@extends('layouts.portal')

@section('title', 'Two-Factor Authentication Settings')
@section('page_title', '🔐 Two-Factor Authentication')
@section('page_subtitle', 'Control OTP security for your admin account')

@section('sidebar')
    @include('admin.partials.sidebar', ['active' => '2fa-settings'])
@endsection

@section('content')
<div class="max-w-3xl mx-auto p-6">
    <!-- Success Alert with Auto-Hide -->
    @if (session('success'))
        <div id="successAlert" class="mb-6 p-4 bg-green-50 border-l-4 border-green-500 rounded-lg shadow-lg animate-pulse">
            <div class="flex items-start">
                <div class="flex-shrink-0">
                    <i class="fas fa-check-circle text-green-600 text-2xl"></i>
                </div>
                <div class="ml-4 flex-1">
                    <h3 class="font-semibold text-green-800">Success!</h3>
                    <p class="text-green-700 text-sm mt-1">{{ session('success') }}</p>
                </div>
                <button onclick="document.getElementById('successAlert').style.display='none'" class="ml-4 text-green-600 hover:text-green-800">
                    <i class="fas fa-times"></i>
                </button>
            </div>
        </div>
    @endif

    <!-- Error Alert -->
    @if ($errors->any())
        <div class="mb-6 p-4 bg-red-50 border-l-4 border-red-500 rounded-lg shadow-lg">
            <div class="flex items-start">
                <div class="flex-shrink-0">
                    <i class="fas fa-exclamation-circle text-red-600 text-2xl"></i>
                </div>
                <div class="ml-4 flex-1">
                    <h3 class="font-semibold text-red-800">Error</h3>
                    @foreach ($errors->all() as $error)
                        <p class="text-red-700 text-sm mt-1">{{ $error }}</p>
                    @endforeach
                </div>
            </div>
        </div>
    @endif

    <!-- Main Settings Card -->
    <div class="bg-white rounded-2xl shadow-xl border border-gray-200 overflow-hidden">
        
        <!-- Header -->
        <div class="bg-gradient-to-r from-red-600 via-red-500 to-red-700 p-8 text-white">
            <h1 class="text-3xl font-bold flex items-center">
                <i class="fas fa-shield-alt mr-3"></i>
                Two-Factor Authentication
            </h1>
            <p class="text-red-100 mt-2">Enhance your admin account security with email-based OTP verification</p>
        </div>

        <!-- Content -->
        <div class="p-8">
            
            <!-- Status Section -->
            <div class="mb-10 p-8 rounded-2xl bg-gradient-to-br from-gray-50 to-gray-100 border-2 border-gray-300">
                <div class="flex items-center justify-between">
                    <div class="flex-1">
                        <h2 class="text-2xl font-bold text-gray-800 mb-4">Current Status</h2>
                        <div class="flex items-center gap-3">
                            @if ($is_2fa_enabled)
                                <div class="flex items-center">
                                    <div class="w-6 h-6 bg-green-500 rounded-full animate-pulse"></div>
                                    <span class="text-green-700 font-bold text-lg ml-2">✅ 2FA ENABLED</span>
                                </div>
                            @else
                                <div class="flex items-center">
                                    <div class="w-6 h-6 bg-red-500 rounded-full"></div>
                                    <span class="text-red-700 font-bold text-lg ml-2">❌ 2FA DISABLED</span>
                                </div>
                            @endif
                        </div>
                    </div>
                </div>

                <p class="text-sm text-gray-600 mt-4">
                    @if ($is_2fa_enabled)
                        <i class="fas fa-info-circle mr-2 text-blue-600"></i>
                        <strong>OTP will be required during login.</strong> You'll receive a 6-digit code via email.
                    @else
                        <i class="fas fa-info-circle mr-2 text-blue-600"></i>
                        <strong>2FA is currently disabled.</strong> You can enable it below for enhanced security.
                    @endif
                </p>
            </div>

            <!-- Email Information - EDITABLE -->
            <div class="mb-10 p-6 rounded-xl bg-blue-50 border-2 border-blue-300">
                <h3 class="font-semibold text-blue-900 mb-4 flex items-center">
                    <i class="fas fa-envelope text-blue-600 mr-2 text-lg"></i>OTP Email Address
                </h3>
                <form action="{{ route('admin.2fa.update-email') }}" method="POST" class="space-y-4">
                    @csrf
                    
                    <div class="bg-white rounded-lg p-4 border border-blue-200">
                        <div class="flex gap-2">
                            <input 
                                type="email" 
                                name="otp_email" 
                                value="{{ Auth::user()->email }}"
                                class="flex-1 px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 focus:border-transparent outline-none"
                            >
                            <button 
                                type="submit" 
                                class="px-4 py-2 bg-blue-600 hover:bg-blue-700 text-white font-semibold rounded-lg transition-all"
                            >
                                <i class="fas fa-save mr-2"></i>Update
                            </button>
                        </div>
                        <p class="text-sm text-gray-600 mt-2">
                            <i class="fas fa-check text-green-600 mr-2"></i>All OTP codes will be sent to this email address
                        </p>
                    </div>
                </form>
            </div>

