{{define "width"}}wide{{end}}
{{define "title"}}account settings{{end}}
{{define "content"}}
<h1>Account settings</h1>
{{if .Notice}}<p class="error" role="alert">{{.Notice}}{{if .Reauth}} <a href="/login">Sign in again</a>{{end}}</p>{{end}}
{{if .Message}}<p class="notice" role="status">{{.Message}}</p>{{end}}

<div class="withcol narrow">
<nav class="sidecol" aria-label="Sections">
<details class="sidedrop">
<summary><span class="sideword">Sections</span></summary>
  <div class="grp"><h2 class="colhead">Sections</h2>
  <ul>
    <li><a href="#profile">Profile</a></li>
    <li><a href="#keys">SSH keys</a></li>
    <li><a href="#emails">Email addresses</a></li>
    <li><a href="#pgp">OpenPGP keys</a></li>
    <li><a href="#notifications">Notifications</a></li>
    <li><a href="#appearance">Appearance</a></li>
    <li><a href="#export">Export</a></li>
    <li><a href="#tokens">API tokens</a></li>
    <li><a href="#cli">On the command line</a></li>
    <li><a href="#delete">Delete account</a></li>
  </ul></div>
</details>
</nav>
<div class="colmain">
<section id="profile"><h2>Profile</h2>
<p class="meta">Shown on your profile page, <a href="/{{.Viewer}}">/{{.Viewer}}</a>.</p>
<form method="post" action="/settings" class="setform stack">
  <input type="hidden" name="field" value="profile">
  <label for="p-description">Description</label>
  <input type="text" id="p-description" name="description" value="{{.Profile.Description}}" placeholder="one line, shown in listings">
  <label for="p-website">Website</label>
  <input type="text" id="p-website" name="website" value="{{.Profile.Website}}" placeholder="https://example.org">
  <label for="p-links">Links</label>
  <textarea id="p-links" name="links" rows="3" placeholder="one per line: label|https://… or a bare https://… (at most 5)">{{.LinksText}}</textarea>
  <span class="btngroup"><button type="submit" class="btn">Save profile</button></span>
</form>
<h3>About</h3>
<p class="meta">The longer text below your repositories is a file:
<code>profile/README.md</code> in <a href="/{{.AboutRepo}}">{{.AboutRepo}}</a>.
Write it with a push, or edit it here.</p>
{{if .AboutEdit}}<p><a class="btn" href="{{.AboutEdit}}">Edit {{.Profile.AboutPath}}</a></p>
{{else}}<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="profile-repo">
  <button type="submit" class="btn">Create {{.AboutRepo}}</button>
</form>{{end}}
</section>

<section id="keys"><h2>SSH keys</h2>
<p class="meta">Your keys are your identity here. A <code>full</code> key can run
commands and push; a <code>git</code> key can only move git data (e.g., CI).</p>
{{if .Keys}}<div class="tablewrap"><table class="keys nowrap">
<tr class="cols"><th scope="col">label</th><th scope="col">fingerprint</th><th scope="col">type</th><th scope="col">scope</th><th scope="col"><span class="vh">actions</span></th></tr>
{{range .Keys}}<tr>
  <td>{{.Label}}</td>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{.Algo}}</td>
  <td>{{.Scope}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="key-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}">{{template "confirmfield" .Confirm}} <button type="submit" class="danger">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No SSH keys? Which cannot be right, since you signed in.</p>{{end}}
<details class="editbox">
  <summary>Add an SSH key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="key-add">
    <label for="key">Public key</label>
    <textarea id="key" name="key" rows="3" required spellcheck="false" placeholder="ssh-ed25519 AAAA… you@machine"></textarea>
    <label for="key-label">Label</label>
    <input id="key-label" name="label" maxlength="64" placeholder="defaults to the key's comment">
    <label for="scope">Scope</label>
    <select id="scope" name="scope">
      <option value="full">full: commands and git</option>
      <option value="git">git: git transport only</option>
    </select>
    <button type="submit" class="btn">Add key</button>
  </form>
</details>
</section>

