{% extends "base.html" %}
{% block title %}Account · iVistaar{% endblock %}
{% block content %}
<div class="page-head">
  <div>
    <h1>Account</h1>
    <p class="muted">Change the admin password used to sign in to this control plane.</p>
  </div>
</div>

{% if using_default %}
<p class="banner banner-warn">
  You are still on the <strong>default</strong> admin password. Change it before exposing this server.
</p>
{% endif %}

<section class="card">
  <h2>Admin user</h2>
  <dl class="meta">
    <dt>Username</dt><dd><code>{{ username }}</code></dd>
    <dt>Password source</dt>
    <dd>
      {% if password_source == 'ui' %}
        Changed in this portal (stored hashed in local database)
      {% else %}
        Install default / <code>IVISTAAR_ADMIN_PASSWORD</code> environment variable
      {% endif %}
    </dd>
  </dl>
</section>

<section class="card">
  <h2>Change password</h2>
  <p class="muted">Enter the current password, then a new password (at least {{ min_password_len }} characters) and confirm it.</p>
  <form method="post" action="{{ url_for('admin.account_password') }}" class="form-grid" style="margin-top:1rem;" autocomplete="off">
    <label class="span-2">
      Current password
      <input type="password" name="current_password" required autocomplete="current-password">
    </label>
    <label class="span-2">
      New password
      <input type="password" name="new_password" required minlength="{{ min_password_len }}" autocomplete="new-password">
    </label>
    <label class="span-2">
      Confirm new password
      <input type="password" name="confirm_password" required minlength="{{ min_password_len }}" autocomplete="new-password">
    </label>
    <div class="span-2 actions">
      <button type="submit" class="btn primary">Update password</button>
      <a class="btn" href="{{ url_for('admin.dashboard') }}">Back</a>
    </div>
  </form>
</section>

<section class="card">
  <h2>If you forget the password</h2>
  <p class="muted">
    Stop the admin process, clear the stored hash in <code>data\ivistaar.db</code>
    (<code>admin_settings.password_hash</code>), then sign in again with
    <code>IVISTAAR_ADMIN_PASSWORD</code> (or the install default) and set a new password here.
  </p>
</section>
{% endblock %}