            <!-- Security Benefits -->
            <div class="mb-10">
                <h3 class="font-semibold text-gray-800 mb-4 text-lg flex items-center">
                    <i class="fas fa-star text-yellow-500 mr-2"></i>Security Features
                </h3>
                <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
                    <div class="p-4 bg-gradient-to-br from-green-50 to-green-100 rounded-lg border border-green-200">
                        <p class="font-semibold text-green-800 flex items-center">
                            <i class="fas fa-lock text-green-600 mr-2"></i>Email-Based OTP
                        </p>
                        <p class="text-sm text-green-700 mt-1">Unique 6-digit code sent to your email</p>
                    </div>
                    <div class="p-4 bg-gradient-to-br from-blue-50 to-blue-100 rounded-lg border border-blue-200">
                        <p class="font-semibold text-blue-800 flex items-center">
                            <i class="fas fa-clock text-blue-600 mr-2"></i>Time Limited
                        </p>
                        <p class="text-sm text-blue-700 mt-1">OTP valid for only 10 minutes</p>
                    </div>
                    <div class="p-4 bg-gradient-to-br from-purple-50 to-purple-100 rounded-lg border border-purple-200">
                        <p class="font-semibold text-purple-800 flex items-center">
                            <i class="fas fa-shield-alt text-purple-600 mr-2"></i>Login Protection
                        </p>
                        <p class="text-sm text-purple-700 mt-1">Prevents unauthorized admin access</p>
                    </div>
                    <div class="p-4 bg-gradient-to-br from-orange-50 to-orange-100 rounded-lg border border-orange-200">
                        <p class="font-semibold text-orange-800 flex items-center">
                            <i class="fas fa-ban text-orange-600 mr-2"></i>Attempt Limit
                        </p>
                        <p class="text-sm text-orange-700 mt-1">Maximum 5 failed attempts per login</p>
                    </div>
                </div>
            </div>

            <!-- Toggle Form -->
            <div class="pt-8 border-t-2 border-gray-200">
                <h3 class="font-semibold text-gray-800 mb-6 text-lg flex items-center">
                    <i class="fas fa-cog text-gray-600 mr-2"></i>Change 2FA Status
                </h3>
                
                <form action="{{ route('admin.2fa.toggle') }}" method="POST" class="space-y-6">
                    @csrf

                    <!-- Password Field -->
                    <div class="space-y-3">
                        <label class="block text-sm font-semibold text-gray-700">
                            <i class="fas fa-lock mr-2 text-red-600"></i>Confirm Your Password
                        </label>
                        <input 
                            type="password" 
                            name="password" 
                            required 
                            placeholder="••••••••"
                            class="w-full px-5 py-3 border-2 border-gray-300 rounded-lg focus:border-red-500 focus:ring-2 focus:ring-red-200 outline-none transition-all font-semibold text-center"
                        >
                        <p class="text-xs text-gray-600 flex items-center">
                            <i class="fas fa-info-circle mr-2"></i>Password required to verify your identity
                        </p>
                    </div>

                    <!-- Info Message -->
                    <div class="p-5 rounded-lg @if ($is_2fa_enabled) bg-red-50 border-l-4 border-red-500 @else bg-green-50 border-l-4 border-green-500 @endif">
                        <p class="text-sm @if ($is_2fa_enabled) text-red-800 @else text-green-800 @endif">
                            <i class="fas fa-lightbulb mr-2"></i>
                            @if ($is_2fa_enabled)
                                <strong>About to disable:</strong> Login will only require email and password (less secure).
                            @else
                                <strong>About to enable:</strong> Login will require email, password, AND OTP code (more secure).
                            @endif
                        </p>
                    </div>

                    <!-- Action Button -->
                    <button 
                        type="submit" 
                        class="w-full py-4 px-6 @if ($is_2fa_enabled) bg-red-600 hover:bg-red-700 @else bg-green-600 hover:bg-green-700 @endif text-white font-bold rounded-lg transition-all shadow-lg hover:shadow-xl transform hover:scale-105"
                    >
                        @if ($is_2fa_enabled)
                            <i class="fas fa-toggle-off mr-2 text-xl"></i>DISABLE 2FA NOW
                        @else
                            <i class="fas fa-toggle-on mr-2 text-xl"></i>ENABLE 2FA NOW
                        @endif
                    </button>
                </form>
            </div>
        </div>
    </div>

    <!-- Help Section -->
    <div class="mt-8 p-6 bg-white rounded-xl shadow-lg border-l-4 border-blue-500">
        <h3 class="font-bold text-gray-800 mb-4 flex items-center text-lg">
            <i class="fas fa-question-circle text-blue-600 mr-2"></i>How It Works
        </h3>
        <div class="space-y-3 text-sm text-gray-700">
            <p class="flex items-start">
                <i class="fas fa-arrow-right text-blue-600 mt-1 mr-3 flex-shrink-0"></i>
                <span><strong>Step 1:</strong> Enter your admin email and password on login page</span>
            </p>
            <p class="flex items-start">
                <i class="fas fa-arrow-right text-blue-600 mt-1 mr-3 flex-shrink-0"></i>
                <span><strong>Step 2:</strong> OTP code (6 digits) is sent to your email instantly</span>
            </p>
            <p class="flex items-start">
                <i class="fas fa-arrow-right text-blue-600 mt-1 mr-3 flex-shrink-0"></i>
                <span><strong>Step 3:</strong> Enter the OTP code on the verification page</span>
            </p>
            <p class="flex items-start">
                <i class="fas fa-arrow-right text-blue-600 mt-1 mr-3 flex-shrink-0"></i>
                <span><strong>Step 4:</strong> Access granted to admin panel! ✅</span>
            </p>
        </div>
    </div>
</div>

<!-- Auto-hide success alert after 5 seconds (no page reload) -->
<script>
document.addEventListener('DOMContentLoaded', function() {
    const alert = document.getElementById('successAlert');
    if (alert) {
        setTimeout(function() {
            alert.style.transition = 'opacity 0.5s ease-out';
            alert.style.opacity = '0';
            setTimeout(function() {
                alert.style.display = 'none';
            }, 500);
        }, 5000);
    }
});
</script>

@endsection