{% extends "cacsremoteservice/views/layouts/master.html" %}

{% block site-nav %}
{% include "cacsremoteservice/views/partials/site-nav.html" with active="configuration" %}
{% endblock %}

{% block main %}
<div id="page-body" class="configuration-view">
  <div class="text-content">
    <h1>OAuth2 Authorizations</h1>
    <h3 class="lead text-muted">
      Review and revoke active OAuth2 client authorizations.
    </h3>
    <p class="text-muted">Revoking an authorization invalidates all stored refresh tokens for that client.</p>
    <table class="table table-striped" id="oauth2-clients">
      <colgroup>
        {% if is-admin %}<col style="width: 250px">{% endif %}
        <col style="width: 220px">
        <col>
        <col style="width: 120px">
        <col style="width: min-content">
      </colgroup>
      <thead>
      <tr>
        {% if is-admin %}<th title="User">User</th>{% endif %}
        <th title="Client">Client</th>
        <th title="Scopes">Scopes</th>
        <th title="Active Tokens">Active Tokens</th>
        <th class="column-actions"></th>
      </tr>
      </thead>
      <tbody>
      {% for client in oauth2-clients %}
      <tr>
        {% if is-admin %}<td>{{client.name}} ({{client.provider}})</td>{% endif %}
        <td>{{client.client-id}}</td>
        <td>{{client.scopes|default:"-"}}</td>
        <td>{{client.token-count}}</td>
        <td class="column-actions">
          <form action="{{view-context}}/configuration/user/token/oauth2/revoke"
                method="POST" onsubmit="return confirm('Any application using this OAuth2 authorization will need to authenticate again. You cannot undo this action!');">
            <input class="btn btn-danger" type="submit" value="Revoke All"
                   title="Revoke OAuth2 client authorization"/>
            <input name="client-id" value="{{client.client-id}}" type="hidden">
            {% if is-admin %}<input name="user-id" value="{{client.user-id}}" type="hidden">{% endif %}
            {% if vscode %}<input value="true" name="vscode" type="hidden">{% endif %}
          </form>
        </td>
      </tr>
      {% endfor %}
      </tbody>
    </table>
    {% if oauth2-clients|empty? %}
    <p class="text-muted">No active OAuth2 authorizations.</p>
    {% endif %}
  </div>
</div>
{% endblock %}