{#if adminConfig !== null}

{$i18n.t('User Access')}

{$i18n.t('Default User Role')}

{$i18n.t('Default Group')}

{$i18n.t('Enable New Sign Ups')}

{$i18n.t('Enable API Keys')}

{#if adminConfig?.ENABLE_API_KEYS}

{$i18n.t('API Key Endpoint Restrictions')}

{#if adminConfig?.ENABLE_API_KEYS_ENDPOINT_RESTRICTIONS}

{$i18n.t('Allowed Endpoints')}

{$i18n.t('To learn more about available endpoints, visit our documentation.')}

{/if} {/if}

{$i18n.t('JWT Expiration')}

{$i18n.t('Valid time units:')} {$i18n.t("'s', 'm', 'h', 'd', 'w' or '-1' for no expiration.")}

{#if adminConfig.JWT_EXPIRES_IN === '-1'}

{$i18n.t('Warning')}: {$i18n.t('No expiration can pose security risks.')}

{/if}

{$i18n.t('Pending Accounts')}

{$i18n.t('Show Admin Details in Account Pending Overlay')}

{#if adminConfig.SHOW_ADMIN_DETAILS}

{$i18n.t('Admin Contact Email')}

{/if}

{$i18n.t('Pending User Overlay Title')}

</div>

<div class="mb-2.5">
					<div class=" self-center text-xs font-normal mb-2">
						{$i18n.t('Pending User Overlay Content')}
					</div>
					<Textarea
						placeholder={$i18n.t(
							'Enter content for the pending user info overlay. Leave empty for default.'
						)}
						bind:value={adminConfig.PENDING_USER_OVERLAY_CONTENT}
					/>
				</div>
			</div>
		{/if}

{#if ENABLE_LDAP}
					<div class="flex flex-col gap-1">
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Label')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									required
									placeholder={$i18n.t('Enter server label')}
									bind:value={LDAP_SERVER.label}
								/>
							</div>
							<div class="w-full"></div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Host')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									required
									placeholder={$i18n.t('Enter server host')}
									bind:value={LDAP_SERVER.host}
								/>
							</div>
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Port')}
								</div>
								<Tooltip
									placement="top-start"
									content={$i18n.t('Default to 389 or 636 if TLS is enabled')}
									className="w-full"
								>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										type="number"
										placeholder={$i18n.t('Enter server port')}
										bind:value={LDAP_SERVER.port}
									/>
								</Tooltip>
							</div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Application DN')}
								</div>
								<Tooltip
									content={$i18n.t('The Application Account DN you bind with for search')}
									placement="top-start"
								>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										placeholder={$i18n.t('Enter Application DN')}
										bind:value={LDAP_SERVER.app_dn}
									/>
								</Tooltip>
							</div>
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Application DN Password')}
								</div>
								<SensitiveInput
									placeholder={$i18n.t('Enter Application DN Password')}
									required={false}
									bind:value={LDAP_SERVER.app_dn_password}
								/>
							</div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Attribute for Mail')}
								</div>
								<Tooltip
									content={$i18n.t(
										'The LDAP attribute that maps to the mail that users use to sign in.'
									)}
									placement="top-start"
								>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										required
										placeholder={$i18n.t('Example: mail')}
										bind:value={LDAP_SERVER.attribute_for_mail}
									/>
								</Tooltip>
							</div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Attribute for Username')}
								</div>
								<Tooltip
									content={$i18n.t(
										'The LDAP attribute that maps to the username that users use to sign in.'
									)}
									placement="top-start"
								>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										required
										placeholder={$i18n.t('Example: sAMAccountName or uid or userPrincipalName')}
										bind:value={LDAP_SERVER.attribute_for_username}
									/>
								</Tooltip>
							</div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Search Base')}
								</div>
								<Tooltip content={$i18n.t('The base to search for users')} placement="top-start">
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										required
										placeholder={$i18n.t('Example: ou=users,dc=foo,dc=example')}
										bind:value={LDAP_SERVER.search_base}
									/>
								</Tooltip>
							</div>
						</div>
						<div class="flex w-full gap-2">
							<div class="w-full">
								<div class=" self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Search Filters')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder={$i18n.t('Example: (&(objectClass=inetOrgPerson)(uid=%s))')}
									bind:value={LDAP_SERVER.search_filters}
								/>
							</div>
						</div>
						<div class="text-xs text-gray-400 dark:text-gray-500">
							<a
								class=" text-gray-300 font-normal underline"
								href="https://ldap.com/ldap-filters/"
								target="_blank"
							>
								{$i18n.t('Click here for filter guides.')}
							</a>
						</div>
						<div>
							<div class="flex justify-between items-center text-sm">
								<div class="  font-normal">{$i18n.t('TLS')}</div>

