@extends('layouts.app')

@section('title', __('ui.security_account_security').' — Coaster World')

@section('content')
<section class="section account-security-page">
    <div class="container account-security-shell">
        <div class="section-heading account-security-heading">
            <div>
                <span class="eyebrow">{{ __('ui.security_kicker') }}</span>
                <h1>{{ __('ui.security_account_security') }}</h1>
                <p>{{ __('ui.security_intro') }}</p>
            </div>
            <a href="{{ route('profile') }}" class="button button-ghost">{{ __('ui.security_back_profile') }}</a>
        </div>

        @if(session('security_status'))
            @php
                $statusKey = 'security_status_'.session('security_status');
            @endphp
            <div class="form-success" role="status">{{ __('ui.'.$statusKey) }}</div>
        @endif

        <div class="account-security-grid">
            <article class="account-security-card">
                <div class="account-security-card-head">
                    <div>
                        <span class="eyebrow">{{ __('ui.security_identity_kicker') }}</span>
                        <h2>{{ __('ui.security_email_verification_title') }}</h2>
                    </div>
                    @if($user->hasVerifiedEmail())
                        <span class="security-badge is-ok">{{ __('ui.security_verified') }}</span>
                    @else
                        <span class="security-badge is-warning">{{ __('ui.security_unverified') }}</span>
                    @endif
                </div>
                <p>{{ $user->email }}</p>
                @if(! $user->hasVerifiedEmail())
                    <p class="form-help">{{ __('ui.security_verification_help') }}</p>
                    <form method="post" action="{{ route('verification.send') }}">
                        @csrf
                        <button type="submit" class="button button-primary">{{ __('ui.security_resend_verification') }}</button>
                    </form>
                @endif
            </article>

            <article class="account-security-card">
                <span class="eyebrow">{{ __('ui.security_password_kicker') }}</span>
                <h2>{{ __('ui.security_change_password') }}</h2>
                <p>{{ __('ui.security_change_password_help') }}</p>
                <form method="post" action="{{ route('account.security.password') }}" class="auth-form">
                    @csrf
                    @method('PUT')
                    <label>
                        {{ __('ui.security_current_password') }}
                        <x-password-input name="current_password" autocomplete="current-password" required />
                    </label>
                    @error('current_password')
                        <small class="form-error">{{ $message }}</small>
                    @enderror
                    <label>
                        {{ __('ui.security_new_password') }}
                        <x-password-input name="password" autocomplete="new-password" required />
                    </label>
                    <small class="form-help">{{ __('ui.security_password_requirements') }}</small>
                    @error('password')
                        <small class="form-error">{{ $message }}</small>
                    @enderror
                    <label>
                        {{ __('ui.auth_password_confirm') }}
                        <x-password-input name="password_confirmation" autocomplete="new-password" required />
                    </label>
                    <button type="submit" class="button button-primary">{{ __('ui.security_change_password') }}</button>
                </form>
            </article>
        </div>

        <article class="account-security-card account-security-sessions">
            <div class="account-security-card-head">
                <div>
                    <span class="eyebrow">{{ __('ui.security_sessions_kicker') }}</span>
                    <h2>{{ __('ui.security_sessions_title') }}</h2>
                    <p>{{ __('ui.security_sessions_help') }}</p>
                </div>
                @if($sessionsAvailable && $sessions->count() > 1)
                    <form method="post" action="{{ route('account.security.sessions.others') }}">
                        @csrf
                        @method('DELETE')
                        <button type="submit" class="button button-ghost">{{ __('ui.security_close_other_sessions') }}</button>
                    </form>
                @endif
            </div>

            @if($sessionsAvailable)
                <div class="security-session-list">
                    @forelse($sessions as $session)
                        <div class="security-session-row">
                            <div>
                                <strong>{{ $session->label }}</strong>
                                <span>{{ $session->ip_address ?: __('ui.security_ip_unknown') }}</span>
                                <small>{{ __('ui.security_last_activity', ['date' => \Illuminate\Support\Carbon::createFromTimestamp($session->last_activity)->diffForHumans()]) }}</small>
                            </div>
                            <div class="security-session-actions">
                                @if($session->is_current)
                                    <span class="security-badge is-ok">{{ __('ui.security_current_session') }}</span>
                                @endif
                                <form method="post" action="{{ route('account.security.sessions.destroy', $session->id) }}">
                                    @csrf
                                    @method('DELETE')
                                    <button type="submit" class="button button-ghost">{{ $session->is_current ? __('ui.security_logout_here') : __('ui.security_close_session') }}</button>
                                </form>
                            </div>
                        </div>
                    @empty
                        <p>{{ __('ui.security_no_sessions') }}</p>
                    @endforelse
                </div>
            @else
                <p>{{ __('ui.security_sessions_unavailable') }}</p>
            @endif
        </article>

        <div class="account-security-grid">
            <article class="account-security-card">
                <span class="eyebrow">{{ __('ui.security_privacy_kicker') }}</span>
                <h2>{{ __('ui.security_export_title') }}</h2>
                <p>{{ __('ui.security_export_help') }}</p>
                <form method="post" action="{{ route('account.privacy.export') }}">
                    @csrf
                    <button type="submit" class="button button-primary">{{ __('ui.security_export_button') }}</button>
                </form>
            </article>

            <article class="account-security-card account-security-danger">
                <span class="eyebrow">{{ __('ui.security_danger_kicker') }}</span>
                <h2>{{ __('ui.security_delete_title') }}</h2>
                <p>{{ __('ui.security_delete_help') }}</p>
                <details class="security-delete-details">
                    <summary>{{ __('ui.security_delete_open') }}</summary>
                    <form method="post" action="{{ route('account.privacy.erase') }}" class="auth-form">
                        @csrf
                        @method('DELETE')
                        <label>
                            {{ __('ui.security_current_password') }}
                            <x-password-input name="current_password" autocomplete="current-password" required />
                        </label>
                        <label>
                            {{ __('ui.security_delete_confirmation', ['word' => 'DELETE']) }}
                            <input type="text" name="confirmation" required autocomplete="off" spellcheck="false">
                        </label>
                        <div class="security-danger-note">{{ __('ui.security_delete_irreversible') }}</div>
                        <button type="submit" class="button button-danger">{{ __('ui.security_delete_button') }}</button>
                    </form>
                </details>
            </article>
        </div>

        <article class="account-security-card security-hardening-note">
            <span class="eyebrow">{{ __('ui.security_hardening_kicker') }}</span>
            <h2>{{ __('ui.security_hardening_title') }}</h2>
            <p>{{ __('ui.security_hardening_help') }}</p>
            <ul>
                <li>{{ __('ui.security_hardening_rate_limit') }}</li>
                <li>{{ __('ui.security_hardening_headers') }}</li>
                <li>{{ __('ui.security_hardening_uploads') }}</li>
                <li>{{ __('ui.security_hardening_csrf') }}</li>
            </ul>
        </article>
    </div>
</section>
@endsection