@extends('layout.app')

@section('content')
    <div class="card">
        <div class="card-header d-flex align-items-center flex-wrap">
            <h5 class="mb-0 mr-auto">Expired Without Exception</h5>

            @if ($summary['total'] > 0)
                <form method="POST" action="{{ route('expired-without-exception.sync-all') }}" class="d-inline mr-2"
                    onsubmit="return confirm('Re-sync RADIUS for every client currently listed ({{ number_format($summary['total']) }})?\n\nThis rewrites their radcheck rows to match the expire rules.');">
                    @csrf
                    <input type="hidden" name="scope" value="{{ $scope }}">
                    <input type="hidden" name="clients_status" value="{{ $status }}">
                    <button type="submit" class="btn btn-sm btn-primary">
                        <i class="fa fa-sync-alt"></i> Sync All Listed
                    </button>
                </form>
            @endif

            <span class="badge badge-dark">Total: {{ number_format($summary['total']) }}</span>
        </div>

        <div class="card-body">
            <p class="text-muted" style="font-size:13px;">
                Clients past <strong>expire date + payment deadline</strong> (at their manager's
                expire time) whose POP carries no expiry exception — shown with their
                <code>radcheck</code> rows.
                <strong>Still Allowed</strong> means <code>Cleartext-Password</code> is still
                <code>:=</code> and no <code>Expiration</code> row exists, so RADIUS would let
                them log in even though they are expired.
            </p>

            <div class="mb-3">
                <a href="{{ route('expired-without-exception', ['scope' => 'still_allowed']) }}"
                    class="btn btn-sm {{ $scope === 'still_allowed' ? 'btn-danger' : 'btn-outline-danger' }}">
                    Still Allowed
                </a>
                <a href="{{ route('expired-without-exception', ['scope' => 'all']) }}"
                    class="btn btn-sm {{ $scope === 'all' ? 'btn-dark' : 'btn-outline-dark' }}">
                    All Expired
                </a>

                <span class="ml-3"></span>

                <a href="{{ route('expired-without-exception', ['scope' => $scope]) }}"
                    class="btn btn-sm {{ $status ? 'btn-outline-secondary' : 'btn-secondary' }}">
                    Any status ({{ number_format($summary['total']) }})
                </a>
                @foreach ($summary['rows'] as $rowStatus => $count)
                    <a href="{{ route('expired-without-exception', ['scope' => $scope, 'clients_status' => $rowStatus]) }}"
                        class="btn btn-sm {{ $status === $rowStatus ? 'btn-secondary' : 'btn-outline-secondary' }}">
                        {{ ucfirst($rowStatus ?: 'unknown') }} ({{ number_format($count) }})
                    </a>
                @endforeach
            </div>

            <div class="table-responsive">
                <table class="table table-bordered table-condensed table-striped" id="tableId">
                    <thead class="bg-dark">
                        <tr>
                            <th>#</th>
                            <th>User Name</th>
                            <th>Expire Date</th>
                            <th>Payment Deadline</th>
                            <th>Cut-off</th>
                            <th>Pop</th>
                            <th>Pop Expiry Exception</th>
                            <th>Status</th>
                            <th style="min-width:320px;">Radcheck Table</th>
                            <th>Action</th>
                        </tr>
                    </thead>
                    <tbody class="bg-white">
                        @forelse ($clients as $key => $client)
                            @php
                                $rows = $radchecks[$client->userid] ?? collect();
                                $password = $rows->firstWhere('attribute', 'Cleartext-Password');
                                $hasExpiration = $rows->contains('attribute', 'Expiration');
                                // The condition the report is looking for.
                                $stillAllowed = $password && $password->op === ':=' && !$hasExpiration;
                            @endphp
                            <tr class="{{ $stillAllowed ? 'table-danger' : '' }}">
                                <td>{{ $clients->firstItem() + $key }}</td>
                                <td class="text-nowrap">
                                    <strong>{{ $client->userid }}</strong>
                                    @if ($stillAllowed)
                                        <br><span class="badge badge-danger">Still Allowed</span>
                                    @endif
                                    @if ($client->deleted_at)
                                        <br><span class="badge badge-warning text-dark" title="Deleted on
                                            {{ date('d-M-Y', strtotime($client->deleted_at)) }}">Deleted</span>
                                    @endif
                                </td>
                                <td class="text-nowrap">
                                    {{ $client->expire_date ? date('d-M-Y', strtotime($client->expire_date)) : '' }}
                                </td>
                                <td>{{ $client->payment_dadeline }} day(s)</td>
                                <td class="text-nowrap">
                                    {{ $client->cutoff_at ? date('d-M-Y h:i A', strtotime($client->cutoff_at)) : '' }}
                                </td>
                                <td>{{ $client->popname ?? '' }}</td>
                                <td>
                                    @if ($client->pop_exception === 'Yes')
                                        <span class="badge badge-success">Yes</span>
                                    @else
                                        <span class="badge badge-secondary">No</span>
                                    @endif
                                </td>
                                <td><span class="badge badge-dark">{{ $client->clients_status }}</span></td>
                                <td>
                                    @if ($rows->isEmpty())
                                        <span class="text-muted">No radcheck row</span>
                                    @else
                                        <table class="table table-sm table-bordered mb-0" style="font-size:11px;">
                                            <tbody>
                                                @foreach ($rows as $row)
                                                    <tr>
                                                        <td class="text-nowrap">{{ $row->attribute }}</td>
                                                        <td class="text-center">
                                                            <span
                                                                class="badge {{ $row->op === ':=' ? 'badge-danger' : 'badge-success' }}">
                                                                {{ $row->op }}
                                                            </span>
                                                        </td>
                                                        <td class="text-nowrap">{{ $row->value }}</td>
                                                    </tr>
                                                @endforeach
                                            </tbody>
                                        </table>
                                    @endif
                                </td>
                                <td class="text-nowrap">
                                    <form method="POST"
                                        action="{{ route('expired-without-exception.sync', $client->id) }}"
                                        onsubmit="return confirm('Re-sync {{ $client->userid }} with RADIUS?');">
                                        @csrf
                                        <button type="submit" class="btn btn-xs btn-primary" title="Re-sync radcheck">
                                            <i class="fa fa-sync-alt"></i> Sync
                                        </button>
                                    </form>
                                </td>
                            </tr>
                        @empty
                            <tr>
                                <td colspan="10" class="text-center text-muted">
                                    Nothing found — no expired client is still authorised in radcheck.
                                </td>
                            </tr>
                        @endforelse
                    </tbody>
                </table>
            </div>

            {{ $clients->links() }}
        </div>
    </div>
@endsection