{% extends "base.html" %}
{% load static %}

{% block title %}Security Settings - Stream Processor{% endblock %}

{% block page_title %}
    <div class="flex items-center">
        <i class="fas fa-shield-alt mr-3 text-primary-600"></i>
        Security Settings
    </div>
{% endblock %}

{% block extra_head %}
<style>
    .security-container {
        max-width: 1200px;
        margin: 0 auto;
        padding: 2rem;
    }
    
    .security-card {
        background: white;
        border-radius: 12px;
        box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);
        padding: 2rem;
        margin-bottom: 2rem;
    }
    
    .card-header {
        display: flex;
        align-items: center;
        margin-bottom: 1.5rem;
        padding-bottom: 1rem;
        border-bottom: 2px solid #e2e8f0;
    }
    
    .card-icon {
        width: 48px;
        height: 48px;
        background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
        border-radius: 12px;
        display: flex;
        align-items: center;
        justify-content: center;
        color: white;
        font-size: 1.5rem;
        margin-right: 1rem;
    }
    
    .status-badge {
        padding: 0.25rem 0.75rem;
        border-radius: 20px;
        font-size: 0.8rem;
        font-weight: 600;
        text-transform: uppercase;
        letter-spacing: 0.05em;
    }
    
    .status-enabled {
        background: #d1fae5;
        color: #065f46;
    }
    
    .status-disabled {
        background: #fee2e2;
        color: #991b1b;
    }
    
    .status-warning {
        background: #fef3c7;
        color: #92400e;
    }
    
    .form-group {
        margin-bottom: 1.5rem;
    }
    
    .form-label {
        display: block;
        margin-bottom: 0.5rem;
        font-weight: 600;
        color: #374151;
    }
    
    .form-input {
        width: 100%;
        padding: 0.75rem;
        border: 2px solid #e2e8f0;
        border-radius: 8px;
        font-size: 1rem;
        transition: all 0.3s ease;
    }
    
    .form-input:focus {
        outline: none;
        border-color: #667eea;
        box-shadow: 0 0 0 3px rgba(102, 126, 234, 0.1);
    }
    
    .btn {
        padding: 0.75rem 1.5rem;
        border: none;
        border-radius: 8px;
        font-weight: 600;
        cursor: pointer;
        transition: all 0.3s ease;
        text-decoration: none;
        display: inline-flex;
        align-items: center;
        gap: 0.5rem;
    }
    
    .btn-primary {
        background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
        color: white;
    }
    
    .btn-primary:hover {
        transform: translateY(-2px);
        box-shadow: 0 4px 12px rgba(102, 126, 234, 0.3);
    }
    
    .btn-success {
        background: linear-gradient(135deg, #10b981 0%, #059669 100%);
        color: white;
    }
    
    .btn-success:hover {
        transform: translateY(-2px);
        box-shadow: 0 4px 12px rgba(16, 185, 129, 0.3);
    }
    
    .btn-danger {
        background: linear-gradient(135deg, #ef4444 0%, #dc2626 100%);
        color: white;
    }
    
    .btn-danger:hover {
        transform: translateY(-2px);
        box-shadow: 0 4px 12px rgba(239, 68, 68, 0.3);
    }
    
    .btn-secondary {
        background: #f8fafc;
        color: #374151;
        border: 2px solid #e2e8f0;
    }
    
    .btn-secondary:hover {
        background: #e2e8f0;
    }
    
    .session-item {
        display: flex;
        align-items: center;
        justify-content: space-between;
        padding: 1rem;
        background: #f8fafc;
        border-radius: 8px;
        margin-bottom: 1rem;
        border-left: 4px solid #e2e8f0;
    }
    
    .session-current {
        border-left-color: #10b981;
        background: #ecfdf5;
    }
    
    .session-info {
        flex: 1;
    }
    
    .session-device {
        font-weight: 600;
        color: #374151;
        margin-bottom: 0.25rem;
    }
    
    .session-details {
        font-size: 0.8rem;
        color: #6b7280;
    }
    
    .attempt-item {
        display: flex;
        align-items: center;
        padding: 0.75rem;
        background: #f8fafc;
        border-radius: 8px;
        margin-bottom: 0.5rem;
    }
    
    .attempt-success {
        border-left: 4px solid #10b981;
    }
    
    .attempt-failed {
        border-left: 4px solid #ef4444;
    }
    
    .attempt-icon {
        margin-right: 1rem;
        width: 32px;
        height: 32px;
        border-radius: 50%;
        display: flex;
        align-items: center;
        justify-content: center;
        color: white;
        font-size: 0.8rem;
    }
    
