@extends('layouts.user')
@section('title', 'Security Settings')
@section('content')
<h1 class="text-2xl font-bold mb-6">Security Settings</h1>
<div class="bg-white rounded-xl shadow p-8 max-w-lg">
    <h2 class="font-bold mb-4">Change Password</h2>
    <form method="POST" action="{{ route('user.security.password') }}" class="space-y-4">
        @csrf
        <input name="current_password" type="password" placeholder="Current Password" class="w-full border rounded-lg px-4 py-2" required>
        <input name="password" type="password" placeholder="New Password" class="w-full border rounded-lg px-4 py-2" required>
        <input name="password_confirmation" type="password" placeholder="Confirm New Password" class="w-full border rounded-lg px-4 py-2" required>
        <button class="px-6 py-3 bg-indigo-600 text-white rounded-lg">Update Password</button>
    </form>

    <hr class="my-6">
    <h2 class="font-bold mb-2">Two-Factor Authentication</h2>
    <p class="text-sm text-gray-500">Status: {{ $user->two_factor_enabled ? 'Enabled' : 'Disabled' }}</p>
    <p class="text-xs text-gray-400 mt-2">2FA setup flow to be implemented in a later phase.</p>
</div>
@endsection