{% extends 'workflows/base_shell.html' %}
{% load static i18n %}

{% block title %}{% trans "Benutzer & Rollen" %}{% endblock %}

{% block shell_header %}
{% include 'workflows/includes/app_header.html' with header_show_lang=1 header_show_home=1 header_inside_shell=1 %}
{% endblock %}

{% block extra_css %}
<link rel="stylesheet" href="{% static 'workflows/css/admin_tools.css' %}" />
{% endblock %}

{% block shell_body %}
  <div class="page-stack">
  <header class="page-header">
    <div class="page-header-copy">
      <span class="page-eyebrow">{% trans "Administration" %}</span>
      <h1>{% trans "Benutzer & Rollen" %}</h1>
      <p class="page-subtitle">{% trans "Platform Owner und Super Admins verwalten Benutzerkonten, Rollen und den aktiven Zugriff." %}</p>
    </div>
  </header>

  {% include 'workflows/includes/messages.html' %}

  <section class="card">
    <h2>{% trans "Benutzer anlegen" %}</h2>
    <p class="sub">{% trans "Nach dem Anlegen wird automatisch eine Zugangseinladung mit Passwort-Link per E-Mail versendet." %}</p>
    <form method="post" action="{% url 'create_user_from_admin' %}">
      {% csrf_token %}
      <div class="grid">
        <div>
          <label for="{{ create_form.first_name.id_for_label }}">{{ create_form.first_name.label }}</label>
          {{ create_form.first_name }}
          {% for error in create_form.first_name.errors %}<div class="hint">{{ error }}</div>{% endfor %}
        </div>
        <div>
          <label for="{{ create_form.last_name.id_for_label }}">{{ create_form.last_name.label }}</label>
          {{ create_form.last_name }}
          {% for error in create_form.last_name.errors %}<div class="hint">{{ error }}</div>{% endfor %}
        </div>
        <div>
          <label for="{{ create_form.username.id_for_label }}">{{ create_form.username.label }}</label>
          {{ create_form.username }}
          {% for error in create_form.username.errors %}<div class="hint">{{ error }}</div>{% endfor %}
        </div>
        <div>
          <label for="{{ create_form.email.id_for_label }}">{{ create_form.email.label }}</label>
          {{ create_form.email }}
          {% for error in create_form.email.errors %}<div class="hint">{{ error }}</div>{% endfor %}
        </div>
        <div>
          <label for="{{ create_form.role_key.id_for_label }}">{{ create_form.role_key.label }}</label>
          {{ create_form.role_key }}
          {% for error in create_form.role_key.errors %}<div class="hint">{{ error }}</div>{% endfor %}
        </div>
      </div>
      {% for error in create_form.non_field_errors %}<div class="hint">{{ error }}</div>{% endfor %}
      <div class="actions">
        <button class="btn btn-primary" type="submit">{% trans "Benutzer anlegen und einladen" %}</button>
      </div>
    </form>
  </section>

