contentdb/app/templates/api/create_edit_token.html

{% extends "base.html" %}

{% block title %}
	{% if token %}
		{{ _("Edit - %(name)s", name=token.name) }}
	{% else %}
		{{ _("Create API Token") }}
	{% endif %}
{% endblock %}

{% from "macros/forms.html" import render_field, render_submit_field, render_radio_field %}

{% block content %}
	{% if token %}
		<form class="float-end" method="POST" action="{{ url_for('api.delete_token', username=token.owner.username, id=token.id) }}">
			<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
			<input class="btn btn-danger" type="submit" value="{{ _('Delete') }}">
		</form>
	{% endif %}

	<h1 class="mt-0">{{ self.title() }}</h1>

	{% if token.client %}
		<p class="alert alert-info">
			{{ _("This token was created by the application '%(title)s' by %(author)s.", title=token.client.title, author=token.client.owner.username) }}
			{{ _("Click 'Delete' to revoke access.") }}
		</p>
	{% else %}
		<div class="alert alert-warning">
			{{ _("API Tokens allow scripts to act on your behalf.") }}
			{{ _("Be careful with what/whom you share tokens with, as you are responsible for your account's actions.") }}
		</div>

		{% if token %}
			<div class="card mb-3">
				<div class="card-header">{{ _("Access Token") }}</div>
				<div class="card-body">
					<p>
						{{ _("For security reasons, access tokens will only be shown once. Reset the token if it is lost.") }}
					</p>
					{% if access_token %}
						<input class="form-control my-3" type="text" readonly value="{{ access_token }}" class="form-control">
					{% endif %}
					<form method="POST" action="{{ url_for('api.reset_token', username=token.owner.username, id=token.id) }}">
						<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
						<input class="btn btn-primary" type="submit" value="{{ _('Reset') }}">
					</form>
				</div>
			</div>
		{% endif %}
	{% endif %}

	<form method="POST" action="" enctype="multipart/form-data">
		{{ form.hidden_tag() }}

		{{ render_field(form.name, placeholder="Human readable", hint=_("Human-readable name to tell tokens apart.")) }}
		{{ render_field(form.package, hint=_("Recommended: Only allows token to interact with a particular package.")) }}

		{{ render_submit_field(form.submit) }}
	</form>
{% endblock %}