{{define "cli_approve"}}{{template "top" .}}
<h1>Approve a terminal</h1>
{{if .Error}}<p class="error">{{.Error}}</p>{{end}}
{{if .Request}}
<p class="lede">A command line asked to sign in as you.</p>
<div class="banner">
  <p><strong>Code</strong> <code>{{.Request.UserCode}}</code></p>
  <p><strong>Terminal</strong> {{emptyOrDash .Request.Label}}
     <span class="small">— this name was supplied by the machine asking. Trust
     it only if it matches the machine in front of you.</span></p>
  <p><strong>From</strong> {{emptyOrDash .Request.RemoteAddr}}</p>
  <p class="small">Expires {{fmtTime .Request.ExpiresAt}}</p>
</div>
<p>Approving gives that terminal your identity — every account you belong to —
for {{.Days}} days. You can revoke it at any time from
<a href="/settings">command-line access</a>, and a note goes to your
Keymail inbox the moment it is issued.</p>
<form class="signin" method="post" action="/auth/cli/approve">
  <input type="hidden" name="csrf" value="{{.CSRF}}">
  <input type="hidden" name="code" value="{{.Request.UserCode}}">
  <button type="submit" name="action" value="approve">Approve</button>
  <button class="linkish" type="submit" name="action" value="deny">That wasn't me</button>
</form>
{{else}}
<p class="lede">Type the code your terminal printed.</p>
{{if .LinkCode}}
<div class="banner">
  <p>The link you followed carries the code <code>{{.LinkCode}}</code>.</p>
  <p class="small"><strong>Check it against your own screen before typing it.</strong>
  If you did not just run <code>carlos auth login</code> yourself, or that is not
  the code your terminal printed, close this page: somebody else is asking to
  become you, and typing their code is what would let them.</p>
</div>
{{end}}
<form class="signin" method="post" action="/auth/cli/approve">
  <input type="text" name="code" value="" placeholder="XXXX-XXXX" autocomplete="off" spellcheck="false">
  <input type="hidden" name="csrf" value="{{.CSRF}}">
  <button type="submit" name="action" value="continue">Continue</button>
</form>
<p class="small">Codes look like <code>WXYZ-4823</code> and last ten minutes.
Nothing here is ever approved by following a link — the code has to be typed,
which means it has to be on a screen in front of you.</p>
{{end}}
{{template "bottom" .}}{{end}}

{{define "cli_decided"}}{{template "top" .}}
<h1>{{.Title}}</h1>
{{if eq .Title "Approved"}}
<p>Your terminal has the credential — it should say so within a couple of
seconds. It expires in {{.Days}} days, and a note is on its way to your Keymail
inbox.</p>
<p><a href="/settings">See every terminal signed in as you</a>, and
revoke any you don't recognise.</p>
{{else}}
<p>Nothing was issued. That login attempt is dead and cannot be approved
afterwards; if it wasn't yours, whoever started it got nothing.</p>
{{end}}
<p class="small"><a href="/">Back to the console</a></p>
{{template "bottom" .}}{{end}}