{% extends "base.html" %}
{% block title %}My account — BackupWatch{% endblock %}
{% block content %}
<h1>My account</h1>
<p class="note">{{ user.email }} · role: {{ user.role }}</p>
{% if must %}<div class="banner warning">Your password was reset by an admin — set a new one
below before continuing. Your current password is the one-time password you were given.</div>{% endif %}
{% if err %}<div class="banner error">{{ err }}</div>{% endif %}
{% if msg %}<div class="banner">{{ msg }}</div>{% endif %}

<h2>Change password</h2>
<form method="post" action="/account/password" class="panel">
  <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
  <label>Current password <input type="password" name="current" required></label>
  <label>New password <input type="password" name="new" minlength="8" required></label>
  <label>Confirm new password <input type="password" name="confirm" minlength="8" required></label>
  <button type="submit">Change password</button>
</form>

<h2>Sign out everywhere</h2>
<form method="post" action="/account/sign-out-everywhere" class="panel"
      onsubmit="return confirm('Sign out of every device, including this one?')">
  <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
  <p class="note">Ends every signed-in session for {{ user.email }} — including this one, and any
    NOC display signed in as this account. Use it if a device is lost or you suspect your session
    was taken. Your password is not changed.</p>
  <button type="submit">Sign out everywhere</button>
</form>
{% endblock %}