{% extends "base.html" %}
{% block title %}Keys — FieldWitness{% endblock %}
{% block content %}
<h2><i class="bi bi-key me-2"></i>Key Management</h2>
<p class="text-muted">Manage Stego channel keys and Attest Ed25519 identity.</p>

<div class="row g-4">
    {# Channel Key #}
    <div class="col-md-6">
        <div class="card bg-dark border-secondary">
            <div class="card-body">
                <h5 class="card-title"><i class="bi bi-shield-lock me-2 text-warning"></i>Channel Key</h5>
                {% if keystore.has_channel_key %}
                <p class="text-muted small">
                    Fingerprint: <code>{{ keystore.channel_fingerprint }}</code><br>
                    Used for Stego deployment isolation.
                </p>
                {% else %}
                <p class="text-muted small">No channel key configured.</p>
                <form method="POST" action="{{ url_for('keys.generate_channel') }}">
              <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                    <button type="submit" class="btn btn-outline-warning btn-sm">
                        <i class="bi bi-plus-circle me-1"></i>Generate Channel Key
                    </button>
                </form>
                {% endif %}
            </div>
        </div>
    </div>

    {# Ed25519 Identity #}
    <div class="col-md-6">
        <div class="card bg-dark border-secondary">
            <div class="card-body">
                <h5 class="card-title"><i class="bi bi-fingerprint me-2 text-info"></i>Identity</h5>
                {% if keystore.has_identity %}
                <p class="text-muted small">
                    Fingerprint: <code>{{ keystore.identity_fingerprint }}</code><br>
                    Used for Attest attestation signing.
                </p>
                {% else %}
                <p class="text-muted small">No identity configured.</p>
                <form method="POST" action="{{ url_for('keys.generate_identity') }}">
              <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                    <button type="submit" class="btn btn-outline-info btn-sm">
                        <i class="bi bi-plus-circle me-1"></i>Generate Identity
                    </button>
                </form>
                {% endif %}
            </div>
        </div>
    </div>
</div>
{% endblock %}