{% extends "base.html" %}

{% block title %}Central — Manage API Key: {{ key.alias }}{% endblock %}

{% block content %}
<h1>Manage API Key: {{ key.alias }}</h1>

<article>
    <header><strong>Key Details</strong></header>
    <ul>
        <li><strong>Created:</strong> {{ key.created_at.strftime('%Y-%m-%d %H:%M:%S UTC') if key.created_at else '(never)' }}</li>
        <li><strong>Last Rotated:</strong> {{ key.rotated_at.strftime('%Y-%m-%d %H:%M:%S UTC') if key.rotated_at else '(never)' }}</li>
        <li><strong>Last Used:</strong> {{ key.last_used_at.strftime('%Y-%m-%d %H:%M:%S UTC') if key.last_used_at else '(never)' }}</li>
        <li><strong>Used By:</strong> {% if key.used_by %}{{ key.used_by | join(', ') }}{% else %}<em>(none)</em>{% endif %}</li>
    </ul>
</article>

<article>
    <header><strong>Rotate Key</strong></header>
    <p>Replace the stored API key with a new value. The old key will be permanently overwritten.</p>

    <form action="/api-keys/{{ key.alias }}" method="post">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">

        <label for="new_plaintext_key">New API Key</label>
        <input type="password" id="new_plaintext_key" name="new_plaintext_key"
               placeholder="Paste your new API key here" required maxlength="4096"
               aria-invalid="{{ 'true' if errors and errors.new_plaintext_key else 'false' }}">
        {% if errors and errors.new_plaintext_key %}
        <small style="color: var(--pico-color-red-500);">{{ errors.new_plaintext_key }}</small>
        {% else %}
        <small>The key will be encrypted before storage.</small>
        {% endif %}

        <button type="submit">Rotate Key</button>
    </form>
</article>

<article>
    <header><strong>Delete Key</strong></header>

    {% if key.used_by %}
    <p style="color: var(--pico-color-red-500);">
        <strong>Cannot delete:</strong> This key is used by: {{ key.used_by | join(', ') }}.
        Remove these references from the adapters first.
    </p>
    <form>
        <button type="button" disabled>Delete Key</button>
    </form>
    {% else %}
    <p>Permanently delete this API key. This action cannot be undone.</p>

    {% if error %}
    <p style="color: var(--pico-color-red-500);">{{ error }}</p>
    {% endif %}

    <form action="/api-keys/{{ key.alias }}/delete" method="post">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="contrast">Delete Key</button>
    </form>
    {% endif %}
</article>

<p><a href="/api-keys">&larr; Back to API Keys</a></p>
{% endblock %}