@extends('layouts.app')

@section('title', 'Security Settings')

@section('content')
<div class="container-fluid py-4">
    <div class="row">
        <div class="col-12">
            <div class="card shadow">
                <div class="card-header bg-white border-0">
                    <div class="row align-items-center">
                        <div class="col">
                            <h3 class="mb-0">Security Settings</h3>
                            <p class="text-muted mb-0">Manage your password, PIN, and security preferences</p>
                        </div>
                        <div class="col-auto">
                            <a href="{{ route('settings.index') }}" class="btn btn-outline-secondary">
                                <i class="fas fa-arrow-left me-2"></i>Back to Settings
                            </a>
                        </div>
                    </div>
                </div>

                <div class="card-body">
                    @if(session('success'))
                        <div class="alert alert-success alert-dismissible fade show" role="alert">
                            {{ session('success') }}
                            <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
                        </div>
                    @endif

                    <!-- Password Section -->
                    <div class="row mb-5">
                        <div class="col-lg-6">
                            <div class="card">
                                <div class="card-header">
                                    <h5 class="mb-0">
                                        <i class="fas fa-lock me-2"></i>Change Password
                                    </h5>
                                </div>
                                <div class="card-body">
                                    <form method="POST" action="{{ route('settings.password.update') }}">
                                        @csrf
                                        
                                        <div class="mb-3">
                                            <label for="current_password" class="form-label">Current Password</label>
                                            <input type="password" 
                                                   class="form-control @error('current_password') is-invalid @enderror" 
                                                   id="current_password" 
                                                   name="current_password" 
                                                   required>
                                            @error('current_password')
                                                <div class="invalid-feedback">{{ $message }}</div>
                                            @enderror
                                        </div>

                                        <div class="mb-3">
                                            <label for="new_password" class="form-label">New Password</label>
                                            <input type="password" 
                                                   class="form-control @error('new_password') is-invalid @enderror" 
                                                   id="new_password" 
                                                   name="new_password" 
                                                   required>
                                            @error('new_password')
                                                <div class="invalid-feedback">{{ $message }}</div>
                                            @enderror
                                        </div>

                                        <div class="mb-3">
                                            <label for="new_password_confirmation" class="form-label">Confirm New Password</label>
                                            <input type="password" 
                                                   class="form-control" 
                                                   id="new_password_confirmation" 
                                                   name="new_password_confirmation" 
                                                   required>
                                        </div>

                                        <button type="submit" class="btn btn-primary">
                                            <i class="fas fa-save me-2"></i>Update Password
                                        </button>
                                    </form>
                                </div>
                            </div>
                        </div>

                        <!-- Transaction PIN Section -->
                        <div class="col-lg-6">
                            <div class="card">
                                <div class="card-header">
                                    <h5 class="mb-0">
                                        <i class="fas fa-shield-alt me-2"></i>Transaction PIN
                                    </h5>
                                </div>
                                <div class="card-body">
                                    <form method="POST" action="{{ route('settings.transaction-pin.update') }}">
                                        @csrf
                                        
                                        @if($user->transaction_pin)
                                            <div class="mb-3">
                                                <label for="current_pin" class="form-label">Current PIN</label>
                                                <input type="password" 
                                                       class="form-control @error('current_pin') is-invalid @enderror" 
                                                       id="current_pin" 
                                                       name="current_pin" 
                                                       maxlength="4"
                                                       pattern="[0-9]{4}"
                                                       required>
                                                @error('current_pin')
                                                    <div class="invalid-feedback">{{ $message }}</div>
                                                @enderror
                                            </div>
                                        @else
                                            <div class="alert alert-info">
                                                <i class="fas fa-info-circle me-2"></i>
                                                You haven't set up a transaction PIN yet. Set one now for secure transactions.
                                            </div>
                                        @endif

                                        <div class="mb-3">
                                            <label for="new_pin" class="form-label">{{ $user->transaction_pin ? 'New PIN' : 'Transaction PIN' }}</label>
                                            <input type="password" 
                                                   class="form-control @error('new_pin') is-invalid @enderror" 
                                                   id="new_pin" 
                                                   name="new_pin" 
                                                   maxlength="4"
                                                   pattern="[0-9]{4}"
                                                   placeholder="Enter 4-digit PIN"
                                                   required>
                                            @error('new_pin')
                                                <div class="invalid-feedback">{{ $message }}</div>
                                            @enderror
                                        </div>

                                        <div class="mb-3">
                                            <label for="new_pin_confirmation" class="form-label">Confirm PIN</label>
                                            <input type="password" 
                                                   class="form-control" 
                                                   id="new_pin_confirmation" 
                                                   name="new_pin_confirmation" 
                                                   maxlength="4"
                                                   pattern="[0-9]{4}"
                                                   placeholder="Confirm 4-digit PIN"
                                                   required>
                                        </div>

                                        <button type="submit" class="btn btn-success">
                                            <i class="fas fa-save me-2"></i>{{ $user->transaction_pin ? 'Update' : 'Set' }} PIN
                                        </button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>

                    <!-- Login PIN Section -->
                    <div class="row mb-5">
                        <div class="col-lg-6">
                            <div class="card">
                                <div class="card-header">
                                    <h5 class="mb-0">
                                        <i class="fas fa-key me-2"></i>Login PIN
                                    </h5>
                                </div>
                                <div class="card-body">
                                    <form method="POST" action="{{ route('settings.login-pin.update') }}">
                                        @csrf
                                        
