@escalated-dev/escalated 0.8.0 → 0.9.0

package/src/pages/Admin/Reports/SlaTrends.vue

@@ -1,183 +1,183 @@
-<script setup>
-import EscalatedLayout from '../../../components/EscalatedLayout.vue';
-import KpiCard from '../../../components/KpiCard.vue';
-import ReportChart from '../../../components/ReportChart.vue';
-import PeriodSelector from '../../../components/PeriodSelector.vue';
-import ReportExportButton from '../../../components/ReportExportButton.vue';
-import { router, Link } from '@inertiajs/vue3';
-import { ref, computed } from 'vue';
-
-const props = defineProps({
-    period_days: { type: Number, default: 30 },
-    breach_trend: { type: Array, default: () => [] },
-    breach_by_type_trend: { type: Array, default: () => [] },
-    breach_by_department: { type: Array, default: () => [] },
-    breach_by_priority: { type: Array, default: () => [] },
-    at_risk_tickets: { type: Array, default: () => [] },
-    total_breaches: { type: Number, default: 0 },
-    breach_rate: { type: Number, default: 0 },
-    first_response_breaches: { type: Number, default: 0 },
-    resolution_breaches: { type: Number, default: 0 },
-});
-
-const periodDays = ref(props.period_days);
-
-function changePeriod(days) {
-    periodDays.value = days;
-    router.get(route('escalated.admin.reports.sla-trends'), { days }, { preserveState: true });
-}
-
-const riskCategories = computed(() => {
-    const tickets = props.at_risk_tickets || [];
-    return {
-        critical: tickets.filter((t) => t.hours_remaining <= 1),
-        warning: tickets.filter((t) => t.hours_remaining > 1 && t.hours_remaining <= 4),
-        watch: tickets.filter((t) => t.hours_remaining > 4 && t.hours_remaining <= 8),
-    };
-});
-</script>
-
-<template>
-    <EscalatedLayout title="SLA Breach Trends">
-        <div class="mb-6 flex items-center justify-between">
-            <PeriodSelector :model-value="periodDays" @update:model-value="changePeriod" />
-            <div class="flex items-center gap-3">
-                <ReportExportButton report-name="sla-trends" :period-days="periodDays" />
-                <Link
-                    :href="route('escalated.admin.reports')"
-                    class="text-sm text-[var(--esc-panel-text-muted)] hover:text-[var(--esc-panel-text-secondary)]"
-                >
-                    &larr; Back
-                </Link>
-            </div>
-        </div>
-
-        <!-- KPI Cards -->
-        <div class="mb-6 grid grid-cols-2 gap-4 md:grid-cols-4">
-            <KpiCard
-                label="Total Breaches"
-                :value="total_breaches"
-                :icon="'M12 9v3.75m-9.303 3.376c-.866 1.5.217 3.374 1.948 3.374h14.71c1.73 0 2.813-1.874 1.948-3.374L13.949 3.378c-.866-1.5-3.032-1.5-3.898 0L2.697 16.126zM12 15.75h.007v.008H12v-.008z'"
-            />
-            <KpiCard
-                label="Breach Rate"
-                :value="`${breach_rate}%`"
-                :icon="'M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 013 19.875v-6.75z'"
-            />
-            <KpiCard
-                label="FRT Breaches"
-                :value="first_response_breaches"
-                :icon="'M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z'"
-            />
-            <KpiCard
-                label="Resolution Breaches"
-                :value="resolution_breaches"
-                :icon="'M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z'"
-            />
-        </div>
-
-        <!-- Charts -->
-        <div class="mb-6 grid grid-cols-1 gap-6 lg:grid-cols-2">
-            <ReportChart type="line" title="Breach Count Over Time" :data="breach_trend" :colors="['#ef4444']" />
-            <ReportChart
-                type="stacked-bar"
-                title="First Response vs Resolution Breaches"
-                :data="breach_by_type_trend"
-                :colors="['#f59e0b', '#ef4444']"
-            />
-            <ReportChart
-                type="bar"
-                title="Breach Rate by Department"
-                :data="breach_by_department"
-                :colors="['#8b5cf6']"
-            />
-            <ReportChart type="bar" title="Breach Rate by Priority" :data="breach_by_priority" :colors="['#06b6d4']" />
-        </div>
-
-        <!-- At Risk Panel -->
-        <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-5">
-            <h3 class="mb-4 text-sm font-semibold text-[var(--esc-panel-text-secondary)]">
