@extends('layouts.app')
@section('title', 'Security · Settings')
@section('breadcrumb')
    <li class="breadcrumb-item"><a href="{{ route('settings.index') }}">Settings</a></li>
    <li class="breadcrumb-item active" aria-current="page">Security</li>
@endsection

@section('content')
    <x-layout.page-header title="Security" subtitle="Password policy, session and login protection." icon="shield-lock" />
    @include('pages.settings._tabs', ['active' => 'security'])

    <form method="POST" action="{{ route('settings.security.update') }}" class="settings-form">
        @csrf
        @method('PUT')

        <x-ui.card title="Password policy">
            <div class="row g-3">
                <div class="col-md-3">
                    <x-form.input name="password_min" type="number" min="8" max="64" label="Minimum length"
                        :value="$company->settingValue('security','password_min', config('decent.security.password_min', 8))" required />
                </div>
                <div class="col-md-3 d-flex align-items-end">
                    <x-form.checkbox name="require_uppercase" label="Require uppercase"
                        :checked="(bool) $company->settingValue('security','require_uppercase', true)" />
                </div>
                <div class="col-md-3 d-flex align-items-end">
                    <x-form.checkbox name="require_number" label="Require number"
                        :checked="(bool) $company->settingValue('security','require_number', true)" />
                </div>
                <div class="col-md-3 d-flex align-items-end">
                    <x-form.checkbox name="require_symbol" label="Require symbol"
                        :checked="(bool) $company->settingValue('security','require_symbol', true)" />
                </div>
                <div class="col-md-4">
                    <x-form.input name="password_expiry_days" type="number" min="0" max="365"
                        label="Password expiry (days, 0 = never)"
                        :value="$company->settingValue('security','password_expiry_days', 0)" />
                </div>
            </div>
        </x-ui.card>

        <x-ui.card title="Sessions & login protection">
            <div class="row g-3">
                <div class="col-md-3">
                    <x-form.input name="session_timeout_minutes" type="number" min="5" max="1440"
                        label="Idle session timeout (min)"
                        :value="$company->settingValue('security','session_timeout_minutes', 120)" />
                </div>
                <div class="col-md-3">
                    <x-form.input name="login_max_attempts" type="number" min="3" max="20"
                        label="Max failed attempts"
                        :value="$company->settingValue('security','login_max_attempts', config('decent.security.login_max_attempts', 5))" />
                </div>
                <div class="col-md-3">
                    <x-form.input name="lockout_minutes" type="number" min="1" max="1440"
                        label="Lockout duration (min)"
                        :value="$company->settingValue('security','lockout_minutes', config('decent.security.lockout_minutes', 15))" />
                </div>
                <div class="col-md-3 d-flex align-items-end">
                    <x-form.checkbox name="force_single_session" label="Only one session per user"
                        :checked="(bool) $company->settingValue('security','force_single_session', false)" />
                </div>
            </div>
        </x-ui.card>

        <x-layout.sticky-save label="Save security policy" :cancel-href="route('settings.index')" />
    </form>
@endsection