<%= icon "shield-check" %>

<% if Current.user.otp_required? %>

Two-factor authentication is enabled

Your account is protected with an additional layer of security.

<% else %>

Two-factor authentication is disabled

Enable 2FA to add an extra layer of security to your account.

<% end %>

<% if Current.user.otp_required? %> <%= render DS::Button.new( text: t(".disable_mfa"), variant: "secondary", href: disable_mfa_path, method: :delete, confirm: CustomConfirm.new( title: t(".disable_mfa_confirm"), body: t(".disable_mfa_confirm"), btn_text: t(".disable_mfa"), destructive: true ) ) %> <% else %> <%= render DS::Link.new( text: t(".enable_mfa"), variant: "primary", href: new_mfa_path ) %> <% end %>

<% if @webauthn_credentials.any? %>

<% @webauthn_credentials.each do |credential| %>

<%= icon "fingerprint", class: "w-5 h-5 text-secondary" %>

<%= credential.nickname %>

<%= t(".webauthn_added", date: l(credential.created_at.to_date)) %> <% if credential.last_used_at.present? %> <%= t(".webauthn_last_used", time_ago: time_ago_in_words(credential.last_used_at)) %> <% end %>

<%= render DS::Button.new( text: t(".webauthn_remove"), variant: "outline_destructive", size: "sm", href: settings_webauthn_credential_path(credential), method: :delete, confirm: CustomConfirm.new( title: t(".webauthn_remove_confirm"), body: t(".webauthn_remove_confirm_body"), btn_text: t(".webauthn_remove"), destructive: true ) ) %>

<% end %>

<% else %>

<%= t(".webauthn_empty") %>

<% end %> <%= styled_form_with scope: :webauthn_credential, url: settings_webauthn_credentials_path, method: :post, class: "space-y-3", data: { controller: "webauthn-registration", action: "submit->webauthn-registration#register", webauthn_registration_options_url_value: options_settings_webauthn_credentials_path, webauthn_registration_create_url_value: settings_webauthn_credentials_path, webauthn_registration_unsupported_message_value: t(".webauthn_unsupported"), webauthn_registration_error_fallback_value: t("webauthn_credentials.failure") } do |form| %> <%= form.text_field :nickname, placeholder: t(".webauthn_name_placeholder"), label: t(".webauthn_name_label"), data: { webauthn_registration_target: "nickname" } %>

<%= render DS::Button.new( text: t(".webauthn_add"), variant: "secondary", icon: "fingerprint", type: "submit" ) %>

<% end %>

<% @oidc_identities.each do |identity| %>

<% icon_name = identity.provider_config&.dig(:icon).presence || "key" %> <%= icon icon_name, class: "w-5 h-5 text-secondary" %>

<%= identity.provider_config&.dig(:label) || identity.provider.titleize %>

<%= identity.info&.dig("email") || t(".sso_no_email") %>

<%= t(".sso_last_used") %>: <%= identity.last_authenticated_at&.to_fs(:short) || t(".sso_never") %>

<% if @oidc_identities.count > 1 || Current.user.password_digest.present? %> <%= render DS::Button.new( text: t(".sso_disconnect"), variant: "outline", size: "sm", href: settings_sso_identity_path(identity), method: :delete, confirm: CustomConfirm.new( title: t(".sso_confirm_title"), body: t(".sso_confirm_body", provider: identity.provider_config&.dig(:label) || identity.provider.titleize), btn_text: t(".sso_confirm_button"), destructive: true ) ) %> <% end %>

<% end %>