{gettext("Authorization Configuration")}

{gettext("Background Image (Desktop)")} <%= if (@settings["auth_background_image_file_uuid"] || "") != "" do %>

<% else %> <% end %>

{gettext( "Background image for auth pages on desktop screens (wider than 768px)." )}

<.unsaved_hint dirty={ @settings["auth_background_image_file_uuid"] != @saved_settings["auth_background_image_file_uuid"] } />

{gettext("Background Image (Mobile)")} <%= if (@settings["auth_background_image_mobile_file_uuid"] || "") != "" do %>

<% else %> <% end %>

{gettext( "Background image for auth pages on mobile screens (768px and below). Falls back to desktop image if not set." )}

<.unsaved_hint dirty={ @settings["auth_background_image_mobile_file_uuid"] != @saved_settings["auth_background_image_mobile_file_uuid"] } />

{gettext("Background Color")}

{gettext( "CSS color or gradient for auth page background. Ignored if a background image is set." )}

<.unsaved_hint dirty={ @settings["auth_background_color"] != @saved_settings["auth_background_color"] } saved={@saved_settings["auth_background_color"]} />

<%!-- Magic Link Methods --%>

{gettext("Magic Link")}

{gettext("Enable Magic Link for login")}

{gettext("Enable Magic Link for registration")} <%= if @settings["allow_registration"] != "true" do %> {gettext("(registration disabled)")} <% end %>

<%!-- OAuth Methods --%>

{gettext("OAuth Providers")}

{gettext("Enable OAuth (Master Switch)")}

<%!-- Individual OAuth Providers (disabled if master is off) --%>

{gettext("Google Sign-In")}

{gettext("Apple Sign-In")}

{gettext("GitHub Sign-In")}

{gettext("Facebook Sign-In")}

<%!-- OAuth Provider Credential Forms --%> <%= if @settings["oauth_enabled"] == "true" do %> <%!-- Google OAuth Credentials --%>

{gettext("Google OAuth Credentials")}

{gettext("Client ID")}

{gettext("Client Secret")}

<.oauth_setup_instructions callback_url={get_oauth_callback_url(@settings, "google")} copy_hint={gettext("Copy this URL to Google Cloud Console")} > <:steps>

{gettext("Visit")} Google Cloud Console

{gettext("Create project or select existing one")}

{gettext("Go to")} Credentials → Create Credentials → OAuth client ID

{gettext("Select")} Web application {gettext("type")}

{gettext("Add callback URL above to")} Authorized redirect URIs

{gettext("Copy Client ID and Secret to fields above")}

{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Apple OAuth Credentials --%>

{gettext("Apple OAuth Credentials")}

{gettext("Client ID")}

{gettext("Team ID")}

{gettext("Key ID")}

{gettext("Private Key")}

<.oauth_setup_instructions callback_url={get_oauth_callback_url(@settings, "apple")} copy_hint={gettext("Copy this URL to Apple Developer Console")} > <:steps>

{gettext("Visit")} Apple Developer Console

{gettext("Create an App ID or select existing one")}

{gettext("Enable")} Sign in with Apple {gettext("capability")}

{gettext("Create a")} Services ID {gettext("for web authentication")}

{gettext("Configure")} Sign in with Apple {gettext("for the Services ID")}

{gettext("Add callback URL above to")} Return URLs

{gettext("Create a")} Private Key {gettext("with Sign in with Apple enabled")}

{gettext("Copy")} Team ID, Key ID, Client ID ({gettext("Services ID")}), {gettext("and")} Private Key {gettext("to fields above")}

{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- GitHub OAuth Credentials --%>

{gettext("GitHub OAuth Credentials")}

{gettext("Client ID")}

{gettext("Client Secret")}

<.oauth_setup_instructions callback_url={get_oauth_callback_url(@settings, "github")} copy_hint={gettext("Copy this URL to GitHub OAuth Apps")} > <:steps>

{gettext("Visit")} GitHub Developer Settings

{gettext("Go to")} OAuth Apps → New OAuth App

{gettext("Enter")} Application name {gettext("and")} Homepage URL

{gettext("Add callback URL above to")} Authorization callback URL

{gettext("Click")} Register application

{gettext("Copy")} Client ID {gettext("and generate/copy")} Client Secret

{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- Facebook OAuth Credentials --%>

{gettext("Facebook OAuth Credentials")}

{gettext("App ID")}

{gettext("App Secret")}

<.oauth_setup_instructions callback_url={get_oauth_callback_url(@settings, "facebook")} copy_hint={gettext("Copy this URL to Facebook App Settings")} > <:steps>

{gettext("Visit")} Facebook Developers Console

{gettext("Create a new app or select existing one")}

{gettext("Add")} Facebook Login {gettext("product")}

{gettext("Go to")} Facebook Login → Settings

{gettext("Add callback URL above to")} Valid OAuth Redirect URIs

{gettext("Go to")} Settings → Basic

{gettext("Copy")} App ID {gettext("and")} App Secret {gettext("to fields above")}

{gettext("Switch app from")} Development {gettext("to")} Live {gettext("mode")}

{gettext("Click")} Test Credentials {gettext("to verify setup")}

<%!-- OAuth Configuration Notice --%>

<.icon name="hero-information-circle" class="stroke-current shrink-0 h-5 w-5" />

{gettext("OAuth Setup Instructions")}

{gettext("1. Enable the provider above and save settings")}

{gettext("2. Enter your OAuth credentials in the form that appears")}

{gettext("3. Save settings again to store credentials")}

{gettext("4. Click \"Test Credentials\" to verify configuration")}

{gettext( "Note: OAuth providers require ueberauth dependencies to be installed." )}

<%!-- Reload OAuth Configuration Button --%> <% end %>