{# templates/app/login.html.twig #}
{% extends 'app/base.html.twig' %}

{% block title %}Connexion — GestRestoSco
{% endblock %}

{% block stylesheets %}
	{{ parent() }}
	<link rel="stylesheet" href="{{ asset('css/login.css') }}">
{% endblock %}

{% block body %}
	<div class="login-page">
		<div
			class="col-11 col-sm-8 col-md-5 col-lg-4 col-xl-3">

			{# Logo / En-tête #}
			<div class="text-center mb-4">
				<div class="mb-3 mt-5">
					<span style="font-size: 3rem;">🍽️</span>
				</div>
				<h1 class="text-white fw-bold fs-3">GestRestoSco</h1>
				{% if app.request.attributes.get('_tenant') %}
					<p class="text-white-50 mb-0">{{ app.request.attributes.get('_tenant').name }}</p>
				{% else %}
					<p class="text-white-50 mb-0">Gestion de restaurant scolaire</p>
				{% endif %}
			</div>

			{# Carte de connexion #}
			<div class="card border-0 shadow-lg rounded-4">
				<div class="card-body p-4 p-md-5">

					<h2 class="h5 fw-bold text-center mb-4 login-form-title">
						<i class="fas fa-lock me-2"></i>Connexion
					</h2>

					{# Erreur d'authentification #}
					{% if error %}
						<div class="alert alert-danger d-flex align-items-center gap-2 mb-3" role="alert">
							<i class="fas fa-exclamation-circle"></i>
							<span>{{ error.messageKey|trans(error.messageData, 'security') }}</span>
						</div>
					{% endif %}

					<form method="post" action="{{ path('tenant_login') }}" novalidate>

						<div class="mb-3">
							<label for="username" class="form-label fw-semibold small text-muted text-uppercase">
								Identifiant
							</label>
							<div class="input-group">
								<span class="input-group-text bg-light border-end-0">
									<i class="fas fa-user text-muted"></i>
								</span>
								<input type="text" id="username" name="username" class="form-control border-start-0 ps-0" value="{{ last_username }}" autocomplete="username" autofocus required placeholder="Votre identifiant">
							</div>
						</div>

						<div class="mb-4">
							<label for="password" class="form-label fw-semibold small text-muted text-uppercase">
								Mot de passe
							</label>
							<div class="input-group">
								<span class="input-group-text bg-light border-end-0">
									<i class="fas fa-lock text-muted"></i>
								</span>
								<input type="password" id="password" name="password" class="form-control border-start-0 ps-0" autocomplete="current-password" required placeholder="Votre mot de passe">
							</div>
						</div>

						<div class="form-check mb-4">
							<input class="form-check-input" type="checkbox" name="_remember_me" id="remember_me">
							<label class="form-check-label small text-muted" for="remember_me">
								Rester connecté (7 jours)
							</label>
						</div>

						{# Token CSRF — nom correspondant à TenantAuthenticator::authenticate() #}
						<input type="hidden" name="_csrf_token" value="{{ csrf_token('tenant_authenticate') }}">

						<button type="submit" class="btn btn-app-primary w-100 py-2 fw-semibold">
							<i class="fas fa-sign-in-alt me-2"></i>Se connecter
						</button>

					</form>
				</div>
			</div>

			{# Pied de page #}
			<p class="text-center text-white-50 small mt-3">
				<i class="fas fa-shield-alt me-1"></i>
				Connexion sécurisée — GestRestoSco
			</p>

		{# Sélecteur de tenant en développement local uniquement #}
		{% if app.debug %}
		<div class="card border-warning mt-3 shadow-sm" style="max-width:360px;margin:0 auto;">
			<div class="card-body py-2 px-3">
				<p class="text-warning fw-semibold small mb-2">
					<i class="fas fa-flask me-1"></i> Dev — Changer d'établissement
				</p>
				<div class="d-flex flex-wrap gap-2">
					{% set _allTenants = [] %}
					{% set _currentSlug = app.request.cookies.get('_dev_tenant_slug') %}
					{# Les tenants sont chargés via TenantDatabaseSwitcher, on relit depuis le twig context #}
					{% for tenantRow in dev_tenants|default([]) %}
						<a href="{{ path('tenant_dev_switch', {slug: tenantRow.slug}) }}"
						   class="btn btn-sm {% if tenantRow.slug == _currentSlug %}btn-warning{% else %}btn-outline-warning{% endif %}">
							{% if tenantRow.slug == _currentSlug %}<i class="fas fa-check me-1"></i>{% endif %}
							{{ tenantRow.name }}
						</a>
					{% endfor %}
				</div>
			</div>
		</div>
		{% endif %}
	</div>
</div>
{% endblock %}