{% extends "base.html" %}

{% block title %}Generate Credentials - Stegasoo{% endblock %}

{% block content %}
<div class="row justify-content-center">
    <div class="col-lg-8">
        <div class="card">
            <div class="card-header">
                <h5 class="mb-0"><i class="bi bi-key-fill me-2"></i>Generate Credentials</h5>
            </div>
            <div class="card-body">
                {% if not generated %}
                <!-- Generation Form -->
                <form method="POST">
                    <div class="mb-4">
                        <label class="form-label">Words per Phrase</label>
                        <input type="range" class="form-range" name="words_per_phrase" 
                               min="3" max="12" value="3" id="wordsRange">
                        <div class="d-flex justify-content-between small text-muted">
                            <span>3 (33 bits)</span>
                            <span id="wordsValue" class="text-primary fw-bold">3 words (~33 bits)</span>
                            <span>12 (132 bits)</span>
                        </div>
                    </div>
                    
                    <hr>
                    
                    <h6 class="text-muted mb-3">SECURITY FACTORS <span class="text-warning small">(select at least one)</span></h6>
                    
                    <div class="row">
                        <div class="col-md-6 mb-3">
                            <div class="form-check form-switch">
                                <input class="form-check-input" type="checkbox" name="use_pin" 
                                       id="usePinCheck" checked>
                                <label class="form-check-label" for="usePinCheck">
                                    <i class="bi bi-123 me-1"></i> Generate PIN
                                </label>
                            </div>
                            <div class="mt-2" id="pinOptions">
                                <label class="form-label small">PIN Length</label>
                                <select name="pin_length" class="form-select form-select-sm">
                                    <option value="6" selected>6 digits (~20 bits)</option>
                                    <option value="7">7 digits (~23 bits)</option>
                                    <option value="8">8 digits (~26 bits)</option>
                                    <option value="9">9 digits (~30 bits)</option>
                                </select>
                            </div>
                        </div>
                        
                        <div class="col-md-6 mb-3">
                            <div class="form-check form-switch">
                                <input class="form-check-input" type="checkbox" name="use_rsa" 
                                       id="useRsaCheck">
                                <label class="form-check-label" for="useRsaCheck">
                                    <i class="bi bi-file-earmark-lock me-1"></i> Generate RSA Key
                                </label>
                            </div>
                            <div class="mt-2 d-none" id="rsaOptions">
                                <label class="form-label small">Key Size</label>
                                <select name="rsa_bits" class="form-select form-select-sm">
                                    <option value="2048" selected>2048 bits (~128 bits entropy)</option>
                                    <option value="3072">3072 bits (~128 bits entropy)</option>
                                    <option value="4096">4096 bits (~128 bits entropy)</option>
                                </select>
                            </div>
                        </div>
                    </div>
                    
                    <button type="submit" class="btn btn-primary btn-lg w-100 mt-3">
                        <i class="bi bi-shuffle me-2"></i>Generate Credentials
                    </button>
                </form>
                
                {% else %}
                <!-- Generated Credentials Display -->
                <div class="alert alert-warning">
                    <i class="bi bi-exclamation-triangle me-2"></i>
                    <strong>Memorize these credentials!</strong> They will not be shown again.
                    <br><small>Do not screenshot or save to an unencrypted file.</small>
                </div>
                
                {% if pin %}
                <div class="mb-4">
                    <h6 class="text-muted"><i class="bi bi-123 me-2"></i>STATIC PIN</h6>
                    <div class="text-center">
                        <div class="pin-container d-inline-block">
                            <div class="pin-digits-row" id="pinDigits">
                                {% for digit in pin %}
                                <span class="pin-digit-box">{{ digit }}</span>
                                {% endfor %}
                            </div>
                            <div class="pin-buttons mt-3">
                                <button type="button" class="btn btn-sm btn-outline-secondary me-2" onclick="togglePinVisibility()">
                                    <i class="bi bi-eye-slash" id="pinToggleIcon"></i>
                                    <span id="pinToggleText">Hide</span>
                                </button>
                                <button type="button" class="btn btn-sm btn-outline-secondary" onclick="copyPin()">
                                    <i class="bi bi-clipboard" id="pinCopyIcon"></i>
                                    <span id="pinCopyText">Copy</span>
                                </button>
                            </div>
                        </div>
                    </div>
                </div>
                {% endif %}
                