                                        @if($user->login_pin)
                                            <div class="mb-3">
                                                <label for="current_login_pin" class="form-label">Current Login PIN</label>
                                                <input type="password" 
                                                       class="form-control @error('current_login_pin') is-invalid @enderror" 
                                                       id="current_login_pin" 
                                                       name="current_login_pin" 
                                                       maxlength="4"
                                                       pattern="[0-9]{4}"
                                                       required>
                                                @error('current_login_pin')
                                                    <div class="invalid-feedback">{{ $message }}</div>
                                                @enderror
                                            </div>
                                        @else
                                            <div class="alert alert-info">
                                                <i class="fas fa-info-circle me-2"></i>
                                                Set up a login PIN for additional security when accessing your account.
                                            </div>
                                        @endif

                                        <div class="mb-3">
                                            <label for="new_login_pin" class="form-label">{{ $user->login_pin ? 'New Login PIN' : 'Login PIN' }}</label>
                                            <input type="password" 
                                                   class="form-control @error('new_login_pin') is-invalid @enderror" 
                                                   id="new_login_pin" 
                                                   name="new_login_pin" 
                                                   maxlength="4"
                                                   pattern="[0-9]{4}"
                                                   placeholder="Enter 4-digit PIN"
                                                   required>
                                            @error('new_login_pin')
                                                <div class="invalid-feedback">{{ $message }}</div>
                                            @enderror
                                        </div>

                                        <div class="mb-3">
                                            <label for="new_login_pin_confirmation" class="form-label">Confirm Login PIN</label>
                                            <input type="password" 
                                                   class="form-control" 
                                                   id="new_login_pin_confirmation" 
                                                   name="new_login_pin_confirmation" 
                                                   maxlength="4"
                                                   pattern="[0-9]{4}"
                                                   placeholder="Confirm 4-digit PIN"
                                                   required>
                                        </div>

                                        <button type="submit" class="btn btn-warning">
                                            <i class="fas fa-save me-2"></i>{{ $user->login_pin ? 'Update' : 'Set' }} Login PIN
                                        </button>
                                    </form>
                                </div>
                            </div>
                        </div>

                        <!-- Security Status -->
                        <div class="col-lg-6">
                            <div class="card">
                                <div class="card-header">
                                    <h5 class="mb-0">
                                        <i class="fas fa-chart-line me-2"></i>Security Score
                                    </h5>
                                </div>
                                <div class="card-body">
                                    <div class="d-flex align-items-center mb-3">
                                        <div class="flex-grow-1">
                                            <div class="progress" style="height: 10px;">
                                                <div class="progress-bar bg-{{ $user->getSecurityScore() >= 80 ? 'success' : ($user->getSecurityScore() >= 60 ? 'warning' : 'danger') }}" 
                                                     role="progressbar" 
                                                     style="width: {{ $user->getSecurityScore() }}%">
                                                </div>
                                            </div>
                                        </div>
                                        <span class="ms-3 font-weight-bold">{{ $user->getSecurityScore() }}%</span>
                                    </div>

                                    <div class="small">
                                        <div class="d-flex justify-content-between mb-2">
                                            <span>Email Verified</span>
                                            <span class="text-{{ $user->email_verified_at ? 'success' : 'danger' }}">
                                                <i class="fas fa-{{ $user->email_verified_at ? 'check' : 'times' }}"></i>
                                            </span>
                                        </div>
                                        <div class="d-flex justify-content-between mb-2">
                                            <span>Phone Verified</span>
                                            <span class="text-{{ $user->phone_verified_at ? 'success' : 'danger' }}">
                                                <i class="fas fa-{{ $user->phone_verified_at ? 'check' : 'times' }}"></i>
                                            </span>
                                        </div>
                                        <div class="d-flex justify-content-between mb-2">
                                            <span>KYC Completed</span>
                                            <span class="text-{{ $user->hasCompletedKyc() ? 'success' : 'danger' }}">
                                                <i class="fas fa-{{ $user->hasCompletedKyc() ? 'check' : 'times' }}"></i>
                                            </span>
                                        </div>
                                        <div class="d-flex justify-content-between mb-2">
                                            <span>Transaction PIN</span>
                                            <span class="text-{{ $user->transaction_pin ? 'success' : 'danger' }}">
                                                <i class="fas fa-{{ $user->transaction_pin ? 'check' : 'times' }}"></i>
                                            </span>
                                        </div>
                                        <div class="d-flex justify-content-between mb-2">
                                            <span>Login PIN</span>
                                            <span class="text-{{ $user->login_pin ? 'success' : 'danger' }}">
                                                <i class="fas fa-{{ $user->login_pin ? 'check' : 'times' }}"></i>
                                            </span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>

                    <!-- Logout All Devices -->
                    <div class="row">
                        <div class="col-12">
                            <div class="card border-danger">
                                <div class="card-header bg-light-danger">
                                    <h5 class="mb-0 text-danger">
                                        <i class="fas fa-exclamation-triangle me-2"></i>Security Actions
                                    </h5>
                                </div>
                                <div class="card-body">
                                    <p class="text-muted">If you suspect unauthorized access to your account, you can logout from all devices.</p>
                                    <form method="POST" action="{{ route('settings.logout-all') }}" class="d-inline">
                                        @csrf
                                        <button type="submit" class="btn btn-outline-danger" 
                                                onclick="return confirm('Are you sure you want to logout from all devices? You will need to login again.')">
                                            <i class="fas fa-sign-out-alt me-2"></i>Logout All Devices
                                        </button>
                                    </form>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

<script>
document.addEventListener('DOMContentLoaded', function() {
    // Restrict PIN inputs to numbers only
    const pinInputs = document.querySelectorAll('input[pattern="[0-9]{4}"]');
    pinInputs.forEach(input => {
        input.addEventListener('input', function(e) {
            this.value = this.value.replace(/[^0-9]/g, '');
            if (this.value.length > 4) {
                this.value = this.value.slice(0, 4);
            }
        });
    });
});
</script>
@endsection