- page_title "Account"
- header_title page_title, profile_account_path

- if current_user.ldap_user?
  .alert.alert-info
    Some options are unavailable for LDAP accounts

.account-page.prepend-top-default
  .panel.panel-default.update-token
    .panel-heading
      Reset Private token
    .panel-body
      = form_for @user, url: reset_private_token_profile_path, method: :put do |f|
        .data
          %p
            Your private token is used to access application resources without authentication.
            %br
            It can be used for atom feeds or the API.
            %span.cred
              Keep it secret!

          %p.cgray
            - if current_user.private_token
              = text_field_tag "token", current_user.private_token, class: "form-control"
            - else
              %span You don`t have one yet. Click generate to fix it.

        .form-actions
          - if current_user.private_token
            = f.submit 'Reset private token', data: { confirm: "Are you sure?" }, class: "btn btn-default"
          - else
            = f.submit 'Generate', class: "btn btn-default"

  .panel.panel-default
    .panel-heading
      Two-factor Authentication
    .panel-body
      - if current_user.two_factor_enabled?
        .pull-right
          = link_to 'Disable Two-factor Authentication', profile_two_factor_auth_path, method: :delete, class: 'btn btn-close btn-sm',
              data: { confirm: 'Are you sure?' }
        %p.text-success
          %strong
            Two-factor Authentication is enabled
        %p
          If you lose your recovery codes you can
          %strong
            = succeed ',' do
              = link_to 'generate new ones', codes_profile_two_factor_auth_path, method: :post, data: { confirm: 'Are you sure?' }
          invalidating all previous codes.

      - else
        %p
          Increase your account's security by enabling two-factor authentication (2FA).
        %p
          Each time you log in you’ll be required to provide your username and
          password as usual, plus a randomly-generated code from your phone.

        .form-actions
          = link_to 'Enable Two-factor Authentication', new_profile_two_factor_auth_path, class: 'btn btn-success'

  - if button_based_providers.any?
    .panel.panel-default
      .panel-heading
        Connected Accounts
      .panel-body
        .oauth-buttons.append-bottom-10
          %p Click on icon to activate signin with one of the following services
          - button_based_providers.each do |provider|
            .btn-group
              = link_to provider_image_tag(provider), user_omniauth_authorize_path(provider), method: :post, class: "btn btn-lg #{'active' if auth_active?(provider)}", "data-no-turbolink" => "true"

              - if auth_active?(provider)
                = link_to unlink_profile_account_path(provider: provider), method: :delete, class: 'btn btn-lg' do
                  = icon('close')

  - if current_user.can_change_username?
    .panel.panel-warning.update-username
      .panel-heading
        Change Username
      .panel-body
        = form_for @user, url: update_username_profile_path,  method: :put, remote: true do |f|
          %p
            Changing your username will change path to all personal projects!
          %div
            .input-group
              .input-group-addon
                = "#{root_url}u/"
              = f.text_field :username, required: true, class: 'form-control'
             
          .loading-gif.hide
            %p
              = icon('spinner spin')
              Saving new username
          .form-actions
            = f.submit 'Save username', class: "btn btn-warning"

  - if signup_enabled?
    .panel.panel-danger.remove-account
      .panel-heading
        Remove account
      .panel-body
        - if @user.can_be_removed?
          %p Deleting an account has the following effects:
          %ul
            %li All user content like authored issues, snippets, comments will be removed
            - rp = current_user.personal_projects.count
            - unless rp.zero?
              %li #{pluralize rp, 'personal project'} will be removed and cannot be restored
          .form-actions
            = link_to 'Delete account', user_registration_path, data: { confirm: "REMOVE #{current_user.name}? Are you sure?" }, method: :delete, class: "btn btn-remove"
        - else
          - if @user.solo_owned_groups.present?
            %p
              Your account is currently an owner in these groups:
              %strong #{@user.solo_owned_groups.map(&:name).join(', ')}
            %p
              You must transfer ownership or delete these groups before you can delete your account.