@extends('layouts.app')
@section('title', 'RADIUS / AAA')

@section('content')
    <div class="page-head">
        <div><h1>RADIUS &amp; AAA</h1>
            <p>FreeRADIUS SQL backend, live sessions and disconnect management.</p></div>
        <div class="page-actions">
            <form method="POST" action="{{ route('radius.sync-accounting') }}">@csrf
                <button type="submit" class="btn secondary">Sync accounting</button>
            </form>
            <form method="POST" action="{{ route('radius.resync-all') }}">@csrf
                <button type="submit" class="btn secondary">Re-push all users</button>
            </form>
            <button type="button" class="btn" data-modal="coa-modal">Send CoA / DM</button>
        </div>
    </div>

    <div class="grid grid-6 mb-2">
        @include('components.kpi', ['label' => 'Online now', 'value' => number_format($counts['online']), 'variant' => 'good',
            'href' => route('radius.sessions', ['online' => 1])])
        @include('components.kpi', ['label' => 'RADIUS users', 'value' => number_format($counts['users']), 'variant' => 'info',
            'href' => '#users'])
        @include('components.kpi', ['label' => 'Auth today', 'value' => number_format($counts['auths_today']),
            'delta' => $counts['rejects_today'].' rejected', 'href' => route('radius.auth-log')])
        @include('components.kpi', ['label' => 'Success rate', 'value' => percent($counts['success_rate']), 'variant' => 'good', 'href' => '#'])
        @include('components.kpi', ['label' => 'Data today', 'value' => human_bytes($counts['bytes_today']), 'variant' => 'info',
            'href' => route('radius.usage')])
        @include('components.kpi', ['label' => 'NAS devices', 'value' => $counts['nas'], 'href' => '#nas'])
    </div>

    <div class="grid grid-2">
        <div class="card">
            <div class="card-head"><h3>Concurrent sessions — 24h</h3></div>
            <div class="card-body">
                @include('components.chart', [
                    'series' => collect($sessionTrend)->map(fn ($p) => [
                        'label' => \Carbon\Carbon::parse($p['hour'])->format('H:00'),
                        'value' => $p['sessions'],
                    ])->all(),
                    'type' => 'line', 'format' => 'number', 'height' => 200,
                ])
            </div>
        </div>

        <div class="card">
            <div class="card-head"><h3>Authentication attempts — 24h</h3></div>
            <div class="card-body">
                @include('components.chart', [
                    'series' => collect($authTrend)->map(fn ($p) => [
                        'label' => \Carbon\Carbon::parse($p['hour'])->format('H:00'),
                        'value' => $p['total'],
                    ])->all(),
                    'type' => 'bar', 'format' => 'number', 'height' => 200,
                ])
            </div>
        </div>
    </div>

    <div class="card" id="sessions">
        <div class="card-head">
            <h3>Live sessions</h3>
            <div class="btn-group">
                <a href="{{ route('radius.sessions') }}" class="btn ghost sm">All sessions &rarr;</a>
                <a href="{{ route('radius.usage') }}" class="btn ghost sm">Usage &rarr;</a>
            </div>
        </div>
        <div class="card-body tight">
            <div class="table-wrap">
                <table class="data">
                    <thead>
                    <tr>
                        <th>Subscriber</th><th>Service</th><th>Framed IP</th><th>NAS</th>
                        <th class="num">Uptime</th><th class="num">Down</th><th class="num">Up</th><th></th>
                    </tr>
                    </thead>
                    <tbody>
                    @forelse ($sessions as $session)
                        <tr>
                            <td><span class="pulse"></span> <span class="mono strong">{{ $session->username }}</span></td>
                            <td class="small">
                                @if ($session->service)
                                    <a href="{{ route('services.show', $session->service) }}">{{ $session->service->service_number }}</a>
                                    <div class="tiny muted">{{ $session->service->customer->display_name }}</div>
                                @else
                                    <span class="muted">—</span>
                                @endif
                            </td>
                            <td class="mono tiny">{{ $session->framed_ip ?: '—' }}</td>
                            <td class="mono tiny">{{ $session->nas_ip }}</td>
                            <td class="num">{{ $session->duration_label }}</td>
                            <td class="num">{{ human_bytes($session->input_octets) }}</td>
                            <td class="num">{{ human_bytes($session->output_octets) }}</td>
                            <td class="right">
                                <form method="POST" action="{{ route('radius.send') }}">
                                    @csrf
                                    <input type="hidden" name="username" value="{{ $session->username }}">
                                    <input type="hidden" name="type" value="DM">
                                    <button type="submit" class="btn xs danger" data-confirm="Drop the session for {{ $session->username }}?">Disconnect</button>
                                </form>
                            </td>
                        </tr>
                    @empty
                        <tr><td colspan="8">
                            @include('components.empty-state', ['icon' => '&#128268;', 'title' => 'No live sessions',
                                'message' => 'Sessions appear once the NAS sends RADIUS accounting packets.'])
                        </td></tr>
                    @endforelse
                    </tbody>
                </table>
            </div>
        </div>
    </div>

