{% extends "admin/_layout.html" %}
{% block title %}API Key 管理 - TMH 管理后台{% endblock %}

{% block admin_breadcrumb %}
<span class="separator">/</span>
<span class="current">API Key 管理</span>
{% endblock %}

{% block admin_content %}
<div class="toolbar">
    <div class="toolbar-left">
        <h2 style="margin:0">API Key 管理</h2>
        <select hx-get="/dashboard/admin/api-keys" hx-target=".admin-content" hx-swap="innerHTML"
                name="user_id" hx-include="this" style="max-width:160px">
            <option value="">所有用户</option>
            {% for u in users %}
            <option value="{{ u.id }}" {% if filter_user_id == u.id %}selected{% endif %}>{{ u.name }}</option>
            {% endfor %}
        </select>
    </div>
</div>

<div id="entity-list">
    <div class="tmh-table-wrapper">
    <table>
        <thead>
            <tr>
                <th>名称</th>
                <th>Key</th>
                <th>所属用户</th>
                <th>权限范围</th>
                <th>状态</th>
                <th>最后使用</th>
                <th>创建时间</th>
                <th>操作</th>
            </tr>
        </thead>
        <tbody>
            {% for key in api_keys %}
            <tr id="row-{{ key.id }}">
                <td>{{ key.name }}</td>
                <td><code>{{ key.key_masked }}</code></td>
                <td>{{ key.user_name or key.user_id }}</td>
                <td><span class="badge">{{ key.scope }}</span></td>
                <td>
                    {% if key.is_active %}
                    <span class="status-active">活跃</span>
                    {% else %}
                    <span class="status-inactive">已吊销</span>
                    {% endif %}
                </td>
                <td>{{ key.last_used_at[:16] if key.last_used_at else '从未' }}</td>
                <td>{{ key.created_at[:16] if key.created_at else '-' }}</td>
                <td>
                    {% if key.is_active and can('key:revoke_any') %}
                    <button class="outline small contrast"
                            onclick="confirmAction('吊销 Key', '确定要吊销此 API Key 吗？吊销后立即失效。', '/dashboard/admin/api-keys/{{ key.id }}/revoke', 'DELETE')">
                        吊销
                    </button>
                    {% endif %}
                </td>
            </tr>
            {% endfor %}
        </tbody>
    </table>
    </div>
</div>

{% if not api_keys %}
<p style="color:var(--tmh-text-muted)">暂无 API Key 数据。</p>
{% endif %}
{% endblock %}