>6DNeq*<;%6xoNvc5L7-X-T=sY_r)
z<~+`7RJi`G`c&Y0y!U$Rg(62vbo8Z8yFaEJw<{wuS)94hRCEqwn_$ban6F49SVU*v
zS}}7NQ_4Gd(jh8SXULEeDd5->mLxDl-tD&~`N5oo(JWO;)L&7`D=X-bkx7&hra@Tu
z?3gn3b~nMM(+l{ct>g`3+8e7x-O<*C-2Dj2Tsbu<5j#{SNGxWis^Ub>{dHRH9kHCa
zCqGu!!2HJ|V;6X~t(r={4zTx>qpSTZJeXE>ytZz>*(f<;BunHCJ~lZl)YLci32V)O
zDqI+1m*!$qpZua*1(ztFF>80@4VD<lqkYE&Ygh2d@=RvM-VJkNN9g&Lg3Mi^NtLFO
z#P??vjLESs{fBsKg(p9`CvzdB<Q%)y>^{K7xWMn<U%{2IRBgY5kT>BnX1&5i{^-=9
zdxEH^Vz9qrCJhsyq<by9g$`jy4)O|Bx@<~RxUAB5VU#@gG*rxpVdgZ{89uHfq@eII
zw$9GP(AHPGa|Vub^KND|5B=P1H9`#rU22I=CWh9&TI~fIaE#$olOoU8DbSCE!<e+5
z3fVW(e3PE2*kyA+CNx2;N}38GY&!juvX+XOY75zmIAJpQkP<G{^>9hj0eDs06wjcm
zNq5%Uooj7mKNb?|LgSwto}ME|*cfS{$+<hVe8;j$)}+O-@kG-8UWG@DIby|{O7ge0
zLf?9zs+yHQUavbD5H>Yitvxcqwo6j-!qX%a%AY8YkgUP0%rt4)p6~m>Xseij(!3*N
z2oYqQO}ZEIIJ~<^D;r~|VmHE{pGJt$aGXc8QqXBUen0*vFN8-hzN}KdnG0b*$DEps
zY?7_fGkQbwBXp`g4(^u1ucs#`*^H#pJ4kk5NGQ|L^|W__D=B>8xWjE*lSYc|KkA}L
zo{6-8nz(U$wA7|`0}CuG%6sJI3fxM@1Btwvd%cye-VjB*r%C&L+`>0$MZTS`6j$jI
z_(<4dGn(E@2QK55@Kk#(3hdjlO=rP|9w4n~f8fOAvz5?E2?}t~gUs#Np94925UNVQ
z*nX<1B&uvnWs?O<qr6Cij`e-ez}L@Ml`$ZOY9l&?+#g#-yVX*{a}}90g*Xa?24ZbZ
z3?KiJr)bCug@Eg)5V9&uA<K^OPT?B^z>t`(5OhlRmV`i()zy8O#S2E1cvK>ompgW_
z!6h{T4n44NWU?s`xy~2DW%=>kEK@{;j6Ftdpu-aafGt<BiPg5ZA~-Vhgpn+SwDQC2
zX_+3DMzD^#cnhCH4Z#3jV-(2;e_l<UH-`lqWJZHy3zzW#cRzBSf?_xPEg+WM4dl}@
zm5cJ=bA?ll`{2v($s4^DgU9$=i0berCsx7!3YWkCKf7SD%?L(zp@mN!C4nLK*8lRi
z*J_2qb<IPyfd*Huq;G8n9XWhByQaq6!^0y{Hn1Yq|2K=Ron3$h_pzo5mwqBQI;K0*
zU)fsJ%M72ZsHo@|9sT)p=@XmV#8BXz&ujJc6X1ml`X(m58NF#2Jh&$oKQuN9$je*B
zoz&c`6pt09M2PlB!z~Jq#O>EMjfyvSl3eka(9QngUyB|BOf?t5l{HgSQ{5+r+y6wf
zOCDVDunL&u6*4K|nI1*Az%@r-R#X`B^78f-Ti=n}UeY6N_|>aVai$xqb44lAzNf{-
zyW-}p&jT1_`%HE6A7N&$48e<>I(5atA%|eQ{-wFO%gn8I%!lO+BN<ZAzYwzJM_dYS
zN~77&{s%9pD!2B7qB%vHKs<N#D6A3TwXx)I<j9fr;F95LuPpB68RyPyozwjMI>U9r
zwZc@?#}S(Nu9YG+=F1ln5>mG^(?9NGa(s2Vv~{X_JarMj?`Rl8>5UhHH_9qp2d5<B
