{% extends "layouts/dashboard.html" %}

{% block title %}Attestation - Nautilus Admin{% endblock %}

{% block dashboard_content %}
<h1>Attestation Verify</h1>
<p>Verify EdDSA-signed JWT attestation tokens returned with every broker response.</p>

{% if not signing_key_configured %}
<div class="empty-state">
    <p>Attestation not configured &mdash; no signing key available</p>
    <p class="empty-hint">Enable attestation in nautilus.yaml with <code>attestation.enabled: true</code></p>
</div>
{% else %}
<div class="card">
    <h2>Paste a token</h2>
    <p class="text-muted text-sm" style="margin-bottom:1rem">
        Copy the <code>attestation_token</code> field from any broker response
        (e.g. from the <a href="/admin/playground">Playground</a>) and paste it below.
    </p>
    <form hx-post="/admin/attestation/verify"
          hx-target="#attestation-result"
          hx-swap="innerHTML">
        <div class="form-group">
            <label class="form-label" for="token-input">JWT Token</label>
            <textarea class="form-textarea" id="token-input"
                      name="token"
                      rows="4"
                      placeholder="eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..."></textarea>
        </div>
        <button type="submit" class="btn btn-primary">Verify Token</button>
    </form>
</div>

<div id="attestation-result"></div>
{% endif %}
{% endblock %}