                <div class="mb-4">
                    <h6 class="text-muted"><i class="bi bi-chat-quote me-2"></i>DAILY PHRASES</h6>
                    <div class="table-responsive">
                        <table class="table table-dark table-striped mb-0">
                            <tbody>
                                {% for day in days %}
                                <tr>
                                    <td class="text-muted" style="width: 100px;">{{ day }}</td>
                                    <td>
                                        <span class="font-monospace phrase-display" id="phrase{{ loop.index }}">{{ phrases[day] }}</span>
                                    </td>
                                </tr>
                                {% endfor %}
                            </tbody>
                        </table>
                    </div>
                    <div class="text-end mt-2">
                        <button class="btn btn-sm btn-outline-secondary" onclick="toggleAllPhrases()">
                            <i class="bi bi-eye-slash me-1"></i>Toggle Visibility
                        </button>
                    </div>
                </div>
                
                {% if rsa_key_pem %}
                <div class="mb-4">
                    <h6 class="text-muted"><i class="bi bi-file-earmark-lock me-2"></i>RSA PRIVATE KEY ({{ rsa_bits }} bits)</h6>
                    
                    <ul class="nav nav-tabs" role="tablist">
                        <li class="nav-item" role="presentation">
                            <button class="nav-link active" data-bs-toggle="tab" data-bs-target="#keyTextTab" type="button">
                                <i class="bi bi-file-text me-1"></i>PEM Text
                            </button>
                        </li>
                        <li class="nav-item" role="presentation">
                            <button class="nav-link" data-bs-toggle="tab" data-bs-target="#keyDownloadTab" type="button">
                                <i class="bi bi-download me-1"></i>Download
                            </button>
                        </li>
                        {% if has_qrcode and qr_token %}
                        <li class="nav-item" role="presentation">
                            <button class="nav-link" data-bs-toggle="tab" data-bs-target="#keyQrTab" type="button">
                                <i class="bi bi-qr-code me-1"></i>QR Code
                            </button>
                        </li>
                        {% endif %}
                    </ul>
                    
                    <div class="tab-content border border-top-0 rounded-bottom p-3 bg-dark">
                        <!-- PEM Text Tab -->
                        <div class="tab-pane fade show active" id="keyTextTab" role="tabpanel">
                            <pre class="bg-black p-2 rounded small mb-2" style="max-height: 200px; overflow-y: auto;"><code id="rsaKeyDisplay">{{ rsa_key_pem }}</code></pre>
                            <button class="btn btn-sm btn-outline-light" 
                                    onclick="navigator.clipboard.writeText(document.getElementById('rsaKeyDisplay').textContent)">
                                <i class="bi bi-clipboard me-1"></i>Copy to Clipboard
                            </button>
                        </div>
                        
                        <!-- Download Tab -->
                        <div class="tab-pane fade" id="keyDownloadTab" role="tabpanel">
                            <form action="{{ url_for('download_key') }}" method="POST" class="row g-2 align-items-end">
                                <input type="hidden" name="key_pem" value="{{ rsa_key_pem }}">
                                <div class="col-md-8">
                                    <label class="form-label small">Password to encrypt the key file</label>
                                    <input type="password" name="key_password" class="form-control" 
                                           placeholder="Min 8 characters" minlength="8" required>
                                </div>
                                <div class="col-md-4">
                                    <button type="submit" class="btn btn-primary w-100">
                                        <i class="bi bi-download me-1"></i>Download .pem
                                    </button>
                                </div>
                            </form>
                            <div class="form-text mt-2">
                                The downloaded file will be password-protected (AES-256 encrypted).
                            </div>
                        </div>
                        
