{% extends "base.html" %}
{% block title %}Email preferences - Makenotwork{% endblock %}
{% block body_attrs %} class="{{ crate::shell::measure(crate::shell::Measure::Contained) }}"{% endblock %}
{% block content %}
{# Reached from a signed link in an email, with no session. Every form here
   carries the same token the page did, because that token is the
   authorisation: asking somebody to log in before they can stop receiving
   email is how "unsubscribe" turns into "mark as spam".

   GET renders. Nothing on this page mutates without a POST, so a mail client
   or link scanner prefetching the URL cannot unsubscribe anyone. #}
<div class="email-result-wrap prefs-wrap">
    <h1 class="brand-h1">Email preferences</h1>

    {% if subscriptions.is_empty() %}
    <p>This address is not subscribed to anything.</p>
    {% else %}
    <p>Choose what you hear about. Changes take effect immediately.</p>

    <ul class="prefs-list">
        {% for sub in subscriptions %}
        <li class="prefs-row{% if sub.subscription_id == origin_subscription %} prefs-row--origin{% endif %}">
            <span class="prefs-name">{{ sub.title }}</span>
            {% if sub.required %}
            {# Receipts, security and account mail. Listed so the page is an
               honest inventory of what we send, with no toggle, because there
               is no opting out of a receipt. #}
            <span class="prefs-required">Always sent</span>
            {% else %}
            <form method="post" action="/unsubscribe/list" class="inline-form">
                <input type="hidden" name="sub" value="{{ token }}">
                <input type="hidden" name="sig" value="{{ signature }}">
                <input type="hidden" name="target" value="{{ sub.subscription_id }}">
                {% if sub.subscribed() %}
                <input type="hidden" name="action" value="unsubscribe">
                <button type="submit" class="btn-secondary">Unsubscribe</button>
                {% else %}
                <input type="hidden" name="action" value="resubscribe">
                <button type="submit" class="btn-secondary">Resubscribe</button>
                {% endif %}
            </form>
            {% endif %}
        </li>
        {% endfor %}
    </ul>

    <form method="post" action="/unsubscribe/all" class="prefs-all">
        <input type="hidden" name="sub" value="{{ token }}">
        <input type="hidden" name="sig" value="{{ signature }}">
        <button type="submit" class="btn-primary">Unsubscribe from everything</button>
    </form>
    {% endif %}

    <p><a href="/">Back to Makenotwork</a></p>
</div>
{% endblock %}