@extends('layouts.app')
@section('title', 'Benutzerverwaltung')
@section('content')
    <section class="panel"><div class="panel-head"><h2>Benutzer</h2></div>
        <div class="table-wrap"><table class="data">
            <thead><tr><th>Name</th><th>E-Mail</th><th>Rollen</th><th>Status</th><th>Letzte Anmeldung</th><th></th></tr></thead>
            <tbody>@foreach ($users as $user)
                <tr>
                    <td><strong>{{ $user->name }}</strong>
                        @if ($user->is_breakglass)<br><span class="badge badge-warning">Break-Glass</span>@endif</td>
                    <td class="small mono">{{ $user->email }}</td>
                    <td class="small">{{ implode(', ', array_map(fn ($r) => \App\Enums\RoleKey::tryFrom($r)?->label() ?? $r, $user->roleKeys())) }}</td>
                    <td>
                        @if (! $user->is_active)<span class="badge badge-neutral">deaktiviert</span>
                        @elseif ($user->isLocked())<span class="badge badge-critical">gesperrt</span>
                        @else<span class="badge badge-ok">aktiv</span>@endif
                    </td>
                    <td class="small nowrap">{{ $user->last_login_at?->format('d.m.Y H:i') ?? 'nie' }}</td>
                    <td class="right">
                        @can(\App\Enums\Permission::USER_MANAGE)
                            @if ($user->isLocked())
                                <form method="POST" action="{{ route('admin.users.unlock', $user) }}" style="display:inline;">
                                    @csrf<button class="btn btn-ghost btn-sm" type="submit">Entsperren</button></form>
                            @endif
                            <details style="display:inline-block;text-align:left;">
                                <summary class="btn btn-ghost btn-sm">Bearbeiten</summary>
                                <form method="POST" action="{{ route('admin.users.update', $user) }}" style="margin-top:8px;min-width:260px;">
                                    @csrf @method('PUT')
                                    <div class="field"><label>Name</label><input name="name" type="text" value="{{ $user->name }}" required></div>
                                    <div class="field"><label>E-Mail</label><input name="email" type="email" value="{{ $user->email }}" required></div>
                                    <div class="field"><label>Rollen</label>
                                        @foreach ($roles as $role)
                                            <label class="check"><input type="checkbox" name="roles[]" value="{{ $role->id }}"
                                                @checked($user->roles->contains($role->id))><span>{{ $role->name }}</span></label>
                                        @endforeach
                                    </div>
                                    <div class="field"><label>Neues Passwort (optional)</label>
                                        <input name="password" type="password" autocomplete="new-password"></div>
                                    <div class="field"><label>Passwort bestätigen</label>
                                        <input name="password_confirmation" type="password" autocomplete="new-password"></div>
                                    <label class="check"><input type="checkbox" name="is_active" value="1" @checked($user->is_active)><span>aktiv</span></label>
                                    <button class="btn btn-primary btn-sm" type="submit">Speichern</button>
                                </form>
                            </details>
                        @endcan
                    </td>
                </tr>
            @endforeach</tbody></table></div>
        <div class="panel-body">{{ $users->links() }}</div>
    </section>

    @can(\App\Enums\Permission::USER_MANAGE)
    <section class="grid grid-2">
        <div class="panel"><div class="panel-head"><h2>Benutzer anlegen</h2></div><div class="panel-body">
            <form method="POST" action="{{ route('admin.users.store') }}">
                @csrf
                <div class="field"><label for="new_name">Name *</label><input id="new_name" name="name" type="text" required></div>
                <div class="field"><label for="new_email">E-Mail *</label><input id="new_email" name="email" type="email" required></div>
                <div class="field"><label>Rollen *</label>
                    @foreach ($roles as $role)
                        <label class="check"><input type="checkbox" name="roles[]" value="{{ $role->id }}"><span>{{ $role->name }} – <span class="muted small">{{ $role->description }}</span></span></label>
                    @endforeach
                </div>
                <div class="field"><label for="new_password">Passwort (nur für Break-Glass)</label>
                    <input id="new_password" name="password" type="password" autocomplete="new-password">
                    <div class="help">Mindestens 14 Zeichen mit Gross-/Kleinbuchstaben, Ziffern und Sonderzeichen.
                        Ohne Passwort ist nur die Anmeldung über Microsoft Entra ID möglich.</div></div>
                <div class="field"><label for="new_password_confirmation">Passwort bestätigen</label>
                    <input id="new_password_confirmation" name="password_confirmation" type="password" autocomplete="new-password"></div>
                <label class="check"><input type="checkbox" name="is_breakglass" value="1"><span>Break-Glass-Konto (Anmeldungen werden gesondert protokolliert)</span></label>
                <button class="btn btn-primary" type="submit">Anlegen</button>
            </form>
        </div></div>

        <div class="panel"><div class="panel-head"><h2>Rollen und Berechtigungen</h2></div><div class="panel-body">
            @foreach ($roles as $role)
                <details style="margin-bottom:10px;">
                    <summary><strong>{{ $role->name }}</strong> <span class="muted small">({{ $role->permissions->count() }} Berechtigungen)</span></summary>
                    <p class="small muted">{{ $role->description }}</p>
                    <p class="small mono">{{ $role->permissions->pluck('key')->implode(', ') }}</p>
                </details>
            @endforeach
        </div></div>
    </section>
    @endcan
@endsection