{% extends 'app/base.html.twig' %}

{% block title %}Utilisateurs
{% endblock %}

{% block body %}
	<div class="d-flex justify-content-between align-items-center mb-4">
		<div>
			<h1 class="h3 fw-bold page-title mb-0">
				<i class="fas fa-user-shield me-2"></i>Utilisateurs</h1>
			<p class="text-muted small mb-0">{{ utilisateurs|length }}
				compte(s) configuré(s)</p>
		</div>
		<a href="{{ path('tenant_utilisateurs_new') }}" class="btn btn-primary">
			<i class="fas fa-plus me-1"></i>Nouvel utilisateur
		</a>
	</div>

	<div class="card border-0 shadow-sm rounded-3">
		<div class="card-body p-0">
			{% if utilisateurs is empty %}
				<div class="text-center py-5 text-muted">
					<i class="fas fa-users fa-2x mb-3 d-block"></i>
					Aucun utilisateur
				</div>
			{% else %}
				<div class="table-responsive">
					<table class="table table-hover mb-0 align-middle">
						<thead class="table-light">
							<tr>
								<th>#</th>
								<th>Nom d'utilisateur</th>
								<th>Nom</th>
								<th>Prénom</th>
								<th>Email</th>
								<th>Rôle</th>
								<th>2FA</th>
								<th></th>
							</tr>
						</thead>
						<tbody>
							{% for u in utilisateurs %}
								<tr>
									<td class="text-muted small">{{ u.id }}</td>
									<td class="fw-semibold">{{ u.username ?? u.login ?? '—' }}</td>
									<td>{{ u.nom ?? '—' }}</td>
									<td>{{ u.prenom ?? '—' }}</td>
									<td class="text-muted small">{{ u.email ?? '—' }}</td>
									<td><span class="badge bg-info text-dark">{{ u.role ?? 'user' }}</span></td>
									<td>
										{% if u.email %}
											{% if u.two_factor_enabled %}
												<span class="badge bg-success"><i class="fas fa-shield-alt me-1"></i>Activée</span>
											{% else %}
												<span class="badge bg-secondary">Désactivée</span>
											{% endif %}
										{% else %}
											<span class="badge bg-warning text-dark" title="Email manquant — requis pour la 2FA">
												<i class="fas fa-exclamation-triangle me-1"></i>Email manquant
											</span>
										{% endif %}
									</td>
									<td class="text-end text-nowrap">
										{% if u.email %}
										<form method="post" action="{{ path('tenant_utilisateurs_toggle_2fa', {id: u.id}) }}" class="d-inline">
											<input type="hidden" name="_token" value="{{ csrf_token('utilisateur_toggle_2fa_' ~ u.id) }}">
											<button type="submit" class="btn btn-sm {% if u.two_factor_enabled %}btn-outline-warning{% else %}btn-outline-success{% endif %} me-1"
											        title="{{ u.two_factor_enabled ? 'Désactiver la 2FA' : 'Activer la 2FA' }}"
											        onclick="return confirm('{{ u.two_factor_enabled ? 'Désactiver la double authentification pour ' ~ u.username ~ ' ?' : 'Activer la double authentification pour ' ~ u.username ~ ' ?' }}')">
												<i class="fas fa-shield-alt"></i>
											</button>
										</form>
										{% endif %}
										<a href="{{ path('tenant_utilisateurs_edit', {id: u.id}) }}" class="btn btn-sm btn-outline-secondary me-1"><i class="fas fa-pencil-alt"></i></a>
										<form method="post" action="{{ path('tenant_utilisateurs_delete', {id: u.id}) }}" class="d-inline" onsubmit="return confirm('Supprimer cet utilisateur ?')">
											<input type="hidden" name="_token" value="{{ csrf_token('utilisateur_delete_' ~ u.id) }}">
											<button class="btn btn-sm btn-outline-danger"><i class="fas fa-trash"></i></button>
										</form>
									</td>
								</tr>
							{% endfor %}
						</tbody>
					</table>
				</div>
			{% endif %}
		</div>
	</div>
{% endblock body %}