{% extends 'base.html' %}
{% load base_extras ui_extras %}

{% block content %}
<ol class="breadcrumb">
  <li class="breadcrumb-item"><a href="/">Home</a></li>
  <li class="breadcrumb-item"><a href="{% url 'mdm:index' %}">MDM</a></li>
  <li class="breadcrumb-item"><a href="{% url 'mdm:enrolled_devices' %}">Devices</a></li>
  <li class="breadcrumb-item active">{{ object.udid|privacywrapper }}</li>
</ol>

<div class="object-details">
    <div class="d-flex align-items-center mb-1">
        <h2 class="m-0">{{ object.udid|privacywrapper }}</h2>
    </div>
    <div class="d-flex align-items-center mb-3">
        <h3 class="m-0 fs-5 text-secondary">Device</h3>
    </div>

    <table class="table-object-properties">
    <tbody>
        <tr>
        <th style="width:220px">UDID</th>
        <td><code>{{ object.udid|privacywrapper }}</code></th>
        </tr>
        <tr>
        <th>Serial number</th>
        <td>
            {% with object.get_urlsafe_serial_number as urlsafe_serial_number %}
            {% if urlsafe_serial_number %}
            {% if perms.inventory.view_machinesnapshot %}
            <a href="{% url 'inventory:machine' urlsafe_serial_number %}">{{ object.serial_number|privacywrapper }}</a>
            {% else %}
            {{ object.serial_number|privacywrapper }}
            {% endif %}
            {% else %}
            -
            {% endif %}
            {% endwith %}
        </td>
        </tr>
        <tr>
        <th>Model</th>
        <td>{{ object.model|default:"-" }}</td>
        </tr>
        <tr>
        <th>Name</th>
        <td>{{ object.name|default:"-" }}</td>
        </tr>
        <tr>
        <th>Platform</th>
        <td>
            {% with object.get_architecture_for_display as architecture %}
            {% with object.full_os_version as full_os_version %}
            {{ object.get_platform_display }}
            {% if full_os_version %} - {{ full_os_version }}{% endif %}
            {% if architecture %} - {{ architecture }}{% endif %}
            {% endwith %}
            {% endwith %}
        </td>
        </tr>
        <tr>
        <th>Available update{{ available_software_updates|length|pluralize }}</th>
        <td>{% if available_software_updates %}{{ available_software_updates|join:", " }}{% else %}-{% endif %}</td>
        </tr>
        {% with object.enrolleduser_set.count as users_count %}
        <tr>
        <th>MDM user{{ users_count|pluralize }}</th>
        <td>
            {% if users_count %}
            <ul class="list-unstyled">
            {% for user in object.enrolleduser_set.all %}
            <li>
                {% if perms.mdm.view_enrolleduser %}
                <a href="{{ user.get_absolute_url }}">{{ user.long_name }}</a>
                {% else %}
                {{ user.long_name }}
                {% endif %}
            </li>
            {% endfor %}
            </ul>
            {% else %}
            -
            {% endif %}
        </td>
        </tr>
        {% endwith %}
        <tr>
        <td colspan="2"><h4>Management status</h4></td>
        </tr>
        <tr>
        <th>Push certificate</th>
        <td>
            {% if perms.mdm.view_pushcertificate %}
            <a href="{{ object.push_certificate.get_absolute_url }}">{{ object.push_certificate }}</a>
            {% else %}
            {{ object.push_certificate }}
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Blueprint</th>
        <td>
            {% if object.blueprint %}
            {% if perms.mdm.view_blueprint %}
            <a href="{{ object.blueprint.get_absolute_url }}">{{ object.blueprint }}</a>
            {% else %}
            {{ object.blueprint }}
            {% endif %}
            {% else %}
            no blueprint
            {% endif %}
            {% if perms.mdm.change_enrolleddevice %}
            <a href="{% url 'mdm:change_enrolled_device_blueprint' object.pk %}" class="btn btn-primary btn-xs" style="margin-left:10px">
            Change
            </a>
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Declarative management</th>
        <td>{{ object.declarative_management|yesno }}</td>
        </tr>
        <tr>
        <th>DEP assignment</th>
        <td>
            {% if dep_device %}
            {% if perms.mdm.view_depvirtualserver %}
            <a href="{{ dep_device.get_absolute_url }}">{{ dep_device.virtual_server }}</a>
            {% else %}
            {{ dep_device.virtual_server }}
            {% endif %}
            {% else %}
            -
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Certificate fingerprint</th>
        <td><code>{{ object.cert_fingerprint.hex }}</code></td>
        </tr>
        <tr>
        <th>Certificate expiry</th>
        <td>{{ object.cert_not_valid_after|date:"SHORT_DATETIME_FORMAT" }}</td>
        </tr>
        <tr>
        <th>DEP enrollment?</th>
        <td>{{ object.dep_enrollment|yesno }}</td>
        </tr>
        <tr>
        <th>User enrollment?</th>
        <td>{{ object.user_enrollment|yesno }}</td>
