{% extends shell('app') %}
{% from 'apikeys/macros.html' import token_state %}

{% block title %}{{ _('API tokens') }}{% endblock %}

{% block content %}

    <div class="d-flex justify-content-between align-items-start mb-3">
        <div>
            <h1 class="h2 mb-1"><b>{{ _('API tokens') }}</b></h1>
            <p class="text-muted mb-0">
                {{ _('Tokens let the splent command line act on your behalf. The token itself is shown once, when you create it, and is never stored here.') }}
            </p>
        </div>
        <div class="d-flex gap-2">
            {% if unrevoked %}
                <form method="post" action="{{ url_for('apikeys.revoke_all') }}"
                      onsubmit='return confirm({{ _("Revoke every token of your account? Anything that uses one stops working at once.") | tojson }})'>
                    {{ revoke_all_form.hidden_tag() }}
                    <button type="submit" class="btn btn-outline-danger text-nowrap">{{ _('Revoke all') }}</button>
                </form>
            {% endif %}
            <a class="btn btn-primary text-nowrap" href="{{ url_for('apikeys.new') }}">{{ _('New token') }}</a>
        </div>
    </div>

    {% with messages = get_flashed_messages(with_categories=true) %}
        {% if messages %}
            <div class="mb-3">
                {% for category, message in messages %}
                    <div class="alert alert-{{ category }}">{{ message }}</div>
                {% endfor %}
            </div>
        {% endif %}
    {% endwith %}

    {% if tokens %}
        <div class="table-responsive">
            <table class="table table-hover align-middle">
                <thead>
                    <tr>
                        <th>{{ _('Name') }}</th>
                        <th>{{ _('Token') }}</th>
                        <th>{{ _('Scopes') }}</th>
                        <th>{{ _('Created') }}</th>
                        <th>{{ _('Expires') }}</th>
                        <th>{{ _('Last used') }}</th>
                        <th>{{ _('State') }}</th>
                        {# Pinned to the right in the panel (admin's panel.css),
                           so Revoke stays in view on a phone. #}
                        <th class="sp-sticky-end"></th>
                    </tr>
                </thead>
                <tbody>
                    {% for token in tokens %}
                        <tr>
                            <td>{{ token.name }}</td>
                            <td><code>{{ token.prefix }}...</code></td>
                            <td>
                                {% for scope in token.scope_list %}
                                    <span class="badge bg-light text-dark">{{ scope }}</span>
                                {% endfor %}
                            </td>
                            <td>{{ token.created_at.strftime('%Y-%m-%d %H:%M') if token.created_at else '' }}</td>
                            <td>
                                {% if token.expires_at %}
                                    {{ token.expires_at.strftime('%Y-%m-%d %H:%M') }}
                                {% else %}
                                    {{ _('Never') }}
                                {% endif %}
                            </td>
                            <td>
                                {% if token.last_used_at %}
                                    {{ token.last_used_at.strftime('%Y-%m-%d %H:%M') }}
                                {% else %}
                                    {{ _('Never') }}
                                {% endif %}
                            </td>
                            <td>{{ token_state(token) }}</td>
                            <td class="text-end text-nowrap sp-sticky-end">
                                {% if not token.is_revoked %}
                                    {# The name is the developer's own text, so it reaches
                                       the script as plain text turned into JSON, in a
                                       single quoted attribute no quote in it can leave. #}
                                    <form method="post"
                                          action="{{ url_for('apikeys.revoke', token_id=token.id) }}"
                                          class="d-inline"
                                          onsubmit='return confirm({{ _("Revoke %(name)s? Anything that uses it stops working at once.", name=token.name) | striptags | tojson }})'>
                                        {{ revoke_form.hidden_tag() }}
                                        <button type="submit" class="btn btn-sm btn-outline-danger">{{ _('Revoke') }}</button>
                                    </form>
                                {% endif %}
                            </td>
                        </tr>
                    {% endfor %}
                </tbody>
            </table>
        </div>
    {% else %}
        <div class="alert alert-light border">
            {{ _('You have no tokens yet. Create one to use the splent command line.') }}
        </div>
    {% endif %}

{% endblock %}