<section id="emails"><h2>Email addresses</h2>
<p class="meta">A verified address ties signed commits to this
account and where notifications go.</p>
{{if .Emails}}<ul class="plain">
{{range .Emails}}<li>{{.Address}}
  {{if .Primary}}<span class="chip">primary</span>{{end}}
  {{if .Verified}}<span class="badge badge-verified">verified{{with .VerifiedBy}} · {{.}}{{end}}</span>
  {{else}}<span class="badge badge-unsigned">unverified</span>{{end}}
  {{if not .Primary}}{{if .Verified}}<form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-primary"><input type="hidden" name="address" value="{{.Address}}"><button type="submit" class="linklike">Make primary</button></form>{{end}}
  <form method="post" action="/settings" class="inline"><input type="hidden" name="field" value="email-remove"><input type="hidden" name="address" value="{{.Address}}">{{template "confirmfield" .Address}} <button type="submit" class="danger">Remove</button></form>{{end}}</li>
{{end}}</ul>{{end}}
<details class="editbox">
  <summary>Add an address</summary>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-add">
    <label for="address">Address</label>
    <input type="email" id="address" name="address" required autocomplete="email" placeholder="you@example.org">
    <button type="submit" class="btn">Send code</button>
  </form>
  <form method="post" action="/settings" class="setform">
    <input type="hidden" name="field" value="email-verify">
    <label for="code">Verification code</label>
    <input type="text" id="code" name="code" required autocomplete="one-time-code" autocapitalize="none" spellcheck="false" placeholder="from the mail">
    <button type="submit" class="btn">Verify</button>
  </form>
</details>
</section>

<section id="pgp"><h2>OpenPGP keys</h2>
<p class="meta">Only needed if you sign commits with GPG. SSH signing
(<code>gpg.format = ssh</code>) uses the keys above.</p>
{{if .PGP}}<div class="tablewrap"><table class="keys">
<tr class="cols"><th scope="col">fingerprint</th><th scope="col">identities</th><th scope="col"><span class="vh">actions</span></th></tr>
{{range .PGP}}<tr>
  <td class="mono">{{.Fingerprint}}</td>
  <td>{{range .UIDs}}{{.}}<br>{{end}}{{if .Revoked}}<span class="badge badge-bad_signature">revoked</span>{{else if .Expired}}<span class="badge badge-signed_key_expired">expired</span>{{end}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="pgp-remove"><input type="hidden" name="fingerprint" value="{{.Fingerprint}}">{{template "confirmfield" .Confirm}} <button type="submit" class="danger">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No OpenPGP keys.</p>{{end}}
<details class="editbox">
  <summary>Add a PGP key</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="pgp-add">
    <label for="pgpkey">Armored public key</label>
    <textarea id="pgpkey" name="key" rows="6" required placeholder="-----BEGIN PGP PUBLIC KEY BLOCK-----"></textarea>
    <button type="submit" class="btn">Add key</button>
  </form>
</details>
</section>

<section id="notifications"><h2>Notifications</h2>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-mail">
  <label for="notify-mail">Activity by mail</label>
  <div class="check"><input type="checkbox" id="notify-mail" name="mail" value="on"{{if .MailOn}} checked{{end}}></div>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">Enable to receive activity alerts by email. Login links will arrive regardless of this setting.</p>
{{if .ReplyOffered}}<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-reply">
  <label for="notify-reply">Reply to mail to comment</label>
  <div class="check"><input type="checkbox" id="notify-reply" name="reply" value="on"{{if .ReplyOn}} checked{{end}}></div>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">Issue and merge request mail gets a reply address. A reply posts a comment as you when it comes from one of your verified addresses; quoted text and signatures are removed.</p>
{{end}}<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-watch">
  <label for="notify-watch">Watch repositories you can write to</label>
  <div class="check"><input type="checkbox" id="notify-watch" name="watch" value="on"{{if .WatchOn}} checked{{end}}></div>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">Alerts for every issue and merge request on those repositories. A watch or mute on a repository has priority over this setting.</p>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="notify-push">
  <label for="notify-push">Activity on your registered devices</label>
  <div class="check"><input type="checkbox" id="notify-push" name="push" value="on"{{if .PushOn}} checked{{end}}></div>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">Notification text is sent in full, including for private repositories, so a repository name and item number reach Apple and appear on a lock screen.</p>
<h3>Devices</h3>
{{if .Devices}}<div class="tablewrap"><table class="keys nowrap">
<tr class="cols"><th scope="col">id</th><th scope="col">label</th><th scope="col">token</th><th scope="col">last seen</th><th scope="col"><span class="vh">actions</span></th></tr>
{{range .Devices}}<tr>
  <td class="mono">{{.ID}}</td>
  <td>{{.Label}}</td>
  <td class="mono">{{.Token}}</td>
  <td>{{if .LastSeenAt}}{{when .LastSeenAt}}{{else}}never{{end}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="device-remove"><input type="hidden" name="id" value="{{.ID}}">{{template "confirmfield" .Confirm}} <button type="submit" class="danger">Remove</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No registered devices.</p>{{end}}
<p class="meta">Devices register themselves from the iOS app; there is no
form here to add one, since a browser cannot produce an APNs token.</p>
</section>

