<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>eData Staff Portal</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <style>
        body {
            background-color: #f8f9fa;
            height: 100vh;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        .container {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100%;
        }
        .login-container {
            background-color: white;
            border-radius: 10px;
            box-shadow: 0 0 20px rgba(0,0,0,0.1);
            padding: 30px;
            width: 100%;
            max-width: 400px;
            margin: 0 auto;
        }
        .logo-container {
            text-align: center;
            margin-bottom: 30px;
        }
        .logo-container img {
            max-width: 200px;
            height: auto;
        }
        .btn-primary {
            background-color: #007bff;
            border-color: #007bff;
            width: 100%;
        }
        .otp-container {
            display: none;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="login-container">
            <div class="logo-container">
                <img src="eData_logo.avif" alt="eData Logo">
            </div>
            
            <div id="email-container">
                <h4 class="text-center mb-4">Staff Portal Login</h4>
                <div class="mb-3">
                    <label for="email" class="form-label">Email Address</label>
                    <input type="email" class="form-control" id="email" placeholder="name@edata.ae" required>
                </div>
                <button type="button" class="btn btn-primary" id="request-otp-btn">Request OTP</button>
            </div>
            
            <div id="otp-container" class="otp-container">
                <h4 class="text-center mb-4">Enter OTP</h4>
                <p class="text-muted text-center mb-4">An OTP has been sent to your email</p>
                <div class="mb-3">
                    <label for="otp" class="form-label">One-Time Password</label>
                    <input type="text" class="form-control" id="otp" placeholder="Enter OTP" required>
                </div>
                <button type="button" class="btn btn-primary" id="verify-otp-btn">Verify OTP</button>
                <div class="text-center mt-3">
                    <a href="#" id="resend-otp">Resend OTP</a> | 
                    <a href="#" id="back-to-email">Change Email</a>
                </div>
            </div>
            
            <div id="error-message" class="mt-3 text-danger text-center"></div>
        </div>
    </div>

    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
    <script>
        document.addEventListener('DOMContentLoaded', function() {
            // Check if user is already authenticated
            checkAuthStatus();
            
            const emailContainer = document.getElementById('email-container');
            const otpContainer = document.getElementById('otp-container');
            const requestOtpBtn = document.getElementById('request-otp-btn');
            const verifyOtpBtn = document.getElementById('verify-otp-btn');
            const resendOtpBtn = document.getElementById('resend-otp');
            const backToEmailBtn = document.getElementById('back-to-email');
            const errorMessage = document.getElementById('error-message');
            
            requestOtpBtn.addEventListener('click', function() {
                const email = document.getElementById('email').value;
                if (!email || !email.includes('@')) {
                    errorMessage.textContent = 'Please enter a valid email address';
                    return;
                }
                
                // Make API call to request OTP
                fetch('/api/request-otp', {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({ email })
                })
                .then(response => response.json())
                .then(data => {
                    if (data.success) {
                        emailContainer.style.display = 'none';
                        otpContainer.style.display = 'block';
                        errorMessage.textContent = '';
                    } else {
                        errorMessage.textContent = data.message || 'Error requesting OTP';
                    }
                })
                .catch(error => {
                    errorMessage.textContent = 'Server error. Please try again.';
                    console.error('Error:', error);
                });
            });
            
            verifyOtpBtn.addEventListener('click', function() {
                const email = document.getElementById('email').value;
                const otp = document.getElementById('otp').value;
                
                if (!otp) {
                    errorMessage.textContent = 'Please enter the OTP';
                    return;
                }
                
                // Make API call to verify OTP
                fetch('/api/verify-otp', {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({ email, otp })
                })
                .then(response => response.json())
                .then(data => {
                    if (data.success) {
                        window.location.href = 'landing.html';
                    } else {
                        errorMessage.textContent = data.message || 'Invalid OTP';
                    }
                })
                .catch(error => {
                    errorMessage.textContent = 'Server error. Please try again.';
                    console.error('Error:', error);
                });
            });
            
            resendOtpBtn.addEventListener('click', function(e) {
                e.preventDefault();
                const email = document.getElementById('email').value;
                
                // Make API call to resend OTP
                fetch('/api/request-otp', {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json'
                    },
                    body: JSON.stringify({ email })
                })
                .then(response => response.json())
                .then(data => {
                    if (data.success) {
                        errorMessage.textContent = 'OTP resent successfully';
                        errorMessage.style.color = 'green';
                    } else {
                        errorMessage.textContent = data.message || 'Error resending OTP';
                        errorMessage.style.color = 'red';
                    }
                })
                .catch(error => {
                    errorMessage.textContent = 'Server error. Please try again.';
                    errorMessage.style.color = 'red';
                    console.error('Error:', error);
                });
            });
            
            backToEmailBtn.addEventListener('click', function(e) {
                e.preventDefault();
                emailContainer.style.display = 'block';
                otpContainer.style.display = 'none';
                errorMessage.textContent = '';
            });
        });
        
        // Function to check authentication status
        function checkAuthStatus() {
            fetch('/api/auth-status', {
                method: 'GET',
                credentials: 'include' // Important for cookies
            })
            .then(response => response.json())
            .then(data => {
                if (data.success && data.authenticated) {
                    // User is already authenticated, redirect to landing page
                    if (data.user.isAdmin) {
                        // If user is admin, give option to go to admin page
                        const adminConfirm = confirm('You are already logged in. Go to admin panel?');
                        if (adminConfirm) {
                            window.location.href = 'admin.html';
                        } else {
                            window.location.href = 'landing.html';
                        }
                    } else {
                        // Regular user goes straight to landing page
                        window.location.href = 'landing.html';
                    }
                }
                // If not authenticated, the login form will be shown (default behavior)
            })
            .catch(error => {
                console.error('Auth check error:', error);
                // Show login form on error (default behavior)
            });
        }
    </script>
</body>
</html>