{% extends "base.html" %}
{% block title %}API tokens · LibreSignage{% endblock %}
{% block content %}
  <div class="d-flex justify-content-between align-items-start gap-3 mb-4">
    <div>
      <h1 class="h2 mb-1">Personal API tokens</h1>
      <p class="text-body-secondary mb-0">Tokens inherit your current role and fleet permissions.</p>
    </div>
    <a class="btn btn-outline-secondary" href="{{ url_for('api.openapi') }}">OpenAPI 3.1</a>
  </div>
  {% if plaintext %}
    <div class="alert alert-warning">
      <strong>Copy this token now.</strong> It will not be shown again.
      <pre class="mt-2 mb-0 user-select-all"><code>{{ plaintext }}</code></pre>
    </div>
  {% endif %}
  <form class="card card-body mb-4" method="post">
    <h2 class="h5">Create token</h2>
    <div class="row g-3 align-items-end">
      <div class="col-md-6"><label class="form-label" for="token-name">Name</label><input class="form-control" id="token-name" name="name" maxlength="100" required></div>
      <div class="col-md-3"><label class="form-label" for="token-expiry">Expires</label><select class="form-select" id="token-expiry" name="expiry"><option value="30">30 days</option><option value="90" selected>90 days</option><option value="365">365 days</option><option value="never">Never</option></select></div>
      <div class="col-md-3"><button class="btn btn-primary w-100" type="submit">Create token</button></div>
    </div>
  </form>
  <div class="table-responsive"><table class="table align-middle"><thead><tr><th>Name</th><th>Prefix</th><th>Expires</th><th>Last used</th><th>Status</th><th></th></tr></thead><tbody>
    {% for token in tokens %}<tr><td>{{ token.name }}</td><td><code>ls_pat_{{ token.token_prefix }}_…</code></td><td>{{ token.expires_at or "Never" }}</td><td>{{ token.last_used_at or "Never" }}</td><td>{{ "Revoked" if token.revoked_at else "Active" }}</td><td>{% if not token.revoked_at %}<form method="post" action="{{ url_for('auth.revoke_api_token_route', token_id=token.id) }}"><button class="btn btn-sm btn-outline-danger">Revoke</button></form>{% endif %}</td></tr>
    {% else %}<tr><td colspan="6" class="text-body-secondary">No API tokens yet.</td></tr>{% endfor %}
  </tbody></table></div>
{% endblock %}