{gettext("Authorization Configuration")}

<.form :let={_form} for={@changeset} id="authorization_settings_form" phx-submit="save_settings" phx-change="validate_settings" class="space-y-6" > <%!-- Hidden fields for required settings from other pages --%> <%!-- General Settings --%> <%!-- Users Settings --%> <%!-- Login Page Branding --%>

{gettext("Login Page Branding")}

{gettext("Background Image (Desktop)")} <%= if @settings["auth_background_image_file_uuid"] != "" do %>

<% else %> <% end %>

{gettext( "Background image for auth pages on desktop screens (wider than 768px)." )}

{gettext("Background Image (Mobile)")} <%= if @settings["auth_background_image_mobile_file_uuid"] != "" do %>

<% else %> <% end %>

{gettext( "Background image for auth pages on mobile screens (768px and below). Falls back to desktop image if not set." )}

{gettext("Background Color")}

{gettext( "CSS color or gradient for auth page background. Ignored if a background image is set." )}

<%!-- Authentication Methods Setting --%>

{gettext("Authentication Methods")} {gettext("Control available login/registration methods")} <%!-- Magic Link Methods --%>

{gettext("Magic Link")}

{gettext("Enable Magic Link for login")}

{gettext("Enable Magic Link for registration")} <%= if @settings["allow_registration"] != "true" do %> {gettext("(registration disabled)")} <% end %>

<%!-- OAuth Methods --%>

{gettext("OAuth Providers")}

{gettext("Enable OAuth (Master Switch)")}

<%!-- Individual OAuth Providers (disabled if master is off) --%>

{gettext("Google Sign-In")}

{gettext("Apple Sign-In")}

{gettext("GitHub Sign-In")}

{gettext("Facebook Sign-In")}

<%!-- OAuth Provider Credential Forms --%> <%= if @settings["oauth_enabled"] == "true" do %> <%!-- Google OAuth Credentials --%>

{gettext("Google OAuth Credentials")}

{gettext("Client ID")}

{gettext("Client Secret")}

<%!-- Google OAuth Setup Instructions --%>

{gettext("Setup Instructions")}

<%!-- Callback URL Section --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5 text-info mt-0.5" />

{gettext("Callback URL")}


                                {get_oauth_callback_url(@settings, "google")}

{gettext("Copy this URL to Google Cloud Console")}

<%!-- Step-by-step Instructions --%>

{gettext("Visit")} Google Cloud Console
{gettext("Create project or select existing one")}
{gettext("Go to")} Credentials → Create Credentials → OAuth client ID
{gettext("Select")} Web application {gettext("type")}
{gettext("Add callback URL above to")} Authorized redirect URIs
{gettext("Copy Client ID and Secret to fields above")}
{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Reverse Proxy Notice --%>

<.icon name="hero-information-circle" class="h-4 w-4 text-info shrink-0 mt-0.5" />

{gettext("Reverse Proxy Users:")} {gettext("If behind nginx/apache, ensure")}


                              X-Forwarded-Proto

{gettext("header is set to")}


                              https

<%!-- Apple OAuth Credentials --%>

{gettext("Apple OAuth Credentials")}

{gettext("Client ID")}

{gettext("Team ID")}

{gettext("Key ID")}

{gettext("Private Key")}

<%!-- Apple OAuth Setup Instructions --%>

{gettext("Setup Instructions")}

<%!-- Callback URL Section --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5 text-info mt-0.5" />

{gettext("Callback URL")}


                                {get_oauth_callback_url(@settings, "apple")}

{gettext("Copy this URL to Apple Developer Console")}

<%!-- Step-by-step Instructions --%>

{gettext("Visit")} Apple Developer Console
{gettext("Create an App ID or select existing one")}
{gettext("Enable")} Sign in with Apple {gettext("capability")}
{gettext("Create a")} Services ID {gettext("for web authentication")}
{gettext("Configure")} Sign in with Apple {gettext("for the Services ID")}
{gettext("Add callback URL above to")} Return URLs
{gettext("Create a")} Private Key {gettext("with Sign in with Apple enabled")}
{gettext("Copy")} Team ID, Key ID, Client ID ({gettext("Services ID")}), {gettext("and")} Private Key {gettext("to fields above")}
{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Reverse Proxy Notice --%>

<.icon name="hero-information-circle" class="h-4 w-4 text-info shrink-0 mt-0.5" />

{gettext("Reverse Proxy Users:")} {gettext("If behind nginx/apache, ensure")}


                              X-Forwarded-Proto

{gettext("header is set to")}


                              https

<%!-- GitHub OAuth Credentials --%>

{gettext("GitHub OAuth Credentials")}

{gettext("Client ID")}

{gettext("Client Secret")}

<%!-- GitHub OAuth Setup Instructions --%>

{gettext("Setup Instructions")}

<%!-- Callback URL Section --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5 text-info mt-0.5" />

{gettext("Callback URL")}


                              {get_oauth_callback_url(@settings, "github")}

{gettext("Copy this URL to GitHub OAuth Apps")}

<%!-- Step-by-step Instructions --%>

{gettext("Visit")} GitHub Developer Settings
{gettext("Go to")} OAuth Apps → New OAuth App
{gettext("Enter")} Application name {gettext("and")} Homepage URL
{gettext("Add callback URL above to")} Authorization callback URL
{gettext("Click")} Register application
{gettext("Copy")} Client ID {gettext("and generate/copy")} Client Secret
{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Reverse Proxy Notice --%>

<.icon name="hero-information-circle" class="h-4 w-4 text-info shrink-0 mt-0.5" />

{gettext("Reverse Proxy Users:")} {gettext("If behind nginx/apache, ensure")}


                            X-Forwarded-Proto

{gettext("header is set to")}


                            https

<%!-- Facebook OAuth Credentials --%>

{gettext("Facebook OAuth Credentials")}

{gettext("App ID")}

{gettext("App Secret")}

<%!-- Facebook OAuth Setup Instructions --%>

{gettext("Setup Instructions")}

<%!-- Callback URL Section --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5 text-info mt-0.5" />

{gettext("Callback URL")}


                              {get_oauth_callback_url(@settings, "facebook")}

{gettext("Copy this URL to Facebook App Settings")}

<%!-- Step-by-step Instructions --%>

{gettext("Visit")} Facebook Developers Console
{gettext("Create a new app or select existing one")}
{gettext("Add")} Facebook Login {gettext("product")}
{gettext("Go to")} Facebook Login → Settings
{gettext("Add callback URL above to")} Valid OAuth Redirect URIs
{gettext("Go to")} Settings → Basic
{gettext("Copy")} App ID {gettext("and")} App Secret {gettext("to fields above")}
{gettext("Switch app from")} Development {gettext("to")} Live {gettext("mode")}
{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Reverse Proxy Notice --%>

<.icon name="hero-information-circle" class="h-4 w-4 text-info shrink-0 mt-0.5" />

{gettext("Reverse Proxy Users:")} {gettext("If behind nginx/apache, ensure")}


                            X-Forwarded-Proto

{gettext("header is set to")}


                            https

<%!-- OAuth Configuration Notice --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5" />

{gettext("OAuth Setup Instructions")}

{gettext("1. Enable the provider above and save settings")}

{gettext("2. Enter your OAuth credentials in the form that appears")}

{gettext("3. Save settings again to store credentials")}

{gettext("4. Click \"Test Credentials\" to verify configuration")}

{gettext( "Note: OAuth providers require ueberauth dependencies to be installed." )}

<%!-- Reload OAuth Configuration Button --%> <% end %>

<%!-- Action Buttons --%>