<section id="appearance"><h2>Appearance</h2>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="theme">
  <label for="theme">Colour scheme</label>
  <select id="theme" name="theme">
    <option value="system"{{if eq .ThemeSetting "system"}} selected{{end}}>follow the browser</option>
    <option value="light"{{if eq .ThemeSetting "light"}} selected{{end}}>light</option>
    <option value="dark"{{if eq .ThemeSetting "dark"}} selected{{end}}>dark</option>
  </select>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">The same setting as <code>gitbay web theme set</code>. Following the browser takes its light or dark preference.</p>
<form method="post" action="/settings" class="setform">
  <input type="hidden" name="field" value="diff-layout">
  <label for="layout">Diff layout</label>
  <select id="layout" name="layout">
    <option value="unified"{{if ne .DiffSetting "split"}} selected{{end}}>unified</option>
    <option value="split"{{if eq .DiffSetting "split"}} selected{{end}}>side by side</option>
  </select>
  <button type="submit" class="btn">Save</button>
</form>
<p class="meta">The same setting as <code>gitbay web diff set</code>. A <code>?layout=split</code> or <code>?layout=unified</code> on a diff page overrides it for that request. Narrow windows always show a unified diff.</p>
</section>

<section id="export"><h2>Export</h2>
<p class="meta">Your profile, repositories, issues and merge requests as one
JSON bundle, the same one <code>gitbay auth export</code> writes. Keys are
never included; a replayed bundle's emails arrive unverified.</p>
<p><a href="/settings/export">Download bundle</a></p>
</section>

<section id="tokens"><h2>API tokens</h2>
<p class="meta">A token signs in the iOS app, or a script, without your
password. A phone app needs full scope to comment and merge; full scope
on an admin account can administer the instance, so give a token the
narrowest scope and shortest lifetime the job needs.</p>
{{if .TokenShown}}<p class="notice" role="status">Token created. It is shown once; store it now.</p>
<pre class="message" tabindex="0">{{.TokenShown}}</pre>{{end}}
{{if .Tokens}}<div class="tablewrap"><table class="keys nowrap">
<tr class="cols"><th scope="col">name</th><th scope="col">scope</th><th scope="col">created</th><th scope="col">expires</th><th scope="col">last used</th><th scope="col"><span class="vh">actions</span></th></tr>
{{range .Tokens}}<tr>
  <td>{{.Name}}</td>
  <td>{{.Scope}}</td>
  <td>{{when .Created}}</td>
  <td>{{.Expires}}</td>
  <td>{{.LastUsed}}</td>
  <td class="act"><form method="post" action="/settings"><input type="hidden" name="field" value="token-revoke"><input type="hidden" name="name" value="{{.Name}}">{{template "confirmfield" .Name}} <button type="submit" class="danger">Revoke</button></form></td>
</tr>
{{end}}</table></div>
{{else}}<p class="none">No API tokens.</p>{{end}}
<details class="editbox">
  <summary>Create a token</summary>
  <form method="post" action="/settings" class="setform stack">
    <input type="hidden" name="field" value="token-create">
    <label for="token-name">Name</label>
    <input id="token-name" name="name" required autocomplete="off" placeholder="e.g. iphone">
    <label for="token-scope">Scope</label>
    <select id="token-scope" name="scope">
      <option value="read" selected>read: read-only commands</option>
      <option value="full">full: everything your account can do</option>
    </select>
    <label for="token-ttl">Expires after</label>
    <input id="token-ttl" name="ttl" autocomplete="off" placeholder="e.g. 30d or 720h; empty never expires">
    <button type="submit" class="btn">Create token</button>
  </form>
</details>
</section>

<section id="cli"><h2>On the command line</h2>
<p class="meta">No page here yet, and nothing refusing one.</p>
<pre class="message" tabindex="0">gitbay web sessions list               # browser sessions
gitbay admin ...                       # instance administration</pre>
<p class="meta">All of it works from stock OpenSSH too, with the CLI's
grouping words dropped: <code>ssh git@{{.Host}} whoami</code>,
<code>ssh git@{{.Host}} web sessions list</code>.</p>
</section>

<section id="delete"><h2>Delete account</h2>
<p class="meta">Deletes your repositories, snippets, keys and addresses.
Issues, merge requests and comments you wrote on other people's
repositories stay, under the name <code>ghost</code>. A link is mailed to
your primary address; once it is opened the account is disabled, and it
is deleted seven days later. Signing in during those days cancels.
<a href="#export">Export</a> first to keep a copy.</p>
<form method="post" action="/settings" class="setform"><input type="hidden" name="field" value="account-delete">{{template "confirmfield" .Viewer}} <button type="submit" class="danger">Mail the deletion link</button></form>
</section>
</div>
</div>
{{end}}