-                At Risk - Approaching SLA Breach
-            </h3>
-            <div v-if="at_risk_tickets?.length" class="space-y-4">
-                <!-- Critical: < 1h -->
-                <div v-if="riskCategories.critical.length">
-                    <div class="mb-2 flex items-center gap-2">
-                        <span class="inline-block h-2 w-2 rounded-full bg-red-500"></span>
-                        <span class="text-xs font-semibold uppercase tracking-wider text-red-400"
-                            >Critical (&lt;1h)</span
-                        >
-                    </div>
-                    <div class="space-y-1">
-                        <div
-                            v-for="ticket in riskCategories.critical"
-                            :key="ticket.id"
-                            class="flex items-center justify-between rounded-lg bg-red-500/5 px-3 py-2 border border-red-500/10"
-                        >
-                            <div class="flex items-center gap-3">
-                                <span class="font-mono text-xs text-red-400">{{ ticket.reference }}</span>
-                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
-                                    ticket.subject
-                                }}</span>
-                            </div>
-                            <span class="text-xs font-bold text-red-400">{{ ticket.hours_remaining }}h remaining</span>
-                        </div>
-                    </div>
-                </div>
-
-                <!-- Warning: 1-4h -->
-                <div v-if="riskCategories.warning.length">
-                    <div class="mb-2 flex items-center gap-2">
-                        <span class="inline-block h-2 w-2 rounded-full bg-amber-500"></span>
-                        <span class="text-xs font-semibold uppercase tracking-wider text-amber-400"
-                            >Warning (1-4h)</span
-                        >
-                    </div>
-                    <div class="space-y-1">
-                        <div
-                            v-for="ticket in riskCategories.warning"
-                            :key="ticket.id"
-                            class="flex items-center justify-between rounded-lg bg-amber-500/5 px-3 py-2 border border-amber-500/10"
-                        >
-                            <div class="flex items-center gap-3">
-                                <span class="font-mono text-xs text-amber-400">{{ ticket.reference }}</span>
-                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
-                                    ticket.subject
-                                }}</span>
-                            </div>
-                            <span class="text-xs font-bold text-amber-400"
-                                >{{ ticket.hours_remaining }}h remaining</span
-                            >
-                        </div>
-                    </div>
-                </div>
-
-                <!-- Watch: 4-8h -->
-                <div v-if="riskCategories.watch.length">
-                    <div class="mb-2 flex items-center gap-2">
-                        <span class="inline-block h-2 w-2 rounded-full bg-blue-500"></span>
-                        <span class="text-xs font-semibold uppercase tracking-wider text-blue-400">Watch (4-8h)</span>
-                    </div>
-                    <div class="space-y-1">
-                        <div
-                            v-for="ticket in riskCategories.watch"
-                            :key="ticket.id"
-                            class="flex items-center justify-between rounded-lg bg-blue-500/5 px-3 py-2 border border-blue-500/10"
-                        >
-                            <div class="flex items-center gap-3">
-                                <span class="font-mono text-xs text-blue-400">{{ ticket.reference }}</span>
-                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
-                                    ticket.subject
-                                }}</span>
-                            </div>
-                            <span class="text-xs font-bold text-blue-400">{{ ticket.hours_remaining }}h remaining</span>
-                        </div>
-                    </div>
-                </div>
-            </div>
-            <div v-else class="py-6 text-center text-sm text-[var(--esc-panel-text-muted)]">
-                No tickets currently at risk of breaching SLA.
