{{ define "title"}}{{ t "page.authentication.title" }}{{ end }}

{{ define "page_header"}}
<section class="page-header" aria-labelledby="page-header-title">
    <h1 id="page-header-title">{{ t "page.authentication.title" }}</h1>
    {{ template "settings_menu" dict "user" .user }}
</section>
{{ end }}

{{ define "content"}}
{{ if not disableLocalAuth }}
<form method="post" autocomplete="off" action="{{ routePath "/authentication" }}">
    <input type="hidden" name="csrf" value="{{ .csrf }}">

    {{ if .errorMessage }}
        <div role="alert" class="alert alert-error">{{ .errorMessage }}</div>
    {{ end }}

    <fieldset>
        <legend>{{ t "form.prefs.fieldset.authentication_settings" }}</legend>

        <label for="form-username">{{ t "form.user.label.username" }}</label>
        <input type="text" name="username" id="form-username" value="{{ .form.Username }}" autocomplete="username" required>

        {{ if .hasPassword }}
        <label for="form-current-password">{{ t "form.user.label.current_password" }}</label>
        <input type="password" name="current_password" id="form-current-password" autocomplete="current-password">
        {{ end }}

        <label for="form-password">{{ t "form.user.label.password" }}</label>
        <input type="password" name="password" id="form-password" value="{{ .form.Password }}" autocomplete="new-password">

        <label for="form-confirmation">{{ t "form.user.label.confirmation" }}</label>
        <input type="password" name="confirmation" id="form-confirmation" value="{{ .form.Confirmation }}" autocomplete="new-password">

        <div class="buttons">
            <button type="submit" class="button button-primary" data-label-loading="{{ t "form.submit.saving" }}">{{ t "action.update" }}</button>
        </div>
    </fieldset>
</form>
{{ end }}
{{ if and (not disableLocalAuth) (hasOAuth2Provider "google") }}
<fieldset>
    <legend>{{ t "form.prefs.fieldset.google_authentication" }}</legend>
    {{ if .user.GoogleID }}
    <form method="post" action="{{ routePath "/oauth2/%s/unlink" "google" }}">
        <input type="hidden" name="csrf" value="{{ .csrf }}">
        <button type="submit" class="button button-danger" data-label-loading="{{ t "form.submit.saving" }}">{{ t "page.settings.unlink_google_account" }}</button>
    </form>
    {{ else }}
    <p>
        <a href="{{ routePath "/oauth2/%s/redirect" "google" }}">{{ t "page.settings.link_google_account" }}</a>
    </p>
    {{ end }}
</fieldset>
{{ else if and (not disableLocalAuth) (hasOAuth2Provider "oidc") }}
<fieldset>
    <legend>{{ t "form.prefs.fieldset.oidc_authentication" oidcProviderName }}</legend>
    {{ if .user.OpenIDConnectID }}
    <form method="post" action="{{ routePath "/oauth2/%s/unlink" "oidc" }}">
        <input type="hidden" name="csrf" value="{{ .csrf }}">
        <button type="submit" class="button button-danger" data-label-loading="{{ t "form.submit.saving" }}">{{ t "page.settings.unlink_oidc_account" oidcProviderName }}</button>
    </form>
    {{ else }}
    <p>
        <a href="{{ routePath "/oauth2/%s/redirect" "oidc" }}">{{ t "page.settings.link_oidc_account" oidcProviderName }}</a>
    </p>
    {{ end }}
</fieldset>
{{ end }}
{{ if .webAuthnEnabled }}
<fieldset>
    <legend>{{ t "page.settings.webauthn.passkeys" }}</legend>

    <template id="webauthn-error">
        <div role="alert" class="alert alert-error" id="webauthn-error-alert">
            <h4>{{ t "page.settings.webauthn.register.error" }}</h4>
            <p id="webauthn-error-message"></p>
        </div>
    </template>

    {{ if .webAuthnCerts}}
    <table>
        <tr>
            <th>{{ t "page.settings.webauthn.passkey_name" }}</th>
            <th>{{ t "page.settings.webauthn.added_on" }}</th>
            <th>{{ t "page.settings.webauthn.last_seen_on" }}</th>
            <th>{{ t "page.settings.webauthn.actions" }}</th>
        </tr>
        {{ range .webAuthnCerts }}
        <tr>
            <td>{{ .Name }}</td>
            <td>{{ elapsed $.user.Timezone .AddedOn }}</td>
            <td>{{ elapsed $.user.Timezone .LastSeenOn }}</td>
            <td>
                <a href="#"
                    data-confirm="true"
                    data-label-question="{{ t "confirm.question" }}"
                    data-label-yes="{{ t "confirm.yes" }}"
                    data-label-no="{{ t "confirm.no" }}"
                    data-label-loading="{{ t "confirm.loading" }}"
                    data-url="{{ routePath "/webauthn/%s/delete" .HandleEncoded }}">{{ icon "delete" }}{{ t "action.remove" }}</a>
                <a href="{{ routePath "/webauthn/%s/rename" .HandleEncoded }}">{{ icon "edit" }} {{ t "action.edit" }}</a>
            </td>
        </tr>
        {{ end }}
    </table>
    {{ end }}

    <div class="buttons">
        <button type="button" class="button button-primary" id="webauthn-register" disabled>
            {{ t "page.settings.webauthn.register" }}
        </button>
        {{ if gt .countWebAuthnCerts 0}}
        <button type="button" class="button button-danger" id="webauthn-delete">
            {{ plural "page.settings.webauthn.delete" .countWebAuthnCerts .countWebAuthnCerts }}
        </button>
        {{ end }}
    </div>
</fieldset>
{{ end }}
{{ end }}