- page_title 'Two-Factor Authentication', 'Account'
- add_to_breadcrumbs("Two-Factor Authentication", profile_account_path)
- @content_class = "limit-container-width" unless fluid_layout

.js-two-factor-auth{ 'data-two-factor-skippable' => "#{two_factor_skippable?}", 'data-two_factor_skip_url' => skip_profile_two_factor_auth_path }
  .row.prepend-top-default
    .col-lg-4
      %h4.prepend-top-0
        Register Two-Factor Authenticator
      %p
        Use an one time password authenticator on your mobile device or computer to enable two-factor authentication (2FA).
    .col-lg-8
      - if current_user.two_factor_otp_enabled?
        %p
          You've already enabled two-factor authentication using one time password authenticators. In order to register a different device, you must first disable two-factor authentication.
        %p
          If you lose your recovery codes you can generate new ones, invalidating all previous codes.
        %div
          = link_to 'Disable two-factor authentication', profile_two_factor_auth_path,
                method: :delete,
                data: { confirm: "Are you sure? This will invalidate your registered applications and U2F devices." },
                class: 'btn btn-danger append-right-10'
          = form_tag codes_profile_two_factor_auth_path, {style: 'display: inline-block', method: :post} do |f|
            = submit_tag 'Regenerate recovery codes', class: 'btn'

      - else
        %p
          Install a soft token authenticator like <a href="https://freeotp.github.io/">FreeOTP</a>
          or Google Authenticator from your application repository and scan this QR code.
          More information is available in the #{link_to('documentation', help_page_path('user/profile/account/two_factor_authentication'))}.
        .row.append-bottom-10
          .col-md-4
            = raw @qr_code
          .col-md-8
            .account-well
              %p.prepend-top-0.append-bottom-0
                Can't scan the code?
              %p.prepend-top-0.append-bottom-0
                To add the entry manually, provide the following details to the application on your phone.
              %p.prepend-top-0.append-bottom-0
                Account:
                = @account_string
              %p.prepend-top-0.append-bottom-0
                Key:
                = current_user.otp_secret.scan(/.{4}/).join(' ')
              %p.two-factor-new-manual-content
                Time based: Yes
        = form_tag profile_two_factor_auth_path, method: :post do |f|
          - if @error
            .alert.alert-danger
              = @error
          .form-group
            = label_tag :pin_code, nil, class: "label-bold"
            = text_field_tag :pin_code, nil, class: "form-control", required: true
          .prepend-top-default
            = submit_tag 'Register with two-factor app', class: 'btn btn-success'

  %hr

  .row.prepend-top-default
    .col-lg-4
      %h4.prepend-top-0
        Register Universal Two-Factor (U2F) Device
      %p
        Use a hardware device to add the second factor of authentication.
      %p
        As U2F devices are only supported by a few browsers, we require that you set up a
        two-factor authentication app before a U2F device. That way you'll always be able to
        log in - even when you're using an unsupported browser.
    .col-lg-8
      - if @u2f_registration.errors.present?
        = form_errors(@u2f_registration)
      = render "u2f/register"

      %hr

      %h5 U2F Devices (#{@u2f_registrations.length})

      - if @u2f_registrations.present?
        .table-responsive
          %table.table.table-bordered.u2f-registrations
            %colgroup
              %col{ width: "50%" }
              %col{ width: "30%" }
              %col{ width: "20%" }
            %thead
              %tr
                %th Name
                %th Registered On
                %th
            %tbody
              - @u2f_registrations.each do |registration|
                %tr
                  %td= registration.name.presence || "<no name set>"
                  %td= registration.created_at.to_date.to_s(:medium)
                  %td= link_to "Delete", profile_u2f_registration_path(registration), method: :delete, class: "btn btn-danger float-right", data: { confirm: "Are you sure you want to delete this device? This action cannot be undone." }

      - else
        .settings-message.text-center
          You don't have any U2F devices registered yet.