{% extends "base.html" %}

{% block content %}

<div class="configuration-section">
    <h5>KeypMe Server Configuration</h5>

    <form action="{% url 'configuration_keypme_server' %}" method="post" class="configuration_form">
      {% csrf_token %}
      <div class="container">
        <div class="row">
          <div class="col-12">
            <input type="checkbox" class="form-check-input" name="card_request_auto_approve" id="card_request_auto_approve" {% if config.KEYPME_CARD_REQUEST_AUTO_APPROVE %}checked{% endif %} />
            <label for="card_request_auto_approve">Auto-approve card request</label>
          </div>
          {% if form_keypme_server.card_request_auto_approve.errors %}
          <div class="col-4">
            {% for error in form_keypme_server.card_request_auto_approve.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>

        <button type="submit" class="btn btn-primary">Save</button>
      </div>
  </form>
</div>

<div class="configuration-section">
    <h5>PKI Configuration</h5>

    <form action="{% url 'configuration_pki' %}" method="post" class="configuration_form">
      {% csrf_token %}
      <div class="container">
        <div class="row">
          <label for="default_user_certificate_validity_in_days" class="col-3 col-form-label">Default user certificate validity in days</label>
          <div class="col-5">
            <input type="text" class="form-control" placeholder="Validity in days" aria-label="Validity in days" name="default_user_certificate_validity_in_days" id="default_user_certificate_validity_in_days" value="{{config.KEYPME_USER_CERTIFICATE_DURATION_IN_DAYS_DEFAULT|default_if_none:"730"}}">
          </div>
          {% if form_pki.default_user_certificate_validity_in_days.errors %}
          <div class="col-4">
            {% for error in form_pki.default_user_certificate_validity_in_days.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="default_device_certificate_validity_in_days" class="col-3 col-form-label">Default device certificate validity in days</label>
          <div class="col-5">
            <input type="text" class="form-control" placeholder="Validity in days" aria-label="Validity in days" name="default_device_certificate_validity_in_days" id="default_device_certificate_validity_in_days" value="{{config.KEYPME_DEVICE_CERTIFICATE_DURATION_IN_DAYS_DEFAULT|default_if_none:"730"}}">
          </div>
          {% if form_pki.default_device_certificate_validity_in_days.errors %}
          <div class="col-4">
            {% for error in form_pki.default_device_certificate_validity_in_days.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>

        <button type="submit" class="btn btn-primary">Save</button>
      </div>
  </form>
</div>

<div class="configuration-section">
    <h5>LDAP Configuration</h5>

    <form action="{% url 'configuration_ldap' %}" method="post" class="configuration_form">
      {% csrf_token %}
      <div class="container">
        <div class="row">
          <label for="realm" class="col-2 col-form-label">Realm</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="Active Directory Realm" aria-label="Active Directory Realm" name="realm" id="realm" value="{{config.KEYPME_REALM|default_if_none:""}}">
          </div>
          {% if form_ldap.realm.errors %}
          <div class="col-4">
            {% for error in form_ldap.realm.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="host" class="col-2 col-form-label">Host</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="LDAP Host" aria-label="LDAP Host" name="host" id="host" value="{{config.KEYPME_LDAP_HOST|default_if_none:""}}">
          </div>
          {% if form_ldap.host.errors %}
          <div class="col-4">
            {% for error in form_ldap.host.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="base_dn" class="col-2 col-form-label">Base DN</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="LDAP Base DN" aria-label="LDAP Base DN" name="base_dn" id="base_dn" value="{{config.KEYPME_LDAP_BASE_DN|default_if_none:""}}">
          </div>
          {% if form_ldap.base_dn.errors %}
          <div class="col-4">
            {% for error in form_ldap.base_dn.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="user_base_dn" class="col-2 col-form-label">User Base DN</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="LDAP User Base DN" aria-label="LDAP User Base DN" name="user_base_dn" id="user_base_dn" value="{{config.KEYPME_LDAP_PEOPLE_BASE_DN|default_if_none:""}}">
          </div>
          {% if form_ldap.user_base_dn.errors %}
          <div class="col-4">
            {% for error in form_ldap.user_base_dn.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="username" class="col-2 col-form-label">User</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="LDAP User" aria-label="LDAP User" name="username" id="username" value="{{config.KEYPME_LDAP_USER_NAME|default_if_none:""}}">
          </div>
          {% if form_ldap.username.errors %}
          <div class="col-4">
            {% for error in form_ldap.username.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>
        <div class="row">
          <label for="password" class="col-2 col-form-label">Password</label>
          <div class="col-6">
            <input type="text" class="form-control" placeholder="LDAP Password" aria-label="LDAP Password" name="password" id="password" value="">
          </div>
          {% if form_ldap.password.errors %}
          <div class="col-4">
            {% for error in form_ldap.password.errors %}<p class="error">{{ error }}</p>{% endfor%}
          </div>
          {% endif %}
        </div>

        <button type="submit" class="btn btn-primary">Save</button>
      </div>
  </form>
</div>

<div class="configuration-section">
    <h5>Generate client certificate session</h5>

    <form action="{% url 'client_certificate_generate' %}" method="post" class="row row-cols-lg-auto g-3 align-items-center">
        {% csrf_token %}
        <div class="col-12">
          <label class="visually-hidden" for="username">Username</label>
          <div class="input-group">
            <input type="text" class="form-control" id="username" name="username" placeholder="Username">
          </div>
        </div>
        <div class="col-12">
          <label class="visually-hidden" for="p12_password">PKCS#12 file password</label>
          <div class="input-group">
            <input type="password" class="form-control" id="p12_password" name="p12_password" placeholder="PKCS#12 file password">
          </div>
        </div>
        <div class="col-12">
          <label class="visually-hidden" for="user_type">User type</label>
          <div class="input-group">
            <select name="user_type" id="user_type" class="form-select">
                <option value="existing-user">Existing user</option>
                <option value="new-rest-api-user">New REST API user</option>
            </select>
          </div>
        </div>

        <div class="col-12">
          <button type="submit" class="btn btn-primary">Generate client certificate</button>
        </div>
    </form>
</div>

<div class="configuration-section">
    <h5>PKI Information</h5>

    <form action="{% url 'pki_info_user_ca_retrieve' %}" method="post" class="row row-cols-lg-auto g-3 align-items-center">
        {% csrf_token %}
        <div class="col-12">
          <input class="form-check-input" type="checkbox" name="with-certificate-chain" id="with-certificate-chain">
          <label class="form-check-label" for="with-certificate-chain">Include full certificate chain</label>
        </div>

        <div class="col-12">
          <button type="submit" class="btn btn-primary">Download User Certificate Authority</button>
        </div>
    </form>
</div>

{% endblock %}