@extends('admin.layouts.app')
@section('title','Election OTP Settings')
@section('page-title','Election OTP Settings')
@section('page-subtitle','Election voting OTP only — not for password reset or general notifications')
@section('elections-active','active')
@section('content')

@if(session('success'))<div class="alert alert-success">{{ session('success') }}</div>@endif
@if(session('error'))<div class="alert alert-danger">{{ session('error') }}</div>@endif
@if($errors->any())<div class="alert alert-danger"><ul class="mb-0">@foreach($errors->all() as $e)<li>{{ $e }}</li>@endforeach</ul></div>@endif

@php
    $email = $channels['email'];
    $sms = $channels['sms'];
    $whatsapp = $channels['whatsapp'];
@endphp

<div class="alert alert-secondary py-2 small mb-4">
    These SMS and WhatsApp settings apply <strong>only to election OTP codes</strong> when voters click Request OTP.
    They do not send password reset links or messages from Admin → Notifications.
    Provider credentials here are independent of system mail settings.
</div>

<div class="cardx p-4 mb-4">
    <form method="POST" action="{{ route('admin.elections.otp-settings.update') }}">
        @csrf @method('PUT')

        <h6 class="mb-3">Security limits</h6>
        <div class="row g-3 mb-4">
            <div class="col-md-2">
                <label class="form-label">OTP length</label>
                <input type="number" name="code_length" class="form-control" min="4" max="8" value="{{ old('code_length', $settings->code_length) }}" required>
            </div>
            <div class="col-md-2">
                <label class="form-label">Expiry (minutes)</label>
                <input type="number" name="expiry_minutes" class="form-control" min="5" max="120" value="{{ old('expiry_minutes', $settings->expiry_minutes) }}" required>
            </div>
            <div class="col-md-2">
                <label class="form-label">Max attempts</label>
                <input type="number" name="max_attempts" class="form-control" min="3" max="10" value="{{ old('max_attempts', $settings->max_attempts) }}" required>
            </div>
            <div class="col-md-3">
                <label class="form-label">Resend cooldown (seconds)</label>
                <input type="number" name="resend_cooldown_seconds" class="form-control" min="30" max="600" value="{{ old('resend_cooldown_seconds', $settings->resend_cooldown_seconds) }}" required>
            </div>
            <div class="col-md-3">
                <label class="form-label">Lockout after max attempts (minutes)</label>
                <input type="number" name="lockout_minutes" class="form-control" min="5" max="1440" value="{{ old('lockout_minutes', $settings->lockout_minutes) }}" required>
            </div>
        </div>

        <ul class="nav nav-tabs mb-3" role="tablist">
            <li class="nav-item"><button class="nav-link active" data-bs-toggle="tab" data-bs-target="#tab-email" type="button">Email</button></li>
            <li class="nav-item"><button class="nav-link" data-bs-toggle="tab" data-bs-target="#tab-sms" type="button">SMS</button></li>
            <li class="nav-item"><button class="nav-link" data-bs-toggle="tab" data-bs-target="#tab-whatsapp" type="button">WhatsApp</button></li>
        </ul>

        <div class="tab-content">
            <div class="tab-pane fade show active" id="tab-email">
                <div class="form-check mb-3">
                    <input type="checkbox" name="email_enabled" value="1" class="form-check-input" id="email_enabled" @checked(old('email_enabled', $email->is_enabled))>
                    <label class="form-check-label" for="email_enabled">Enable Email OTP (default channel)</label>
                </div>
                <div class="row g-3">
                    <div class="col-md-4">
                        <label class="form-label">From name (optional)</label>
                        <input name="email_from_name" class="form-control" value="{{ old('email_from_name', $email->configValue('from_name')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">From address (optional)</label>
                        <input type="email" name="email_from_address" class="form-control" value="{{ old('email_from_address', $email->configValue('from_address')) }}">
                        <div class="form-text">Leave blank to use system mail settings.</div>
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Subject</label>
                        <input name="email_subject" class="form-control" value="{{ old('email_subject', $email->configValue('subject', 'Your Election OTP Code')) }}">
                    </div>
                    <div class="col-12">
                        <label class="form-label">Message template</label>
                        <textarea name="email_message_template" class="form-control" rows="4">{{ old('email_message_template', $email->configValue('message_template')) }}</textarea>
                        <div class="form-text">Placeholders: {otp}, {expiry}, {election}, {name}</div>
                    </div>
                </div>
            </div>