<div class="mt-1">
									<Switch bind:state={LDAP_SERVER.use_tls} />
								</div>
							</div>
							{#if LDAP_SERVER.use_tls}
								<div class="flex w-full gap-2">
									<div class="w-full">
										<div class=" self-center text-xs font-normal min-w-fit mb-1 mt-1">
											{$i18n.t('Certificate Path')}
										</div>
										<input
											class="w-full bg-transparent outline-hidden py-0.5"
											placeholder={$i18n.t('Enter certificate path')}
											bind:value={LDAP_SERVER.certificate_path}
										/>
									</div>
								</div>
								<div class="flex justify-between items-center text-xs">
									<div class=" font-normal">{$i18n.t('Validate certificate')}</div>

<div class="mt-1">
										<Switch bind:state={LDAP_SERVER.validate_cert} />
									</div>
								</div>
								<div class="flex w-full gap-2">
									<div class="w-full">
										<div class=" self-center text-xs font-normal min-w-fit mb-1">
											{$i18n.t('Ciphers')}
										</div>
										<Tooltip content={$i18n.t('Default to ALL')} placement="top-start">
											<input
												class="w-full bg-transparent outline-hidden py-0.5"
												placeholder={$i18n.t('Example: ALL')}
												bind:value={LDAP_SERVER.ciphers}
											/>
										</Tooltip>
									</div>
									<div class="w-full"></div>
								</div>
							{/if}
						</div>
					</div>
				{/if}
			</div>
		</div>
		{#if oauthConfig}
			<div class="mb-3">
				<div class="mt-0.5 mb-2.5 text-xs text-gray-400 dark:text-gray-600">
					{$i18n.t('OAuth / OIDC')}
				</div>

<div class="pr-1.5">
					<div class="space-y-3">
						<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Provider Name')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="SSO"
									bind:value={oauthConfig.OAUTH_PROVIDER_NAME}
								/>
							</div>
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Provider URL')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="https://accounts.google.com/.well-known/openid-configuration"
									bind:value={oauthConfig.OPENID_PROVIDER_URL}
								/>
							</div>
						</div>

<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Client ID')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder={$i18n.t('Enter Client ID')}
									bind:value={oauthConfig.OAUTH_CLIENT_ID}
								/>
							</div>
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Client Secret')}
								</div>
								<SensitiveInput
									placeholder={$i18n.t('Enter Client Secret')}
									required={false}
									outerClassName="flex flex-1 bg-transparent"
									inputClassName="w-full text-sm py-0.5 bg-transparent"
									bind:value={oauthConfig.OAUTH_CLIENT_SECRET}
								/>
							</div>
						</div>

<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Redirect URI')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder={$i18n.t('Enter Redirect URI')}
									bind:value={oauthConfig.OPENID_REDIRECT_URI}
								/>
							</div>
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Scopes')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="openid email profile"
									bind:value={oauthConfig.OAUTH_SCOPES}
								/>
							</div>
						</div>

<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Email Claim')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="email"
									bind:value={oauthConfig.OAUTH_EMAIL_CLAIM}
								/>
							</div>
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Username Claim')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="name"
									bind:value={oauthConfig.OAUTH_USERNAME_CLAIM}
								/>
							</div>
						</div>

