{% extends "xeolux_securitykit/base.html" %}
{% block title %}Routes protégées{% endblock %}

{% block content %}
<div class="page-header">
  <div style="display: flex; justify-content: space-between; align-items: flex-start;">
    <div>
      <h1>Routes protégées</h1>
      <p>Définissez les routes soumises à des règles de sécurité.</p>
    </div>
    <a href="{% url 'xeolux_securitykit:route_add' %}" class="btn btn-primary">+ Ajouter une route</a>
  </div>
</div>

{% for route in routes %}
<div class="card">
  <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 12px;">
    <div>
      <code style="font-size: 14px; color: var(--accent);">{{ route.path }}</code>
      <span class="badge badge-info" style="margin-left: 8px;">{{ route.match_type }}</span>
      {% if not route.enabled %}<span class="badge badge-warn" style="margin-left: 4px;">Inactif</span>{% endif %}
      {% if route.description %}<span style="font-size: 12px; color: var(--text-muted); margin-left: 8px;">{{ route.description }}</span>{% endif %}
    </div>
    <div style="display: flex; gap: 8px;">
      <a href="{% url 'xeolux_securitykit:rule_add' route.pk %}" class="btn btn-outline btn-sm">+ Règle</a>
      <a href="{% url 'xeolux_securitykit:route_edit' route.pk %}" class="btn btn-outline btn-sm">Modifier</a>
      <form method="post" action="{% url 'xeolux_securitykit:route_delete' route.pk %}" style="display:inline">
        {% csrf_token %}
        <button type="submit" class="btn btn-danger btn-sm" onclick="return confirm('Supprimer cette route ?')">Supprimer</button>
      </form>
    </div>
  </div>

  {% if route.rules.all %}
  <table>
    <thead><tr><th>Action</th><th>Conditions</th><th>Priorité</th><th>Statut</th><th></th></tr></thead>
    <tbody>
      {% for rule in route.rules.all %}
      <tr>
        <td><span class="badge {% if rule.action == 'fake_404' %}badge-danger{% elif rule.action == 'allow' %}badge-ok{% else %}badge-warn{% endif %}">{{ rule.action }}</span></td>
        <td><code style="font-size: 11px;">{{ rule.conditions|default:"—" }}</code></td>
        <td>{{ rule.priority }}</td>
        <td>{% if rule.enabled %}<span class="badge badge-ok">Actif</span>{% else %}<span class="badge badge-warn">Inactif</span>{% endif %}</td>
        <td>
          <a href="{% url 'xeolux_securitykit:rule_edit' rule.pk %}" class="btn btn-outline btn-sm">Modifier</a>
          <form method="post" action="{% url 'xeolux_securitykit:rule_delete' rule.pk %}" style="display:inline">
            {% csrf_token %}
            <button type="submit" class="btn btn-danger btn-sm">✕</button>
          </form>
        </td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
  {% else %}
  <p style="font-size: 12px; color: var(--text-muted);">Aucune règle définie — <a href="{% url 'xeolux_securitykit:rule_add' route.pk %}">Ajouter une règle</a></p>
  {% endif %}
</div>
{% empty %}
<div class="card">
  <p style="color: var(--text-muted);">Aucune route protégée. <a href="{% url 'xeolux_securitykit:route_add' %}">Ajouter la première route</a>.</p>
</div>
{% endfor %}
{% endblock %}