{% extends 'base/layout.html' %}
{% load i18n %}

{% comment %}
  Rendered once, in response to a POST, with Cache-Control: no-store set by the
  view. There is intentionally no link back into this page and no way to reach
  it by GET — reloading returns the user to the credential instead.
{% endcomment %}

{% block title %}{% trans "Reveal" %}: {{ object }}{% endblock %}

{% block content %}
<div class="row">
  <div class="col col-12 col-lg-8 offset-lg-2">

    <div class="alert alert-warning d-flex align-items-center" role="alert">
      <span class="mdi mdi-alert me-2" aria-hidden="true"></span>
      <div>
        {% blocktrans with ttl=ttl %}
          This material is shown once and was not cached. Treat it as valid for {{ ttl }} seconds.
        {% endblocktrans %}
      </div>
    </div>

    <div class="card">
      <h2 class="card-header d-flex justify-content-between align-items-center">
        <span>{{ object }}</span>
        <small class="text-muted">{{ object.get_credential_type_display }}</small>
      </h2>
      <table class="table table-hover attr-table">
        {% if object.username %}
          <tr>
            <th scope="row">{% trans "Username" %}</th>
            <td><span class="font-monospace">{{ object.username }}</span></td>
          </tr>
        {% endif %}
        {% for key, value in secret_data.items %}
          <tr>
            <th scope="row">{{ key }}</th>
            <td>
              <pre class="mb-0 font-monospace" style="white-space: pre-wrap; word-break: break-all;">{{ value }}</pre>
            </td>
          </tr>
        {% endfor %}
      </table>
    </div>

    <div class="text-end mt-3">
      <a href="{{ object.get_absolute_url }}" class="btn btn-outline-secondary">
        {% trans "Done" %}
      </a>
    </div>

  </div>
</div>
{% endblock content %}