    .attempt-success .attempt-icon {
        background: #10b981;
    }
    
    .attempt-failed .attempt-icon {
        background: #ef4444;
    }
    
    .grid {
        display: grid;
        gap: 2rem;
    }
    
    .grid-2 {
        grid-template-columns: 1fr 1fr;
    }
    
    @media (max-width: 768px) {
        .grid-2 {
            grid-template-columns: 1fr;
        }
        
        .session-item {
            flex-direction: column;
            align-items: flex-start;
            gap: 1rem;
        }
    }
    
    .info-box {
        background: #eff6ff;
        border: 1px solid #bfdbfe;
        color: #1e40af;
        padding: 1rem;
        border-radius: 8px;
        margin-bottom: 1.5rem;
    }
    
    .warning-box {
        background: #fef3c7;
        border: 1px solid #fcd34d;
        color: #92400e;
        padding: 1rem;
        border-radius: 8px;
        margin-bottom: 1.5rem;
    }
</style>
{% endblock %}

{% block content %}
<div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8">
    <!-- Header -->
    <div class="mb-8">
        <div class="bg-white shadow rounded-lg">
            <div class="px-6 py-4 border-b border-gray-200">
                <div class="flex items-center justify-between">
                    <div>
                        <h1 class="text-2xl font-bold text-gray-900">Security Settings</h1>
                        <p class="mt-1 text-sm text-gray-600">Manage your account security and authentication preferences</p>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <!-- Info Panel -->
    <div class="mb-6">
        <div class="bg-blue-50 border border-blue-200 rounded-lg p-4">
            <div class="flex items-center">
                <i class="fas fa-info-circle text-blue-600 mr-3"></i>
                <div>
                    <h3 class="text-sm font-medium text-blue-800">Security Overview</h3>
                    <p class="text-sm text-blue-700">Configure two-factor authentication, manage active sessions, and review login attempts.</p>
                </div>
            </div>
        </div>
    </div>
    
    {% if messages %}
        {% for message in messages %}
            <div class="mb-4 p-4 rounded-lg {% if message.tags == 'success' %}bg-green-50 border border-green-200 text-green-800{% elif message.tags == 'error' %}bg-red-50 border border-red-200 text-red-800{% else %}bg-blue-50 border border-blue-200 text-blue-800{% endif %}">
                {{ message }}
            </div>
        {% endfor %}
    {% endif %}
    
    <!-- Two-Factor Authentication -->
    <div class="bg-white shadow rounded-lg p-6 mb-6">
        <div class="card-header">
            <div class="card-icon">
                <i class="fas fa-mobile-alt"></i>
            </div>
            <div class="flex-1">
                <h2 class="text-xl font-bold text-gray-800">Two-Factor Authentication</h2>
                <p class="text-gray-600">Add an extra layer of security to your account</p>
            </div>
            <div class="status-badge {% if profile.is_2fa_enabled %}status-enabled{% else %}status-disabled{% endif %}">
                {% if profile.is_2fa_enabled %}
                    <i class="fas fa-check mr-1"></i>Enabled
                {% else %}
                    <i class="fas fa-times mr-1"></i>Disabled
                {% endif %}
            </div>
        </div>
        
        {% if profile.is_2fa_enabled %}
            <div class="info-box">
                <i class="fas fa-info-circle mr-2"></i>
                Two-factor authentication is active. You have {{ profile.backup_codes|length }} backup codes remaining.
            </div>
            
            <div class="flex gap-4">
                <a href="{% url 'authentication:regenerate_backup_codes' %}" class="btn btn-secondary">
                    <i class="fas fa-key"></i>
                    Regenerate Backup Codes
                </a>
                <a href="{% url 'authentication:disable_2fa' %}" class="btn btn-danger">
                    <i class="fas fa-times"></i>
                    Disable 2FA
                </a>
            </div>
        {% else %}
            <div class="warning-box">
                <i class="fas fa-exclamation-triangle mr-2"></i>
                Your account is not protected by two-factor authentication. Enable it now for better security.
            </div>
            
            <a href="{% url 'authentication:setup_2fa' %}" class="btn btn-success">
                <i class="fas fa-shield-alt"></i>
                Enable Two-Factor Authentication
            </a>
        {% endif %}
    </div>
    
