{% extends 'generic/_base.html' %}
{% load i18n %}

{% block title %}{% trans "Trust SSH host keys" %}{% endblock %}

{% block content %}
<div class="row">
  <div class="col col-12 col-lg-8 offset-lg-2">
    <form method="post" action="{% url 'plugins:netbox_orchestrator:sshhostkey_trust' %}" novalidate>
      {% csrf_token %}

      {% if form.errors %}
      <div class="alert alert-danger" role="alert" id="trust-errors">
        {% for error in form.non_field_errors %}<div>{{ error }}</div>{% endfor %}
        {% for field in form %}{% for error in field.errors %}<div>{{ field.label }}: {{ error }}</div>{% endfor %}{% endfor %}
      </div>
      {% endif %}

      <div class="card mb-3">
        <h2 class="card-header">{% trans "Host" %}</h2>
        <div class="card-body">
          <div class="row g-3">
            <div class="col-12 col-md-8">
              <label class="form-label fw-semibold" for="{{ form.host.id_for_label }}">{% trans "Host" %}</label>
              {{ form.host }}
              <div class="form-text">{{ form.host.help_text }}</div>
            </div>
            <div class="col-12 col-md-4">
              <label class="form-label fw-semibold" for="{{ form.port.id_for_label }}">{% trans "Port" %}</label>
              {{ form.port }}
            </div>
          </div>
        </div>
        <div class="card-footer text-muted small">
          {% trans "The orchestrator connects to the host and reads the keys it presents. It does not log in." %}
        </div>
      </div>

      {% if rows %}
      <div class="card mb-3" id="presented-keys">
        <h2 class="card-header">{% trans "Presented keys" %}</h2>
        <table class="table table-hover mb-0">
          <thead>
            <tr>
              <th scope="col"><span class="visually-hidden">{% trans "Trust" %}</span></th>
              <th scope="col">{% trans "Key type" %}</th>
              <th scope="col">{% trans "Fingerprint" %}</th>
              <th scope="col">{% trans "State" %}</th>
            </tr>
          </thead>
          <tbody>
            {% for row in rows %}
            <tr>
              <td>
                {% if row.state != "trusted" %}
                  <input type="checkbox" class="form-check-input" name="fingerprint" value="{{ row.key.fingerprint }}"
                         aria-label="{% blocktrans with key_type=row.key.key_type %}Trust the {{ key_type }} key{% endblocktrans %}"
                         {% if row.state == "new" %}checked{% endif %}>
                {% endif %}
              </td>
              <td class="font-monospace">{{ row.key.key_type }}</td>
              <td class="font-monospace text-break">{{ row.key.fingerprint }}</td>
              <td>
                {% if row.state == "trusted" %}
                  <span class="badge text-bg-success">{% trans "Trusted" %}</span>
                {% elif row.state == "changed" %}
                  <span class="badge text-bg-danger">{% trans "Changed" %}</span>
                  <div class="small text-muted">
                    {% trans "Trusted now:" %} <span class="font-monospace text-break">{{ row.stored.fingerprint }}</span>
                  </div>
                {% else %}
                  <span class="badge text-bg-info">{% trans "New" %}</span>
                {% endif %}
              </td>
            </tr>
            {% endfor %}
          </tbody>
        </table>
      </div>

      {% if changed %}
      <div class="alert alert-danger" role="alert" id="changed-key-warning">
        {% trans "The host presents a different key than the one trusted. That is expected after the server was rebuilt or reinstalled, and it is also what an attacker in the middle looks like. Replace the trusted key only if you know why it changed." %}
      </div>
      {% endif %}

      <div class="alert alert-warning" role="alert">
        {% trans "Compare each fingerprint with one you got another way, for example on the server console with ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub. Trust a key only when they match." %}
      </div>

      <div class="d-flex justify-content-end gap-2">
        <button type="submit" class="btn btn-outline-secondary">
          <i class="mdi mdi-refresh" aria-hidden="true"></i> {% trans "Read again" %}
        </button>
        <button type="submit" name="confirm" value="1" class="btn btn-primary">
          <i class="mdi mdi-shield-key" aria-hidden="true"></i> {% trans "Trust selected keys" %}
        </button>
      </div>
      {% else %}
      <div class="d-flex justify-content-end gap-2">
        <a href="{% url 'plugins:netbox_orchestrator:sshhostkey_list' %}" class="btn btn-outline-secondary">{% trans "Cancel" %}</a>
        <button type="submit" class="btn btn-primary">
          <i class="mdi mdi-download" aria-hidden="true"></i> {% trans "Read host keys" %}
        </button>
      </div>
      {% endif %}
    </form>
  </div>
</div>
{% endblock content %}