        </tr>
        <tr>
        <th>User approved?</th>
        <td>{{ object.user_approved_enrollment|yesno }}</td>
        </tr>
        <tr>
        <th>Activation lock manageable?</th>
        <td>{{ object.activation_lock_manageable|yesno }}</td>
        </tr>
        <tr>
        <th>Supervised?</th>
        <td>{{ object.supervised|yesno }}</td>
        </tr>
        <tr>
        <th>Checkout</th>
        <td>{{ object.checkout_at|date:"SHORT_DATETIME_FORMAT"|default:"-" }}</td>
        </tr>
        <tr>
        <th>Blocked?</th>
        <td>
            {{ object.blocked_at|date:"SHORT_DATETIME_FORMAT"|default:"No" }}
            {% if perms.mdm.change_enrolleddevice %}
            {% if object.blocked_at %}
            <a href="{% url 'mdm:unblock_enrolled_device' object.pk %}" class="btn btn-success btn-xs" style="margin-left:10px">
            Unblock
            </a>
            {% else %}
            <a href="{% url 'mdm:block_enrolled_device' object.pk %}" class="btn btn-danger btn-xs" style="margin-left:10px">
            Block
            </a>
            {% endif %}
            {% endif %}
        </td>
        </tr>
        {% if object.platform == "macOS" %}
        <tr>
        <td colspan="2"><h4>Bootstrap token</h4></td>
        </tr>
        <tr>
        <th>Set?</th>
        <td>{{ object.bootstrap_token|yesno }}</td>
        </tr>
        <tr>
        <th>Allowed for authentication?</th>
        <td>
            {% if object.bootstrap_token_allowed_for_authentication is None %}
            ?
            {% else %}
            {{ object.bootstrap_token_allowed_for_authentication|yesno }}
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Required for software update?</th>
        <td>
            {% if object.bootstrap_token_required_for_software_update is None %}
            ?
            {% else %}
            {{ object.bootstrap_token_required_for_software_update|yesno }}
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Required for kext approval?</th>
        <td>
            {% if object.bootstrap_token_required_for_kext_approval is None %}
            ?
            {% else %}
            {{ object.bootstrap_token_required_for_kext_approval|yesno }}
            {% endif %}
        </td>
        </tr>
        {% with object.security_info as security_info %}
        {% if security_info %}
        <tr>
        <td colspan="2"><h4>SIP</h4></td>
        </tr>
        <tr>
        <th>Enabled?</th>
        <td>{{ security_info.SystemIntegrityProtectionEnabled|yesno }}</td>
        </tr>
        <tr>
        <td colspan="2"><h4>FDE</h4></td>
        </tr>
        <tr>
        <th>Enabled?</th>
        <td>{{ security_info.FDE_Enabled|yesno }}</td>
        </tr>
        <tr>
        <th>Personal recovery key</th>
        <td>
            {% if object.filevault_prk and perms.mdm.view_filevault_prk %}
            <span class="show-ed-secret bi bi-eye" aria-hidden="true" data-url="{% url 'mdm_api:enrolled_device_filevault_prk' object.pk %}" data-key="filevault_prk" style="cursor:pointer"></span>
            <span class="ed-secret"></span>
            {% else %}
            {{ security_info.FDE_HasPersonalRecoveryKey|yesno }}
            {% endif %}
        </td>
        </tr>
        <tr>
        <th>Institutional recovery key?</th>
        <td>{{ security_info.FDE_HasInstitutionalRecoveryKey|yesno }}</td>
        </tr>
        {% endif %}
        {% endwith %}
        {% if object.platform == "macOS" %}
        <tr>
        <td colspan="2"><h4>Recovery OS</h4></td>
        </tr>
        <tr>
        <th>{% if object.apple_silicon %}Recovery lock{% else %}Firmware password{% endif %}</th>
        <td>
            {% if object.recovery_password %}
            {% if perms.mdm.view_recovery_password %}
            <span class="show-ed-secret bi bi-eye" aria-hidden="true" data-url="{% url 'mdm_api:enrolled_device_recovery_password' object.pk %}" data-key="recovery_password" style="cursor:pointer"></span>
            <span class="ed-secret"></span>
            {% else %}
            Yes
            {% endif %}
            {% else %}
            No
            {% endif %}
            {% if  object.pending_firmware_password_created_at %}
            <br>
            Pending change, {{ object.pending_firmware_password_created_at }}
            {% endif %}
        </td>
        </tr>
        {% endif %}
        {% with object.security_info.SecureBoot as secure_boot %}
        {% if secure_boot %}
        <tr>
        <td colspan="2"><h4>Secure boot</h4></td>
        </tr>
        <tr>
        <th>Level</th>
        <td>{{ secure_boot.SecureBootLevel }}</td>
        </tr>
        <tr>
        <th>Windows boot level</th>
        <td>{{ secure_boot.WindowsBootLevel }}</td>
        </tr>
        <tr>
        <th>External boot level</th>
        <td>{{ secure_boot.ExternalBootLevel }}</td>
        </tr>
        {% endif %}
        {% endwith %}
        {% endif %}
    </tbody>
    </table>
</div>

