{% extends "base.html" %}
{% block title %}Benutzer · FireDB Medienportal{% endblock %}
{% block content %}
<div class="page-heading"><p class="eyebrow">Administration</p><h1>Benutzer und Akkreditierungen</h1><p>{{ users|length }} Konten im Portal</p></div>
{% if can_manage %}<details class="admin-create-card"><summary>Mitglied der Pressestelle anlegen</summary><form class="form-grid" method="post" action="{{ request.scope.get('root_path', '') }}/admin/users/new"><input type="hidden" name="csrf_token" value="{{ csrf_token }}"><label>Vorname<input name="first_name" required></label><label>Nachname<input name="last_name" required></label><label class="span-2">E-Mail-Adresse<input name="email" type="email" required></label><label>Rolle<select name="role"><option value="PRESS_TEAM">Pressesprecher-Team (ohne Freigabe)</option><option value="PRESS_SPOKESPERSON">Pressesprecher (mit Freigabe)</option></select></label><label>Initiales Passwort<input name="password" type="password" minlength="12" autocomplete="new-password" required></label><div class="form-actions span-2"><button class="button button-primary" type="submit">Pressestellenkonto anlegen</button></div></form></details>{% endif %}
<section class="admin-user-list">
{% for user in users %}<article class="admin-user-card">
  <div class="admin-user-head"><div><strong>{{ user.first_name }} {{ user.last_name }}</strong><span>{{ user.email }} · {{ user.newsroom }}</span></div><div><span class="status status-{{ user.account_status.value|lower }}">{{ user.account_status.value }}</span>{% if user.accreditation %} <span class="status status-{{ user.accreditation.status.value|lower }}">{{ user.accreditation.status.value }}</span>{% endif %}</div></div>
  <div class="admin-user-meta"><span>Rolle: {{ {'ADMIN':'Portal-Admin','PRESS_SPOKESPERSON':'Pressesprecher','PRESS_TEAM':'Pressesprecher-Team','PRESS':'Pressevertreter'}.get(user.role.value,user.role.value) }}</span><span>MFA: {{ 'aktiv' if user.mfa_enabled else 'nicht eingerichtet' }}</span><span>Erstellt: {{ user.created_at.strftime('%d.%m.%Y') }}</span>{% if user.accreditation and user.accreditation.valid_until %}<span>Gültig bis: {{ user.accreditation.valid_until.strftime('%d.%m.%Y') }}</span>{% endif %}</div>
  {% if can_manage %}<div class="admin-actions">
    {% if user.id != principal.user.id %}<form method="post" action="{{ request.scope.get('root_path', '') }}/admin/users/{{ user.id }}/role"><input type="hidden" name="csrf_token" value="{{ csrf_token }}"><label>Rolle<select name="role"><option value="PRESS" {% if user.role.value == 'PRESS' %}selected{% endif %}>Pressevertreter</option><option value="PRESS_TEAM" {% if user.role.value == 'PRESS_TEAM' %}selected{% endif %}>Pressesprecher-Team</option><option value="PRESS_SPOKESPERSON" {% if user.role.value == 'PRESS_SPOKESPERSON' %}selected{% endif %}>Pressesprecher</option></select></label><button class="button button-secondary button-small" type="submit">Rolle speichern</button></form>{% endif %}
    {% if user.accreditation and user.accreditation.evidence_storage_key %}<a class="text-link" href="{{ request.scope.get('root_path', '') }}/admin/users/{{ user.id }}/evidence">Nachweis ansehen</a>{% endif %}
    <form method="post" action="{{ request.scope.get('root_path', '') }}/admin/users/{{ user.id }}/mfa-reset" onsubmit="return confirm('MFA dieses Benutzers wirklich zurücksetzen? Alle aktiven Sitzungen des Kontos werden beendet.');"><input type="hidden" name="csrf_token" value="{{ csrf_token }}"><button class="button button-danger button-small" type="submit">MFA zurücksetzen{% if user.id == principal.user.id %} und abmelden{% endif %}</button></form>
  </div>{% endif %}
  {% if can_manage and user.account_status.value == 'PENDING' and user.accreditation %}<form class="approval-form" method="post" action="{{ request.scope.get('root_path', '') }}/admin/users/{{ user.id }}/approve"><input type="hidden" name="csrf_token" value="{{ csrf_token }}"><label>Akkreditierung gültig bis<input type="date" name="valid_until" required></label><label>Nachweis löschen ab<input type="date" name="evidence_delete_after" required></label><button class="button button-primary" type="submit">Akkreditierung freigeben</button></form>{% endif %}
</article>{% endfor %}
</section>
{% endblock %}