@extends('layouts.app')

@section('title', 'Edit User')

@section('content')
<h2><i class="bi bi-person-edit"></i> Edit User</h2>

<div class="card mt-4">
    <div class="card-body">
        <form method="POST" action="{{ route('users.update', $user) }}">
            @csrf @method('PUT')
            <div class="mb-3">
                <label class="form-label">Name</label>
                <input type="text" name="name" class="form-control" value="{{ $user->name }}" required>
            </div>
            <div class="mb-3">
                <label class="form-label">Email</label>
                <input type="email" name="email" class="form-control" value="{{ $user->email }}" required>
            </div>
            <div class="mb-3">
                <label class="form-label">New Password (leave blank to keep current)</label>
                <input type="password" name="password" class="form-control" minlength="6">
            </div>
            <div class="mb-3">
                <label class="form-label">Role</label>
                <select name="role" class="form-select" required>
                    <option value="">Select Role</option>
                    @foreach($roles as $role)
                    <option value="{{ $role->slug }}" {{ $user->role === $role->slug ? 'selected' : '' }}>
                        {{ $role->name }} - {{ count($role->permissionKeys()) }} permissions{{ $role->isSystem() ? ' (System)' : '' }}
                    </option>
                    @endforeach
                </select>
            </div>
            <div class="mb-3">
                <label class="form-label">Phone (for SMS verification)</label>
                <input type="text" name="phone" class="form-control" value="{{ old('phone', $user->phone ?? '') }}" placeholder="e.g. 615xxxxxx">
            </div>

            <hr>
            <h5><i class="bi bi-shield-lock"></i> Two-Factor Authentication (MFA)</h5>
            <div class="row">
                <div class="col-md-4">
                    <div class="form-check form-switch mb-2">
                        <input class="form-check-input" type="checkbox" name="mfa_enabled" id="mfa_enabled" value="1" {{ $user->mfaEnabled() ? 'checked' : '' }}>
                        <label class="form-check-label" for="mfa_enabled">Enable MFA for this user</label>
                    </div>
                </div>
                <div class="col-md-4">
                    <label class="form-label">MFA Method</label>
                    <select name="mfa_type" class="form-select" id="mfa_type">
                        <option value="totp" {{ $user->mfaType() === 'totp' ? 'selected' : '' }}>Authenticator app (TOTP)</option>
                        <option value="sms" {{ $user->mfaType() === 'sms' ? 'selected' : '' }}>SMS code</option>
                    </select>
                </div>
                <div class="col-md-4">
                    <label class="form-label">Phone (for SMS)</label>
                    <input type="text" name="phone" class="form-control" value="{{ old('phone', $user->phone ?? '') }}" placeholder="e.g. 615xxxxxx">
                </div>
            </div>
            @if($user->mfaEnabled())
            <div class="alert alert-warning mt-3 mb-2">
                <div class="form-check">
                    <input type="checkbox" name="reset_mfa" value="1" id="reset_mfa" class="form-check-input">
                    <label class="form-check-label" for="reset_mfa">
                        Reset MFA - clears the current secret and requires the user to set it up again at next login
                    </label>
                </div>
            </div>
            @endif

            <button type="submit" class="btn btn-yellow">Update User</button>
            <a href="{{ route('users.index') }}" class="btn btn-secondary">Cancel</a>
        </form>
    </div>
</div>
@endsection