{% extends 'administration/base.html.twig' %}

{% block title %}{{ 'admin.modules_information.oauth'|trans }}{% endblock %}

{% block body %}
<div class="container-fluid px-3 px-lg-4 py-4 pb-5" style="max-width: 960px; margin-inline: auto;">

    <div class="rounded-4 border bg-body-tertiary bg-opacity-25 p-4 p-lg-5 mb-4">
        <div class="d-flex align-items-start gap-3 flex-wrap justify-content-between">
            <div class="d-flex align-items-start gap-3">
                <div class="rounded-3 d-flex align-items-center justify-content-center flex-shrink-0 text-white bg-primary px-3 py-2">
                    <i class="bi bi-key fs-4"></i>
                </div>
                <div>
                    <h1 class="h3 fw-bold mb-2 gradient-text">{{ 'admin.modules_information.oauth'|trans }}</h1>
                    <p class="text-muted mb-0 small lh-lg">{{ 'admin.oauth_module.page_intro'|trans }}</p>
                </div>
            </div>
        </div>
    </div>

    {% if not oauthOperational %}
        <div class="alert alert-warning border-0 rounded-4 mb-4" role="status">
            <i class="bi bi-exclamation-triangle me-2"></i>{{ 'admin.oauth_module.license_inactive'|trans }}
        </div>
    {% endif %}

    {# ——— Teil A: Login mit Google & Co. ——— #}
    <div class="admin-card rounded-4 border-0 shadow-sm p-4 p-lg-5 mb-4">
        <div class="d-flex flex-wrap align-items-start justify-content-between gap-3 mb-3">
            <div>
                <span class="badge bg-success-subtle text-success-emphasis rounded-pill mb-2">{{ 'admin.oauth_module.section_inbound_badge'|trans }}</span>
                <h2 class="h4 fw-bold mb-2">{{ 'admin.oauth_module.section_inbound_title'|trans }}</h2>
                <p class="text-muted small mb-0" style="max-width: 42rem;">{{ 'admin.oauth_module.section_inbound_lead'|trans }}</p>
            </div>
            <a href="{{ path('app_admin_module_oauth_inbound_new') }}" class="btn btn-primary rounded-pill px-4 flex-shrink-0">
                <i class="bi bi-plus-lg me-2"></i>{{ 'admin.oauth_inbound.add_provider'|trans }}
            </a>
        </div>

        <ol class="small text-muted mb-4 ps-3">
            <li class="mb-1">{{ 'admin.oauth_module.section_inbound_step1'|trans }}</li>
            <li class="mb-1">{{ 'admin.oauth_module.section_inbound_step2'|trans }}</li>
            <li>{{ 'admin.oauth_module.section_inbound_step3'|trans }}</li>
        </ol>

        {% if inboundProviders is empty %}
            <p class="text-muted mb-0">{{ 'admin.oauth_inbound.no_providers'|trans }}</p>
        {% else %}
            <div class="table-responsive">
                <table class="table table-sm align-middle mb-0">
                    <thead class="table-light">
                        <tr>
                            <th>{{ 'admin.oauth_inbound.col.name'|trans }}</th>
                            <th>{{ 'admin.oauth_inbound.col.slug'|trans }}</th>
                            <th>{{ 'admin.oauth_inbound.col.type'|trans }}</th>
                            <th>{{ 'admin.oauth_inbound.col.status'|trans }}</th>
                            <th class="text-end">{{ 'admin.actions'|trans }}</th>
                        </tr>
                    </thead>
                    <tbody>
                        {% for p in inboundProviders %}
                            <tr>
                                <td>
                                    {% if p.iconClass %}<i class="bi {{ p.iconClass }} me-1" aria-hidden="true"></i>{% endif %}
                                    {{ p.displayName }}
                                </td>
                                <td><code class="small">{{ p.slug }}</code></td>
                                <td>
                                    <span class="badge bg-secondary bg-opacity-75">{{ ('admin.oauth_inbound.preset.' ~ p.providerType)|trans }}</span>
                                </td>
                                <td>
                                    {% if p.enabled %}
                                        <span class="badge bg-success">{{ 'admin.oauth_inbound.enabled'|trans }}</span>
                                    {% else %}
                                        <span class="badge bg-light text-dark">{{ 'admin.oauth_inbound.disabled'|trans }}</span>
                                    {% endif %}
                                    {% if not p.isConfiguredForInbound %}
                                        <span class="badge bg-warning text-dark ms-1">{{ 'admin.oauth_inbound.incomplete'|trans }}</span>
                                    {% endif %}
                                </td>
                                <td class="text-end">
                                    <div class="btn-group btn-group-sm">
                                        <a href="{{ path('app_admin_module_oauth_inbound_edit', { id: p.id }) }}" class="btn btn-outline-primary">{{ 'admin.edit'|trans }}</a>
                                        <form method="post" action="{{ path('app_admin_module_oauth_inbound_toggle', { id: p.id }) }}" class="d-inline">
                                            <input type="hidden" name="_token" value="{{ csrf_token('toggle_oauth_inbound_' ~ p.id) }}">
                                            <button type="submit" class="btn btn-outline-secondary">{{ 'admin.oauth_inbound.toggle'|trans }}</button>
                                        </form>
                                        <form method="post" action="{{ path('app_admin_module_oauth_inbound_delete', { id: p.id }) }}" class="d-inline" onsubmit="return confirm('{{ 'admin.oauth_inbound.confirm_delete'|trans|e('js') }}');">
                                            <input type="hidden" name="_token" value="{{ csrf_token('delete_oauth_inbound_' ~ p.id) }}">
                                            <button type="submit" class="btn btn-outline-danger">{{ 'admin.delete'|trans }}</button>
                                        </form>
                                    </div>
                                </td>
                            </tr>
                        {% endfor %}
                    </tbody>
                </table>
            </div>
        {% endif %}
    </div>

