@extends('layouts.admin')

@section('title', 'Security Settings')

@section('content')
<div class="page-header">
    <div>
        <h1 class="page-title">Security Settings</h1>
    </div>
</div>

<div class="card">
    <div class="card-body">
        <form method="POST" action="{{ route('admin.settings.security.update') }}">
            @csrf
            @method('PUT')

            <div class="form-section">
                <h3 class="form-section-title">Authentication</h3>
                <div class="form-grid form-grid-2">
                    <div class="form-group">
                        <label for="login_attempt_limit" class="form-label">Login Attempt Limit</label>
                        <input type="number" id="login_attempt_limit" name="login_attempt_limit" class="form-input @error('login_attempt_limit') is-invalid @enderror" value="{{ old('login_attempt_limit', $settings->login_attempt_limit ?? 5) }}" min="1" max="20">
                        <span class="form-help">Max failed login attempts before lockout</span>
                        @error('login_attempt_limit')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                    <div class="form-group">
                        <label for="pin_attempt_limit" class="form-label">PIN Attempt Lockout Threshold</label>
                        <input type="number" id="pin_attempt_limit" name="pin_attempt_limit" class="form-input @error('pin_attempt_limit') is-invalid @enderror" value="{{ old('pin_attempt_limit', $settings->pin_attempt_limit ?? 3) }}" min="1" max="10">
                        <span class="form-help">Max incorrect PIN attempts before lockout</span>
                        @error('pin_attempt_limit')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                    <div class="form-group">
                        <label for="session_timeout" class="form-label">Session Timeout (minutes)</label>
                        <input type="number" id="session_timeout" name="session_timeout" class="form-input @error('session_timeout') is-invalid @enderror" value="{{ old('session_timeout', $settings->session_timeout ?? 30) }}" min="5" max="480">
                        <span class="form-help">Auto-logout after inactivity</span>
                        @error('session_timeout')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                    <div class="form-group">
                        <label for="lockout_duration" class="form-label">Lockout Duration (minutes)</label>
                        <input type="number" id="lockout_duration" name="lockout_duration" class="form-input @error('lockout_duration') is-invalid @enderror" value="{{ old('lockout_duration', $settings->lockout_duration ?? 15) }}" min="5" max="1440">
                        @error('lockout_duration')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                </div>
            </div>

            <div class="form-section" style="margin-top: 1.5rem;">
                <h3 class="form-section-title">Two-Factor Authentication</h3>
                <div class="form-grid form-grid-2">
                    <div class="form-group">
                        <label class="form-label">Enable OTP for Transactions</label>
                        <label class="toggle">
                            <input type="checkbox" name="otp_enabled" value="1" {{ old('otp_enabled', $settings->otp_enabled ?? true) ? 'checked' : '' }}>
                            <span class="toggle-slider"></span>
                        </label>
                        <span class="form-help">Require OTP verification for transactions</span>
                    </div>
                </div>
            </div>

            <div class="form-section" style="margin-top: 1.5rem;">
                <h3 class="form-section-title">Password Requirements</h3>
                <div class="form-grid form-grid-2">
                    <div class="form-group">
                        <label for="min_password_length" class="form-label">Minimum Password Length</label>
                        <input type="number" id="min_password_length" name="min_password_length" class="form-input @error('min_password_length') is-invalid @enderror" value="{{ old('min_password_length', $settings->min_password_length ?? 8) }}" min="6" max="32">
                        @error('min_password_length')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                    <div class="form-group">
                        <label for="password_expiry_days" class="form-label">Password Expiry (days, 0 = never)</label>
                        <input type="number" id="password_expiry_days" name="password_expiry_days" class="form-input @error('password_expiry_days') is-invalid @enderror" value="{{ old('password_expiry_days', $settings->password_expiry_days ?? 0) }}" min="0" max="365">
                        @error('password_expiry_days')
                        <span class="form-error">{{ $message }}</span>
                        @enderror
                    </div>
                </div>
            </div>

            <div class="form-actions" style="margin-top: 2rem;">
                <button type="submit" class="btn btn-primary">
                    <svg width="16" height="16" viewBox="0 0 16 16" fill="none"><path d="M4 8l3 3 5-6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/></svg>
                    Save Settings
                </button>
            </div>
        </form>
    </div>
</div>
@endsection