-            </div>
-        </div>
-    </EscalatedLayout>
-</template>
+<script setup>
+import EscalatedLayout from '../../../components/EscalatedLayout.vue';
+import KpiCard from '../../../components/KpiCard.vue';
+import ReportChart from '../../../components/ReportChart.vue';
+import PeriodSelector from '../../../components/PeriodSelector.vue';
+import ReportExportButton from '../../../components/ReportExportButton.vue';
+import { router, Link } from '@inertiajs/vue3';
+import { ref, computed } from 'vue';
+
+const props = defineProps({
+    period_days: { type: Number, default: 30 },
+    breach_trend: { type: Array, default: () => [] },
+    breach_by_type_trend: { type: Array, default: () => [] },
+    breach_by_department: { type: Array, default: () => [] },
+    breach_by_priority: { type: Array, default: () => [] },
+    at_risk_tickets: { type: Array, default: () => [] },
+    total_breaches: { type: Number, default: 0 },
+    breach_rate: { type: Number, default: 0 },
+    first_response_breaches: { type: Number, default: 0 },
+    resolution_breaches: { type: Number, default: 0 },
+});
+
+const periodDays = ref(props.period_days);
+
+function changePeriod(days) {
+    periodDays.value = days;
+    router.get(route('escalated.admin.reports.sla-trends'), { days }, { preserveState: true });
+}
+
+const riskCategories = computed(() => {
+    const tickets = props.at_risk_tickets || [];
+    return {
+        critical: tickets.filter((t) => t.hours_remaining <= 1),
+        warning: tickets.filter((t) => t.hours_remaining > 1 && t.hours_remaining <= 4),
+        watch: tickets.filter((t) => t.hours_remaining > 4 && t.hours_remaining <= 8),
+    };
+});
+</script>
+
+<template>
+    <EscalatedLayout title="SLA Breach Trends">
+        <div class="mb-6 flex items-center justify-between">
+            <PeriodSelector :model-value="periodDays" @update:model-value="changePeriod" />
+            <div class="flex items-center gap-3">
+                <ReportExportButton report-name="sla-trends" :period-days="periodDays" />
+                <Link
+                    :href="route('escalated.admin.reports')"
+                    class="text-sm text-[var(--esc-panel-text-muted)] hover:text-[var(--esc-panel-text-secondary)]"
+                >
+                    &larr; Back
+                </Link>
+            </div>
+        </div>
+
+        <!-- KPI Cards -->
+        <div class="mb-6 grid grid-cols-2 gap-4 md:grid-cols-4">
+            <KpiCard
+                label="Total Breaches"
+                :value="total_breaches"
+                :icon="'M12 9v3.75m-9.303 3.376c-.866 1.5.217 3.374 1.948 3.374h14.71c1.73 0 2.813-1.874 1.948-3.374L13.949 3.378c-.866-1.5-3.032-1.5-3.898 0L2.697 16.126zM12 15.75h.007v.008H12v-.008z'"
+            />
+            <KpiCard
+                label="Breach Rate"
+                :value="`${breach_rate}%`"
+                :icon="'M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 013 19.875v-6.75z'"
+            />
+            <KpiCard
+                label="FRT Breaches"
+                :value="first_response_breaches"
+                :icon="'M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z'"
+            />
+            <KpiCard
+                label="Resolution Breaches"
+                :value="resolution_breaches"
+                :icon="'M9 12.75L11.25 15 15 9.75M21 12a9 9 0 11-18 0 9 9 0 0118 0z'"
+            />
+        </div>
+
+        <!-- Charts -->
+        <div class="mb-6 grid grid-cols-1 gap-6 lg:grid-cols-2">
+            <ReportChart type="line" title="Breach Count Over Time" :data="breach_trend" :colors="['#ef4444']" />
+            <ReportChart
+                type="stacked-bar"
+                title="First Response vs Resolution Breaches"
+                :data="breach_by_type_trend"
+                :colors="['#f59e0b', '#ef4444']"
+            />
+            <ReportChart
+                type="bar"
+                title="Breach Rate by Department"
+                :data="breach_by_department"
+                :colors="['#8b5cf6']"
+            />
+            <ReportChart type="bar" title="Breach Rate by Priority" :data="breach_by_priority" :colors="['#06b6d4']" />
+        </div>
+
+        <!-- At Risk Panel -->
+        <div class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-5">
+            <h3 class="mb-4 text-sm font-semibold text-[var(--esc-panel-text-secondary)]">
+                At Risk - Approaching SLA Breach
+            </h3>
+            <div v-if="at_risk_tickets?.length" class="space-y-4">
+                <!-- Critical: < 1h -->
+                <div v-if="riskCategories.critical.length">
+                    <div class="mb-2 flex items-center gap-2">
+                        <span class="inline-block h-2 w-2 rounded-full bg-red-500"></span>
+                        <span class="text-xs font-semibold uppercase tracking-wider text-red-400"
+                            >Critical (&lt;1h)</span
+                        >
+                    </div>
+                    <div class="space-y-1">
+                        <div
+                            v-for="ticket in riskCategories.critical"
+                            :key="ticket.id"
+                            class="flex items-center justify-between rounded-lg bg-red-500/5 px-3 py-2 border border-red-500/10"
+                        >
+                            <div class="flex items-center gap-3">
+                                <span class="font-mono text-xs text-red-400">{{ ticket.reference }}</span>
+                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
+                                    ticket.subject
+                                }}</span>
+                            </div>
+                            <span class="text-xs font-bold text-red-400">{{ ticket.hours_remaining }}h remaining</span>
+                        </div>
+                    </div>
+                </div>
+
+                <!-- Warning: 1-4h -->
+                <div v-if="riskCategories.warning.length">