            <div class="tab-pane fade" id="tab-sms">
                <div class="form-check mb-3">
                    <input type="checkbox" name="sms_enabled" value="1" class="form-check-input" id="sms_enabled" @checked(old('sms_enabled', $sms->is_enabled))>
                    <label class="form-check-label" for="sms_enabled">Enable SMS OTP</label>
                </div>
                <div class="row g-3">
                    <div class="col-md-4">
                        <label class="form-label">Provider</label>
                        <select name="sms_provider" class="form-select">
                            @foreach(['termii','twilio','africas_talking','custom_http'] as $p)
                                <option value="{{ $p }}" @selected(old('sms_provider', $sms->configValue('provider', 'termii')) === $p)>{{ str_replace('_', ' ', ucfirst($p)) }}</option>
                            @endforeach
                        </select>
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">API key</label>
                        <input type="password" name="sms_api_key" class="form-control" placeholder="Leave blank to keep existing">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Sender ID / From</label>
                        <input name="sms_sender_id" class="form-control" value="{{ old('sms_sender_id', $sms->configValue('sender_id')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Twilio Account SID</label>
                        <input name="sms_account_sid" class="form-control" value="{{ old('sms_account_sid', $sms->configValue('account_sid')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Twilio Auth Token</label>
                        <input type="password" name="sms_auth_token" class="form-control" placeholder="Leave blank to keep existing">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Africa's Talking username</label>
                        <input name="sms_username" class="form-control" value="{{ old('sms_username', $sms->configValue('username')) }}">
                    </div>
                    <div class="col-md-6">
                        <label class="form-label">Custom HTTP endpoint URL</label>
                        <input name="sms_api_url" class="form-control" value="{{ old('sms_api_url', $sms->configValue('api_url')) }}">
                    </div>
                    <div class="col-12">
                        <label class="form-label">Message template</label>
                        <textarea name="sms_message_template" class="form-control" rows="3">{{ old('sms_message_template', $sms->configValue('message_template')) }}</textarea>
                    </div>
                </div>
            </div>

            <div class="tab-pane fade" id="tab-whatsapp">
                <div class="form-check mb-3">
                    <input type="checkbox" name="whatsapp_enabled" value="1" class="form-check-input" id="whatsapp_enabled" @checked(old('whatsapp_enabled', $whatsapp->is_enabled))>
                    <label class="form-check-label" for="whatsapp_enabled">Enable WhatsApp OTP</label>
                </div>
                <div class="row g-3">
                    <div class="col-md-4">
                        <label class="form-label">Provider</label>
                        <select name="whatsapp_provider" class="form-select">
                            @foreach(['meta','twilio','termii','custom_http'] as $p)
                                <option value="{{ $p }}" @selected(old('whatsapp_provider', $whatsapp->configValue('provider', 'meta')) === $p)>{{ str_replace('_', ' ', ucfirst($p)) }}</option>
                            @endforeach
                        </select>
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">API token</label>
                        <input type="password" name="whatsapp_api_token" class="form-control" placeholder="Leave blank to keep existing">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Meta phone number ID</label>
                        <input name="whatsapp_phone_number_id" class="form-control" value="{{ old('whatsapp_phone_number_id', $whatsapp->configValue('phone_number_id')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Meta business account ID</label>
                        <input name="whatsapp_business_account_id" class="form-control" value="{{ old('whatsapp_business_account_id', $whatsapp->configValue('business_account_id')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Sender number (Twilio/Termii)</label>
                        <input name="whatsapp_sender_number" class="form-control" value="{{ old('whatsapp_sender_number', $whatsapp->configValue('sender_number')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Twilio Account SID</label>
                        <input name="whatsapp_account_sid" class="form-control" value="{{ old('whatsapp_account_sid', $whatsapp->configValue('account_sid')) }}">
                    </div>
                    <div class="col-md-4">
                        <label class="form-label">Twilio Auth Token</label>
                        <input type="password" name="whatsapp_auth_token" class="form-control" placeholder="Leave blank to keep existing">
                    </div>
                    <div class="col-md-6">
                        <label class="form-label">Custom HTTP endpoint URL</label>
                        <input name="whatsapp_api_url" class="form-control" value="{{ old('whatsapp_api_url', $whatsapp->configValue('api_url')) }}">
                    </div>
                    <div class="col-12">
                        <label class="form-label">Message template</label>
                        <textarea name="whatsapp_message_template" class="form-control" rows="3">{{ old('whatsapp_message_template', $whatsapp->configValue('message_template')) }}</textarea>
                    </div>
                </div>
            </div>
        </div>

        <div class="alert alert-info mt-4 mb-0">
            <strong>Safeguards:</strong> OTP codes are stored hashed, expire automatically, invalidate after voting, and lock out after too many failed attempts. Resend is rate-limited per voter and per user account.
        </div>

        <div class="mt-4">
            <button type="submit" class="btn btn-green">Save OTP Settings</button>
            <a href="{{ route('admin.elections.index') }}" class="btn btn-outline-secondary ms-2">Back to Elections</a>
        </div>
    </form>
</div>

@endsection