{% extends 'base.html' %}
{% block title %}Platform Settings — Avighna{% endblock %}

{% block content %}

<div class="d-flex justify-content-between align-items-center mb-4">
  <div>
    <h4 style="font-weight:700;margin:0;">OVSE / Platform Settings</h4>
    <p style="color:#888;font-size:.87rem;margin:0;">Single registered OVSE for the whole platform — every client's callback URL is derived from this.</p>
  </div>
  <a href="{% url 'super_admin_dashboard' %}" class="btn btn-outline-secondary btn-sm">← Back</a>
</div>

{% if messages %}
  {% for m in messages %}
    <div class="alert {% if m.tags == 'error' %}alert-danger{% else %}alert-success{% endif %}">{{ m }}</div>
  {% endfor %}
{% endif %}

<div class="card mb-4" style="border-radius:12px;">
  <div class="card-body">
    <form method="post">
      {% csrf_token %}
      <div class="form-group mb-3">
        <label class="form-label"><b>OVSE Base URL</b></label>
        <input
          class="form-control"
          type="url"
          name="ovse_base_url"
          value="{{ settings_obj.ovse_base_url }}"
          placeholder="https://www.as4.in"
          required
          style="font-family:monospace;"
        >
        <small style="color:#888;font-size:.8rem;">
          Must be the domain registered with UIDAI as your OVSE. Every client's callback URL
          is <code>&lt;this&gt;/verify-response/</code> — the exact same fixed URL for every
          client (UIDAI only knows one callback endpoint; we tell clients apart internally using
          the TxnID from each QR session). Changing this will <b>regenerate the callback URL for
          every client</b> — make sure the new domain is registered with UIDAI before saving, or
          verification will break platform-wide.
        </small>
      </div>

      <hr class="my-4">

      <h6 style="font-weight:700;margin-bottom:6px;">Shared UIDAI Credentials</h6>
      <p style="color:#888;font-size:.82rem;margin-bottom:16px;">
        Used for every client's verification requests — clients no longer need their own AC/SA code or keys.
      </p>

      <div class="form-group mb-3">
        <label class="form-label">AC Code (UIDAI Client ID)</label>
        <input class="form-control" type="text" name="ac_code" value="{{ settings_obj.ac_code }}" placeholder="e.g. 1a2f">
      </div>

      <div class="form-group mb-3">
        <label class="form-label">SA Code (Sub-AUA Code)</label>
        <input class="form-control" type="text" name="sa_code" value="{{ settings_obj.sa_code }}" placeholder="e.g. 00b1">
      </div>

      <div class="form-group mb-3">
        <label class="form-label">RSA Private Key</label>
        <textarea class="form-control" name="private_key" rows="6" style="font-family:monospace;font-size:.8rem;"
          placeholder="-----BEGIN RSA PRIVATE KEY-----&#10;...&#10;-----END RSA PRIVATE KEY-----">{{ settings_obj.private_key }}</textarea>
        <small style="color:#d62828;font-size:.78rem;">🔒 Keep this confidential. Never share with anyone.</small>
      </div>

      <div class="form-group mb-4">
        <label class="form-label">RSA Public Key (optional)</label>
        <textarea class="form-control" name="public_key" rows="4" style="font-family:monospace;font-size:.8rem;"
          placeholder="-----BEGIN PUBLIC KEY-----&#10;...&#10;-----END PUBLIC KEY-----">{{ settings_obj.public_key }}</textarea>
      </div>

      <hr class="my-4">

      <h6 style="font-weight:700;margin-bottom:6px;">Payment Gateway</h6>
      <p style="color:#888;font-size:.82rem;margin-bottom:16px;">
        Turn this off to stop showing the Cashfree pay button to clients — they'll only be able to
        activate a plan using a coupon code, with a message to contact you directly.
      </p>

      <div class="form-group mb-3" style="display:flex;align-items:center;gap:10px;">
        <input type="checkbox" id="paymentToggle" name="payment_gateway_enabled"
               {% if settings_obj.payment_gateway_enabled %}checked{% endif %}
               style="width:20px;height:20px;">
        <label for="paymentToggle" style="margin:0;font-weight:600;">Payment gateway enabled</label>
      </div>

      <div class="form-group mb-4">
        <label class="form-label">Support / Activation Contact Email</label>
        <input class="form-control" type="email" name="support_email" value="{{ settings_obj.support_email }}" placeholder="support@avighnasolution.in">
        <small style="color:#888;font-size:.8rem;">
          Shown to clients on the payment page when the gateway is disabled ("Contact administrator at ... for activation").
        </small>
      </div>

      <button type="submit" class="btn btn-primary">Save Platform Settings</button>
    </form>
  </div>
</div>

<div class="card" style="border-radius:12px;">
  <div class="card-body">
    <h6 style="font-weight:700;margin-bottom:14px;">Client-wise Callback URLs ({{ orgs|length }})</h6>
    <div style="max-height:420px;overflow-y:auto;">
      <table class="table table-sm">
        <thead>
          <tr>
            <th>Client</th>
            <th>Slug</th>
            <th>Callback URL</th>
          </tr>
        </thead>
        <tbody>
          {% for org in orgs %}
          <tr>
            <td>{{ org.name }}</td>
            <td><code>{{ org.slug }}</code></td>
            <td><code style="font-size:.8rem;">{{ org.callback_url }}</code></td>
          </tr>
          {% empty %}
          <tr><td colspan="3" style="color:#888;">No clients yet.</td></tr>
          {% endfor %}
        </tbody>
      </table>
    </div>
  </div>
</div>

{% endblock %}