    <div class="grid grid-2">
        <!-- Security Settings -->
        <div class="security-card">
            <div class="card-header">
                <div class="card-icon">
                    <i class="fas fa-cog"></i>
                </div>
                <div>
                    <h2 class="text-xl font-bold text-gray-800">Security Preferences</h2>
                    <p class="text-gray-600">Configure your security settings</p>
                </div>
            </div>
            
            <form method="post">
                {% csrf_token %}
                <input type="hidden" name="update_security" value="1">
                
                <div class="form-group">
                    <label for="{{ security_form.login_notifications.id_for_label }}" class="form-label">
                        <i class="fas fa-bell mr-2"></i>
                        {{ security_form.login_notifications.label }}
                    </label>
                    {{ security_form.login_notifications }}
                    {% if security_form.login_notifications.help_text %}
                        <p class="text-sm text-gray-500 mt-1">{{ security_form.login_notifications.help_text }}</p>
                    {% endif %}
                </div>
                
                <div class="form-group">
                    <label for="{{ security_form.session_timeout.id_for_label }}" class="form-label">
                        <i class="fas fa-clock mr-2"></i>
                        {{ security_form.session_timeout.label }}
                    </label>
                    {{ security_form.session_timeout }}
                    {% if security_form.session_timeout.help_text %}
                        <p class="text-sm text-gray-500 mt-1">{{ security_form.session_timeout.help_text }}</p>
                    {% endif %}
                </div>
                
                <button type="submit" class="btn btn-primary">
                    <i class="fas fa-save"></i>
                    Save Settings
                </button>
            </form>
        </div>
        
        <!-- Password Change -->
        <div class="security-card">
            <div class="card-header">
                <div class="card-icon">
                    <i class="fas fa-key"></i>
                </div>
                <div>
                    <h2 class="text-xl font-bold text-gray-800">Change Password</h2>
                    <p class="text-gray-600">Update your account password</p>
                </div>
            </div>
            
            {% if profile.last_password_change %}
                <div class="info-box">
                    <i class="fas fa-info-circle mr-2"></i>
                    Last changed: {{ profile.last_password_change|date:"F j, Y g:i A" }}
                </div>
            {% endif %}
            
            <form method="post">
                {% csrf_token %}
                <input type="hidden" name="change_password" value="1">
                
                <div class="form-group">
                    <label for="{{ password_form.old_password.id_for_label }}" class="form-label">
                        {{ password_form.old_password.label }}
                    </label>
                    {{ password_form.old_password }}
                    {% if password_form.old_password.errors %}
                        <div class="text-red-500 text-sm mt-1">
                            {% for error in password_form.old_password.errors %}
                                {{ error }}
                            {% endfor %}
                        </div>
                    {% endif %}
                </div>
                
                <div class="form-group">
                    <label for="{{ password_form.new_password1.id_for_label }}" class="form-label">
                        {{ password_form.new_password1.label }}
                    </label>
                    {{ password_form.new_password1 }}
                    {% if password_form.new_password1.errors %}
                        <div class="text-red-500 text-sm mt-1">
                            {% for error in password_form.new_password1.errors %}
                                {{ error }}
                            {% endfor %}
                        </div>
                    {% endif %}
                </div>
                
                <div class="form-group">
                    <label for="{{ password_form.new_password2.id_for_label }}" class="form-label">
                        {{ password_form.new_password2.label }}
                    </label>
                    {{ password_form.new_password2 }}
                    {% if password_form.new_password2.errors %}
                        <div class="text-red-500 text-sm mt-1">
                            {% for error in password_form.new_password2.errors %}
                                {{ error }}
                            {% endfor %}
                        </div>
                    {% endif %}
                </div>
                
                <button type="submit" class="btn btn-primary">
                    <i class="fas fa-key"></i>
                    Change Password
                </button>
            </form>
        </div>
    </div>
    
    <!-- Active Sessions -->
    <div class="security-card">
        <div class="card-header">
            <div class="card-icon">
                <i class="fas fa-desktop"></i>
            </div>
            <div class="flex-1">
                <h2 class="text-xl font-bold text-gray-800">Active Sessions</h2>
                <p class="text-gray-600">Manage your active login sessions</p>
            </div>
            <button onclick="terminateAllSessions()" class="btn btn-danger">
                <i class="fas fa-sign-out-alt"></i>
                Terminate All Other Sessions
            </button>
        </div>
        
