{% extends "base.html" %}
{% block title %}Email preferences - Makenotwork{% endblock %}
{% block body_attrs %} class="{{ crate::shell::measure(crate::shell::Measure::Contained) }}"{% endblock %}
{% block content %}
{# Reached from a signed link in an email, with no session. Every form here
   carries the same token the page did, because that token is the
   authorisation: asking somebody to log in before they can stop receiving
   email is how "unsubscribe" turns into "mark as spam".

   GET renders. Nothing on this page mutates without a POST, so a mail client
   or link scanner prefetching the URL cannot unsubscribe anyone. #}
<div class="email-result-wrap prefs-wrap">
    <h1 class="brand-h1">Email preferences</h1>

    {% if subscriptions.is_empty() %}
    <p>This address is not subscribed to anything.</p>
    {% else %}
    <p>Choose what you hear about. Changes take effect immediately.</p>

    <ul class="prefs-list">
        {% for sub in subscriptions %}
        <li class="prefs-row{% if sub.subscription_id == origin_subscription %} prefs-row--origin{% endif %}">
            <span class="prefs-name">{{ sub.title }}
                {%- if let Some(owner) = sub.owner_name %}
                {# Who decided this mail, said on the row it belongs to. A
                   project list has two parties behind it and the subscriber
                   should not have to guess which one wrote to them. #}
                <span class="prefs-owner">Sent by {{ owner }}</span>
                {%- endif %}
            </span>
            {% if sub.required %}
            {# Receipts, security and account mail. Listed so the page is an
               honest inventory of what we send, with no toggle, because there
               is no opting out of a receipt. #}
            <span class="prefs-required">Always sent</span>
            {% else %}
            <form method="post" action="/unsubscribe/list" class="inline-form">
                <input type="hidden" name="sub" value="{{ token }}">
                <input type="hidden" name="sig" value="{{ signature }}">
                <input type="hidden" name="target" value="{{ sub.subscription_id }}">
                {% if sub.subscribed() %}
                <input type="hidden" name="action" value="unsubscribe">
                <button type="submit" class="btn-secondary">Unsubscribe</button>
                {% else %}
                <input type="hidden" name="action" value="resubscribe">
                <button type="submit" class="btn-secondary">Resubscribe</button>
                {% endif %}
            </form>
            {% endif %}
        </li>
        {% endfor %}
    </ul>

    <form method="post" action="/unsubscribe/all" class="prefs-all">
        <input type="hidden" name="sub" value="{{ token }}">
        <input type="hidden" name="sig" value="{{ signature }}">
        <button type="submit" class="btn-primary">Unsubscribe from everything</button>
    </form>
    {% endif %}

    {# Article 26 attribution. A subscriber landing here from a creator's mail
       has two parties holding their address, and the page is where they find
       out who, and that one contact answers for both. #}
    <p class="prefs-attribution">
        Makenotwork holds your address and sends this mail. For a project list,
        the creator who owns it decides who is on it and what it says, which
        makes us joint controllers of your address. One contact answers for
        both of us: <a href="mailto:privacy@makenot.work">privacy@makenot.work</a>.
        The full arrangement is on the
        <a href="/docs/mailing-list-data-processing">Mailing List Data Processing</a>
        page.
    </p>

    <p><a href="/">Back to Makenotwork</a></p>
</div>
{% endblock %}