{% extends "base.html" %}

{% block title %}{{ t('profile.ssh_keys', 'SSH Keys') }} - {{ config.BBS_NAME }}{% endblock %}

{% block content %}
<div class="row justify-content-center">
    <div class="col-md-8">
        <div class="card mb-3">
            <div class="card-header">
                <i class="bi bi-key"></i> {{ t('profile.ssh_keys', 'SSH Keys') }}
            </div>
            <div class="card-body">
                <p class="text-muted">
                    {{ t('profile.ssh_keys_help', 'A registered public key lets you log in over SSH with no password prompt at all — the key itself proves your identity during the SSH handshake. Password login keeps working exactly as before, with or without a registered key.') }}
                </p>
                <form method="POST" action="{{ url_for('profile.ssh_keys') }}">
                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                    <input type="hidden" name="action" value="add">
                    <div class="mb-3">
                        <label class="form-label">{{ t('profile.public_key', 'Public key') }}</label>
                        <textarea name="public_key" class="form-control" rows="3"
                                 placeholder="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA... you@yourmachine"
                                 required></textarea>
                        <div class="form-text">
                            {{ t('profile.paste_key_instruction', 'Paste the contents of your public key file (for example, ~/.ssh/id_ed25519.pub) — never the private key.') }}
                        </div>
                    </div>
                    <div class="mb-3">
                        <label class="form-label">{{ t('profile.key_label_optional', 'Label (optional)') }}</label>
                        <input type="text" name="label" class="form-control"
                              placeholder="{{ t('profile.key_label_placeholder', 'e.g. laptop, phone') }}" maxlength="100">
                    </div>
                    <button class="btn btn-primary">{{ t('profile.add_key', 'Add Key') }}</button>
                </form>
            </div>
        </div>

        <div class="card">
            <div class="card-header">{{ t('profile.registered_keys', 'Registered Keys') }} ({{ keys|length }})</div>
            <div class="card-body p-0">
            {% if keys %}
                <table class="table table-sm mb-0">
                    <thead><tr><th>{{ t('profile.key_label', 'Label') }}</th><th>{{ t('profile.key_fingerprint', 'Fingerprint') }}</th><th>{{ t('profile.key_date', 'Added') }}</th><th></th></tr></thead>
                    <tbody>
                    {% for k in keys %}
                        <tr>
                            <td>{{ k.label or t('profile.no_label', '(none)') }}</td>
                            <td><code>{{ k.fingerprint }}</code></td>
                            <td><small>{{ k.created_at|eastern('%Y-%m-%d') }}</small></td>
                            <td>
                                <form method="POST" action="{{ url_for('profile.ssh_keys') }}"
                                     onsubmit='return confirm({{ t("profile.confirm_remove_key", "Remove this SSH key?") | tojson }});'>
                                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                                    <input type="hidden" name="action" value="delete">
                                    <input type="hidden" name="key_id" value="{{ k.id }}">
                                    <button class="btn btn-link btn-sm text-danger p-0">{{ t('profile.remove', 'remove') }}</button>
                                </form>
                            </td>
                        </tr>
                    {% endfor %}
                    </tbody>
                </table>
            {% else %}<div class="p-3 text-muted">{{ t('profile.no_keys', 'No SSH keys registered yet — add one above.') }}</div>{% endif %}
            </div>
        </div>
    </div>
</div>
{% endblock %}