@extends(auth()->user()?->can('admin.access') ? 'layouts.admin' : 'layouts.partner')

@section('title', 'Two-factor authentication — '.config('app.name'))
@section('page_title', 'Two-factor authentication')

@section('breadcrumbs')
    <li class="breadcrumb-item"><a href="{{ route('profile.edit') }}">Profile</a></li>
    <li class="breadcrumb-item active">2FA</li>
@endsection

@section('content')
    <div class="card" style="max-width:560px">
        <div class="card-body">
            @if ($enabled)
                <p class="mb-3">Two-factor authentication is <strong>enabled</strong> on this account.</p>
                <form method="POST" action="{{ route('profile.two-factor.destroy') }}">
                    @csrf
                    @method('DELETE')
                    <div class="mb-3">
                        <label class="form-label" for="current_password">Current password</label>
                        <input class="form-control" type="password" name="current_password" id="current_password" required>
                    </div>
                    <div class="mb-3">
                        <label class="form-label" for="code">Authenticator code</label>
                        <input class="form-control @error('code') is-invalid @enderror" name="code" id="code" required>
                        @error('code')<div class="invalid-feedback">{{ $message }}</div>@enderror
                    </div>
                    <button class="btn btn-outline-danger" type="submit">Disable 2FA</button>
                </form>
            @elseif ($pendingSecret)
                <p class="mb-2">Add this secret to your authenticator app, then confirm with a code.</p>
                <p class="font-monospace user-select-all mb-2">{{ $pendingSecret }}</p>
                <p class="small text-muted break-all">{{ $otpUrl }}</p>
                <form method="POST" action="{{ route('profile.two-factor.confirm') }}" class="mt-3">
                    @csrf
                    <div class="mb-3">
                        <label class="form-label" for="code">Authentication code</label>
                        <input class="form-control @error('code') is-invalid @enderror" name="code" id="code" required autofocus>
                        @error('code')<div class="invalid-feedback">{{ $message }}</div>@enderror
                    </div>
                    <button class="btn btn-primary" type="submit">Confirm and enable</button>
                </form>
            @else
                <p class="mb-3">Optional staff 2FA is available. Enroll when you are ready — you will be challenged on each new login.</p>
                <form method="POST" action="{{ route('profile.two-factor.begin') }}">
                    @csrf
                    <button class="btn btn-primary" type="submit">Begin setup</button>
                </form>
            @endif
        </div>
    </div>
@endsection