%# BEGIN BPS TAGGED BLOCK {{{
%#
%# COPYRIGHT:
%#
%# This software is Copyright (c) 1996-2026 Best Practical Solutions, LLC
%#                                          <sales@bestpractical.com>
%#
%# (Except where explicitly superseded by other copyright notices)
%#
%#
%# LICENSE:
%#
%# This work is made available to you under the terms of Version 2 of
%# the GNU General Public License. A copy of that license should have
%# been provided with this software, but in any event can be snarfed
%# from www.gnu.org.
%#
%# This work is distributed in the hope that it will be useful, but
%# WITHOUT ANY WARRANTY; without even the implied warranty of
%# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
%# General Public License for more details.
%#
%# You should have received a copy of the GNU General Public License
%# along with this program; if not, write to the Free Software
%# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
%# 02110-1301 or visit their web page on the internet at
%# http://www.gnu.org/licenses/old-licenses/gpl-2.0.html.
%#
%#
%# CONTRIBUTION SUBMISSION POLICY:
%#
%# (The following paragraph is not intended to limit the rights granted
%# to you to modify and distribute this software under the terms of
%# the GNU General Public License and is only of importance to you if
%# you choose to contribute your changes and enhancements to the
%# community by submitting them to Best Practical Solutions, LLC.)
%#
%# By intentionally submitting any modifications, corrections or
%# derivatives to this work, or any other work intended for use with
%# Request Tracker, to Best Practical Solutions, LLC, you confirm that
%# you are the copyright holder for those contributions and you grant
%# Best Practical Solutions,  LLC a nonexclusive, worldwide, irrevocable,
%# royalty-free, perpetual, license to use, copy, create derivative
%# works based on those contributions, and sublicense and distribute
%# those contributions and any derivatives thereof.
%#
%# END BPS TAGGED BLOCK }}}
<%init>
return if RT->Config->Get('DisableMFA');
return if $session{'WebExternallyAuthed'};

my $policy = $UserObj->EffectiveMFAPolicy;
my $mode   = $policy->{Mode};
return if $mode eq 'Off';
</%init>

<&| /Widgets/TitleBox, title => loc('Two-Factor Authentication'), id => "user-prefs-mfa" &>
  <&| /Elements/LabeledValue, Label => loc('Status'), ValueSpanClass => 'current-value' &>
    <% $UserObj->TOTPEnrolled ? loc('Enrolled') : loc('Not enrolled') %>
  </&>

% if ( $AllowActions ) {
%   if ( $mode eq 'Optional' && $UserObj->TOTPEnrolled ) {
  <& /Elements/Submit, Name => 'DisableMFA', Label => loc('Disable MFA'), FullWidth => 1 &>
%   } elsif ( $mode eq 'Optional' && !$UserObj->TOTPEnrolled ) {
  <div class="row mt-2">
    <div class="col-12 text-end">
      <a href="<% RT->Config->Get('WebPath') %>/NoAuth/MFA/Enroll.html" class="btn btn-primary"><&|/l&>Set up MFA</&></a>
    </div>
  </div>
%   } elsif ( $mode eq 'Required' && $UserObj->TOTPEnrolled ) {
  <& /Elements/Submit, Name => 'RequestReset', Label => loc('Reset MFA enrollment via email'), FullWidth => 1 &>
%   }
% }
</&>

<%args>
$UserObj
$AllowActions => 1
</%args>
