{{ define "main" }}
<div class="auth-page">
	<div class="auth-card">
		<h1 class="auth-page__title">{{ .Title }}</h1>
		{{- with site.GetPage "/services" -}} {{- $registrationServices := slice -}} {{- range
		.Pages.ByWeight -}} {{- if index .Params "registration-needed" -}} {{- $registrationServices
		= $registrationServices | append . -}} {{- end -}} {{- end -}} {{- with
		$registrationServices -}} {{- $serviceLinks := slice -}} {{- range . -}} {{- $serviceLinks =
		$serviceLinks | append (printf `<a href="%s">%s</a>` .RelPermalink .LinkTitle) -}} {{- end
		-}}
		<div
			id="auth-message"
			class="auth-message auth-message--info is-visible"
			aria-live="polite"
		>
			Signing up is giving you access to the following services: {{ delimit $serviceLinks ", "
			| safeHTML }}
		</div>
		{{- end -}} {{- if not $registrationServices -}}
		<div id="auth-message" class="auth-message" aria-live="polite"></div>
		{{- end -}} {{- end -}}

		<!-- ── STEP 1 — Account details ───────────────────────────────── -->
		<form id="signup-form" class="auth-form" novalidate>
			<div class="auth-form__input-wrap">
				<div class="auth-form__group">
					<label class="auth-form__label" for="signup-username">Username</label>
					<input
						class="auth-form__input"
						type="text"
						id="signup-username"
						name="username"
						autocomplete="username"
						required
						minlength="3"
						maxlength="32"
						pattern="[a-zA-Z0-9_\-]+"
					/>
					<span class="auth-form__hint"
						>(3-32 characters; letters, numbers, _ and - only)</span
					>
				</div>

				<div class="auth-form__group">
					<label class="auth-form__label" for="signup-email">Email</label>
					<input
						class="auth-form__input"
						type="email"
						id="signup-email"
						name="email"
						autocomplete="email"
						required
					/>
				</div>

				<div class="auth-form__group">
					<label class="auth-form__label" for="signup-password">Password</label>
					<input
						class="auth-form__input"
						type="password"
						id="signup-password"
						name="password"
						autocomplete="new-password"
						required
						minlength="8"
					/>
					<button
						type="button"
						class="auth-form__eye"
						aria-label="Toggle password visibility"
						tabindex="-1"
					>
						<svg
							class="eye-show"
							xmlns="http://www.w3.org/2000/svg"
							viewBox="0 0 24 24"
							width="16"
							height="16"
							fill="currentColor"
						>
							<path
								d="M12 4.5C7 4.5 2.73 7.61 1 12c1.73 4.39 6 7.5 11 7.5s9.27-3.11 11-7.5c-1.73-4.39-6-7.5-11-7.5zM12 17c-2.76 0-5-2.24-5-5s2.24-5 5-5 5 2.24 5 5-2.24 5-5 5zm0-8c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"
							/>
						</svg>
						<svg
							class="eye-hide"
							xmlns="http://www.w3.org/2000/svg"
							viewBox="0 0 24 24"
							width="16"
							height="16"
							fill="currentColor"
							style="display: none"
						>
							<path
								d="M12 7c2.76 0 5 2.24 5 5 0 .65-.13 1.26-.36 1.83l2.92 2.92c1.51-1.26 2.7-2.89 3.43-4.75-1.73-4.39-6-7.5-11-7.5-1.4 0-2.74.25-3.98.7l2.16 2.16C10.74 7.13 11.35 7 12 7zM2 4.27l2.28 2.28.46.46C3.08 8.3 1.78 10.02 1 12c1.73 4.39 6 7.5 11 7.5 1.55 0 3.03-.3 4.38-.84l.42.42L19.73 22 21 20.73 3.27 3 2 4.27zM7.53 9.8l1.55 1.55c-.05.21-.08.43-.08.65 0 1.66 1.34 3 3 3 .22 0 .44-.03.65-.08l1.55 1.55c-.67.33-1.41.53-2.2.53-2.76 0-5-2.24-5-5 0-.79.2-1.53.53-2.2zm4.31-.78l3.15 3.15.02-.16c0-1.66-1.34-3-3-3l-.17.01z"
							/>
						</svg>
					</button>
					<span class="auth-form__hint">(at least 8 characters)</span>
				</div>

