{% extends "base.html" %}
{% block title %}Enable Two-Factor Auth{% endblock %}
{% block page_title %}Enable Two-Factor Authentication{% endblock %}

{% block content %}
<div class="row justify-content-center">
<div class="col-12 col-md-8 col-lg-6">

<div class="pcard mb-3">
    <div class="d-flex align-items-center gap-3 mb-4">
        <div style="width:44px;height:44px;border-radius:11px;background:#ede9fe;color:#5b21b6;display:flex;align-items:center;justify-content:center;font-size:22px;flex-shrink:0;">
            <i class="bi bi-shield-lock-fill"></i>
        </div>
        <div>
            <div style="font-weight:700;font-size:15px;">Authenticator App Setup</div>
            <div style="font-size:12px;color:var(--muted);">Scan the QR code with Google Authenticator, Authy, or any TOTP app.</div>
        </div>
    </div>

    <!-- Step 1 -->
    <div class="mb-4">
        <div style="font-size:12px;font-weight:700;color:var(--muted);text-transform:uppercase;letter-spacing:.05em;margin-bottom:10px;">Step 1 — Scan QR code</div>
        <div class="text-center">
            <img src="{{ qr_data }}" alt="TOTP QR code" style="width:200px;height:200px;border:1px solid var(--border);border-radius:8px;padding:8px;background:#fff;">
        </div>
        <div class="mt-3 p-3" style="background:#f8fafc;border-radius:8px;font-size:12px;">
            <div style="color:var(--muted);margin-bottom:4px;">Can't scan? Enter this key manually:</div>
            <code class="mono" style="font-size:14px;font-weight:700;letter-spacing:.1em;word-break:break-all;">{{ secret }}</code>
        </div>
    </div>

    <!-- Step 2 -->
    <div>
        <div style="font-size:12px;font-weight:700;color:var(--muted);text-transform:uppercase;letter-spacing:.05em;margin-bottom:10px;">Step 2 — Confirm with a code</div>
        <form method="POST" autocomplete="off">
            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
            <div class="d-flex gap-2">
                <input type="text" name="code" inputmode="numeric" pattern="[0-9 ]*"
                       maxlength="7" autofocus
                       class="form-control mono text-center"
                       style="font-size:22px;font-weight:700;letter-spacing:.15em;"
                       placeholder="000000">
                <button type="submit" class="btn btn-primary" style="white-space:nowrap;">
                    Enable 2FA
                </button>
            </div>
            <div style="font-size:11px;color:var(--muted);margin-top:6px;">
                Enter the current 6-digit code shown in your authenticator app to confirm setup.
            </div>
        </form>
    </div>
</div>

<div class="text-center">
    <a href="{{ url_for('settings.index') }}" class="btn btn-outline-secondary btn-sm">Cancel</a>
</div>

</div>
</div>
{% endblock %}