{{define "title"}}account settings{{end}}
{{define "content"}}
<h1>Account settings</h1>
{{if .Notice}}<p class="error" role="alert">{{.Notice}}</p>{{end}}
{{if .Message}}<p class="notice" role="status">{{.Message}}</p>{{end}}

<h2>Profile</h2>
<p class="meta">Shown on your profile page, <a href="/{{.Viewer}}">/{{.Viewer}}</a>.</p>
<form method="post" action="/settings" class="setform stack">
  <input type="hidden" name="field" value="profile">
  <label for="p-description">Description</label>
  <input type="text" id="p-description" name="description" value="{{.Profile.Description}}" placeholder="one line, shown in listings">
  <label for="p-website">Website</label>
  <input type="text" id="p-website" name="website" value="{{.Profile.Website}}" placeholder="https://example.org">
  <label for="p-links">Links</label>
  <textarea id="p-links" name="links" rows="3" placeholder="one per line: label|https://... or a bare https://... (at most 5)">{{.LinksText}}</textarea>
  <label for="p-about">About</label>
  <textarea id="p-about" name="about" rows="8" placeholder="longer, shown below your repositories">{{.Profile.About}}</textarea>
  {{template "formatpicker" .Profile.AboutFormat}}
  <button type="submit">Save profile</button>
</form>

<h2>SSH keys</h2>
<p class="meta">Your keys are your identity here. A <code>full</code> key can run
commands and push; a <code>git</code> key can only move git data, which is what
a CI checkout wants.</p>
{{if .Keys}}<div class="tablewrap"><table class="keys">
<tr class="cols"><th scope="col">label</th><th scope="col">fingerprint</th><th scope="col">type</th><th scope="col">scope</th><th scope="col"></th></tr>
{{range .Keys}}<tr>
  <td>{{.Label}}</td>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{.Algo}}</td>
  <td>{{.Scope}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="key-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}"><button type="submit" class="linklike">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No SSH keys — which cannot be right, since you signed in.</p>{{end}}
<details class="editbox">
  <summary>Add an SSH key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="key-add">
    <label for="key">Public key</label>
    <textarea id="key" name="key" rows="3" required placeholder="ssh-ed25519 AAAA... you@machine"></textarea>
    <label for="key-label">Label</label>
    <input id="key-label" name="label" maxlength="64" placeholder="defaults to the key's comment">
    <label for="scope">Scope</label>
    <select id="scope" name="scope">
      <option value="full">full — commands and git</option>
      <option value="git">git — git transport only</option>
    </select>
    <button type="submit">Add key</button>
  </form>
</details>

<h2>Email addresses</h2>
<p class="meta">A verified address is what ties your signed commits to this
account, and where notifications go.</p>
{{if .Emails}}<ul class="plain">
{{range .Emails}}<li>{{.Address}}
  {{if .Primary}}<span class="chip">primary</span>{{end}}
  {{if .Verified}}<span class="badge badge-verified">verified{{with .VerifiedBy}} · {{.}}{{end}}</span>
  {{else}}<span class="badge badge-unsigned">unverified</span>{{end}}
  {{if not .Primary}}{{if .Verified}}<form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-primary"><input type="hidden" name="address" value="{{.Address}}"><button type="submit" class="linklike">Make primary</button></form>{{end}}
  <form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-remove"><input type="hidden" name="address" value="{{.Address}}"><button type="submit" class="linklike">Remove</button></form>{{end}}</li>
{{end}}</ul>{{end}}
<details class="editbox">
  <summary>Add an address</summary>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-add">
    <label for="address">Address</label>
    <input type="email" id="address" name="address" required placeholder="you@example.org">
    <button type="submit">Send code</button>
  </form>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-verify">
    <label for="code">Verification code</label>
    <input type="text" id="code" name="code" required placeholder="from the mail">
    <button type="submit">Verify</button>
  </form>
</details>

<h2>OpenPGP keys</h2>
<p class="meta">Only needed if you sign commits with GPG. SSH signing
(<code>gpg.format = ssh</code>) uses the keys above.</p>
{{if .PGP}}<div class="tablewrap"><table class="keys">
<tr class="cols"><th scope="col">fingerprint</th><th scope="col">identities</th><th scope="col"></th></tr>
{{range .PGP}}<tr>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{range .UIDs}}{{.}}<br>{{end}}{{if .Revoked}}<span class="badge badge-bad_signature">revoked</span>{{else if .Expired}}<span class="badge badge-signed_key_expired">expired</span>{{end}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="pgp-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}"><button type="submit" class="linklike">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No OpenPGP keys.</p>{{end}}
<details class="editbox">
  <summary>Add a PGP key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="pgp-add">
    <label for="pgpkey">Armored public key</label>
    <textarea id="pgpkey" name="key" rows="6" required placeholder="-----BEGIN PGP PUBLIC KEY BLOCK-----"></textarea>
    <button type="submit">Add key</button>
  </form>
</details>

<h2>Notifications</h2>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-mail">
  <label for="notify-mail">Activity by mail</label>
  <input type="checkbox" id="notify-mail" name="mail" value="on"{{if .MailOn}} checked{{end}}>
  <button type="submit">Save</button>
</form>
<p class="meta">The inbox is filed either way; this is the mail half. Login links are not activity and still arrive.</p>

<h2>Export</h2>
<p class="meta">Your profile, repositories, issues and merge requests as one
JSON bundle, the same one <code>gitbay account export</code> writes. Keys are
never included; a replayed bundle's emails arrive unverified.</p>
<p><a href="/settings/export">Download bundle</a></p>

<h2>On SSH only</h2>
<p class="meta">Anything whose input is a credential stays on the command line,
where it can be piped instead of pasted:</p>
<pre class="message">gitbay auth token mint --name laptop   # API tokens
gitbay admin ...                       # instance administration</pre>
<p class="meta">All of the above works from stock OpenSSH too:
<code>ssh git@{{.Host}} auth whoami</code>.</p>
{{end}}