				<div class="auth-form__group">
					<label class="auth-form__label" for="signup-confirm">Confirm Password</label>
					<input
						class="auth-form__input"
						type="password"
						id="signup-confirm"
						name="confirm_password"
						autocomplete="new-password"
						required
					/>
				</div>
			</div>

			<div class="auth-form__group auth-form__group--checkbox">
				<label class="auth-form__checkbox-label" for="signup-terms">
					<input
						class="auth-form__checkbox"
						type="checkbox"
						id="signup-terms"
						name="terms"
						required
					/>
					<span
						>I agree to the
						<a href="/terms/" target="_blank" rel="noopener">Terms and Conditions</a>
						and
						<a href="/privacy/" target="_blank" rel="noopener">Privacy Policy</a>.</span
					>
				</label>
			</div>

			<button type="submit" class="auth-form__submit" id="signup-submit">
				<span class="auth-form__submit-text">Send verification code</span>
				<span class="auth-form__submit-loader" style="display: none">
					<svg
						xmlns="http://www.w3.org/2000/svg"
						viewBox="0 0 24 24"
						width="16"
						height="16"
						fill="currentColor"
						class="spin"
					>
						<path
							d="M12 4V1L8 5l4 4V6c3.31 0 6 2.69 6 6 0 1.01-.25 1.97-.7 2.8l1.46 1.46C19.54 15.03 20 13.57 20 12c0-4.42-3.58-8-8-8zm0 14c-3.31 0-6-2.69-6-6 0-1.01.25-1.97.7-2.8L5.24 7.74C4.46 8.97 4 10.43 4 12c0 4.42 3.58 8 8 8v3l4-4-4-4v3z"
						/>
					</svg>
				</span>
			</button>
		</form>

		<!-- ── STEP 2 — OTP verification ──────────────────────────────── -->
		<div id="otp-panel" style="display: none">
			<p class="otp-panel__hint">
				A 6-digit code was sent to <strong id="otp-email-display"></strong>.<br />
				Enter it below. The code will expire in 10&nbsp;minutes.
			</p>

			<div class="auth-form" style="margin-top: 1rem">
				<div class="auth-form__group">
					<label class="auth-form__label" for="otp-input">Verification code</label>
					<input
						class="auth-form__input otp-panel__input"
						type="text"
						id="otp-input"
						inputmode="numeric"
						maxlength="6"
						pattern="\d{6}"
						placeholder="000000"
						autocomplete="one-time-code"
					/>
				</div>

				<button type="button" class="auth-form__submit" id="otp-submit">
					<span class="auth-form__submit-text">Verify &amp; create account</span>
					<span class="auth-form__submit-loader" style="display: none">
						<svg
							xmlns="http://www.w3.org/2000/svg"
							viewBox="0 0 24 24"
							width="16"
							height="16"
							fill="currentColor"
							class="spin"
						>
							<path
								d="M12 4V1L8 5l4 4V6c3.31 0 6 2.69 6 6 0 1.01-.25 1.97-.7 2.8l1.46 1.46C19.54 15.03 20 13.57 20 12c0-4.42-3.58-8-8-8zm0 14c-3.31 0-6-2.69-6-6 0-1.01.25-1.97.7-2.8L5.24 7.74C4.46 8.97 4 10.43 4 12c0 4.42 3.58 8 8 8v3l4-4-4-4v3z"
							/>
						</svg>
					</span>
				</button>

				<p class="otp-panel__resend">
					Didn't get it?
					<button type="button" id="otp-resend" class="otp-panel__resend-btn">
						Resend code
					</button>
					<span id="otp-resend-timer" style="display: none"></span>
				</p>
			</div>
		</div>

		<p class="auth-card__footer" id="signup-footer">
			Already have an account? <a href="/login/" class="auth-card__link">Log in</a>
		</p>
	</div>
</div>

