{*
SPDX-FileCopyrightText: © 2021 Olivier Meunier <olivier@neokraft.net>

SPDX-License-Identifier: AGPL-3.0-only
*}
{{ extends "./base" }}
{{ import "/_libs/forms" }}

{{ block title() }}{{ gettext("Security") }}{{ end }}

{{ block mainContent() }}
<h1 class="title text-h2">{{ yield title() }}</h1>

{{- if !user.Locked() -}}
<form action="{{ urlFor() }}" method="post" class="mb-8">
  {{ yield formErrors(form=.ChangeForm) }}

  <fieldset>
    <legend class="title text-h3">{{ gettext("Change my password") }}</legend>
    {{ yield passwordField(
      field=.ChangeForm.Get("current"),
      required=true,
      label=gettext("Current password"),
      class="field-h",
      inputAttrs=attrList("autocomplete", "current-password"),
    ) }}

    {{ yield passwordField(
      field=.ChangeForm.Get("password"),
      required=true,
      label=gettext("New password"),
      class="field-h",
      inputAttrs=attrList("autocomplete", "new-password"),
      help=gettext("must be at least 8 characters long"),
    ) }}

    <p class="btn-block">
      <button class="btn btn-primary" type="submit" name="action" value="change">{{ gettext("Save") }}</button>
    </p>
  </fieldset>
</form>
{{- end -}}

<form action="{{ urlFor() }}" method="post">
  <fieldset>
    <legend class="title text-h3">{{ gettext("Verification Code (TOTP)") }}</legend>
    <p>{{ gettext("A verification code is a one time code generated by an application, such as Google Authenticator.") }}</p>

    {{- if user.HasTOTP() -}}
      <p class="mt-4 font-semibold">
        {{- yield icon(name="o-check-on", class="svgicon text-green-700") }}
        {{ gettext("The verification code is enabled on this account.") -}}
      </p>

      {{- yield message(type="", icon="") content -}}
      <details>
        <summary>{{ gettext("Remove Verification Code") }}</summary>
        <p class="mt-2 font-semibold text-red-700">
          {{- gettext("Removing your verification code will make your account less secure.") -}}
        </p>
        <p class="mt-2">
          <button class="btn-outlined btn-danger" type="submit" name="action" value="remove-totp">
            {{- yield icon(name="o-trash") }}
            {{ gettext("Remove") -}}
          </button></p>
      </details>
      {{- end -}}
    {{- else -}}
      <p class="mt-4">
        <a class="btn-outlined btn-primary" href="{{ urlFor(`/profile/otp`) }}">{{ gettext("Setup Verification Code") }}</a>
      </p>
    {{- end -}}
  </fieldset>
</form>

{{ end }}