<h3>Artifact{{ target_artifacts_count|pluralize }} ({{ target_artifacts_count }})</h3>

{% if target_artifacts_count %}
<table class="table table-striped align-middle">
  <thead>
    <tr>
      <th>Type</th>
      <th>Artifact</th>
      <th>Version</th>
      <th>Status</th>
      <th>Last updated</th>
    </tr>
  </thead>
  <tbody>
    {% for target_artifact in target_artifacts %}
    {% with target_artifact.artifact_version as artifact_version %}
    {% with artifact_version.artifact as artifact %}
    <tr>
      <td>{{ artifact.get_type_display }}</td>
      <td>
        {% if perms.mdm.view_artifact %}
        <a href="{{ artifact.get_absolute_url }}">{{ artifact }}</a>
        {% else %}
        {{ artifact }}
        {% endif %}
      </td>
      <td>
        {% if perms.mdm.view_artifact %}
        <a href="{{ artifact_version.get_absolute_url }}">{{ artifact_version.version }}</a>
        {% else %}
        {{ artifact_version.version }}
        {% endif %}
      </td>
      <td>
        {{ target_artifact.get_status_display }}
        {% if target_artifact.extra_info.reasons %}
        <a data-bs-toggle="collapse" href="#mi-{{ target_artifact.pk }}">more info</a>
        <div  class="collapse" id="mi-{{ target_artifact.pk }}">
          {% for reason in target_artifact.extra_info.reasons %}
          {{ reason|pythonprettyprint }}
          {% endfor %}
        </div>
        {% endif %}
      </td>
      <td>
        {{ target_artifact.updated_at|date:"SHORT_DATETIME_FORMAT" }}
      </td>
    </tr>
    {% endwith %}
    {% endwith %}
    {% endfor %}
  </tbody>
</table>
{% endif %}