<script>
	(function () {
		var BACKEND = 'https://backend.freedoms4.org/auth.php';

		// ── Already logged in ──
		if (localStorage.getItem('f4_username')) {
			document.getElementById('auth-message').textContent = 'You are already logged in!';
			document.getElementById('auth-message').className =
				'auth-message auth-message--success is-visible';
			document.getElementById('signup-form').style.display = 'none';
			document.getElementById('signup-footer').style.display = 'none';
			return;
		}

		// ── Pass next-page through to login ──
		var _signupNext =
			new URLSearchParams(window.location.search).get('next') ||
			sessionStorage.getItem('f4_login_next') ||
			'';

		if (!_signupNext && document.referrer) {
			try {
				var _refUrl = new URL(document.referrer);
				if (_refUrl.hostname === window.location.hostname) {
					var _refPath = _refUrl.pathname;
					if (_refPath !== '/login/' && _refPath !== '/signup/') {
						_signupNext = _refPath;
						sessionStorage.setItem('f4_login_next', _refPath);
					}
				}
			} catch (e) {}
		}

		var state = { username: '', email: '', password: '' };

		var msgBox = document.getElementById('auth-message');
		var signupForm = document.getElementById('signup-form');
		var signupSubmit = document.getElementById('signup-submit');
		var otpPanel = document.getElementById('otp-panel');
		var otpEmailDisp = document.getElementById('otp-email-display');
		var otpInput = document.getElementById('otp-input');
		var otpSubmit = document.getElementById('otp-submit');
		var otpResendBtn = document.getElementById('otp-resend');
		var otpResendTimer = document.getElementById('otp-resend-timer');
		var pwdInput = document.getElementById('signup-password');
		var eyeBtn = signupForm.querySelector('.auth-form__eye');

		// Snapshot the server-rendered services notice so we can restore it after errors
		var _servicesHTML = msgBox.innerHTML;
		var _servicesClass = msgBox.className;

		// Pin the box height to whatever the services text renders at, so switching
		// to a one-line error message never shrinks the box and causes layout shift.
		msgBox.style.minHeight = msgBox.offsetHeight + 'px';

		function showMsg(text, type) {
			msgBox.textContent = text;
			msgBox.className = 'auth-message auth-message--' + type + ' is-visible';
		}
		function hideMsg() {
			msgBox.innerHTML = _servicesHTML;
			msgBox.className = _servicesClass;
		}

		function setLoading(btn, on) {
			btn.disabled = on;
			btn.querySelector('.auth-form__submit-text').style.display = on ? 'none' : '';
			btn.querySelector('.auth-form__submit-loader').style.display = on
				? 'inline-flex'
				: 'none';
		}

		// Password eye toggle
		eyeBtn.addEventListener('click', function () {
			var isText = pwdInput.type === 'text';
			pwdInput.type = isText ? 'password' : 'text';
			eyeBtn.querySelector('.eye-show').style.display = isText ? '' : 'none';
			eyeBtn.querySelector('.eye-hide').style.display = isText ? 'none' : '';
		});

		// Resend cooldown
		var resendInterval = null;
		function startResendCooldown(seconds) {
			otpResendBtn.style.display = 'none';
			otpResendTimer.style.display = '';
			var remaining = seconds;
			otpResendTimer.textContent = 'Resend in ' + remaining + 's';
			resendInterval = setInterval(function () {
				remaining--;
				if (remaining <= 0) {
					clearInterval(resendInterval);
					otpResendTimer.style.display = 'none';
					otpResendBtn.style.display = '';
					otpResendBtn.disabled = false;
				} else {
					otpResendTimer.textContent = 'Resend in ' + remaining + 's';
				}
			}, 1000);
		}