+                    <div class="mb-2 flex items-center gap-2">
+                        <span class="inline-block h-2 w-2 rounded-full bg-amber-500"></span>
+                        <span class="text-xs font-semibold uppercase tracking-wider text-amber-400"
+                            >Warning (1-4h)</span
+                        >
+                    </div>
+                    <div class="space-y-1">
+                        <div
+                            v-for="ticket in riskCategories.warning"
+                            :key="ticket.id"
+                            class="flex items-center justify-between rounded-lg bg-amber-500/5 px-3 py-2 border border-amber-500/10"
+                        >
+                            <div class="flex items-center gap-3">
+                                <span class="font-mono text-xs text-amber-400">{{ ticket.reference }}</span>
+                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
+                                    ticket.subject
+                                }}</span>
+                            </div>
+                            <span class="text-xs font-bold text-amber-400"
+                                >{{ ticket.hours_remaining }}h remaining</span
+                            >
+                        </div>
+                    </div>
+                </div>
+
+                <!-- Watch: 4-8h -->
+                <div v-if="riskCategories.watch.length">
+                    <div class="mb-2 flex items-center gap-2">
+                        <span class="inline-block h-2 w-2 rounded-full bg-blue-500"></span>
+                        <span class="text-xs font-semibold uppercase tracking-wider text-blue-400">Watch (4-8h)</span>
+                    </div>
+                    <div class="space-y-1">
+                        <div
+                            v-for="ticket in riskCategories.watch"
+                            :key="ticket.id"
+                            class="flex items-center justify-between rounded-lg bg-blue-500/5 px-3 py-2 border border-blue-500/10"
+                        >
+                            <div class="flex items-center gap-3">
+                                <span class="font-mono text-xs text-blue-400">{{ ticket.reference }}</span>
+                                <span class="truncate text-sm text-[var(--esc-panel-text-secondary)]">{{
+                                    ticket.subject
+                                }}</span>
+                            </div>
+                            <span class="text-xs font-bold text-blue-400">{{ ticket.hours_remaining }}h remaining</span>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            <div v-else class="py-6 text-center text-sm text-[var(--esc-panel-text-muted)]">
+                No tickets currently at risk of breaching SLA.
+            </div>
+        </div>
+    </EscalatedLayout>
+</template>

package/src/pages/Admin/Settings/SsoSettings.vue

@@ -8,14 +8,34 @@ const form = useForm({
     sso_provider: props.settings.sso_provider ?? 'none',
     sso_entity_id: props.settings.sso_entity_id ?? '',
     sso_url: props.settings.sso_url ?? '',
+    sso_login_url: props.settings.sso_login_url ?? props.settings.sso_url ?? '',
+    sso_logout_url: props.settings.sso_logout_url ?? '',
+    sso_metadata_url: props.settings.sso_metadata_url ?? '',
     sso_certificate: props.settings.sso_certificate ?? '',
     sso_attr_email: props.settings.sso_attr_email ?? 'email',
     sso_attr_name: props.settings.sso_attr_name ?? 'name',
     sso_attr_role: props.settings.sso_attr_role ?? 'role',
     sso_jwt_secret: props.settings.sso_jwt_secret ?? '',
     sso_jwt_algorithm: props.settings.sso_jwt_algorithm ?? 'HS256',
+    sso_oauth_authorize_url: props.settings.sso_oauth_authorize_url ?? '',
+    sso_oauth_token_url: props.settings.sso_oauth_token_url ?? '',
+    sso_oauth_userinfo_url: props.settings.sso_oauth_userinfo_url ?? '',
+    sso_oauth_client_id: props.settings.sso_oauth_client_id ?? '',
+    sso_oauth_client_secret: props.settings.sso_oauth_client_secret ?? '',
+    sso_oauth_scopes: props.settings.sso_oauth_scopes ?? 'openid profile email',
 });
 
+function readCertificate(event) {
+    const [file] = event.target.files ?? [];
+    if (!file) return;
+
+    const reader = new window.FileReader();
+    reader.onload = () => {
+        form.sso_certificate = typeof reader.result === 'string' ? reader.result : '';
+    };
+    reader.readAsText(file);
+}
+
 function submit() {
     form.post(route('escalated.admin.settings.sso.update'));
 }
@@ -42,6 +62,7 @@ function submit() {
                             <option value="none">None (disabled)</option>
                             <option value="saml">SAML 2.0</option>
                             <option value="jwt">JWT</option>
+                            <option value="oauth">OAuth 2.0 / OIDC</option>
                         </select>
                     </div>
                 </div>
@@ -72,16 +93,48 @@ function submit() {
                         </div>
                     </div>
                     <div>
-                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]">SSO URL</label>
+                        <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                            >Login URL</label
+                        >
                         <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">The Single Sign-On URL endpoint</p>
                         <input
-                            v-model="form.sso_url"
+                            v-model="form.sso_login_url"
                             type="url"
                             placeholder="https://idp.example.com/sso"
                             class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
                         />
-                        <div v-if="form.errors.sso_url" class="mt-1 text-sm text-rose-400">
-                            {{ form.errors.sso_url }}
+                        <div v-if="form.errors.sso_login_url" class="mt-1 text-sm text-rose-400">
