@extends('layouts.app')
@section('title','Account security')
@section('content')
<x-page-header eyebrow="YOUR ACCOUNT" title="Account security" description="MFA is optional for everyone. Choose the protection that suits your account."/>
<section class="panel narrow"><div class="panel-heading"><h2>Multi-factor authentication</h2><span class="badge {{ auth()->user()->two_factor_confirmed_at?'green':'gray' }}">{{ auth()->user()->two_factor_confirmed_at?'Enabled':'Optional · not enabled' }}</span></div><div class="panel-body">
@if(!auth()->user()->two_factor_secret)
<p>Sign in with your email and password, or add an authenticator for extra protection. MFA is optional for employees, managers, company administrators and Super Admin.</p><form method="post" action="/user/two-factor-authentication">@csrf<button class="button primary">Set up authenticator</button></form><a class="button secondary" href="/home">Continue to workspace <x-icon name="arrow"/></a>
@elseif(!auth()->user()->two_factor_confirmed_at)
<p>Scan this QR code in your authenticator, then enter the six digit code to confirm. MFA becomes active only after confirmation.</p><div class="qr-code">{!! auth()->user()->twoFactorQrCodeSvg() !!}</div><details><summary>Manual setup key</summary><code>{{ decrypt(auth()->user()->two_factor_secret) }}</code></details><form method="post" action="/user/confirmed-two-factor-authentication">@csrf<label>Authenticator code<input name="code" inputmode="numeric" autocomplete="one-time-code" pattern="[0-9]{6}" required></label><button class="button primary">Confirm authenticator</button></form><a class="button secondary" href="/home">Continue to workspace <x-icon name="arrow"/></a>
@else
<p>Your account is protected. Keep recovery codes in a safe place. Each code can be used once if you lose your authenticator.</p><details><summary>Show recovery codes</summary><div class="recovery-codes">@foreach(auth()->user()->recoveryCodes() as $code)<code>{{ $code }}</code>@endforeach</div></details><form method="post" action="/user/two-factor-recovery-codes">@csrf<button class="button secondary">Regenerate recovery codes</button></form><a class="button primary" href="/home">Continue to workspace <x-icon name="arrow"/></a>
@endif
@if(auth()->user()->two_factor_secret)<details class="danger-zone"><summary>{{ auth()->user()->two_factor_confirmed_at?'Turn off MFA':'Cancel authenticator setup' }}</summary><p>After turning off MFA, you can sign in with your email and password. You can enable it again at any time. Password confirmation protects this change.</p><form method="post" action="/user/two-factor-authentication">@csrf @method('DELETE')<button class="button secondary">{{ auth()->user()->two_factor_confirmed_at?'Disable MFA':'Cancel setup' }}</button></form></details>@endif
</div></section>
@endsection