z>wV`ei<&%DoSpOc?%n$&K7P!H{|qG=!t%8wOTKXFuUHq~lnq=_9uV8Xl2JT~i|g3<
z`uX$3f?>VHkl%~*t^=QkkUJG@y$4RK)nDnh`o^x_i6AU4ArWX{dSzpon3bO|SbtaE
z<EL`{T?-?lEV<wfZ~sSDI}5mgpZEC`b%fnjzzxT{dU~=4-}r78l!^!lbbNfsTq`Ve
z>i+%vUt3!0u9Y%mz9CBw-Q77YB-B-G{T?5*zhMv9L->vR$nCF9P1|z4ZoMTck&%&>
zIHo66RTm&k9J}*P3YtUSh3$E8|Nfp0^FewPTW0^AyTJJMbF*<&co#0{V})ip2nTw4
zdeU>2wE+&(J+DL3rn9uu3ahHBVv^+#lPSc)LNC@A$M2<cA3Fmt-T%D0S3Bvv=KTD;
zHJhkD+0|d4ACp{g?b<ckTyiOHgzh>yI_jF3JhLh#c{(__mhh75<3l?xwQO=MkL=<%
z(Ty+KAqQi<$Yvma+@W+_F{^Ynu&_vhkMW*AZ#eoXa?xo;FH6fnQSmn6Ww;pn@adD|
z;_qhs$Xzx?Pq}m<NXIXQEo-tZ-rQ8NEp7esMQ3iP77Uhtg&JWJrF?SbHm6I42V-c>
z_mH6o@>_}9a9@@_GF$n9Phg*7AzNz^4lB39q>x&BYv_)b>~g2xaaleEgt)J$sHhNG
zH*eo2cNwm;7;jBm#pkEP9wi3cl|CnB^}joSNM3Dk*QMu@lgS(p@1;cw4BZ0*`3no4
z^)sH8Zo`FM<1POGy~+9=Wj%2@j!!#k&5kRg1Dy$4a~BsEpZqiOKB@)Wr&wTGp8IBu
ztbnwN=S17_dWWq@Hi@ZUU*arrN6MZ&Ib5&3QhKA+P**pWU|app0X@Co@jPVhJ=av-
z=B!uHY*(I<)7#rrgZvEkDnN4D>w4Y#$}oId$$wzq<!&pbcFpbS7w^;vH;KNb#KN|l
zlO(jA2!%f0vj<LG%FfJG-iGtIK0{>4U1`&9xA#Wc<l6iw>E$cUJFk*l+kd>hQ!AXO
zy5~I7H#9tb;>7!TS#}MaaMxn1{P5s8GH{0DOw#u6<|Lo#p0h<wdrdd(<h_1h=H=rH
zv@ncjc1AIo<EepK!@E1H94YcAPhLura5L1>(yE-IghNY|xvivy?o>x{%1-&1Tyz?q
zzVYp8#&M;)einwxQ|idx(XqYEp`$E#^QNlJ^&2-x`1Shr>%rV3cB8wT4H+xVAx#NF
zQl7se2)0xO!KL-{pV)kw#R+~E3E!{T*erh)D6;?k?U|#iYu(g*czF26N0E?>thA86
z@F~WEr(}rSet3FuagjrWFoo%p*qrRhBKA2IE#vdEyW?4~OxiN@VU_@Ts-sIY{YD=@
zepJ`cAgYtBb-`!q$%BUvw^>6rC4Q^5)&0E`O853J;{`{(`B1W?*QLqH$=t%in_}G@
zz5^Mn!=d#WKIFiBc})|y0d?aaKOU)U30a!>Zi%Dv5rI&Aa75rqQWDXx#vsqoVdP!-
z#V%SkN~HX{BTG9kJNt7{@7zGO-s6?}piR59xVRUO9_=e?Qsl$4As&aFt@VJp+Ew;Q
zTx{%fz#_*6EZN1bJ&cI)2noqJq;Dz*m2#cAian{B_=_;z(a~XRl0bO*HscB<HaGXQ
z?e*&yh8EVPhu5P*R!Y;T4B##(e7K)rH(VbY3TV<k{o?W|xV_s;S@K=0b*r+fHXA{5
zE<ME;MeV-1o0C2reRE~n<OmbfhWIAjOG(qyU2$#G%?EN(TW4n`nAHi=deo=puU~Zm
znFE%m#;OdTMh2rco8*7U8NFsVTx2D0YikRbd;bvM*YQPv3s!Em{#r7)>waCMzSBJ!
