{{--
    Paramètres attendus :
    - $partner       : App\Models\Partner
    - $subject       : App\Models\User  (utilisateur ou manager)
    - $routePrefix   : string  ('partners.users' | 'partners.managers')
    - $subjectKey    : string  ('user' | 'manager')  — clé de route
    - $abilityPrefix : string  ('partner_users' | 'partner_managers')
    - $subjectLabel  : string  ('l\'utilisateur' | 'le manager')
--}}

@can($abilityPrefix . '.reset_2fa', $subject)
<div class="modal fade" id="resetTwoFactorModal" tabindex="-1" aria-labelledby="resetTwoFactorModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <form method="POST" action="{{ route($routePrefix . '.reset_2fa', ['partner' => $partner, $subjectKey => $subject]) }}">
            @csrf
            <input type="hidden" name="redirect_to" value="{{ url()->current() }}?tab=security">

            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="resetTwoFactorModalLabel">Réinitialiser la 2FA</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Fermer"></button>
                </div>
                <div class="modal-body">
                    <p><strong>Impact :</strong> {{ $subjectLabel }} {{ $subject->email }} devra reconfigurer sa 2FA à sa prochaine connexion. Un email de notification lui sera envoyé.</p>
                    <div class="mb-3">
                        <label for="reset_reason" class="form-label">Raison (obligatoire, min. 10 caractères)</label>
                        <textarea name="reason" id="reset_reason" class="form-control" rows="3" required minlength="10" maxlength="500"></textarea>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
                    <button type="submit" class="btn btn-danger">Confirmer la réinitialisation</button>
                </div>
            </div>
        </form>
    </div>
</div>
@endcan

@can($abilityPrefix . '.revoke_trusted_devices', $subject)
<div class="modal fade" id="revokeTrustedDevicesModal" tabindex="-1" aria-labelledby="revokeTrustedDevicesModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <form method="POST" action="{{ route($routePrefix . '.revoke_trusted_devices', ['partner' => $partner, $subjectKey => $subject]) }}">
            @csrf
            <input type="hidden" name="redirect_to" value="{{ url()->current() }}?tab=security">

            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="revokeTrustedDevicesModalLabel">Révoquer les appareils de confiance</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Fermer"></button>
                </div>
                <div class="modal-body">
                    <p><strong>Impact :</strong> tous les appareils de confiance actifs seront révoqués. Le sujet devra repasser par la 2FA à sa prochaine connexion sur ces appareils. Aucun email envoyé.</p>
                    <div class="mb-3">
                        <label for="revoke_devices_reason" class="form-label">Raison (obligatoire, min. 10 caractères)</label>
                        <textarea name="reason" id="revoke_devices_reason" class="form-control" rows="3" required minlength="10" maxlength="500"></textarea>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
                    <button type="submit" class="btn btn-outline-secondary">Confirmer la révocation</button>
                </div>
            </div>
        </form>
    </div>
</div>
@endcan

@can($abilityPrefix . '.revoke_sessions', $subject)
<div class="modal fade" id="revokeSessionsModal" tabindex="-1" aria-labelledby="revokeSessionsModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <form method="POST" action="{{ route($routePrefix . '.revoke_sessions', ['partner' => $partner, $subjectKey => $subject]) }}">
            @csrf
            <input type="hidden" name="redirect_to" value="{{ url()->current() }}?tab=security">

            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="revokeSessionsModalLabel">Déconnecter toutes les sessions</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Fermer"></button>
                </div>
                <div class="modal-body">
                    <p><strong>Impact :</strong> toutes les sessions web actives seront détruites. Le sujet sera déconnecté immédiatement de tous les navigateurs. Aucun email envoyé.</p>
                    <div class="mb-3">
                        <label for="revoke_sessions_reason" class="form-label">Raison (obligatoire, min. 10 caractères)</label>
                        <textarea name="reason" id="revoke_sessions_reason" class="form-control" rows="3" required minlength="10" maxlength="500"></textarea>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
                    <button type="submit" class="btn btn-warning">Confirmer la déconnexion</button>
                </div>
            </div>
        </form>
    </div>
</div>
@endcan

@can($abilityPrefix . '.unlock_account', $subject)
<div class="modal fade" id="unlockAccountModal" tabindex="-1" aria-labelledby="unlockAccountModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <form method="POST" action="{{ route($routePrefix . '.unlock_account', ['partner' => $partner, $subjectKey => $subject]) }}">
            @csrf
            <input type="hidden" name="redirect_to" value="{{ url()->current() }}?tab=security">

            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="unlockAccountModalLabel">
                        {{ __('security.modal.unlock_account.title', ['email' => $subject->email]) }}
                    </h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Fermer"></button>
                </div>
                <div class="modal-body">
                    <p>{{ __('security.modal.unlock_account.impact') }}</p>
                    <div class="mb-3">
                        <label for="reason_unlock" class="form-label">Raison (obligatoire, min. 10 caractères)</label>
                        <textarea name="reason" id="reason_unlock" class="form-control" rows="3" minlength="10" maxlength="500" required></textarea>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
                    <button type="submit" class="btn btn-warning">{{ __('security.modal.unlock_account.confirm') }}</button>
                </div>
            </div>
        </form>
    </div>
</div>
@endcan

@can($abilityPrefix . '.unlock_2fa', $subject)
<div class="modal fade" id="unlockTwoFactorLockoutModal" tabindex="-1" aria-labelledby="unlockTwoFactorLockoutModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <form method="POST" action="{{ route($routePrefix . '.unlock_2fa_lockout', ['partner' => $partner, $subjectKey => $subject]) }}">
            @csrf
            <input type="hidden" name="redirect_to" value="{{ url()->current() }}?tab=security">

            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="unlockTwoFactorLockoutModalLabel">
                        {{ __('security.modal.unlock_2fa_lockout.title', ['email' => $subject->email]) }}
                    </h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Fermer"></button>
                </div>
                <div class="modal-body">
                    <p>{{ __('security.modal.unlock_2fa_lockout.impact') }}</p>
                    <div class="mb-3">
                        <label for="reason_unlock_2fa" class="form-label">Raison (obligatoire, min. 10 caractères)</label>
                        <textarea name="reason" id="reason_unlock_2fa" class="form-control" rows="3" minlength="10" maxlength="500" required></textarea>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
                    <button type="submit" class="btn btn-warning">{{ __('security.modal.unlock_2fa_lockout.confirm') }}</button>
                </div>
            </div>
        </form>
    </div>
</div>
@endcan