{% extends "base.html" %}
{% block title %}Konto{% endblock %}
{% block content %}
<h1>Konto: {{ user.username }}</h1>
<section class="card">
  <h2>Passwort ändern</h2>
  <form method="post" action="/account/password">
    {{ csrf_input }}
    <label for="current">Aktuelles Passwort</label>
    <input id="current" name="current" type="password" autocomplete="current-password" required>
    <label for="new">Neues Passwort (mindestens {{ min_len }} Zeichen)</label>
    <input id="new" name="new" type="password" minlength="{{ min_len }}" autocomplete="new-password" required>
    <label for="confirm">Neues Passwort wiederholen</label>
    <input id="confirm" name="confirm" type="password" minlength="{{ min_len }}" autocomplete="new-password" required>
    <div class="actions"><button type="submit">Passwort ändern</button></div>
  </form>
</section>

<section class="card">
  <h2>Zwei-Faktor-Anmeldung (TOTP)</h2>
  {% if user.has_totp %}
  <p>Die Zwei-Faktor-Anmeldung ist <strong>aktiv</strong>.</p>
  <form method="post" action="/account/totp/disable">
    {{ csrf_input }}
    <label for="totp-password">Passwort zur Bestätigung</label>
    <input id="totp-password" name="password" type="password" autocomplete="current-password" required>
    <div class="actions"><button type="submit" class="danger">2FA deaktivieren</button></div>
  </form>
  {% elif totp_secret %}
  <p>Secret in der Authenticator-App eintragen (oder die URI importieren), dann den angezeigten Code bestätigen.</p>
  <p>Secret: <code class="break">{{ totp_secret }}</code></p>
  <p>URI: <code class="break">{{ totp_uri }}</code></p>
  <form method="post" action="/account/totp/confirm">
    {{ csrf_input }}
    <label for="totp-code">Code</label>
    <input id="totp-code" name="code" type="text" inputmode="numeric" pattern="[0-9 ]*" autocomplete="one-time-code" maxlength="7" required>
    <div class="actions"><button type="submit">Aktivieren</button></div>
  </form>
  {% else %}
  <p>Die Zwei-Faktor-Anmeldung ist nicht aktiv.</p>
  <form method="post" action="/account/totp/start">
    {{ csrf_input }}
    <button type="submit">2FA einrichten</button>
  </form>
  {% endif %}
</section>
{% endblock %}