z%vM1<yIZZh(~3S3)Zb9UA-JFfxZK=zy?iH6o|cwQvWqs%NF=kL@6^+tWUgNefAM;A
zY4XL-pVusW2YsTV?!k4XeM84A42iX-{JR^R08ra^Dd!d6WPfGRN$u3jrHx0zrBJeL
zpdt8A%I{D5i}~@ElspExwTADn&#;jJSl9JdIzQ|0>6!3xxH#FBhx-)8K?GMW{Q3f5
zJC7Gza?jY0VwYN^=O$7EXFbf{_q){>yqT-(pPxT-hzwaUW%rJckLP7%yd}2ZhARuJ
zu`x4``#3}>jL@Q3Z-RxdLvx~dR1}AlclOQMft*_uG*WW%-;@ycgr=tEX#oL1NGd9-
z+@hjYd>ILzI$mk&1qIa*ULIEu6F}@2+!bK+QLEH`3t#w_e?AoX_p}1d_x5QU8yj)g
zfeZC^@;+1gygWR97Oc;Wt4PqiyS2D6>swEpFivaD(w5)W7roK4&vD<=I|yNPRaC+)
zL)LABVZpxFHmb^6qm}ukX#lpKo}Q36KPK8&2`7{N`1$c+qFgYZlwK#+rl+09#>WND
zCmb1`h}acKmlzJxi<aB4{~)#v*`|Cpa=4;bG&0(r`Ou*kMwb36q+lw0@T$1@%I<pF
z?xdgU#i!vc=)DUhHxiD8(=pcw^QQOo7{AQQ+7#b}<zLNzw+Z*6PXE}UEkENow+rc&
zglP^A4i>C*-yfo@Rq&AG@>G{4?)YSTRuTl(hDA}DjDJbM>g<e<1J=fs5)1eWxTXZ8
z!`)jZkm494Id+7afioXq8!uPbI^Ges=a7`xW?k?m-ja?{-IWqyOiS$|XYoYg#>Vln
zu}QAod9F7yoX;7^8r)rF9(@{LTpx@inOF1KITgs_)?94vNoHgUdtIqTczIP`zI-`N
zkA<T4eYgNJ51c7C#e3)20qpVXy~>6(Z_Pq8;V`fd(J*l82L#|-Qe}w~YrGl>6EAU=
zQ{7J^IGwLW6<+|zv-BIG3SJwzCl$0-Oc+Bt4r_l#HoixP{90QxvI;gxI`6XAMkRvh
z8#>w&seuw~Cx0iob%Td|T4h%+Y<N>DpO(0RGBpAzzCAsww7$L`71jFfoBqX%WP#VQ
zEGR6^rGJBHwVSKT>93rVle3W(y201zW{Al13JMG^Uc6;kVES@t$-A-MNMAp5cP)CC
z*2XsC@ZYzwU|RsJiLV<uJ17`r(lax8TBndAzrHA97P0JvaMst+$$0Q!@66zv%4On%
z2M=5eh9=>Ab#-;`K_7z8I(tMA*vFp*ney=POu#PiOd^)~X0FvQRXZuY4bG5V1x65}
zS?dy4l%KzkXj8@&IDK}T5V~#D(-NH;jjmqcYrgsC$6M3ltG5jEjYrln*Db{Dz8wu-
zOd9T#sGFy!XFD&LZ$mcnLkt-w@QMtF=;`SJ3z_L%`@;!t)FM|fHBAHtnMH~Y5fN?3
zG95S4f|<JUBnII-Yc6D2W9&QR&nF?6(MY<8o4+hAEeox-r;IFdJ_d4Wt=|_Z8Ea|L
zUAmK~%s^N7Il(eevwnNV&1Y+E-aVcV!wQ$1Gi1$Lc4OiNt9(e1aU(goBzV;-&TVr!
zL+M_Pa8Z-rrUV=8#)2LRv9hw3*)_8YnN?gS5{itxyu7kCoB_q{T2l)eIRhV!h0*4G
z`gCb#xW2yQWa!S8f04#Mx}lxsOX!TbFNK0xe0+Ss_A+64gIJUYkbij0hm<7nb9I|#
ze)HEfQ>4W6ZH`MN1HE{kvLrOjCF6G{f22I?=ghD(DN@g&GJ99o?nbWAeA}jk$wA*?
