<?php declare(strict_types=1); ?>

<!-- Display the two-factor authentication form -->

<?php if (!TfSession::isAdmin()): ?>

<form class="form-horizontal" action="login.php" method="post" role="form" accept-charset="UTF-8">
    
    <!-- Password -->
    <div class="col col-md-4 offset-md-4 form-group input-group">
        <input type="password" class="form-control is-valid" name="password" id="password" placeholder="<?php echo TFISH_PASSWORD; ?>" required>
        <div class="input-group-append">
            <span class="input-group-text" id="password-addon"><i class="fas fa-lock"></i></span>
        </div>
    </div>
    
    <!-- Yubikey -->
    <div class="col col-md-4 offset-md-4 form-group input-group">
        <input type="password" class="form-control is-valid" name="yubikeyOtp" id="yubikeyOtp" placeholder="<?php echo TFISH_YUBIKEY; ?>" required>
        <div class="input-group-append">
            <span class="input-group-text" id="password-addon"><i class="fas fa-key"></i></span>
        </div>
    </div>

    <!-- Submit -->
    <div class="form-group col col-md-4 offset-md-4">
        <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>" />
        <input type="hidden" name="op" value="login" />
        <button type="submit" class="btn btn-primary float-left"><?php echo TFISH_SUBMIT ?></button>
    </div>
    
</form>

<?php else: ?>

<p><?php echo TFISH_YOU_ARE_ALREADY_LOGGED_IN . ' <a href="' . TFISH_URL . 'admin/login.php?op=logout">' . TFISH_LOGOUT . '.</a>'; ?></p>

<?php endif; ?>