<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Picture Claim')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="picture"
									bind:value={oauthConfig.OAUTH_PICTURE_CLAIM}
								/>
							</div>
							<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Sub Claim')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="sub"
									bind:value={oauthConfig.OAUTH_SUB_CLAIM}
								/>
							</div>
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Enable OAuth Signup')}
							</div>
							<Switch bind:state={oauthConfig.ENABLE_OAUTH_SIGNUP} />
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Merge Accounts by Email')}
							</div>
							<Switch bind:state={oauthConfig.OAUTH_MERGE_ACCOUNTS_BY_EMAIL} />
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Auto Redirect')}
							</div>
							<Switch bind:state={oauthConfig.OAUTH_AUTO_REDIRECT} />
						</div>

<div class="w-full">
							<div class="self-center text-xs font-normal min-w-fit mb-1">
								{$i18n.t('Allowed Domains')}
							</div>
							<input
								class="w-full bg-transparent outline-hidden py-0.5"
								placeholder="* (all domains)"
								bind:value={oauthConfig.OAUTH_ALLOWED_DOMAINS}
							/>
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Enable Role Mapping')}
							</div>
							<Switch bind:state={oauthConfig.ENABLE_OAUTH_ROLE_MANAGEMENT} />
						</div>

{#if oauthConfig.ENABLE_OAUTH_ROLE_MANAGEMENT}
							<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
								<div class="w-full">
									<div class="self-center text-xs font-normal min-w-fit mb-1">
										{$i18n.t('Roles Claim')}
									</div>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										placeholder="roles"
										bind:value={oauthConfig.OAUTH_ROLES_CLAIM}
									/>
								</div>
								<div class="w-full">
									<div class="self-center text-xs font-normal min-w-fit mb-1">
										{$i18n.t('Admin Roles')}
									</div>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										placeholder="admin"
										bind:value={oauthConfig.OAUTH_ADMIN_ROLES}
									/>
								</div>
							</div>

<div class="w-full">
								<div class="self-center text-xs font-normal min-w-fit mb-1">
									{$i18n.t('Allowed Roles')}
								</div>
								<input
									class="w-full bg-transparent outline-hidden py-0.5"
									placeholder="*"
									bind:value={oauthConfig.OAUTH_ALLOWED_ROLES}
								/>
							</div>
						{/if}

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Enable Group Mapping')}
							</div>
							<Switch bind:state={oauthConfig.ENABLE_OAUTH_GROUP_MANAGEMENT} />
						</div>

{#if oauthConfig.ENABLE_OAUTH_GROUP_MANAGEMENT}
							<div class="flex w-full justify-between pr-2">
								<div class="self-center text-xs font-normal">
									{$i18n.t('Auto-Create Groups')}
								</div>
								<Switch bind:state={oauthConfig.ENABLE_OAUTH_GROUP_CREATION} />
							</div>

<div class="grid grid-cols-1 sm:grid-cols-2 gap-2">
								<div class="w-full">
									<div class="self-center text-xs font-normal min-w-fit mb-1">
										{$i18n.t('Group Claim')}
									</div>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										placeholder="groups"
										bind:value={oauthConfig.OAUTH_GROUP_CLAIM}
									/>
								</div>
								<div class="w-full">
									<div class="self-center text-xs font-normal min-w-fit mb-1">
										{$i18n.t('Blocked Groups')}
									</div>
									<input
										class="w-full bg-transparent outline-hidden py-0.5"
										placeholder={$i18n.t('Comma-separated group names')}
										bind:value={oauthConfig.OAUTH_BLOCKED_GROUPS}
									/>
								</div>
							</div>
						{/if}

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Update Email')}
							</div>
							<Switch bind:state={oauthConfig.OAUTH_UPDATE_EMAIL_ON_LOGIN} />
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Update Name')}
							</div>
							<Switch bind:state={oauthConfig.OAUTH_UPDATE_NAME_ON_LOGIN} />
						</div>

<div class="flex w-full justify-between pr-2">
							<div class="self-center text-xs font-normal">
								{$i18n.t('Update Picture')}
							</div>
							<Switch bind:state={oauthConfig.OAUTH_UPDATE_PICTURE_ON_LOGIN} />
						</div>
					</div>
				</div>
			</div>
		{/if}
	</div>