zdSc4A_LpN}51B=}?=Z-H_EfwB)Fvl4Hy7RyOua~B+T*|d1FE?|4!Ycg6Csq?HYt`6
zd*h3f&upXsRJ>mbY9bgI7&tmQF5o{zyz8$AjJ`|fi|q5#(-n&9HgZFDH;1J|{4hp9
zxy%`4{$LXXO`eyPl@&*Yx8)WTEN@Z{?}Tf_#>R>TEKOjGprSB<!y3ubxb51VfY@(F
zZO;n}wSe_><rUTC%J0laTL&LnSP#N4cbhG*jYbm--^^Z<v}R~)YfFcM2iqJBh`#}_
zStI;fHR9pJ4xnok=YbYATFra(0XnCw%ngTjo&E20mXz3v0dp<CnR3F^V^vOT$qc&v
z98!nfH~VS>SEoKdK4FO?*pTiytEk;0D=)WoIdSpwrg2^bEFL>jvmboR##Zh+C?#Z7
zXTG~VyvwoTR4pkf8L&0q=(D@MYBe8snB2+Px%2HE8j6qyA|fITo4l#^jJa84)QSju
z2;8&$1hpmfH|+rqU`Yy0$Om*p<Hx@zzQ0J3i+F{{C;s;61tzyGSIq!M1X}aKAT%1G
zq626j;Shzw!{5K{wkNei+ucGI*=n~}`g8O0=!kxY__R7tM9Vyff<yo|ly9?4$t-OC
zC$P`FpO7jWXnfw+1WKn%QS2;#Ot+q%wGngwp-?}nv@F&zd+guo0zAQwP$dc&6?PVd
zEDHcbxa*U@w&vHICU3<cyA(59HM;-fhYw*sHSYL!j%C55O<myqx_WvP=hp#TmS+e1
z=c{Q^#9=t43h=>)V_`de66>+C2jdeGa-Tm}EH5wrYhQ=n0XVJF`Tb<*@ofNpwS7qF
zvWb?lmDO;7QShb_<b)oPNaY9cZqnVq>XmlJ`u4`k3{jl}NY-BP1h*tAD~IZBdxKEl
zO)RP}e4!c*n+5O^GA&cnmRrv}Cn~Ds*&?9XHP>GmEiu(pxWq3fB%}$Kop^8$ia1Kz
zqXx47u7^8h>9CkYDo|!Re&6<a+3fZyk}WG_8$^(w1_ux$KZN+h3h-G{)1FNzmN#eL
zXwxwXwn2zV3#R1d<m@4?J^q#GR5)2YsoCVzQ*3=;cOMNo;-&&L_|A?@#Uvz%454dx
z5`@fNi92<NZBK^1dI*u4t@A?4W#RE3{yJ%r(Oz3Jqp&1MVZcYlZnUs-$cLDdE}>IV
zEz?TYp-ZI~?@&_>)ZGLY%6j&iva(1D<>j~gup^hBl1+SjrI}Rb+<R^eGTcD5mnE*_
z1*sDI5OE+S<bk%jI^0&yhb&+^J9IVwndl8i;MoBq;ml8PxGaDO2Z%vS+*l$UdR=^_
z!YZ0o`~e>yxlR;9qr4|iI?n(6Xj<d<8VL0=Fm8wSg)!?;DeEeegszdOjS9_>&oRd>
zakLFe=HzFRzu-{ehncZ3i!QzM^>1-ilvuU5`w*joxp^`a9$Eg2zjN?-Qxdo?PvsRs
zRJ>a@<+fgALyzwPe>h9=!@Me0>nMHF@DGh|Ae)?_Ko@>3u6y^pR8Cg(yLK>y{Go{C
zk{_C%JITlATNPI~wrTzT?mRyymIx&Z^S+~J8oqn<_V)hGhCADv_o}%O?S3w4>=|`6
zwe)q0iO2uTy43%l?SEf;{9p00!qF5Ne_djCfgUJ~b!$KAikir<h9neJP6Q%Hssy5<
z25SQ=cSg8&GL|=g{kk4`^sM3u)hJLBUx+z&W_Qo2MzQBSdGf?Po*sqJA}q!7^76)e
zuATIF0VBt*Tmz}logiF`*VdW`2~44?rCVDB&5guO`1$$OH8r~+4T%F2>7Hx+hxtC^
