{% extends "base.html" %}
{% from "components/ui.html" import action, breadcrumb, card, credentials, csrf_field, danger_card, fact, facts, link_button with context %}
{% from "components/connection.html" import connection_fields %}
{% block title %}{{ account.email }} · {{ APP_NAME }}{% endblock %}
{% block heading %}{{ account.email }}{% endblock %}
{% block subheading %}{{ breadcrumb([("Accounts", "/ui/accounts"), (account.email, None)]) }}{% endblock %}
{% block actions %}
{% if can_audit %}{{ link_button("/ui/sends?account=" ~ account.id, "Sends", "send", cls="") }}{% endif %}
{% if can_verify %}{{ action("/ui/accounts/" ~ account.id ~ "/verify", "Verify", cls="", icon="arrow-repeat") }}{% endif %}
{% if can_read %}{{ link_button("/ui/accounts/" ~ account.id ~ "/mail", "Mail", "envelope", cls="primary") }}{% endif %}
{% endblock %}
{% block content %}
{% set secret_name = "API token" if account.settings.get("auth") == "token" else "password" %}
{% if account.status.value == "needs_reauth" %}
<div class="notice err" role="alert">{% if signs_in_with_oauth %}{{ account.provider.value | signs_in_at }} no longer accepts this service's token: sign in again below.{% else %}The provider refused the stored {{ secret_name }}: enter the new one below.{% endif %}</div>
{% endif %}

{% set status_tag %}{% include "partials/account_status.html" %}{% endset %}
{% call facts("Account", tags=status_tag) %}
  {{ fact("Display name", account.display_name) }}
  {{ fact("Provider", account.provider.value) }}
  {% if not signs_in_with_oauth %}
  {% call fact(account.provider.value | upper) %}{{ account.settings.get("host") | or_missing }}{% if account.settings.get("port") %}:{{ account.settings.port }}{% endif %}{% if account.provider.value == "jmap" %}{{ account.settings.get("path", "") }}{% endif %}{% endcall %}
  {% if account.provider.value != "jmap" %}
  {% call fact("SMTP") %}{{ account.settings.get("smtp_host") | or_missing }}{% if account.settings.get("smtp_port") %}:{{ account.settings.smtp_port }}{% endif %}{% endcall %}
  {% endif %}
  {% endif %}
  {% call fact("Credentials") %}{{ credentials(account.credentials) }}{% endcall %}
  {% if sync is not none %}
  {% call fact("Last sync") %}{{ sync.last_sync_at | when }}{% if sync.last_error %} <span class="tag bad">failed {{ sync.last_error_at | when }}</span> <span class="muted">{{ sync.last_error }}</span>{% endif %}{% endcall %}
  {% endif %}
  {{ fact("Id", account.id, cls="mono") }}
{% endcall %}

{% if can_update %}
{% call card("Change", meta="A new " ~ secret_name ~ " or new servers are tried first. Nothing is stored unless the provider accepts them." if not signs_in_with_oauth else None) %}
<form method="post" action="/ui/accounts/{{ account.id }}">
  {{ csrf_field() }}
  <div class="form-grid">
    <div class="field">
      <label for="f-display_name">Display name</label>
      <input id="f-display_name" name="display_name" value="{{ typed.display_name if typed else (account.display_name or '') }}" />
    </div>
    {% if not signs_in_with_oauth %}
    <div class="field">
      <label for="f-password">New {{ secret_name }}</label>
      <input id="f-password" name="password" type="password" autocomplete="new-password" />
      <span class="hint">Empty: unchanged.</span>
    </div>
    {% endif %}
  </div>
  {% if not signs_in_with_oauth %}
  <details class="fold"{% if typed %} open{% endif %}>
    <summary>Servers</summary>
    {{ connection_fields(typed.settings if typed else account.settings, security, editing=True, protocol=account.provider.value if account.provider.value in ("pop3", "jmap") else "imap") }}
  </details>
  {% endif %}
  <div class="form-actions"><button class="primary" type="submit">Save</button></div>
</form>
{% if signs_in_with_oauth %}
<div class="fold toolbar">
  <span class="muted grow">Signed in with {{ account.provider.value | signs_in_at }}. Sign in again after a password change or when access was revoked.</span>
  {% set browser = account.provider.value in in_browser %}
  {% if browser %}
  <form class="inline" method="post" action="/ui/oauth/{{ account.provider.value }}/start">
    {{ csrf_field() }}
    <input type="hidden" name="account_id" value="{{ account.id }}" />
    <button class="{{ 'primary' if account.status.value == 'needs_reauth' else '' }}" type="submit">Sign in again</button>
  </form>
  {% endif %}
  {% if account.provider.value in with_code %}
  <form class="inline" method="post" action="/ui/oauth/{{ account.provider.value }}/device">
    {{ csrf_field() }}
    <input type="hidden" name="account_id" value="{{ account.id }}" />
    <button class="{{ 'primary' if account.status.value == 'needs_reauth' and not browser else '' }}" type="submit">Sign in again with a code</button>
  </form>
  {% endif %}
</div>
{% endif %}
{% endcall %}
{% endif %}

{% if can_delete %}
{{ danger_card("Remove", "Removes the account and its stored credentials from this service. The mailbox at the provider stays as it is.", "/ui/accounts/" ~ account.id ~ "/delete", "Remove account", "Remove " ~ account.email ~ " from the service?") }}
{% endif %}
{% endblock %}