                        {% if has_qrcode and qr_token %}
                        <!-- QR Code Tab -->
                        <div class="tab-pane fade" id="keyQrTab" role="tabpanel">
                            <div class="text-center">
                                <p class="small text-muted mb-3">
                                    Scan this QR code to transfer the RSA key to another device.
                                    <br><strong>Warning:</strong> This is the unencrypted private key!
                                </p>
                                <div class="qr-container d-inline-block p-3 bg-white rounded mb-3">
                                    <img src="{{ url_for('generate_qr', token=qr_token) }}" 
                                         alt="RSA Key QR Code" 
                                         class="img-fluid"
                                         style="max-width: 300px;"
                                         id="qrCodeImage">
                                </div>
                                <div>
                                    <a href="{{ url_for('generate_qr_download', token=qr_token) }}" 
                                       class="btn btn-outline-primary">
                                        <i class="bi bi-download me-1"></i>Download QR Code
                                    </a>
                                    <button class="btn btn-outline-secondary ms-2" onclick="printQrCode()">
                                        <i class="bi bi-printer me-1"></i>Print
                                    </button>
                                </div>
                                <div class="alert alert-warning small mt-3 mb-0 text-start">
                                    <i class="bi bi-shield-exclamation me-1"></i>
                                    <strong>Security note:</strong> The QR code contains your unencrypted private key.
                                    Only scan in a secure environment. Consider using the password-protected download instead.
                                    {% if rsa_bits >= 4096 %}
                                    <br><br>
                                    <i class="bi bi-exclamation-triangle me-1"></i>
                                    <strong>4096-bit keys</strong> produce very dense QR codes. If scanning fails, 
                                    use the PEM text or download options instead.
                                    {% endif %}
                                </div>
                            </div>
                        </div>
                        {% endif %}
                    </div>
                </div>
                {% endif %}
                
                <div class="mb-4">
                    <h6 class="text-muted"><i class="bi bi-shield-check me-2"></i>SECURITY SUMMARY</h6>
                    <div class="row text-center">
                        <div class="col">
                            <div class="p-2 bg-dark rounded">
                                <div class="small text-muted">Phrase</div>
                                <div class="fs-5 text-info">{{ phrase_entropy }} bits</div>
                            </div>
                        </div>
                        {% if pin_entropy %}
                        <div class="col">
                            <div class="p-2 bg-dark rounded">
                                <div class="small text-muted">PIN</div>
                                <div class="fs-5 text-warning">{{ pin_entropy }} bits</div>
                            </div>
                        </div>
                        {% endif %}
                        {% if rsa_entropy %}
                        <div class="col">
                            <div class="p-2 bg-dark rounded">
                                <div class="small text-muted">RSA</div>
                                <div class="fs-5 text-primary">{{ rsa_entropy }} bits</div>
                            </div>
                        </div>
                        {% endif %}
                        <div class="col">
                            <div class="p-2 bg-dark rounded">
                                <div class="small text-muted">Total</div>
                                <div class="fs-5 text-success">{{ total_entropy }} bits</div>
                            </div>
                        </div>
                    </div>
                    <div class="form-text text-center mt-2">
                        + reference photo entropy (~80-256 bits)
                    </div>
                </div>
                
                <div class="d-grid gap-2">
                    <a href="{{ url_for('generate') }}" class="btn btn-outline-primary">
                        <i class="bi bi-arrow-repeat me-2"></i>Generate New Credentials
                    </a>
                    <a href="{{ url_for('encode_page') }}" class="btn btn-success">
                        <i class="bi bi-lock me-2"></i>Start Encoding
                    </a>
                </div>
                {% endif %}
            </div>
        </div>
        
        {% if not generated %}
        <div class="card mt-4">
            <div class="card-body">
                <h6 class="text-muted mb-3"><i class="bi bi-info-circle me-2"></i>About Credentials</h6>
                <ul class="small text-muted mb-0">
                    <li class="mb-2">
                        <strong>Daily phrases</strong> rotate each day of the week for forward secrecy
                    </li>
                    <li class="mb-2">
                        <strong>PIN</strong> is static and adds another factor both parties must know
                    </li>
                    <li class="mb-2">
                        <strong>RSA key</strong> adds asymmetric cryptography for additional security
                    </li>
                    <li class="mb-0">
                        You need <strong>at least one</strong> of PIN or RSA key (or both)
                    </li>
                </ul>
            </div>
        </div>
        {% endif %}
    </div>
</div>

<style>
.pin-container {
    background: linear-gradient(145deg, #1e1e2e 0%, #2d2d44 100%);
    border: 1px solid #ffc107;
    border-radius: 16px;
    padding: 1.5rem 2rem;
    box-shadow: 0 4px 20px rgba(0, 0, 0, 0.3), 0 0 40px rgba(255, 193, 7, 0.1);
}

.pin-digits-row {
    display: flex;
    justify-content: center;
    gap: 0.5rem;
}

.pin-digit-box {
    display: inline-flex;
    align-items: center;
    justify-content: center;
    width: 3rem;
    height: 3.5rem;
    background: rgba(0, 0, 0, 0.4);
    border: 1px solid rgba(255, 193, 7, 0.3);
    border-radius: 8px;
    font-family: 'Consolas', 'Monaco', monospace;
    font-size: 1.75rem;
    font-weight: bold;
    color: #ffc107;
    text-shadow: 0 0 10px rgba(255, 193, 7, 0.5);
    transition: filter 0.3s ease, transform 0.2s ease;
}