zY2+vtkR%H@+|qm_m($qScvC2VfZ4OHoMmHUGx*DfA818m)YYdL8T;;rm6eID2bm92
zxZ6^q^vGAQP8L|zTl)L^lO7`}oIV(i&hGA9$gEIJkcAGt@ty0|*h@M`#DNn}5)!&M
zwt=)9;o_R}>_P#o<meFrG%Apm9O2!d8FoBAp;{xHV+M2wWSv(fB_)4fzK|qtFCP~Z
z8_V5PVxG^6?WaX&VqN<CsytpSEG#Uo^t<JOz)OrZH!w5HyM6n%R_IWrn^h#M_*b`+
z8DpP5!m5sttfrtSet3j}Rvg|No0e8oQzHYyqav_8$Rai=@}ZWn>l917KkGs27>q-0
z8Kb@Jd(cEI3RxA-K;8-f6%ID3XK9(bGTl4sBdL>7U2W3U)dhM=_g#86a?TDAChAS@
zB&4?;JP2gr$e}}{o@2-q1P{{bfY-V4i-;6;XuqZ{f+{w<s>&F|8?sPNHnzOZPW?!B
z$#Xw0zXNJ!vOpVlfDGx_?CxwAq%BFC-Qe0!65K^^M0t97EyouHsWe7$=ouKq1LZ5C
zpxK`d{C3$uPwzy3g+*QgA84J9+j9$(S!vWVC;9nv-fz>m7@gn8A@zheT7eld{dZte
z%V0N>&q-!<Y8D3#3@Y8W=PD1qf!#SlqAQSRJMa7y)CcxItH1@JLh$J7>?|u>Ey~Vr
zgHk|WPwxfD!^CgTL<_grxGy%vHoklJ4l6$gc8-mUqi{_G>T4g#A#J$5x$0Z(c<dY)
z!b2-nCI|Qo$>UIBM0a*}{`y)am!=H{>4cYq)|3ZpQwK*u_`ZDg3e<W7AbDibIRynS
z^prCcics^DPW}7$@7W!%=kK7DCT%1!F;UA%oU-pi&djQFGNm3I@&JV7OW)yOBNENS
z`w+cH-cb=gX=!T{-ZRMO-{TBWgZj~$ON5^v1HV8*r(IiwT7^T#uec-T3dA2srs1_M
zY98g0aXld{ued>_2fKBEG+7?B?pa_`dI{9+!pM}=)IybqOp|YExH^{!R&#w-S|2`s
zEI*&q0+-?DQ%U>HZK%?#m`Bc4Sl!K`MH4y@-(@#vOi3IDYLqJ=GdtPbxPJYVgoIIb
zbv3JmYqHbmT_sRgLB^1({dNT;dN5(-P?+zJ1~LOf!`zY*T@VJ^fO=cdo6Dxe&EU*j
zb${KDia4Cm+=yOC_Rfj}1KeDhp)&&^o!+$4HHCCjX5Y-=rGkT@;37gd#=zCJkfglz
zRmoa-d6n+xk{ht*RRXPxNcc-%S-$J)>MkubiBuLk9~HB|^0_4#s$d6*Nh8^)%Ft3^
z>Ei~d%5VPpd6&LS0HUd8iQ!Hli%J1I0xV~*g)s@6XM<rJK&+qkA65a#lJcIo(x5TF
zhd~BfXtktS0D5ShK=69bP&eDh#Kg1(+&|tnb{ACO3qv8#5aI($>LrT&*4t756@#~l
zRs<ymS>+C2ou*palyFMB1GhUC7_$_PXN(2jN9e}CBCXiP3}gmfxTuDO=95!Oz7UQ+
ztAoCzQ+Ew-4-R|888Uc7@27r~!E{#DzE_Q;edFOI1lvoG5@v9#)4eY?Ha7A&TmLKk
zjL@l5r`kwup$#Qp>iz85Z)Wit;4A!0MgL*8rr^TI(-4UO1hekD7yAPbwxr3=`8+%D
z@SmBOzoIMV=J^0PwEzNza^8Gr&+06Ww;F*5fS<kq_D}e9cU3F-!gndJwvv(zTc!+f
z@jV8vSKobZ?+TL&#zN?}fIJAL7u1wjaD*Ia$q}QZXRp8-bt~mXIlgm4g^`h;+o4>%
zL&HFA{-tff)2rG+`@h;18ks%yq4gj;WK<3XG%eqo9SGT+`3lXh+f;NtDfGv^fNt+!