<div class="d-flex align-items-center mb-1">
    <h3 class="m-0">Last commands</h3>
    <div class="ms-auto">
        {% if perms.mdm.change_enrolleddevice %}
        <form style="display:inline-block" method="POST" action="{% url 'mdm:poke_enrolled_device' object.pk %}">{% csrf_token %}
            <button type="submit" class="btn btn-success" {% if not object.can_be_poked %}disabled="disabled"{% endif %}
                data-bs-toggle="tooltip" data-bs-placement="bottom" data-bs-title="Poke!">
                <i class="bi bi-hand-index"></i>
            </button>
        </form>
        {% endif %}
        {% if perms.mdm.add_devicecommand and create_command_links %}
        <div class="btn-group">
            <button class="btn btn-link dropdown-toggle" type="button" id="createCommand"
                    data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
                <i class="bi bi-plus-circle"></i>
            </button>
            <ul class="dropdown-menu" aria-labelledby="createCommand">
            {% for cc_url, cc_display_name in create_command_links %}
            <li><a class="dropdown-item" href="{{ cc_url }}">{{ cc_display_name }}</a></li>
            {% endfor %}
            </ul>
        </div>
        {% endif %}
    </div>
</div>

{% if commands_count %}
<table class="table table-striped align-middle ">
  <thead>
    <tr>
      <th>Name</th>
      <th>Artifact</th>
      <th>Time</th>
      <th>Result time</th>
      <th>Status</th>
    </tr>
  </thead>
  <tbody>
    {% for loaded_command in loaded_commands %}
    {% with loaded_command.db_command as command %}
    <tr>
      <td>
        {{ command.name }}{% if command.name != loaded_command.request_type %} ({{ loaded_command.request_type }}){% endif %}
      </td>
      <td>
        {% if command.artifact_version %}
        {% if perms.mdm.view_artifactversion %}
        <a href="{{ command.artifact_version.get_absolute_url }}">{{ command.artifact_version }}</a>
        {% else %}
        {{ command.artifact_version }}
        {% endif %}
        {% else %}
        -
        {% endif %}
      </td>
      <td>
        {% if command.time %}
        {{ command.time|date:"SHORT_DATETIME_FORMAT" }}
        {% else %}
        Queued since {{ command.created_at|date:"SHORT_DATETIME_FORMAT" }}
        {% endif %}
      </td>
      <td>
        {{ command.result_time|date:"SHORT_DATETIME_FORMAT"|default:"-" }}
      </td>
      <td>
        {{ command.get_status_display|default:"-" }}
        {% if command.result %}
            {% url 'mdm:download_enrolled_device_command_result' command.uuid as url %}
            {% button 'DOWNLOAD' url "Download Result" %}
        {% endif %}
      </td>
    </tr>
    {% endwith %}
    {% endfor %}
  </tbody>
</table>

{% if commands_count > 1 %}
<p><a href="{% url 'mdm:enrolled_device_commands' object.pk %}">See all commands</a></p>
{% endif %}

{% endif %}

{% if enrollment_session_info_count %}
<h3>Enrollment session{{ enrollment_session_info_count|pluralize }} ({{ enrollment_session_info_count }})</h3>

{% include "mdm/_enrollment_session_info_list.html" %}
{% endif %}

{% endblock %}

{% block extrajs %}
<script nonce="{{ request.csp_nonce }}">
  function showEDSecret($btn) {
    var url = $btn.data("url");
    var key = $btn.data("key");
    $.ajax({
      dataType: "json",
      url: $btn.data("url"),
      success: function ( data ) {
        $btn.next().text(data[key]).show();
        $btn.removeClass("bi-eye").addClass("bi-eye-slash");
      }
    });
  }

  function hideEDSecret($btn) {
    $btn.next().text("").hide();
    $btn.removeClass("bi-eye-slash").addClass("bi-eye");
  }

  function toggleEDSecret($btn) {
      console.log($btn.data("url"));
      if ($btn.hasClass("bi-eye")) {
        showEDSecret($btn);
      } else {
        hideEDSecret($btn);
      }
  }

  $(document).ready(function () {
    $(".show-ed-secret").click(function() {
      toggleEDSecret($(this));
    });
  });
</script>
{% endblock %}