.pin-digit-box:hover {
    transform: translateY(-2px);
    border-color: rgba(255, 193, 7, 0.6);
}

.pin-digits-row.blurred .pin-digit-box {
    filter: blur(8px);
    user-select: none;
}

.pin-buttons .btn {
    min-width: 80px;
}

/* Responsive */
@media (max-width: 576px) {
    .pin-container {
        padding: 1rem 1.25rem;
    }
    
    .pin-digit-box {
        width: 2.25rem;
        height: 2.75rem;
        font-size: 1.25rem;
    }
    
    .pin-digits-row {
        gap: 0.35rem;
    }
}
</style>
{% endblock %}

{% block scripts %}
<script>
// Words range slider
const wordsRange = document.getElementById('wordsRange');
const wordsValue = document.getElementById('wordsValue');

if (wordsRange) {
    wordsRange.addEventListener('input', function() {
        const bits = this.value * 11;
        wordsValue.textContent = `${this.value} words (~${bits} bits)`;
    });
}

// Toggle PIN/RSA options
const usePinCheck = document.getElementById('usePinCheck');
const useRsaCheck = document.getElementById('useRsaCheck');
const pinOptions = document.getElementById('pinOptions');
const rsaOptions = document.getElementById('rsaOptions');

if (usePinCheck) {
    usePinCheck.addEventListener('change', function() {
        pinOptions.classList.toggle('d-none', !this.checked);
    });
}

if (useRsaCheck) {
    useRsaCheck.addEventListener('change', function() {
        rsaOptions.classList.toggle('d-none', !this.checked);
    });
}

// PIN visibility toggle
let pinHidden = false;
function togglePinVisibility() {
    const pinDigits = document.getElementById('pinDigits');
    const icon = document.getElementById('pinToggleIcon');
    const text = document.getElementById('pinToggleText');
    
    pinHidden = !pinHidden;
    
    if (pinHidden) {
        pinDigits.classList.add('blurred');
        icon.className = 'bi bi-eye';
        text.textContent = 'Show';
    } else {
        pinDigits.classList.remove('blurred');
        icon.className = 'bi bi-eye-slash';
        text.textContent = 'Hide';
    }
}

// Copy PIN
function copyPin() {
    const pin = '{{ pin|default("", true) }}';
    const icon = document.getElementById('pinCopyIcon');
    const text = document.getElementById('pinCopyText');
    
    navigator.clipboard.writeText(pin).then(() => {
        icon.className = 'bi bi-check';
        text.textContent = 'Copied!';
        setTimeout(() => {
            icon.className = 'bi bi-clipboard';
            text.textContent = 'Copy';
        }, 2000);
    });
}

// Toggle all phrases visibility
let phrasesHidden = false;
function toggleAllPhrases() {
    phrasesHidden = !phrasesHidden;
    document.querySelectorAll('.phrase-display').forEach(el => {
        el.style.filter = phrasesHidden ? 'blur(8px)' : 'none';
    });
}

// Print QR code
function printQrCode() {
    const qrImg = document.getElementById('qrCodeImage');
    if (!qrImg) return;
    
    const printWindow = window.open('', '_blank');
    printWindow.document.write(`
        <!DOCTYPE html>
        <html>
        <head>
            <title>Stegasoo RSA Key QR Code</title>
            <style>
                body { 
                    display: flex; 
                    flex-direction: column;
                    align-items: center; 
                    justify-content: center; 
                    min-height: 100vh;
                    margin: 0;
                    font-family: sans-serif;
                }
                img { max-width: 400px; }
                .warning {
                    margin-top: 20px;
                    padding: 10px;
                    border: 2px solid #ff9800;
                    background: #fff3e0;
                    max-width: 400px;
                    text-align: center;
                    font-size: 12px;
                }
            </style>
        </head>
        <body>
            <h2>Stegasoo RSA Private Key</h2>
            <img src="${qrImg.src}" alt="RSA Key QR Code">
            <div class="warning">
                <strong>⚠️ SECURITY WARNING</strong><br>
                This QR code contains your unencrypted RSA private key.<br>
                Store securely and destroy after use.
            </div>
            <script>window.onload = function() { window.print(); }<\/script>
        </body>
        </html>
    `);
    printWindow.document.close();
}
</script>
{% endblock %}