z<tp1AYGyMW{P6GKUaaW6b5C2q>JG>Zzrm7q8(l@GAx=T9)Q12S7$tY<A`ob5cGG7r
zssC--u!#Mu?~~&Y<Do+&L<&TaK=vUx@&^XY2fbQlL$v!S0&)`*Spj<;piL6+;}%Vg
z@OUohThmiJY!m)fDy&9hpUw$3m3WUvN|4_7kV&W=x=ionPBN;KG8zV>V`!N0Vw8rS
zHB)-7rqqXN1S-iwxnENWX09GCf=ic4k`IyI<JIM7?fBgg&`q++Q3mNMfgESPTtyPy
zWX;lNR+?sv&Xvi$IIhpe_wm!GDd->&p785IPe=Kr9r}S^T3YJfUOlm$A+3<T79{r{
zBuNZ<>owRws_YMlyVie0tY)!AI_mt6!#w2VnBNR`=<;~?z6L;p;SG$usAxz0SuzoC
zAL{fxlKsI7jg76TvSw*P3->{|!ONcKW)nrUd9bsI{^6a9y7@>q`++Kt>2EY)ZJ<k)
zUH@{hv612E83iblveuOjilR?mi=0@98xS1@L`C(UJ$v>QRBSuDldamS`W{Zy>5!Vh
z&w0?(tG}?5GQ2(Oi{IVZd?R!6IUQHyKHSr%*#K|V=M0sU?toU^ZM~QdFCr<9EG#VQ
z+S*21T2TP~`5!(g8%>dOe+REI>o11>c}wH4^XEMjW3IK!hTH3{p)2@D`-9}tE=6+=
zN@=v6vpEBLR_fF}&gMuKEVPRUy*o6caP+TUzH|UMVm)(J0ryGCn;RXStz8}J*jit#
z6@LF3&V35rY+_=PDCQ6g^=y1fN&(#WA`J?jaCwvrsTo>bcOZvyaBzVvTfa3Xk|^$E
z*k*Ga@3E)B9aOi!<<j<qs{8`}uqugTk@Q)!3g`LFO-LsjgGMpWp5;L4PSTe3`58Gu
zNiG}xErQuyaofGLsH*S{Da0;~+~b<MA;0+yLjFgeEZGPXBxYzrS5V)<#GT|95YT{f
zJ=F~xHgTkd1q=O<NdVNFL0gYlM3*Y-w<EhGXd|E(2{KD2wCYGo0I0s8h=VllWvg*j
zVu?u5hDM@O?MU%h>^pIS`6!6%<Rg0#a0uwBc0)+AbEJW13d|}Uq3apdh&7=_?!N$8
zK<rzkqXK@Co1Og!Uls!i%faG)+f5b4zg<T913c_xe_cKt@@8kPQC_NWlu*A@&guW_
zKx5;38A{}>;o?#NLgv=(x1b;T{8i%U?t^L#tfSqn;+U+g1&H(JmlQ~1zx?_a?ImbX
zOBIg53A>?DFtg_O^ghBC(|WU56ACQ~WpytMQ13gM4uZsx$kEHGGS9kbY5if6!zGEN
z8ABRX9VKZx(A;7bvyXW(YAsBT%sc*TC{x`5!EoZQ2E}yFMdU;o<zEBK$qf<Pf5cv)
z#%^o`Xr{?o0O5-Iw6Y##S|1`Cy%Bz5fORi{lv-!k2!>6zVHIz$0;z_SyqMiy2=auE
zre<V!5nMUn+JNQup4T?gly|<rPz^NZ=YHG%QiDSx6tl6jTCcr$&*mFSR|S%!3jlQQ
zDx)UuKo7a3RJbGc51<B}DZWGeS#IBfc96Ky&!0cp340;iG3t=IR-}eF)tz_m6hS)t
zMr>C+$;<n3?(X~KWOmJ`XKwLTsYF2c3N#vUdei*aYsmb$pcsxeMl<9>ZwY1&+$Y*H
z_G=v0P*>NtvYPX8IDUYcIqN?=LJRwEw@$3AV-Ti@Do8p4^yr4?pBB}wB!bw?uAc&J
zKApVMS~}7ofuCu47A!PXtUQ00&DFgV%g6~mb&;Asw-badru=G1eFmrw{`KsRPApA!
