{% extends "base.html" %}
{% block title %}Settings - VulnAPI{% endblock %}
{% block content %}
<h1>Settings</h1>
<div class="card">
  <h2>Theme</h2>
  <p>Current theme: <strong id="current-theme">{{ theme }}</strong></p>
  <button class="btn btn-primary" onclick="toggleTheme()">Toggle Theme</button>
</div>
<div class="card">
  <h2>API Keys</h2>
  <div class="form-group">
    <label>API Key (read/write)</label>
    <input type="text" value="{{ api_key }}" readonly onclick="this.select()">
  </div>
  <div class="form-group">
    <label>Admin Token (hardcoded)</label>
    <input type="text" value="{{ admin_token }}" readonly onclick="this.select()">
  </div>
</div>
<script>
function toggleTheme(){
  fetch('/api/toggle-theme',{method:'POST'})
    .then(r=>r.json())
    .then(d=>{
      document.getElementById('current-theme').textContent=d.theme;
      document.documentElement.setAttribute('data-theme',d.theme);
    });
}
</script>
{% endblock %}