{% extends "admin_base.html" %}
{% set active = 'users' %}
{% block admin_content %}
<h1 class="page-title">用户管理</h1>
{% if error %}<div class="alert alert-error">{{ error }}</div>{% endif %}

<div class="panel">
  <h2>新增账号</h2>
  <form class="form-inline" method="post" action="/admin/users/add">
    <label>用户名<input type="text" name="username" required maxlength="64" placeholder="登录用户名"></label>
    <label>初始密码<input type="text" name="password" required minlength="6" placeholder="至少 6 位"></label>
    <label>角色
      <select name="role">
        <option value="uploader">投稿员（仅可提交软件/漏洞补丁）</option>
        <option value="admin">管理员（全部权限）</option>
      </select>
    </label>
    <button class="btn btn-primary" type="submit">创建账号</button>
  </form>
  <p class="muted small" style="margin-top:8px">投稿员登录后只能提交软件与漏洞补丁、查看自己的投稿审核状态，需管理员审核通过后才发布到前台。</p>
</div>

<div class="panel">
  <table class="table">
    <thead><tr><th>用户名</th><th>角色</th><th>状态</th><th>注册审核</th><th class="num">投稿(软件/漏洞)</th><th>创建时间</th><th class="num">操作</th></tr></thead>
    <tbody>
      {% for u in rows %}
      <tr>
        <td><strong>{{ u['username'] }}</strong>{% if u['id'] == admin['id'] %} <span class="tag-pill">当前登录</span>{% endif %}</td>
        <td>{% if u['role'] == 'admin' %}<span class="badge">管理员</span>{% else %}<span class="tag-pill">投稿员</span>{% endif %}</td>
        <td>{% if u['disabled'] %}<span class="status-off">已停用</span>{% else %}<span class="status-on">正常</span>{% endif %}</td>
        <td>
          {% if u['role'] == 'admin' %}<span class="muted">-</span>
          {% elif u['approval_status'] == 'pending' %}<span class="status-pending">待审核</span>{% elif u['approval_status'] == 'rejected' %}<span class="status-off">已驳回</span>
          {% else %}<span class="status-on">已通过</span>{% endif %}
        </td>
        <td class="num muted">{{ u['sw_count'] }} / {{ u['vuln_count'] }}</td>
        <td class="muted">{{ u['created_at'][:10] }}</td>
        <td class="num nowrap">
          <form method="post" action="/admin/users/{{ u['id'] }}/password" class="inline" onsubmit="return confirm('确定重置该账号密码？其登录状态将失效。')">
            <input type="hidden" name="new_password" value="">
            <button class="btn btn-sm btn-ghost reset-pwd" type="button" data-uid="{{ u['id'] }}" data-name="{{ u['username'] }}">重置密码</button>
          </form>
          {% if u['id'] != admin['id'] %}
          <form method="post" action="/admin/users/{{ u['id'] }}/toggle" class="inline">
            <button class="btn btn-sm {% if u['disabled'] %}btn-primary{% else %}btn-ghost{% endif %}" type="submit">{% if u['disabled'] %}启用{% else %}停用{% endif %}</button>
          </form>
          <form method="post" action="/admin/users/{{ u['id'] }}/delete" class="inline" onsubmit="return confirm('确定删除账号【{{ u['username'] }}】？其历史投稿会保留。')">
            <button class="btn btn-sm btn-danger" type="submit">删除</button>
          </form>
          {% endif %}
        </td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
</div>
<script>
// 重置密码：弹窗输入后填入隐藏域再提交
document.querySelectorAll(".reset-pwd").forEach(function (btn) {
  btn.addEventListener("click", function () {
    var pwd = prompt("为【" + btn.getAttribute("data-name") + "】设置新密码（至少 6 位）：");
    if (pwd === null) return;
    if (pwd.length < 6) { alert("密码至少 6 位"); return; }
    btn.parentElement.querySelector('input[name="new_password"]').value = pwd;
    btn.parentElement.submit();
  });
});
</script>
{% endblock %}