zoIZVefsPv7qEkxcdHM3AOOdQy$B$l4zVMijAD=Ew2CBF+Xe3@i6w?5=`o_lDKr(!D
zNLxqdpO`+=h8I#}@7|>*xkviuw7XaoKs!l)1syHVqVNc$DrD5=$&%r6CgQhHOn=MK
zVk%F9w>SzKmmdE9P^50cFL^F_E^uQ$I&|PAD;Xqh?>%P6UWi)kLEy{|&~!M4lg`<G
zJsiB!dqZ$tsge<48L!b@r({D>9MZ2~a)CoGsOS6op@Rp@Y@3)g6UB1gynN?QiH?2i
zA@3E0eln<VLdL}kpgN|GF4ix#YnYZ?$M~vK@<3<5Rk?%d^R1_ND$g@yKkoCTw&`ih
zj;##<6n1US)wkLn4TC|8iHoMLQi7*Xx5Eqdp^NbRIX95501MO4JbZit00Shng`NZ?
zpmXQWJ-3@9&mz0pmVOZ;(TjZzNE69y&@J|^R8}|$&3;<vTkMj_)Yz-W2`_>APC?eD
zo%AP7pfJAeA+H|aql%27*^(N%vmTRr=omsecZFhVk4&MM$B#4MrWA`%D1tzB^k-*|
z-f3ass6L?>>HaqjGeR*+Ea)KE!GF;XXj}NNAO$l@)Zh-UGtJnCMC#U_rv@#2iAkoj
z2URuwj)K`S(o_zqR)V-~8=@jXy_(uYx4+U6MB*U~@>?;yp|or;qSJV}huj}hP{G@D
z0kdQGxY0hAbIRcGiSH89+zVhyZ#J`Ip*e5J8cGC7Oc)@TsP&}*WJDAeo?~__nnm;y
zfRu&Yc$~HzOQ#;$twNZ>a5wPrDIeClCnRtPDhim6;DOtP-*U75!Zn}_BU#m?CTM>C
zWhjeu-cT)c!EBHdtPJ3|f<JupHfc`goHgAqrdIjg8d8MAj1Dafx_sybW&?e118^4H
zOql4&gGHbzX^HFRtprGv+n6|!u=Umerdo84>sBg2r{B=pIs<Ann9#Wk6FL!&eA=nb
zDZKX8>&2OwnT^i3Y66xWA&eSe%;y-`V-&PaCz$97kzk+gd94(<I_u*@_scDqXcn+O
zhO=N}uzv`%U^qbX9C%**FhCkfs13^BbLeDtdV0F5%v(k~ut0+WyQJp_x4GL8RPj%q
zWY^WzX^cONjwXN<>+_yoBCJZcK@#5Q{TAfy@*AzG`*8;fZ+2LNs5s;|N<SDlS1W8t
z=MBcfGD`W*CJ)o!17m@vU-@%%R6KCSnKa7+!MTLLjD-zh?+1a*0E2X@@JE9JoFDCj
zXa8rv{T0_a;R7+)U_dX28Lue>OIA(gYqy*H8}0)KpsVSn|0V%%1jp_V{5$^Fbs#O%
z^WP^<1Af7<pl4d<x&Qv5)VZINdor645C1{n*%WM&Iys5``!^$f(*&RAV<srg&jf}f
z-J8=gMYyP!ZZOc1AvC*Q%3~6Hy?;dw6Q7zunua{{t|b4C90mp))pf%gVL%J}=X9kY
zF@0%_7kam2I%i?q9CKws*5yIgr0Lje+FxNE*Ux2wdB%>S6jx0Q?`JBus>6{+^xN9E
zcy~2mdTL<o8hBZHE1;%pg{{Bho_e1M|Io+VFi7eruEuI>()~E0{!bEFF-#a|4p&(m
zf$6$DLjU>DoWXrqp56*sQyeGbVWJ@nN*;3-R%3ND>8`5??cL!-CJ6?|9m35FV4KAO
zrNN6h@^45DRF^n!2Ni{TSTF|nClySbU{hb$4h<RG)|f5%uE@Z@kMmwx#7R9Pi{a_7
zpuzO<I;d6U!mh2o6mf;yX|zl4wX)WPnxyzAt==2_-O$|4?yZ*s|JIkoq^T#eOy$A}
zdYogtOKnYV-k>o*`}f^8yki<uT<_kIPL~`fR#57+D^wVOtG6|I!z;^~OM1pwsM>T9
z$1c2BDkz|x4`ZI`S%Du*@`oiQ|K#G3Da<UZw%cLi@TQ~}Cn;h?1)FkxJ&Q*pLj;>P
z6x+=)1{Q)a02-!Rp1H1-RDbxFRwzt>Kk>eo8F!HhM&jR%hGp(rn;2f<YP&NuMJUNX
zXt9@U{LZ!o6tucNu}sDZ<)S@S)9seK3AQc?Woqrr7VE(XwYgZSncACl-!0rK8BIbI
zuU$4TVVrn*eaE2^K6a`+_P0;@y2ju>1QBx+4};N>6aNOIVJaD3!Z9d`spMLP5$T-F
z-q;8DKw$_smGD^CY1c)ZA|v9NTu8as!MiPUcpM^)LlEcPF?Pg%uzN-W&A@<cWu|Q`
zb=bxL<dBK{OgEE+<;^RpV!vRH4r04V!;EJ5aMU6Nx*DO)D;uz0Epz-xEIbGi@JeHq
zN``yV{=z5N<%5(bOJ$k$462K`cVZN62`>GZ*d1J^o5q7Zf2Ylh?J)ImORZoohH(X$
zMi+v`PfVI%qSYVxIGIDdD3oUU@@xkh-CQQ_C6Fu7^;dN82*oc|Wl~l)(x7x2hbK??
