@php
    // W projekcie global nie korzystamy z tabeli sw000_organizacja.
    $extends_file = 'layouts.index';
@endphp

@extends($extends_file)

@section('title', 'Wymagana konfiguracja 2FA')

@section('content')
<style>
    .twofa-required-overlay {
        position: fixed;
        inset: 0;
        z-index: 31000;
        display: flex;
        align-items: center;
        justify-content: center;
        padding: 1.5rem;
        background: rgba(15, 23, 42, 0.56);
    }

    .twofa-required-modal {
        width: min(860px, 100%);
        max-height: calc(100vh - 3rem);
        overflow: auto;
        background: #ffffff;
        border-radius: 0.65rem;
        border: 1px solid #dbe3ee;
        box-shadow: 0 26px 80px rgba(15, 23, 42, 0.28);
    }

    .twofa-required-header {
        padding: 1rem 1.25rem;
        border-bottom: 1px solid #dbe3ee;
        font-weight: 700;
        color: #1f2937;
        background: #f4f7fb;
    }

    .twofa-required-body {
        padding: 1.15rem 1.25rem;
    }

    .twofa-required-account {
        margin: 0.4rem 0 0.9rem 0;
        color: #4b5563;
    }

    .twofa-required-step-card {
        border: 1px solid #dbe3ee;
        border-radius: 0.5rem;
        background: #fafcff;
        margin-bottom: 1rem;
    }

    .twofa-required-step-card .card-header {
        background: #edf2f8;
        border-bottom: 1px solid #dbe3ee;
        font-weight: 600;
    }

    .twofa-required-footer {
        margin-top: 1rem;
        display: flex;
        justify-content: space-between;
        align-items: center;
        gap: 0.75rem;
        flex-wrap: wrap;
    }
</style>

<div class="twofa-required-overlay" role="dialog" aria-modal="true" aria-labelledby="twofaRequiredTitle">
    <div class="twofa-required-modal">
        <div class="twofa-required-header" id="twofaRequiredTitle">Wymagana konfiguracja 2FA</div>

        <div class="twofa-required-body">
            <div class="alert alert-warning">
                Administrator wymaga skonfigurowania 2FA przed dalszym korzystaniem z systemu.
            </div>

            @if(session('success'))
                <div class="alert alert-success">{{ session('success') }}</div>
            @endif

            @if(session('error'))
                <div class="alert alert-danger">{{ session('error') }}</div>
            @endif

            @if($errors->any())
                <div class="alert alert-danger">
                    <ul class="mb-0">
                        @foreach($errors->all() as $error)
                            <li>{{ $error }}</li>
                        @endforeach
                    </ul>
                </div>
            @endif

            <p class="twofa-required-account">Konto: <strong>{{ $pendingUser->email }}</strong></p>

            <form method="POST" action="{{ route('2fa.required.setup.enable') }}" class="mb-3">
                @csrf
                <button type="submit" class="btn btn-primary">Rozpocznij konfiguracje TOTP</button>
            </form>

            @if($setupData)
                <div class="card twofa-required-step-card">
                    <div class="card-header">Skonfiguruj aplikacje Authenticator</div>
                    <div class="card-body">
                        <p class="mb-2">1. Zeskanuj kod QR:</p>
                        <div class="mb-3">
                            <img src="{{ $setupData['qr_code_url'] }}" alt="Kod QR 2FA" style="max-width:220px;">
                        </div>

                        <p class="mb-1"><strong>Secret:</strong></p>
                        <code>{{ $setupData['secret'] }}</code>

                        <hr>

                        <form method="POST" action="{{ route('2fa.required.setup.confirm') }}">
                            @csrf
                            <div class="form-group">
                                <label for="code">2. Wpisz kod z aplikacji</label>
                                @include('auth.partials.totp-code-inputs', [
                                    'fieldName' => 'code',
                                    'fieldId' => 'code',
                                    'oldValue' => old('code')
                                ])
                            </div>
                            <button type="submit" class="btn btn-success">Potwierdz i kontynuuj</button>
                        </form>
                    </div>
                </div>
            @endif

            <div class="twofa-required-footer">
                <span class="text-muted">Bez skonfigurowania 2FA nie mozna przejsc dalej.</span>
                <form method="POST" action="{{ route('logout') }}" class="mb-0">
                    @csrf
                    <button type="submit" class="btn btn-outline-secondary">Wyloguj</button>
                </form>
            </div>
        </div>
    </div>
</div>
@endsection