		// STEP 1 — validate fields and send OTP
		signupForm.addEventListener('submit', function (e) {
			e.preventDefault();
			hideMsg();

			var username = document.getElementById('signup-username').value.trim();
			var email = document.getElementById('signup-email').value.trim();
			var password = pwdInput.value;
			var confirm = document.getElementById('signup-confirm').value;

			if (!username || !email || !password || !confirm) {
				showMsg('Please fill in all fields.', 'error');
				return;
			}
			if (!/^[a-zA-Z0-9_\-]{3,32}$/.test(username)) {
				showMsg(
					'Username must be 3\u201332 characters: letters, numbers, _ or -.',
					'error'
				);
				return;
			}
			if (password.length < 8) {
				showMsg('Password must be at least 8 characters.', 'error');
				return;
			}
			if (password !== confirm) {
				showMsg('Passwords do not match.', 'error');
				return;
			}
			if (!document.getElementById('signup-terms').checked) {
				showMsg('You must agree to the Terms and Conditions and Privacy Policy.', 'error');
				return;
			}

			state.username = username;
			state.email = email;
			state.password = password;

			setLoading(signupSubmit, true);

			fetch(BACKEND, {
				method: 'POST',
				headers: { 'Content-Type': 'application/json' },
				credentials: 'include',
				body: JSON.stringify({ action: 'send_otp', username: username, email: email }),
			})
				.then(function (r) {
					return r.json();
				})
				.then(function (data) {
					if (data.success) {
						signupForm.style.display = 'none';
						otpEmailDisp.textContent = email;
						otpPanel.style.display = '';
						otpInput.value = '';
						otpInput.focus();
						startResendCooldown(60);
						showMsg('OTP sent! Check your inbox (and spam folder).', 'success');
					} else {
						showMsg(data.message || 'Failed to send code. Please try again.', 'error');
					}
				})
				.catch(function () {
					showMsg('Network error. Please try again.', 'error');
				})
				.finally(function () {
					setLoading(signupSubmit, false);
				});
		});

		// Resend
		otpResendBtn.addEventListener('click', function () {
			hideMsg();
			otpResendBtn.disabled = true;

			fetch(BACKEND, {
				method: 'POST',
				headers: { 'Content-Type': 'application/json' },
				credentials: 'include',
				body: JSON.stringify({
					action: 'send_otp',
					username: state.username,
					email: state.email,
				}),
			})
				.then(function (r) {
					return r.json();
				})
				.then(function (data) {
					if (data.success) {
						showMsg('New code sent!', 'success');
						startResendCooldown(60);
					} else {
						showMsg(data.message || 'Could not resend. Please try again.', 'error');
						otpResendBtn.disabled = false;
					}
				})
				.catch(function () {
					showMsg('Network error. Please try again.', 'error');
					otpResendBtn.disabled = false;
				});
		});

		// STEP 2 — verify OTP and create account in one request
		function doSignup() {
			hideMsg();
			var otp = otpInput.value.trim();

			if (!/^\d{6}$/.test(otp)) {
				showMsg('Please enter the 6-digit code from your email.', 'error');
				return;
			}

			setLoading(otpSubmit, true);

			fetch(BACKEND, {
				method: 'POST',
				headers: { 'Content-Type': 'application/json' },
				credentials: 'include',
				body: JSON.stringify({
					action: 'signup',
					username: state.username,
					email: state.email,
					password: state.password,
					otp: otp,
				}),
			})
				.then(function (r) {
					return r.json();
				})
				.then(function (data) {
					if (data.success) {
						showMsg('Account created! Redirecting to login\u2026', 'success');
						setTimeout(function () {
							var _loginUrl = '/login/';
							if (_signupNext && _signupNext.startsWith('/')) {
								_loginUrl = '/login/?next=' + encodeURIComponent(_signupNext);
							}
							window.location.href = _loginUrl;
						}, 1800);
					} else {
						showMsg(data.message || 'Sign-up failed. Please try again.', 'error');
						setLoading(otpSubmit, false);
					}
				})
				.catch(function () {
					showMsg('Network error. Please try again.', 'error');
					setLoading(otpSubmit, false);
				});
		}

		otpSubmit.addEventListener('click', doSignup);
		otpInput.addEventListener('keydown', function (e) {
			if (e.key === 'Enter') doSignup();
		});
	})();
</script>
{{ end }}