@extends('layouts.admin')
@section('title', 'Account Security')
@section('content')
<nav><ol class="breadcrumb small"><li class="breadcrumb-item"><a href="{{ route('admin.dashboard') }}">Dashboard</a></li><li class="breadcrumb-item active">Account Security</li></ol></nav>
<div class="mb-4"><h1 class="h3 fw-bold mb-1"><i class="bi bi-shield-check text-primary me-2"></i>Account Security</h1><p class="text-secondary mb-0">Manage administrator authentication and active security controls.</p></div>

@if(session('status'))<div class="alert alert-success alert-dismissible fade show">{{ session('status') }}<button class="btn-close" data-bs-dismiss="alert"></button></div>@endif
@if($errors->any())<div class="alert alert-danger"><strong>Action could not be completed.</strong><ul class="mb-0 mt-2">@foreach($errors->all() as $error)<li>{{ $error }}</li>@endforeach</ul></div>@endif
@if(session('recovery_codes'))<div class="alert alert-warning"><h2 class="h6 fw-bold"><i class="bi bi-key me-2"></i>New recovery codes</h2><p class="small">Save these codes now. Each code can be used once and they will not be shown again.</p><div class="row g-2">@foreach(session('recovery_codes') as $code)<div class="col-sm-6 col-lg-3"><code class="d-block bg-body p-2 rounded user-select-all">{{ $code }}</code></div>@endforeach</div></div>@endif

<div class="row g-4">
    <div class="col-xl-7"><div class="card panel h-100"><div class="card-body p-4"><div class="d-flex align-items-start justify-content-between gap-3 mb-4"><div class="d-flex gap-3"><span class="metric-icon {{ $admin->hasTwoFactorEnabled() ? 'bg-success-subtle text-success' : 'bg-warning-subtle text-warning' }}"><i class="bi bi-phone-lock"></i></span><div><h2 class="h5 mb-1">Two-factor authentication</h2><p class="text-secondary small mb-0">Authenticator-based one-time codes protect admin access.</p></div></div><span class="badge rounded-pill text-bg-{{ $admin->hasTwoFactorEnabled() ? 'success' : 'warning' }}">{{ $admin->hasTwoFactorEnabled() ? 'Enabled' : 'Not enabled' }}</span></div>
        @if($admin->hasTwoFactorEnabled())
            <div class="alert alert-success"><i class="bi bi-check-circle-fill me-2"></i>Your account is protected with two-factor authentication.</div>
            <div class="d-flex flex-wrap gap-2 mb-4"><a class="btn btn-outline-primary" href="{{ route('admin.two-factor.setup') }}"><i class="bi bi-arrow-repeat me-1"></i>Replace authenticator</a><button class="btn btn-outline-secondary" data-bs-toggle="modal" data-bs-target="#recoveryModal"><i class="bi bi-key me-1"></i>Generate new recovery codes</button></div>
            <hr><h3 class="h6 text-danger">Disable two-factor authentication</h3><p class="small text-secondary">Password confirmation is required. This reduces account security.</p><form method="POST" action="{{ route('admin.two-factor.disable') }}" class="row g-2">@csrf @method('DELETE')<div class="col-md-8"><input class="form-control" type="password" name="password" placeholder="Current password" autocomplete="current-password" required></div><div class="col-md-4 d-grid"><button class="btn btn-outline-danger">Disable 2FA</button></div></form>
        @else
            <div class="alert alert-warning"><i class="bi bi-exclamation-triangle-fill me-2"></i>Two-factor authentication is not enabled.</div><a class="btn btn-primary" href="{{ route('admin.two-factor.setup') }}"><i class="bi bi-shield-plus me-1"></i>Set up 2FA</a>
        @endif
    </div></div></div>
    <div class="col-xl-5"><div class="card panel mb-4"><div class="card-body p-4"><h2 class="h5 mb-3">Login security</h2><div class="d-flex justify-content-between py-2 border-bottom"><span class="text-secondary">Account</span><strong>{{ $admin->email }}</strong></div><div class="d-flex justify-content-between py-2 border-bottom"><span class="text-secondary">Last login</span><strong>{{ $admin->last_login_at?->diffForHumans() ?? 'Not recorded' }}</strong></div><div class="d-flex justify-content-between py-2 border-bottom"><span class="text-secondary">Session timeout</span><strong>{{ config('session.admin_timeout', 30) }} minutes</strong></div><div class="d-flex justify-content-between py-2"><span class="text-secondary">Account status</span><span class="badge text-bg-success">Active</span></div></div></div><div class="card panel"><div class="card-body p-4"><h2 class="h5">Security recommendations</h2><ul class="small text-secondary mb-0 ps-3"><li class="mb-2">Keep recovery codes in an encrypted password manager.</li><li class="mb-2">Never share authentication codes or setup keys.</li><li>Sign out from shared administrator devices.</li></ul></div></div></div>
</div>

<div class="modal fade" id="recoveryModal" tabindex="-1"><div class="modal-dialog"><div class="modal-content"><form method="POST" action="{{ route('admin.two-factor.recovery-codes') }}">@csrf<div class="modal-header"><h2 class="modal-title fs-5">Generate new recovery codes</h2><button class="btn-close" data-bs-dismiss="modal"></button></div><div class="modal-body"><p class="text-secondary small">Existing recovery codes will stop working immediately.</p><label class="form-label" for="recoveryPassword">Current password</label><input id="recoveryPassword" class="form-control" type="password" name="password" autocomplete="current-password" required></div><div class="modal-footer"><button type="button" class="btn btn-light" data-bs-dismiss="modal">Cancel</button><button class="btn btn-primary">Generate codes</button></div></form></div></div></div>
@endsection