    {# ——— Teil B: TerraFlow als OAuth-Server (ausklappbar) ——— #}
    <div class="accordion accordion-flush admin-card rounded-4 border-0 shadow-sm mb-4" id="oauthOutboundAccordion">
        <div class="accordion-item border-0 bg-transparent">
            <h2 class="accordion-header">
                <button class="accordion-button collapsed rounded-4 py-3 px-4" type="button" data-bs-toggle="collapse" data-bs-target="#oauthOutboundCollapse" aria-expanded="false" aria-controls="oauthOutboundCollapse">
                    <span class="me-2"><i class="bi bi-box-arrow-up-right text-primary"></i></span>
                    <span class="fw-semibold">{{ 'admin.oauth_module.section_outbound_title'|trans }}</span>
                    <span class="badge bg-secondary-subtle text-secondary-emphasis ms-3 d-none d-sm-inline">{{ 'admin.oauth_module.section_outbound_badge'|trans }}</span>
                </button>
            </h2>
            <div id="oauthOutboundCollapse" class="accordion-collapse collapse" data-bs-parent="#oauthOutboundAccordion">
                <div class="accordion-body px-4 pt-0 pb-4">
                    <p class="small text-muted mb-3">{{ 'admin.oauth_module.section_outbound_lead'|trans }}</p>
                    <div class="d-flex flex-wrap align-items-center gap-2 mb-3">
                        <a href="{{ path('app_admin_module_oauth_server_clients') }}" class="btn btn-outline-primary btn-sm rounded-pill">
                            <i class="bi bi-app-indicator me-1"></i>{{ 'admin.oauth_server_client.manage'|trans }}
                        </a>
                        <span class="small text-muted">{{ 'admin.oauth_module.clients_manage_hint'|trans }}</span>
                    </div>
                    <h3 class="h6 fw-semibold mb-2">{{ 'admin.oauth_module.endpoints_title'|trans }}</h3>
                    <dl class="row small mb-4">
                        <dt class="col-sm-3 text-body-secondary">{{ 'admin.oauth_module.label_authorize'|trans }}</dt>
                        <dd class="col-sm-9"><code class="user-select-all small">{{ urlAuthorize }}</code></dd>
                        <dt class="col-sm-3 text-body-secondary">{{ 'admin.oauth_module.label_token'|trans }}</dt>
                        <dd class="col-sm-9"><code class="user-select-all small">{{ urlToken }}</code></dd>
                        <dt class="col-sm-3 text-body-secondary">{{ 'admin.oauth_module.label_userinfo'|trans }}</dt>
                        <dd class="col-sm-9"><code class="user-select-all small">{{ urlUserinfo }}</code></dd>
                    </dl>
                    <div class="alert alert-info border-0 rounded-4 mb-0 d-flex gap-3" role="note">
                        <div class="flex-shrink-0 pt-1"><i class="bi bi-shield-lock"></i></div>
                        <div class="small">
                            <strong class="d-block mb-1">{{ 'admin.oauth_module.twofa_title'|trans }}</strong>
                            <span class="text-body-secondary">{{ 'admin.oauth_module.twofa_body'|trans }}</span>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <a href="{{ path('app_admin_modules') }}" class="btn btn-outline-secondary rounded-pill px-4">
        <i class="bi bi-arrow-left me-2"></i>{{ 'admin.back'|trans }}
    </a>
</div>
{% endblock %}