{% extends "base.html" %}
{% block title %}Logins & History{% endblock %}
{% block content %}
<div class="page-head"><div><h1>Logins &amp; History</h1><p class="muted">Who can sign in, and a record of every change.</p></div></div>

<div class="card">
  <h2>Who Can Sign In</h2>
  <ul class="list">
  {% for u in users %}
    <li><div class="body"><b>{{ u.name }}</b><span class="muted">{{ u.email }} · {{ 'last signed in ' + h.time_ago(u.last_login) if u.last_login else 'never signed in' }}</span></div>
      <span class="pill {{ 'on' if u.role == 'admin' }}">{{ 'Admin' if u.role == 'admin' else 'View only' }}</span>
      {% if u.totp_on %}<span class="pill on" title="Two-step sign-in">2-step</span>{% endif %}
      {% if brands|length > 1 %}
      <form method="post" class="inline small" style="display:flex;gap:6px;align-items:center;flex-wrap:wrap">
        <input type="hidden" name="id" value="{{ u.id }}"><input type="hidden" name="action" value="scope">
        <span class="muted">Sees:</span>
        {% set mine = (u.brands or '').split(',') %}
        <span class="days">{% for k, b in brands.items() %}<label><input type="checkbox" name="brands" value="{{ k }}" {{ 'checked' if k in mine }} onchange="this.form.submit()"><span style="padding:3px 8px;font-size:.8rem">{{ b.name }}</span></label>{% endfor %}</span>
        <span class="muted">{{ '' if u.brands else '(nothing ticked = every company)' }}</span>
      </form>{% endif %}
      <div class="actions">
        <form class="inline" method="post"><input type="hidden" name="id" value="{{ u.id }}">
          <input type="hidden" name="action" value="{{ 'make_viewer' if u.role == 'admin' else 'make_admin' }}">
          <button class="btn small">{{ 'Make View Only' if u.role == 'admin' else 'Make Admin' }}</button></form>
        <details class="inline-details"><summary class="btn small">Change password</summary>
          <form method="post" class="actions" style="margin-top:8px"><input type="hidden" name="id" value="{{ u.id }}"><input type="hidden" name="action" value="reset">
            <input type="password" name="password" minlength="8" required placeholder="New password (8+ characters)" autocomplete="new-password" style="max-width:240px">
            <button class="btn small primary">Save</button></form></details>
        {% if u.id != user.id %}<form class="inline" method="post" data-confirm="Remove {{ u.name }}'s login?"><input type="hidden" name="id" value="{{ u.id }}"><input type="hidden" name="action" value="remove"><button class="btn small danger">Remove</button></form>{% endif %}
      </div></li>
  {% endfor %}
  </ul>
  <h3 style="margin-top:18px">Add Someone</h3>
  <form method="post" class="row" style="align-items:end">
    <input type="hidden" name="action" value="add">
    <div class="field"><label>Name</label><input type="text" name="name" required></div>
    <div class="field"><label>Email</label><input type="email" name="email" required></div>
    <div class="field"><label>Password</label><input type="password" name="password" minlength="8" required autocomplete="new-password"></div>
    <div class="field"><label>Access</label><select name="role"><option value="viewer">View only</option><option value="admin">Admin (can change things)</option></select></div>
    <div class="field"><button class="btn primary">Add</button></div>
  </form>
</div>

<div class="card">
  <h2>Change History</h2>
  {% if history %}<ul class="list small">{% for a in history %}
    <li><div class="when" style="width:120px;font-weight:400">{{ h.time_ago(a.at) }}</div>
      <div class="body"><b style="display:inline">{{ a.user or 'System' }}</b> {{ a.action }}{% if a.detail %} <span class="muted">· {{ a.detail }}</span>{% endif %}</div></li>
  {% endfor %}</ul>{% else %}<div class="empty">No changes yet.</div>{% endif %}
</div>
{% endblock %}