{% extends "base.html" %}
{% block title %}Settings{% endblock %}
{% block content %}
<h1>Settings</h1><p class="sub">{{ user.email }} · {{ user.role }}{% if user.workspace_id %} in {{ ws.email }}'s workspace{% endif %} · {{ plan.name }} plan</p>
<div class="grid g2" style="align-items:start">
<div>
  <div class="panel" style="margin-bottom:16px">
    <h2>Account</h2>
    <dl class="kv"><dt>Email</dt><dd>{{ user.email }} {% if user.email_verified_at %}<span class="pill ok">verified</span>{% elif email_enabled %}<span class="pill warn">unverified</span> <form method="post" action="/verify/resend" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm">Resend confirmation</button></form>{% endif %}</dd>
    <dt>Sign-in</dt><dd>{% if user.google_sub %}Google{% if has_password %} + password{% endif %}{% else %}password{% endif %}</dd>
    <dt>Member since</dt><dd>{{ user.created_at|dt }}</dd></dl>
  </div>
  <div class="panel">
    <h2>{% if has_password %}Change password{% else %}Set a password{% endif %}</h2>
    <form method="post" action="/app/settings/password">
      <input type="hidden" name="csrf" value="{{ csrf }}">
      {% if has_password %}<div class="row"><label>Current password</label><input type="password" name="current" required></div>{% endif %}
      <div class="row"><label>New password</label><input type="password" name="new" minlength="8" required></div>
      <button class="btn">{% if has_password %}Update password{% else %}Set password{% endif %}</button>
    </form>
  </div>
</div>
<div>
  <div class="panel" style="margin-bottom:16px">
    <h2>API key</h2>
    {% if user.role == 'viewer' %}<p class="small muted">Viewers don't get API keys, because a key would grant write access.</p>
    {% else %}
    <p class="small muted">Use it as <code class="k">Authorization: Bearer …</code>. {% if not plan.api %}API access requires a paid plan — <a href="/app/billing">upgrade</a>.{% endif %} See the <a href="/docs">API docs</a>.</p>
    <pre class="code">{{ user.api_key }}</pre>
    <pre class="code">curl -H "Authorization: Bearer {{ user.api_key }}" {{ base_url }}/api/v1/monitors</pre>
    <form method="post" action="/app/settings/rotate-key" onsubmit="return confirm('Rotate your API key? The old key stops working immediately.')"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm">Rotate key</button></form>
    {% endif %}
  </div>
  <div class="panel" style="margin-bottom:16px">
    <h2>Security</h2>
    <dl class="kv">
      <dt>Two-factor</dt><dd>{% if user.totp_enabled_at %}<span class="pill ok">on</span> since {{ user.totp_enabled_at|dt }} · <a href="/app/settings/2fa">Manage</a>{% else %}<span class="pill warn">off</span> · <a href="/app/settings/2fa">Enable</a>{% if ws.require_2fa and plan.enforce_2fa %} <span class="pill err">required by workspace</span>{% endif %}{% endif %}</dd>
      {% if user.sso_sub %}<dt>SSO</dt><dd>signs in through {{ ws.email }}'s identity provider</dd>{% endif %}
      {% if user.role == 'owner' and not user.workspace_id %}<dt>Workspace</dt><dd>{% if plan.sso %}<a href="/app/settings/security">Workspace security</a> · require 2FA for every member, single sign-on{% if ws.sso_config and ws.sso_config.domain %} <span class="pill ok">SSO @{{ ws.sso_config.domain }}</span>{% endif %}{% else %}<a href="/app/settings/security">Workspace security</a> <span class="pill brand">Enterprise</span> <span class="small muted">required 2FA and single sign-on for the whole team</span>{% endif %}</dd>{% endif %}
      {% if server_ip %}<dt>Egress IP</dt><dd>Our checks originate from <code class="k">{{ server_ip }}</code>; allow-list it in your firewall or WAF.</dd>{% endif %}
    </dl>
  </div>
  <div class="panel">
    <h2>Workspace</h2>
    <p class="small muted">Monitors, channels, status pages and billing belong to the workspace. <a href="/app/team">Manage the team</a> · <a href="/app/reports">Weekly report</a> · <a href="/app/billing">Billing</a></p>
    {% if user.workspace_id %}<form method="post" action="/app/team/leave" onsubmit="return confirm('Leave this workspace? You will get an empty workspace of your own.')"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm danger">Leave workspace</button></form>{% endif %}
  </div>
</div>
</div>
{% endblock %}