        {% for session in active_sessions %}
            <div class="session-item {% if session.session_key == current_session_key %}session-current{% endif %}">
                <div class="session-info">
                    <div class="session-device">
                        <i class="fas fa-{% if 'Mobile' in session.user_agent %}mobile-alt{% else %}desktop{% endif %} mr-2"></i>
                        {% if session.session_key == current_session_key %}
                            Current Session
                        {% else %}
                            {{ session.user_agent|truncatechars:50 }}
                        {% endif %}
                    </div>
                    <div class="session-details">
                        <i class="fas fa-map-marker-alt mr-1"></i>
                        IP: {{ session.ip_address }}
                        <span class="mx-2">•</span>
                        <i class="fas fa-clock mr-1"></i>
                        Last active: {{ session.last_activity|timesince }} ago
                        {% if session.session_key == current_session_key %}
                            <span class="mx-2">•</span>
                            <span class="text-green-600 font-semibold">
                                <i class="fas fa-circle mr-1" style="font-size: 0.5rem;"></i>
                                Current
                            </span>
                        {% endif %}
                    </div>
                </div>
                {% if session.session_key != current_session_key %}
                    <button onclick="terminateSession('{{ session.session_key }}')" class="btn btn-secondary">
                        <i class="fas fa-times"></i>
                        Terminate
                    </button>
                {% endif %}
            </div>
        {% empty %}
            <div class="text-center py-8 text-gray-500">
                <i class="fas fa-desktop text-4xl mb-4"></i>
                <p>No active sessions found</p>
            </div>
        {% endfor %}
    </div>
    
    <!-- Recent Login Attempts -->
    <div class="security-card">
        <div class="card-header">
            <div class="card-icon">
                <i class="fas fa-history"></i>
            </div>
            <div>
                <h2 class="text-xl font-bold text-gray-800">Recent Login Attempts</h2>
                <p class="text-gray-600">Monitor login activity on your account</p>
            </div>
        </div>
        
        {% for attempt in recent_attempts %}
            <div class="attempt-item {% if attempt.success %}attempt-success{% else %}attempt-failed{% endif %}">
                <div class="attempt-icon">
                    <i class="fas fa-{% if attempt.success %}check{% else %}times{% endif %}"></i>
                </div>
                <div class="flex-1">
                    <div class="font-semibold">
                        {% if attempt.success %}
                            Successful login
                        {% else %}
                            Failed login attempt
                        {% endif %}
                    </div>
                    <div class="text-sm text-gray-600">
                        <i class="fas fa-map-marker-alt mr-1"></i>
                        {{ attempt.ip_address }}
                        <span class="mx-2">•</span>
                        <i class="fas fa-clock mr-1"></i>
                        {{ attempt.created_at|timesince }} ago
                        {% if attempt.user_agent %}
                            <span class="mx-2">•</span>
                            <i class="fas fa-desktop mr-1"></i>
                            {{ attempt.user_agent|truncatechars:30 }}
                        {% endif %}
                    </div>
                </div>
            </div>
        {% empty %}
            <div class="text-center py-8 text-gray-500">
                <i class="fas fa-history text-4xl mb-4"></i>
                <p>No recent login attempts</p>
            </div>
        {% endfor %}
    </div>
</div>

<script>
function terminateSession(sessionKey) {
    if (confirm('Are you sure you want to terminate this session?')) {
        fetch('{% url "authentication:terminate_session" %}', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded',
                'X-CSRFToken': document.querySelector('[name=csrfmiddlewaretoken]').value
            },
            body: 'session_key=' + encodeURIComponent(sessionKey)
        })
        .then(response => response.json())
        .then(data => {
            if (data.success) {
                location.reload();
            } else {
                alert('Error: ' + (data.error || 'Failed to terminate session'));
            }
        })
        .catch(error => {
            console.error('Error:', error);
            alert('An error occurred while terminating the session.');
        });
    }
}

function terminateAllSessions() {
    if (confirm('Are you sure you want to terminate all other sessions? This will log out all other devices.')) {
        fetch('{% url "authentication:terminate_all_sessions" %}', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded',
                'X-CSRFToken': document.querySelector('[name=csrfmiddlewaretoken]').value
            }
        })
        .then(response => response.json())
        .then(data => {
            if (data.success) {
                alert(`Successfully terminated ${data.terminated_count} session(s).`);
                location.reload();
            } else {
                alert('Error: ' + (data.error || 'Failed to terminate sessions'));
            }
        })
        .catch(error => {
            console.error('Error:', error);
            alert('An error occurred while terminating sessions.');
        });
    }
}
</script>
{% endblock %}