zCU?V}a_dD4X|PN%{v7X}mU)jybN=tFe6ay8VR?I~B>#lv;U6Z*zNumcgFj5kq|Qq8
zkOY@0Rc9K+CRhzAx9Z7qqcR_VyB~I#N(|mYH!%xtTbsBzzU+}(ZKh9xtwDf!bQ&i!
z>VqEzDE{}O0K5JLnID>pZsB$xE#_WASRGd0lsIp7-1$jK_+bFy;CCW8n8mKPHQ|%V
dYrD0}AQu!Tf42VKXSfImqoSo;sCf1E{{dB?YSjP$

literal 0
HcmV?d00001

diff --git a/static/img/logo.svg b/static/img/logo.svg
new file mode 100644
index 0000000..410fb09
--- /dev/null
+++ b/static/img/logo.svg
@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   width="512"
+   height="512"
+   viewBox="0 0 512.00001 512.00001"
+   id="svg2"
+   version="1.1"
+   inkscape:version="0.91 r13725"
+   sodipodi:docname="logo.svg"
+   inkscape:export-filename="/home/skylar/Documents/Projects/Sources/WebAppTemplate/static/img/logo.png"
+   inkscape:export-xdpi="90"
+   inkscape:export-ydpi="90">
+  <defs
+     id="defs4">
+    <inkscape:perspective
+       sodipodi:type="inkscape:persp3d"
+       inkscape:vp_x="-493.3276 : 245.89848 : 1"
+       inkscape:vp_y="0 : 1000 : 0"
+       inkscape:vp_z="464.45088 : 245.89848 : 1"
+       inkscape:persp3d-origin="-14.438371 : 160.56515 : 1"
+       id="perspective4236" />
+  </defs>
+  <sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="0.49497475"
+     inkscape:cx="-135.9681"
+     inkscape:cy="352.66131"
+     inkscape:document-units="px"
+     inkscape:current-layer="layer1"
+     showgrid="false"
+     units="px" />
+  <metadata
+     id="metadata7">
+    <rdf:RDF>
+      <cc:Work
+         rdf:about="">
+        <dc:format>image/svg+xml</dc:format>
+        <dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+        <dc:title></dc:title>
+      </cc:Work>
+    </rdf:RDF>
+  </metadata>
+  <g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(0,-540.36216)">
+    <rect
+       style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:20;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:0.74509804"
+       id="rect4726"
+       width="512"
+       height="512"
+       x="0"
+       y="540.36218"
+       rx="50"
+       ry="50" />
+    <path
+       id="path4348"
+       style="fill:none;fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:9.87128067;stroke-linecap:butt;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;stroke-opacity:1"
+       d="m 132.93564,682.51771 213.96788,-43.14304 0,313.97496 -213.96788,-37.9643 z m 213.96788,-43.14304 0,313.97496 32.16084,-45.18373 0,-217.44396 z m -213.96788,43.14304 213.96788,-43.14304 32.16084,51.34727 -167.21823,22.47784 z m 78.91049,30.68207 167.21823,-22.47784 0,217.44396 -167.21823,-19.77968 z m -78.91049,-30.68207 0,232.86762 78.91049,-26.99911 0,-175.18644 z m 0,232.86762 213.96788,37.9643 32.16084,-45.18373 -167.21823,-19.77968 z"
+       inkscape:connector-curvature="0" />
+  </g>
+</svg>