@extends('layouts.app')
@section('title', 'Nessus-Konfiguration')
@section('content')
    <section class="panel"><div class="panel-head"><h2>Verbindungen</h2></div>
        <div class="table-wrap"><table class="data">
            <thead><tr><th>Name</th><th>Produkt</th><th>URL</th><th>Access Key</th><th>TLS</th><th>Letzter Test</th><th></th></tr></thead>
            <tbody>@forelse ($connections as $connection)
                <tr>
                    <td><strong>{{ $connection->name }}</strong>
                        @if ($connection->is_default)<span class="badge badge-info">Standard</span>@endif</td>
                    <td class="small">{{ $connection->product }}</td>
                    <td class="small mono">{{ $connection->base_url }}</td>
                    <td class="small mono">{{ $connection->maskedAccessKey() ?: '– nicht gesetzt –' }}</td>
                    <td>@if ($connection->verify_tls)<span class="badge badge-ok">geprüft</span>@else<span class="badge badge-warning">ohne Prüfung</span>@endif</td>
                    <td class="small">
                        @if ($connection->last_tested_at)
                            <span class="badge {{ $connection->last_test_status === 'ok' ? 'badge-ok' : 'badge-critical' }}">{{ $connection->last_test_status }}</span>
                            {{ $connection->last_tested_at->format('d.m. H:i') }}
                            @if ($connection->server_version)<br><span class="muted">Version {{ $connection->server_version }}</span>@endif
                        @else – @endif
                    </td>
                    <td class="right nowrap">
                        @can(\App\Enums\Permission::NESSUS_MANAGE)
                            <form method="POST" action="{{ route('admin.nessus.test', $connection) }}" style="display:inline;">
                                @csrf<button class="btn btn-ghost btn-sm" type="submit">Testen</button></form>
                            <form method="POST" action="{{ route('admin.nessus.policies.sync', $connection) }}" style="display:inline;">
                                @csrf<button class="btn btn-ghost btn-sm" type="submit">Policies abgleichen</button></form>
                        @endcan
                    </td>
                </tr>
            @empty
                <tr><td colspan="7"><div class="empty">Keine Verbindung konfiguriert.</div></td></tr>
            @endforelse</tbody></table></div>
    </section>

    @can(\App\Enums\Permission::NESSUS_MANAGE)
    <section class="panel"><div class="panel-head"><h2>Verbindung hinzufügen</h2></div><div class="panel-body">
        <form method="POST" action="{{ route('admin.nessus.store') }}">
            @csrf
            <div class="form-row">
                <div class="field"><label for="name">Name *</label><input id="name" name="name" type="text" required></div>
                <div class="field"><label for="product">Produkt *</label>
                    <select id="product" name="product" required>
                        @foreach ($products as $product)<option value="{{ $product }}">{{ $product }}</option>@endforeach
                    </select></div>
                <div class="field"><label for="base_url">Basis-URL *</label>
                    <input id="base_url" name="base_url" type="url" required placeholder="https://nessus.example.local:8834"></div>
            </div>
            <div class="form-row">
                <div class="field"><label for="access_key">Access Key *</label>
                    <input id="access_key" name="access_key" type="password" required autocomplete="off"></div>
                <div class="field"><label for="secret_key">Secret Key *</label>
                    <input id="secret_key" name="secret_key" type="password" required autocomplete="off">
                    <div class="help">Die Schlüssel werden verschlüsselt gespeichert und nie wieder angezeigt.</div></div>
                <div class="field"><label for="scanner_id">Scanner-ID</label><input id="scanner_id" name="scanner_id" type="text" value="1"></div>
            </div>
            <div class="form-row">
                <div class="field"><label for="default_policy_id">Freigegebene Policy-ID</label>
                    <input id="default_policy_id" name="default_policy_id" type="text"></div>
                <div class="field"><label for="timeout">Timeout (s)</label><input id="timeout" name="timeout" type="number" value="60"></div>
            </div>
            <label class="check"><input type="checkbox" name="verify_tls" value="1" checked><span>TLS-Zertifikat prüfen</span></label>
            <label class="check"><input type="checkbox" name="is_active" value="1" checked><span>Aktiv</span></label>
            <label class="check"><input type="checkbox" name="is_default" value="1"><span>Als Standardverbindung verwenden</span></label>
            <button class="btn btn-primary" type="submit">Speichern</button>
        </form>
    </div></section>
    @endcan

    <section class="panel"><div class="panel-head"><h2>Policies</h2></div>
        <div class="table-wrap"><table class="data">
            <thead><tr><th>Name</th><th>Vorlage</th><th>Sicherheitsprüfung</th><th>Freigabe</th><th>Abgeglichen</th><th></th></tr></thead>
            <tbody>@forelse ($policies as $policy)
                <tr>
                    <td><strong>{{ $policy->name }}</strong><br><span class="muted small mono">ID {{ $policy->remote_id }}</span></td>
                    <td class="small">{{ $policy->template_name ?: '–' }}</td>
                    <td>
                        @if ($policy->passed_policy_guard)
                            <span class="badge badge-ok">unbedenklich</span>
                        @else
                            <span class="badge badge-critical">beanstandet</span>
                            <ul class="small" style="margin:6px 0 0;padding-left:16px;">
                                @foreach ((array) $policy->policy_guard_findings as $issue)
                                    <li>{{ $issue['message'] ?? '' }}</li>
                                @endforeach
                            </ul>
                        @endif
                    </td>
                    <td>@if ($policy->is_approved)<span class="badge badge-ok">freigegeben</span>@else<span class="badge badge-neutral">offen</span>@endif</td>
                    <td class="small nowrap">{{ $policy->synced_at?->format('d.m. H:i') ?? '–' }}</td>
                    <td class="right">
                        @can(\App\Enums\Permission::NESSUS_MANAGE)
                            @if ($policy->is_approved)
                                <form method="POST" action="{{ route('admin.nessus.policies.revoke', $policy) }}">
                                    @csrf @method('DELETE')<button class="btn btn-ghost btn-sm" type="submit">Freigabe entziehen</button></form>
                            @elseif ($policy->passed_policy_guard)
                                <form method="POST" action="{{ route('admin.nessus.policies.approve', $policy) }}">
                                    @csrf<button class="btn btn-primary btn-sm" type="submit">Freigeben</button></form>
                            @endif
                        @endcan
                    </td>
                </tr>
            @empty
                <tr><td colspan="6"><div class="empty">Keine Policies abgeglichen.</div></td></tr>
            @endforelse</tbody></table></div>
    </section>
@endsection