{#if adminConfig !== null} {#each groups as group} {/each} {#if adminConfig?.ENABLE_API_KEYS} {#if adminConfig?.ENABLE_API_KEYS_ENDPOINT_RESTRICTIONS} {$i18n.t('To learn more about available endpoints, visit our documentation.')} {/if} {/if} {#if adminConfig.JWT_EXPIRES_IN === '-1'} {$i18n.t('No expiration can pose security risks.')} {/if} {#if adminConfig.SHOW_ADMIN_DETAILS} {/if}

</AdminSettingField>

<AdminSettingField
					label={$i18n.t('Pending User Overlay Content')}
					description={$i18n.t('Custom message shown while an account waits for approval.')}
				>
					<Textarea
						className={textareaClass}
						placeholder={$i18n.t(
							'Enter content for the pending user info overlay. Leave empty for default.'
						)}
						bind:value={adminConfig.PENDING_USER_OVERLAY_CONTENT}
					/>
				</AdminSettingField>
			</AdminSettingSection>
		{/if}

{#if ENABLE_LDAP}
				<div class="grid grid-cols-1 gap-x-3 gap-y-2.5 sm:grid-cols-2">
					<AdminSettingField
						label={$i18n.t('Label')}
						description={$i18n.t('Display name for this LDAP connection.')}
					>
						<input
							class={inputClass}
							required
							placeholder={$i18n.t('Enter server label')}
							bind:value={LDAP_SERVER.label}
						/>
					</AdminSettingField>
				</div>

<AdminSettingField
					label={$i18n.t('Search Filters')}
					description={$i18n.t('LDAP filter used to match signing-in users.')}
				>
					<input
						class={inputClass}
						placeholder={$i18n.t('Example: (&(objectClass=inetOrgPerson)(uid=%s))')}
						bind:value={LDAP_SERVER.search_filters}
					/>
					<a
						class="mt-1 block text-[0.6875rem] text-gray-400 underline hover:text-gray-700 dark:text-gray-600 dark:hover:text-gray-300"
						href="https://ldap.com/ldap-filters/"
						target="_blank"
					>
						{$i18n.t('Click here for filter guides.')}
					</a>
				</AdminSettingField>

{#if LDAP_SERVER.use_tls}
					<AdminSettingField
						label={$i18n.t('Certificate Path')}
						description={$i18n.t('Certificate file used for TLS verification.')}
					>
						<input
							class={inputClass}
							placeholder={$i18n.t('Enter certificate path')}
							bind:value={LDAP_SERVER.certificate_path}
						/>
					</AdminSettingField>

<AdminSettingField
						label={$i18n.t('Ciphers')}
						description={$i18n.t('TLS cipher list for LDAP connections.')}
					>
						<Tooltip content={$i18n.t('Default to ALL')} placement="top-start">
							<input
								class={inputClass}
								placeholder={$i18n.t('Example: ALL')}
								bind:value={LDAP_SERVER.ciphers}
							/>
						</Tooltip>
					</AdminSettingField>
				{/if}

{#if LDAP_SERVER.enable_group_management}
					<AdminSettingRow
						label={$i18n.t('Auto-Create Groups')}
						description={$i18n.t('Create missing groups from LDAP groups.')}
						let:labelId
					>
						<Switch bind:state={LDAP_SERVER.enable_group_creation} ariaLabelledbyId={labelId} />
					</AdminSettingRow>

{#if oauthConfig}
			<AdminSettingSection title={$i18n.t('OAuth / OIDC')}>
				<AdminSettingRow
					label={$i18n.t('OAuth / OIDC')}
					description={$i18n.t('Allow users to authenticate with an OAuth / OIDC provider.')}
					let:labelId
				>
					<Switch bind:state={oauthConfig.ENABLE_OAUTH} ariaLabelledbyId={labelId} />
				</AdminSettingRow>

{#if oauthConfig.ENABLE_OAUTH}
					<div class="grid grid-cols-1 gap-x-3 gap-y-2.5 sm:grid-cols-2">
						<AdminSettingField
							label={$i18n.t('Provider Name')}
							description={$i18n.t('Display name shown for the OAuth provider.')}
						>
							<input
								class={inputClass}
								placeholder="SSO"
								bind:value={oauthConfig.OAUTH_PROVIDER_NAME}
							/>
						</AdminSettingField>

{#if oauthConfig.ENABLE_OAUTH_ROLE_MANAGEMENT}
						<div class="grid grid-cols-1 gap-x-3 gap-y-2.5 sm:grid-cols-2">
							<AdminSettingField
								label={$i18n.t('Roles Claim')}
								description={$i18n.t('Claim containing provider roles.')}
							>
								<input
									class={inputClass}
									placeholder="roles"
									bind:value={oauthConfig.OAUTH_ROLES_CLAIM}
								/>
							</AdminSettingField>

<AdminSettingField
							label={$i18n.t('Allowed Roles')}
							description={$i18n.t('Provider roles allowed to sign in.')}
						>
							<input
								class={inputClass}
								placeholder="*"
								bind:value={oauthConfig.OAUTH_ALLOWED_ROLES}
							/>
						</AdminSettingField>
					{/if}

{#if oauthConfig.ENABLE_OAUTH_GROUP_MANAGEMENT}
						<AdminSettingRow
							label={$i18n.t('Auto-Create Groups')}
							description={$i18n.t('Create missing groups from OAuth claims.')}
							let:labelId
						>
							<Switch
								bind:state={oauthConfig.ENABLE_OAUTH_GROUP_CREATION}
								ariaLabelledbyId={labelId}
							/>
						</AdminSettingRow>

<AdminSettingField
								label={$i18n.t('Blocked Groups')}
								description={$i18n.t('Provider groups blocked from signing in.')}
							>
								<input
									class={inputClass}
									placeholder={$i18n.t('Comma-separated group names')}
									bind:value={oauthConfig.OAUTH_BLOCKED_GROUPS}
								/>
							</AdminSettingField>
						</div>
					{/if}

{$i18n.t('Authentication')}