  <section class="card">
    <div class="toolbar">
      <div>
        <h2>{% trans "Benutzerübersicht" %}</h2>
        <p class="sub">{% trans "Rollen ändern, Zugriffe sperren oder ein neues Passwort setzen." %}</p>
      </div>
    </div>
    <div class="table-wrap app-table-shell">
      <table class="app-table">
        <thead>
          <tr>
            <th>{% trans "Name" %}</th>
            <th>{% trans "Benutzername" %}</th>
            <th>{% trans "E-Mail" %}</th>
            <th>{% trans "Rolle" %}</th>
            <th>{% trans "Aktiv" %}</th>
            <th>{% trans "Letzte Anmeldung" %}</th>
            <th>{% trans "Neues Passwort" %}</th>
            <th>{% trans "Aktionen" %}</th>
          </tr>
        </thead>
        <tbody>
          {% for row in rows %}
          <tr>
              <td>
                <strong>{{ row.display_name|default:row.user.username }}</strong>
                {% if row.user == request.user %}
                <div class="mini">{% trans "Sie selbst" %}</div>
                {% endif %}
              </td>
              <td>{{ row.user.username }}</td>
              <td>{{ row.user.email|default:"-" }}</td>
              <td>
                <label class="sr-only" for="role_key_{{ row.user.id }}">{% trans "Rolle" %}</label>
                <select id="role_key_{{ row.user.id }}" name="role_key" form="user-form-{{ row.user.id }}">
                  {% for role_key, role_label in role_choices %}
                    <option value="{{ role_key }}"{% if role_key == row.role_key %} selected{% endif %}>{{ role_label }}</option>
                  {% endfor %}
                </select>
              </td>
              <td>
                <label class="check-row" for="is_active_{{ row.user.id }}">
                  <input id="is_active_{{ row.user.id }}" type="checkbox" name="is_active" form="user-form-{{ row.user.id }}"{% if row.user.is_active %} checked{% endif %} />
                  <span>{% if row.user.is_active %}{% trans "aktiv" %}{% else %}{% trans "inaktiv" %}{% endif %}</span>
                </label>
              </td>
              <td>{{ row.user.last_login|date:"d.m.Y H:i"|default:"-" }}</td>
              <td>
                <label class="sr-only" for="new_password_{{ row.user.id }}">{% trans "Neues Passwort" %}</label>
                <input id="new_password_{{ row.user.id }}" type="password" name="new_password" form="user-form-{{ row.user.id }}" placeholder="{% trans 'Optional' %}" />
              </td>
              <td class="actions">
                <form id="user-form-{{ row.user.id }}" method="post" action="{% url 'update_user_from_admin' row.user.id %}">
                  {% csrf_token %}
                </form>
                <button class="btn btn-secondary" type="submit" form="user-form-{{ row.user.id }}">{% trans "Speichern" %}</button>
                {% if row.user.email %}
                <form method="post" action="{% url 'send_password_reset_from_admin' row.user.id %}">
                  {% csrf_token %}
                  <button class="btn btn-secondary" type="submit">{% trans "Reset-Link senden" %}</button>
                </form>
                {% else %}
                <span class="mini">{% trans "Keine E-Mail" %}</span>
                {% endif %}
                {% if row.user != request.user %}
                <form method="post" action="{% url 'delete_user_from_admin' row.user.id %}">
                  {% csrf_token %}
                  <button class="btn btn-secondary" type="submit" data-confirm="1" data-confirm-message="{% trans 'Benutzer wirklich löschen?' %}">{% trans "Löschen" %}</button>
                </form>
                {% endif %}
              </td>
          </tr>
          {% empty %}
          <tr>
            <td colspan="8">{% trans "Es sind noch keine Benutzer vorhanden." %}</td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
    <p class="hint">{% trans "Hinweis: Der letzte aktive Platform Owner oder Super Admin kann sich hier nicht selbst entfernen oder auf eine niedrigere Rolle setzen." %}</p>
  </section>

  <section class="card">
    <div class="toolbar">
      <div>
        <h2>{% trans "Letzte Benutzeraktionen" %}</h2>
        <p class="sub">{% trans "Die letzten Änderungen an Benutzerkonten und Rollen." %}</p>
      </div>
      <a class="btn btn-secondary" href="/admin-tools/audit-log/">{% trans "Zum Audit Log" %}</a>
    </div>
    <div class="table-wrap app-table-shell">
      <table class="app-table">
        <thead>
          <tr>
            <th>{% trans "Zeit" %}</th>
            <th>{% trans "Aktion" %}</th>
            <th>{% trans "Betroffen" %}</th>
            <th>{% trans "Durch" %}</th>
            <th>{% trans "Details" %}</th>
          </tr>
        </thead>
        <tbody>
          {% for row in recent_user_events %}
          <tr>
            <td>{{ row.created_at|date:"d.m.Y H:i" }}</td>
            <td>{{ row.action_label }}</td>
            <td>{{ row.target_label|default:"-" }}</td>
            <td>{{ row.actor_display|default:"-" }}</td>
            <td>
              {% if row.details.username %}<div class="mini"><strong>{% trans "Benutzername" %}:</strong> {{ row.details.username }}</div>{% endif %}
              {% if row.role_label %}<div class="mini"><strong>{% trans "Rolle" %}:</strong> {{ row.role_label }}</div>{% endif %}
              {% if row.details.email %}<div class="mini"><strong>{% trans "E-Mail" %}:</strong> {{ row.details.email }}</div>{% endif %}
              {% if row.details.invitation_sent %}<div class="mini">{% trans "Einladung versendet" %}</div>{% endif %}
              {% if row.details.password_changed %}<div class="mini">{% trans "Passwort geändert" %}</div>{% endif %}
              {% if not row.details %}-{% endif %}
            </td>
          </tr>
          {% empty %}
          <tr>
            <td colspan="5">{% trans "Noch keine Benutzeraktionen vorhanden." %}</td>
          </tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
  </section>
  </div>
{% endblock %}