{% extends "shell.html" %}
{% block title %}{{ app_name }}{% endblock %}

{% block content %}
<div class="card">
  <h1>Signed in</h1>
  <p>Replace this page with your application. What is already wired:</p>
  <ul>
    <li>the session guard (every route protected unless allowlisted)</li>
    <li>CSRF on state-changing requests, via <code>api.post</code></li>
    <li>a <code>Principal</code> carrying this account's scopes and organisation</li>
    <li>sign-up, email confirmation, password recovery and an approval gate</li>
    <li>passkeys as a second factor, and API tokens for machine callers</li>
    <li>the sidebar beside this - declared in <code>app/endpoints/shell.py</code></li>
  </ul>
  <pre id="me">loading…</pre>
</div>
{% endblock %}

{% block page_scripts %}
<script>
  api.get("/api/me")
    .then((data) => { document.getElementById("me").textContent = JSON.stringify(data, null, 2); })
    .catch((err) => { document.getElementById("me").textContent = err.message; });
</script>
{% endblock %}