@extends('admin.layout')

@section('title', 'Security')

@section('content')
    <div class="adm-head"><div><div class="eyebrow">Admin</div><h1>Security</h1></div></div>

    @if (session('recovery_codes'))
        <section class="card codes-card" aria-labelledby="codes-h">
            <h2 id="codes-h" class="h3">Your backup codes</h2>
            <p>Each code signs you in once if your phone isn't handy. <strong>They are shown only now.</strong> Keep them in your password manager or print them.</p>
            <ul class="codes mono" id="codes">
                @foreach (session('recovery_codes') as $c)<li>{{ $c }}</li>@endforeach
            </ul>
            <p><button class="btn" type="button" id="copy-codes">Copy codes</button> <a class="btn" download="healthcareers-admin-backup-codes.txt" href="data:text/plain;charset=utf-8,{{ rawurlencode("healthcareers.app admin backup codes (".auth('admin')->user()->email.")\nEach works once.\n\n".implode("\n", session('recovery_codes'))."\n") }}">Download .txt</a> <a class="btn primary" href="{{ route('admin.dashboard') }}">I've saved them</a></p>
        </section>
    @endif

    <section class="card">
        <h2 class="h3">Two-step sign-in</h2>
        @if ($mfa?->confirmed_at)
            <p><span class="tag good">On</span> Authenticator app connected {{ $mfa->confirmed_at->format('M j, Y') }}. Last code used {{ $mfa->last_used_at?->diffForHumans() ?? 'never' }}.</p>
            <p>Backup codes left: <strong>{{ $mfa->remainingCodes() }}</strong> of {{ \App\Models\AdminMfa::CODE_COUNT }}@if ($mfa->remainingCodes() <= 3) <span class="tag urgent">make new ones</span>@endif</p>
            @include('partials.errors')
            <form class="form inline-form" method="post" action="{{ route('admin.security.codes') }}" novalidate>
                @csrf
                <div class="field"><label for="code">Current 6-digit code</label><input id="code" name="code" class="code-input" inputmode="numeric" autocomplete="one-time-code" maxlength="8" required></div>
                <button class="btn" type="submit">Make new backup codes</button>
            </form>
            <p class="small muted">New codes replace the old ones. To move to a new phone, run <span class="mono">sudo -u www-data php artisan hc:admin-mfa-reset {{ auth('admin')->user()->email }}</span> on the server and sign in again.</p>
        @else
            <p>Not set up.</p>
        @endif
    </section>

    <section class="card">
        <h2 class="h3">Password</h2>
        <p>To change your password, sign out and use <a href="{{ route('admin.password.request') }}">Forgot your password?</a>. Changing it signs out every other admin session.</p>
    </section>
@endsection

@push('scripts')
    <script>
      (function () {
        var b = document.getElementById('copy-codes');
        if (!b) return;
        b.addEventListener('click', function () {
          var t = Array.prototype.map.call(document.querySelectorAll('#codes li'), function (li) { return li.textContent; }).join('\n');
          navigator.clipboard && navigator.clipboard.writeText(t).then(function () { b.textContent = 'Copied'; });
        });
      })();
    </script>
@endpush