    <div class="grid grid-2">
        <div class="card" id="nas">
            <div class="card-head"><h3>NAS clients</h3>
                <span class="sub">FreeRADIUS <code>nas</code> table</span></div>
            <div class="card-body tight">
                <div class="table-wrap">
                    <table class="data">
                        <thead><tr><th>Short name</th><th>IP</th><th>Type</th><th>Port</th><th>Description</th></tr></thead>
                        <tbody>
                        @forelse ($nasList as $nas)
                            <tr>
                                <td class="mono strong">{{ $nas->shortname }}</td>
                                <td class="mono tiny">{{ $nas->nasname }}</td>
                                <td class="small">{{ $nas->type }}</td>
                                <td class="num">{{ $nas->ports ?? '—' }}</td>
                                <td class="small">{{ $nas->description }}</td>
                            </tr>
                        @empty
                            <tr><td colspan="5">@include('components.empty-state', ['icon' => '&#128225;', 'title' => 'No NAS clients registered'])</td></tr>
                        @endforelse
                        </tbody>
                    </table>
                </div>
            </div>
        </div>

        <div class="card" id="users">
            <div class="card-head"><h3>RADIUS users</h3>
                <span class="sub">Sync state to FreeRADIUS</span></div>
            <div class="card-body tight">
                <div class="table-wrap">
                    <table class="data">
                        <thead><tr><th>Username</th><th>Group</th><th>Status</th><th>Last sync</th></tr></thead>
                        <tbody>
                        @forelse ($users as $user)
                            <tr>
                                <td class="mono">
                                    <a href="#" data-copy="{{ $user->username }}">{{ $user->username }}</a>
                                    @if ($user->service)
                                        <div class="tiny muted">{{ $user->service->service_number }}</div>
                                    @endif
                                </td>
                                <td class="mono tiny">{{ $user->groupname ?: '—' }}</td>
                                <td><span class="badge {{ status_color($user->status) }}">{{ $user->status }}</span></td>
                                <td>
                                    <span class="badge {{ $user->last_sync_status === 'synced' ? 'success' : 'warning' }}">{{ $user->last_sync_status }}</span>
                                    <div class="tiny muted">{{ $user->last_synced_at?->diffForHumans() ?? 'never' }}</div>
                                </td>
                            </tr>
                        @empty
                            <tr><td colspan="4">@include('components.empty-state', ['icon' => '&#128274;', 'title' => 'No RADIUS users'])</td></tr>
                        @endforelse
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>

    <div class="modal-backdrop" id="coa-modal">
        <div class="modal">
            <form method="POST" action="{{ route('radius.send') }}">
                @csrf
                <div class="modal-head"><h3>Send CoA or Disconnect-Message</h3>
                    <button type="button" class="modal-close" data-modal-close>&times;</button></div>
                <div class="modal-body">
                    <div class="form-grid cols-1">
                        <div class="field">
                            <label>Message type <span class="req">*</span></label>
                            <select name="type" required>
                                <option value="DM">Disconnect-Message (drop the session)</option>
                                <option value="CoA">Change-of-Authorization (re-shape while online)</option>
                            </select>
                        </div>
                        <div class="field">
                            <label>Username <span class="req">*</span></label>
                            <input type="text" name="username" class="mono" required placeholder="subscriber@realm">
                        </div>
                        <div class="field">
                            <label>NAS IP</label>
                            <select name="nas_ip">
                                <option value="">Auto-detect from the live session</option>
                                @foreach ($nasList as $nas)
                                    <option value="{{ $nas->nasname }}">{{ $nas->shortname }} ({{ $nas->nasname }})</option>
                                @endforeach
                            </select>
                        </div>
                        <div class="field">
                            <label>Purpose</label>
                            <select name="purpose">
                                @foreach (['manual','speed_change','suspension','password_reset','quota_exceeded','maintenance'] as $p)
                                    <option value="{{ $p }}">{{ title_case_words($p) }}</option>
                                @endforeach
                            </select>
                        </div>
                    </div>
                    <p class="small muted mt-1">RFC 3576 packets are sent to port {{ config('nowills.radius.coa_port') }}.
                        Every attempt is logged with the NAS response code.</p>
                </div>
                <div class="modal-foot">
                    <button type="button" class="btn secondary" data-modal-close>Cancel</button>
                    <button type="submit" class="btn">Send packet</button>
                </div>
            </form>
        </div>
    </div>
@endsection