@extends('layouts.admin')
@section('title','Security Center')
@section('content')
<div class="page-head"><div><h1 class="page-title">Security Center</h1><p class="page-subtitle">Kontrol perangkat, token mobile, dan kebijakan risiko absensi.</p></div><span class="badge approved"><i data-lucide="shield-check"></i> Tenant isolated</span></div>
<div class="security-grid"><section class="card"><div class="card-head"><strong>Kebijakan Perangkat</strong></div><form method="post" action="{{ route('admin.security.update') }}">@csrf @method('PUT')<div class="card-body stack"><div class="field"><label>Perangkat aktif maksimum per karyawan</label><select class="control" name="mobile_device_limit">@foreach(range(1,5) as $limit)<option value="{{ $limit }}" @selected((int)($settings['mobile_device_limit']??1)===$limit)>{{ $limit }} perangkat</option>@endforeach</select></div><div class="policy-lock"><i data-lucide="camera"></i><div><strong>Camera-only enforced</strong><span>Web dan Android tidak menyediakan galeri.</span></div></div><div class="policy-lock"><i data-lucide="map-pin-check"></i><div><strong>Risk scoring aktif</strong><span>GPS lemah, luar radius, dan mock-location diberi flag.</span></div></div></div><div class="form-actions"><button class="btn btn-gold"><i data-lucide="save"></i> Simpan Kebijakan</button></div></form></section><section class="card"><div class="card-head"><strong>Kontrol Produksi</strong></div><div class="card-body security-checklist"><div><i data-lucide="database-backup"></i><span><strong>Backup terenkripsi</strong><small>Jalankan scheduler harian sesuai docs production.</small></span></div><div><i data-lucide="key-round"></i><span><strong>Secret management</strong><small>APP_DEBUG off dan APP_KEY unik per environment.</small></span></div><div><i data-lucide="scroll-text"></i><span><strong>Audit trail</strong><small>Login, perubahan master, approval, payroll, dan export dicatat.</small></span></div></div></section></div>
<section class="card" style="margin-top:18px"><div class="card-head split"><div><strong>Perangkat Terdaftar</strong><div class="tiny muted">Mencabut perangkat juga menghapus token login mobile.</div></div><span class="badge">{{ $devices->total() }} perangkat</span></div><div class="table-wrap"><table class="data-table"><thead><tr><th>Karyawan</th><th>Perangkat</th><th>Platform</th><th>Terakhir Aktif</th><th>Status</th><th>Aksi</th></tr></thead><tbody>@forelse($devices as $device)<tr><td><strong>{{ $device->user->name }}</strong><div class="tiny muted">{{ $device->user->email }}</div></td><td>{{ $device->device_name }}<div class="tiny muted">{{ Str::mask($device->device_uuid,'•',4,-4) }}</div></td><td>{{ strtoupper($device->platform) }}</td><td>{{ $device->last_seen_at?->diffForHumans() }}</td><td><span class="badge {{ $device->revoked_at?'rejected':'active' }}">{{ $device->revoked_at?'DICABUT':'AKTIF' }}</span></td><td>@unless($device->revoked_at)<form method="post" action="{{ route('admin.security.devices.revoke',$device) }}" data-confirm="Cabut perangkat dan hapus semua token mobile pengguna ini?">@csrf<button class="btn btn-danger btn-sm"><i data-lucide="smartphone-off"></i> Cabut</button></form>@endunless</td></tr>@empty<tr><td colspan="6" class="empty">Belum ada perangkat Android yang terdaftar.</td></tr>@endforelse</tbody></table></div></section>
@endsection