{{!
  Copyright 2016-2017 ForgeRock AS. All Rights Reserved
 
  Use of this code requires a commercial software license with ForgeRock AS.
  or with one of its affiliates. All use shall be exclusively subject
  to such license between the licensee and ForgeRock AS.
}}
<h3>{{t "templates.auth.modules.basicProperties"}}</h3>
<div class="well" id="basicForm">
    <div id="basicFields" class="form-horizontal">
        {{> form/_titaToggle
        property="enabled"
        label="templates.auth.modules.moduleEnabled"
        enabled=config.enabled}}

        {{#each config.properties.resolvers}}

        {{> form/_basicInput
        value=well-known
        label="templates.socialProviders.wellKnown"
        property="properties.resolvers[].well-known"
        default="https://openam.example.com/openam/oauth2/.well-known/openid-configuration"
        noValidation="true"}}

        <input name="properties.resolvers[].name" value="{{name}}" type="hidden" />

        {{> form/_basicInput
        value=client_id
        label="templates.socialProviders.clientId"
        property="properties.resolvers[].client_id"
        required="true"
        noValidation="true"}}

        <div class="form-group">
            <label class="col-sm-3 control-label" for="inputClientSecret">{{t "templates.socialProviders.clientSecret"}}</label>
            <div class="col-sm-6">
                <input id="inputClientSecret" class="form-control" name="properties.resolvers[].client_secret" type="text" {{#if client_secret}} placeholder="********" {{/if}} />
            </div>
        </div>

        {{> form/_tagSelectize
        value=scope
        label="templates.socialProviders.scope"
        property="properties.resolvers[].scope"
        noValidation="true"
        helpKey="templates.socialProviders.scopeHelp" }}

        {{> form/_basicInput
        value=authorization_endpoint
        label="templates.socialProviders.authorizationEndpoint"
        property="properties.resolvers[].authorization_endpoint"
        noValidation="true"}}

        {{> form/_basicInput
        value=token_endpoint
        label="templates.socialProviders.tokenEndpoint"
        property="properties.resolvers[].token_endpoint"
        noValidation="true"}}

        {{> form/_basicInput
        value=end_session_endpoint
        label="templates.socialProviders.endSessionEndpoint"
        property="properties.resolvers[].end_session_endpoint"
        noValidation="true"}}

        <div class="form-group">
            <label class="col-sm-3 control-label">{{t "templates.socialProviders.icon"}}</label>
            <div class="col-sm-6">
                <textarea class="button-html" name="properties.resolvers[].icon">{{#if icon}}{{icon}}{{else}}<button class="btn btn-lg btn-default btn-block btn-social-provider"><img src="images/forgerock_logo.png">Sign in with OpenAM</button>{{/if}}</textarea>
            </div>
        </div>

        {{/each}}

        {{> form/_basicSelect
        property="properties.queryOnResource"
        label="templates.auth.modules.queryOnResource"
        options=resources
        value=config.properties.queryOnResource}}

        {{> form/_tagSelectize
        value=config.properties.defaultUserRoles
        label="templates.auth.modules.defaultUserRole"
        property="properties.defaultUserRoles"
        options=defaultUserRoles
        default="openidm-authorized"}}

    </div>

    {{> authentication/_propertyMapping
    hideUserCredential=true
    authenticationId="userName"
    userRoles="authzRoles"}}
</div>

<h3 class="advanced-toggle">
    <i class="advancedShowHide fa fa-caret-right"></i>
    {{t "templates.auth.modules.advancedProperties"}}
</h3>

<div class="form-horizontal well" id="advancedForm">
    <div id="advancedFields" class="form-horizontal">

    {{> form/_basicInput
    value=config.properties.queryId
    label="templates.auth.modules.queryId"
    property="properties.queryId"
    required="true"
    noValidation="true"}}

    {{> form/_basicInput
    value=config.properties.openIdConnectHeader
    label="templates.auth.modules.openIdConnectHeader"
    property="properties.openIdConnectHeader"
    default="authToken"
    noValidation="true"}}


    {{> authentication/_augmentSecurityContext}}
    {{> authentication/_customProperties}}

    </div>
</div>