@extends('layouts.app') @section('content')
<div class="card narrow"><h3>Two-factor authentication</h3><p class="muted">Protect your account with a standard TOTP authenticator.</p>
@if(auth()->user()->two_factor_enabled)
<div class="notice">✓ 2FA is enabled.</div><h4>Recovery codes</h4><pre>{{ implode("\n", $recovery ?? []) }}</pre><form method="post" action="{{ route('security.2fa.disable') }}">@csrf<label>Authenticator code<input class="field" name="code" inputmode="numeric" maxlength="8" required></label><button class="btn danger">Disable 2FA</button></form>
@else
<p>Secret: <code>{{ $secret }}</code></p><p class="muted">Add the secret to Google Authenticator, Microsoft Authenticator, Authy, or another TOTP app. Then enter the current code.</p><div class="card"><small>OTP URI</small><code style="word-break:break-all">{{ $qr }}</code></div><form method="post" action="{{ route('security.2fa') }}">@csrf<label>Authenticator code<input class="field" name="code" inputmode="numeric" maxlength="8" required></label><button class="btn">Enable 2FA</button></form>@endif</div>@endsection