{% extends 'base.html' %}
{% block title %}Utilisateurs · KALYMATT® YT{% endblock %}
{% block content %}
<section class="page-head users-head">
  <div><span class="eyebrow">ADMINISTRATION</span><h1>Utilisateurs.</h1><p>Créez et gérez les comptes standards autorisés à utiliser KALYMATT® YT.</p></div>
</section>

{% if password_secret %}
<section class="card password-secret-card" aria-live="polite">
  <span class="eyebrow">{{ password_secret.reason|upper }}</span>
  <h2>{{ password_secret.email }}</h2>
  <p>Ce mot de passe n’est affiché qu’ici. Copiez-le maintenant.</p>
  <div class="password-secret-row">
    <div class="password-wrap">
      <input id="one-time-password" type="password" readonly value="{{ password_secret.password }}" onclick="this.select()">
      <button class="password-toggle" type="button" data-password-toggle="one-time-password" aria-label="Afficher le mot de passe" title="Afficher / masquer"><img src="{{ url_for('static', filename='icons/eye.svg') }}" alt=""></button>
    </div>
    <button type="button" class="secondary" data-copy-value="#one-time-password">Copier</button>
  </div>
</section>
{% endif %}

<section class="users-layout">
  <article class="card user-create-card">
    <span class="eyebrow">NOUVEAU COMPTE</span>
    <h2>Créer un utilisateur standard</h2>
    <form method="post" action="{{ url_for('user_create') }}">
      <input type="hidden" name="_csrf" value="{{ csrf }}">
      <label>Nom affiché<input type="text" name="display_name" maxlength="120" required autocomplete="name"></label>
      <label>Adresse e-mail<input type="email" name="email" maxlength="190" required autocomplete="email"></label>
      <label>Mot de passe <small class="muted">Laissez vide pour en générer un aléatoire.</small>
        <div class="password-wrap"><input id="create-user-password" type="password" name="password" minlength="10" autocomplete="new-password"><button class="password-toggle" type="button" data-password-toggle="create-user-password" aria-label="Afficher le mot de passe" title="Afficher / masquer"><img src="{{ url_for('static', filename='icons/eye.svg') }}" alt=""></button></div>
      </label>
      <button class="primary" type="submit">Créer l’utilisateur</button>
    </form>
  </article>

  <section class="users-list">
    {% for user in users %}
    <article class="card user-card {% if not user.is_active %}user-suspended{% endif %}">
      <div class="user-card-head">
        <div class="user-identity"><span class="avatar">{{ user.display_name[:1]|upper }}</span><div><strong>{{ user.display_name }}</strong><small>{{ user.email }}</small></div></div>
        <span class="user-role {% if user.role == 'superadmin' %}superadmin{% endif %}">{{ 'Super administrateur' if user.role == 'superadmin' else 'Standard' }}</span>
      </div>
      <div class="user-meta"><span>{{ 'Actif' if user.is_active else 'Suspendu' }}</span><span>UUID tenant : <code>{{ user.uuid }}</code></span><span>Dernière connexion : {{ user.last_login_at or 'Jamais' }}</span><span>Créé : {{ user.created_at }}</span></div>
      {% if user.role == 'standard' %}
      <div class="user-admin-grid">
        <form method="post" action="{{ url_for('user_update', user_id=user.id) }}" class="user-edit-form">
          <input type="hidden" name="_csrf" value="{{ csrf }}">
          <label>Nom<input type="text" name="display_name" value="{{ user.display_name }}" maxlength="120" required></label>
          <label>E-mail<input type="email" name="email" value="{{ user.email }}" maxlength="190" required></label>
          <button class="secondary" type="submit">Enregistrer</button>
        </form>
        <form method="post" action="{{ url_for('user_password', user_id=user.id) }}" class="user-password-form">
          <input type="hidden" name="_csrf" value="{{ csrf }}">
          <label>Nouveau mot de passe <small class="muted">Vide = génération aléatoire.</small>
            <div class="password-wrap"><input id="user-password-{{ user.id }}" type="password" name="password" minlength="10" autocomplete="new-password"><button class="password-toggle" type="button" data-password-toggle="user-password-{{ user.id }}" aria-label="Afficher le mot de passe" title="Afficher / masquer"><img src="{{ url_for('static', filename='icons/eye.svg') }}" alt=""></button></div>
          </label>
          <button class="secondary" type="submit">Réinitialiser</button>
        </form>
      </div>
      <div class="user-card-actions">
        <a class="secondary" href="{{ url_for('storage_scan_user', user_id=user.id) }}" target="_blank">Scanner le tenant</a>
        <form method="post" action="{{ url_for('user_status', user_id=user.id) }}"><input type="hidden" name="_csrf" value="{{ csrf }}"><input type="hidden" name="active" value="{{ '0' if user.is_active else '1' }}"><button class="secondary" type="submit">{{ 'Suspendre' if user.is_active else 'Réactiver' }}</button></form>
        <form method="post" action="{{ url_for('user_delete', user_id=user.id) }}" data-user-delete><input type="hidden" name="_csrf" value="{{ csrf }}"><button class="danger-text" type="submit">Supprimer</button></form>
      </div>
      {% else %}
      <p class="muted user-protected-note">Le compte super administrateur n’est pas modifiable depuis cette interface.</p>
      {% endif %}
    </article>
    {% endfor %}
  </section>
</section>
{% endblock %}
{% block scripts %}<script src="{{ url_for('static', filename='auth.js') }}?v=20260911r42" defer></script><script src="{{ url_for('static', filename='users.js') }}?v=20260911r42" defer></script>{% endblock %}