{{define "footleft"}}{{.Account}} / keys{{end}}
{{define "body" -}}
{{template "topbar" .}}
<div class="bar">
  <div class="secondary"><a href="/{{.Account}}">{{.Account}}</a> / <span class="here">keys</span></div>
  <div class="muted small">the only state the server owns</div>
</div>
{{if .Error}}<div class="row"><div class="danger small">{{.Error}}</div></div>{{end}}
{{if .NewToken}}
<div class="row tall">
  <div class="label">{{.NewTokenLabel}}</div>
  <pre class="box">{{.NewToken}}</pre>
  <div class="hint">this is the only time it is shown. only its hash is kept.</div>
</div>
{{end}}

<div class="row"><div class="muted small">ssh keys</div></div>
{{range .Keys}}
<div class="row">
  <div class="between">
    <span>{{.Algo}} {{.Fingerprint}}</span>
    <span class="muted small">added {{.Added}}</span>
  </div>
  <div class="muted small">{{if .Comment}}{{.Comment}} &middot; {{end}}{{.LastUsed}} &middot;
    <form method="post" action="/keys/delete" class="inline">
      <input type="hidden" name="id" value="{{.ID}}">
      <button class="linkbtn" type="submit">revoke</button>
    </form>
  </div>
</div>
{{end}}
<div class="row">
  <form method="post" action="/keys">
    <div class="field">
      <div class="label">public key</div>
      <textarea class="text short" name="pubkey" spellcheck="false"
        placeholder="ssh-ed25519 AAAA..."></textarea>
      <div class="hint">cat ~/.ssh/id_ed25519.pub</div>
    </div>
    <button class="btn" type="submit">new key</button>
  </form>
</div>

<div class="row"><div class="muted small">signing keys</div></div>
{{range .GPGKeys}}
<div class="row">
  <div class="between">
    <span>{{.Fingerprint}}</span>
    <span class="muted small">added {{.Added}}</span>
  </div>
  <div class="muted small">{{if .UID}}{{.UID}} &middot; {{end}}
    <form method="post" action="/gpgkeys/delete" class="inline">
      <input type="hidden" name="id" value="{{.ID}}">
      <button class="linkbtn" type="submit">revoke</button>
    </form>
  </div>
</div>
{{end}}
<div class="row">
  <form method="post" action="/gpgkeys">
    <div class="field">
      <div class="label">signing key</div>
      <textarea class="text short" name="armor" spellcheck="false"
        placeholder="-----BEGIN PGP PUBLIC KEY BLOCK-----"></textarea>
      <div class="hint">gpg --armor --export you@example.com</div>
    </div>
    <button class="btn" type="submit">new signing key</button>
  </form>
</div>

<div class="row"><div class="muted small">tokens</div></div>
{{range .Tokens}}
<div class="row">
  <div class="between">
    <span>{{.Name}}</span>
    <span class="muted small">created {{.Created}}</span>
  </div>
  <div class="muted small">{{.Detail}} &middot;
    <form method="post" action="/tokens/delete" class="inline">
      <input type="hidden" name="id" value="{{.ID}}">
      <button class="linkbtn" type="submit">revoke</button>
    </form>
  </div>
</div>
{{end}}
<div class="row">
  <form method="post" action="/tokens" class="inline">
    <input type="hidden" name="kind" value="git">
    <button class="btn" type="submit">new git token</button>
  </form>
  &nbsp;
  <form method="post" action="/tokens" class="inline">
    <input type="hidden" name="kind" value="feed">
    <button class="btn" type="submit">new feed token</button>
  </form>
</div>
<div class="row"><div class="muted small">a token is shown once, inside the command that uses it. only its
  hash is kept, so it cannot be shown again. lost one? revoke it and make another.</div></div>
<div class="row"><div class="muted small">a key signs you in and pushes. a signing key is only ever
  read, and names you on a commit you signed. a git token clones and pushes over https. a runner
  token attaches one machine to one repository, and is made on that repository's runners page. a
  feed token reads one feed and can write nothing.</div></div>
<div class="row"><div class="muted small">everything else is in .barerepo/config, in the repository it
  belongs to.</div></div>
{{- end}}