@extends('layouts.admin')
@section('title', 'Two-Factor Authentication')

@section('content')
<div class="max-w-2xl">
    <h1 class="text-xl font-semibold text-slate-800 mb-1">Two-Factor Authentication</h1>
    <p class="text-sm text-slate-500 mb-6">
        This account can publish update packages, which run on every licensed customer
        installation. A second factor is strongly recommended.
    </p>

    {{-- Flash messages + validation errors are rendered by layouts.admin. --}}

    <div class="bg-white rounded-2xl shadow-sm border border-slate-200 p-6">
        @if ($enabled)
            <div class="flex items-center gap-3 mb-5">
                <span class="inline-flex items-center gap-1.5 rounded-full bg-emerald-100 text-emerald-700 px-3 py-1 text-xs font-semibold">
                    <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7"/></svg>
                    Enabled
                </span>
                <span class="text-sm text-slate-500">A code from your authenticator app is required at every sign in.</span>
            </div>

            <form method="POST" action="{{ route('2fa.disable') }}" class="space-y-3 max-w-sm">
                @csrf
                <label class="block text-xs font-semibold text-slate-500 uppercase tracking-wide">Confirm your password to disable</label>
                <input type="password" name="password" required
                       class="w-full rounded-lg border border-slate-300 px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-indigo-400">
                <button type="submit"
                        class="px-4 py-2.5 rounded-lg bg-red-600 hover:bg-red-700 text-white text-sm font-semibold transition">
                    Disable two-factor
                </button>
            </form>
        @else
            <ol class="text-sm text-slate-600 space-y-2 mb-5 list-decimal list-inside">
                <li>Scan this QR code with Google Authenticator, 1Password, Authy or similar.</li>
                <li>Enter the 6-digit code it shows to confirm and switch 2FA on.</li>
            </ol>

            <div class="flex flex-col sm:flex-row gap-6 items-start">
                <img src="{{ $qrCode }}" alt="Two-factor QR code"
                     class="w-48 h-48 rounded-xl border border-slate-200 p-2 bg-white">

                <div class="flex-1 space-y-4">
                    <div>
                        <div class="text-xs font-semibold text-slate-500 uppercase tracking-wide mb-1">Manual entry key</div>
                        <code class="block break-all rounded-lg bg-slate-50 border border-slate-200 px-3 py-2 text-xs font-mono text-slate-700">{{ $secret ?? '' }}</code>
                    </div>

                    <form method="POST" action="{{ route('2fa.enable') }}" class="space-y-3">
                        @csrf
                        <label class="block text-xs font-semibold text-slate-500 uppercase tracking-wide">Verification code</label>
                        <input type="text" name="one_time_password" required
                               inputmode="numeric" autocomplete="one-time-code" maxlength="6"
                               class="w-full rounded-lg border border-slate-300 px-3 py-2.5 text-center text-lg tracking-[0.4em] font-mono focus:outline-none focus:ring-2 focus:ring-indigo-400">
                        <button type="submit"
                                class="w-full px-4 py-2.5 rounded-lg bg-indigo-600 hover:bg-indigo-700 text-white text-sm font-semibold transition">
                            Enable two-factor
                        </button>
                    </form>
                </div>
            </div>
        @endif
    </div>
</div>
@endsection