{% extends shell('app') %}

{% set heading = _('Edit account') if user else _('New account') %}

{% block title %}{{ heading }} - {{ _('Admin') }}{% endblock %}

{% block breadcrumb %}
<nav aria-label="breadcrumb">
    <ol class="breadcrumb">
        {% if panel_url %}<li class="breadcrumb-item"><a href="{{ panel_url }}">{{ _('Admin') }}</a></li>{% endif %}
        <li class="breadcrumb-item"><a href="{{ url_for('auth.admin_users') }}">{{ _('Users') }}</a></li>
        <li class="breadcrumb-item active">{{ heading }}</li>
    </ol>
</nav>
{% endblock %}

{% block content %}

<h1 class="h2 mb-4"><b>{{ heading }}</b>{% if user %} <span class="text-muted fw-normal fs-5">{{ user.email }}</span>{% endif %}</h1>

{% with messages = get_flashed_messages(with_categories=true) %}
    {% for category, message in messages %}
        <div class="alert alert-{{ category }} alert-dismissible fade show" role="alert">
            {{ message }}
            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
        </div>
    {% endfor %}
{% endwith %}

<form method="post" novalidate>
    {{ form.hidden_tag() }}
    <div class="row">
        <div class="col-md-6 mb-3">
            {{ form.email.label(class="form-label fw-semibold") }}
            {{ form.email(class="form-control", autocomplete="off") }}
            {% for error in form.email.errors %}<div class="text-danger small">{{ error }}</div>{% endfor %}
        </div>
        <div class="col-md-6 mb-3">
            {{ form.role.label(class="form-label fw-semibold") }}
            {{ form.role(class="form-select") }}
            {% for error in form.role.errors %}<div class="text-danger small">{{ error }}</div>{% endfor %}
            <div class="form-text">{{ _('Administrators manage the whole panel, staff edit content, users only read what is published.') }}</div>
        </div>
        {% if user %}
        <div class="col-md-6 mb-3">
            {{ form.new_password.label(class="form-label fw-semibold") }}
            {{ form.new_password(class="form-control", autocomplete="new-password") }}
            <div class="form-text">{{ form.new_password.description }}</div>
            {% for error in form.new_password.errors %}<div class="text-danger small">{{ error }}</div>{% endfor %}
        </div>
        {% else %}
        <div class="col-md-6 mb-3">
            {{ form.password.label(class="form-label fw-semibold") }}
            {{ form.password(class="form-control", autocomplete="new-password") }}
            {% for error in form.password.errors %}<div class="text-danger small">{{ error }}</div>{% endfor %}
        </div>
        {% endif %}
        {# Only when the product sets AUTH_PASSWORD_CONFIRM (the form drops
           the field otherwise). #}
        {% if form.confirm_password %}
        <div class="col-md-6 mb-3">
            {{ form.confirm_password.label(class="form-label fw-semibold") }}
            {{ form.confirm_password(class="form-control", autocomplete="new-password") }}
            {% for error in form.confirm_password.errors %}<div class="text-danger small">{{ error }}</div>{% endfor %}
        </div>
        {% endif %}
        <div class="col-md-6 mb-3">
            <label class="form-label fw-semibold d-block">{{ _('Status') }}</label>
            <div class="form-check form-switch mt-2">
                {{ form.active(class="form-check-input") }}
                {{ form.active.label(class="form-check-label") }}
            </div>
            <div class="form-text">{{ _('An inactive account cannot log in and its open sessions end.') }}</div>
        </div>
        {# Edit only: an account the panel creates has its address vouched
           for by whoever creates it. #}
        {% if form.email_verified %}
        <div class="col-md-6 mb-3">
            <label class="form-label fw-semibold d-block">{{ _('Address') }}</label>
            <div class="form-check form-switch mt-2">
                {{ form.email_verified(class="form-check-input") }}
                {{ form.email_verified.label(class="form-check-label") }}
            </div>
            <div class="form-text">{{ _('Where addresses are confirmed, an account whose address is not confirmed cannot log in. Tick it when you know the address is theirs.') }}</div>
        </div>
        {% endif %}
        <div class="col-md-6 mb-3">
            <label class="form-label fw-semibold d-block">{{ _('Kind') }}</label>
            <div class="form-check form-switch mt-2">
                {{ form.service_account(class="form-check-input") }}
                {{ form.service_account.label(class="form-check-label") }}
            </div>
            <div class="form-text">{{ _('A program signs in with it (a marketplace, a CI job), not a person. Other features may spare it what would cut the program off, such as revoking its API tokens when its password changes or it is switched off.') }}</div>
        </div>
    </div>

    <div class="mt-3">
        {{ form.submit(class="btn btn-primary") }}
        <a href="{{ url_for('auth.admin_users') }}" class="btn btn-outline-secondary ms-2">{{ _('Cancel') }}</a>
    </div>
</form>

{% endblock %}