+                            {{ form.errors.sso_login_url }}
+                        </div>
+                    </div>
+                    <div class="grid gap-5 md:grid-cols-2">
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Logout URL</label
+                            >
+                            <input
+                                v-model="form.sso_logout_url"
+                                type="url"
+                                placeholder="https://idp.example.com/logout"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_logout_url" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_logout_url }}
+                            </div>
+                        </div>
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Metadata URL</label
+                            >
+                            <input
+                                v-model="form.sso_metadata_url"
+                                type="url"
+                                placeholder="https://idp.example.com/metadata"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_metadata_url" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_metadata_url }}
+                            </div>
                         </div>
                     </div>
                     <div>
@@ -91,6 +144,12 @@ function submit() {
                         <p class="mt-0.5 text-xs text-[var(--esc-panel-text-muted)]">
                             X.509 certificate from your Identity Provider (PEM format)
                         </p>
+                        <input
+                            type="file"
+                            accept=".pem,.crt,.cer,.txt"
+                            class="mt-2 block text-xs text-[var(--esc-panel-text-muted)]"
+                            @change="readCertificate"
+                        />
                         <textarea
                             v-model="form.sso_certificate"
                             rows="6"
@@ -139,6 +198,8 @@ function submit() {
                             <option value="HS384">HS384</option>
                             <option value="HS512">HS512</option>
                             <option value="RS256">RS256</option>
+                            <option value="RS384">RS384</option>
+                            <option value="RS512">RS512</option>
                         </select>
                     </div>
                     <div>
@@ -156,6 +217,98 @@ function submit() {
                 </div>
             </div>
 
+            <div
+                v-if="form.sso_provider === 'oauth'"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <h3 class="mb-5 text-sm font-semibold text-[var(--esc-panel-text)]">OAuth / OIDC Configuration</h3>
+                <div class="space-y-5">
+                    <div class="grid gap-5 md:grid-cols-2">
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Authorize URL</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_authorize_url"
+                                type="url"
+                                placeholder="https://idp.example.com/oauth/authorize"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_oauth_authorize_url" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_oauth_authorize_url }}
+                            </div>
+                        </div>
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Token URL</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_token_url"
+                                type="url"
+                                placeholder="https://idp.example.com/oauth/token"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_oauth_token_url" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_oauth_token_url }}
+                            </div>
+                        </div>
+                    </div>
+                    <div class="grid gap-5 md:grid-cols-2">
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Userinfo URL</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_userinfo_url"
+                                type="url"
+                                placeholder="https://idp.example.com/oauth/userinfo"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_oauth_userinfo_url" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_oauth_userinfo_url }}
+                            </div>
+                        </div>
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Scopes</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_scopes"
+                                type="text"
+                                placeholder="openid profile email"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                        </div>
+                    </div>
+                    <div class="grid gap-5 md:grid-cols-2">
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Client ID</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_client_id"
+                                type="text"
+                                placeholder="escalated-admin"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] placeholder-[var(--esc-panel-text-muted)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                            <div v-if="form.errors.sso_oauth_client_id" class="mt-1 text-sm text-rose-400">
+                                {{ form.errors.sso_oauth_client_id }}
+                            </div>
+                        </div>
+                        <div>
+                            <label class="block text-sm font-medium text-[var(--esc-panel-text-secondary)]"
+                                >Client Secret</label
+                            >
+                            <input
+                                v-model="form.sso_oauth_client_secret"
+                                type="password"
+                                class="mt-2 w-full rounded-lg border border-[var(--esc-panel-border-input)] bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-sm text-[var(--esc-panel-text-secondary)] focus:border-[var(--esc-panel-border-input)] focus:outline-none focus:ring-1 focus:ring-[var(--esc-panel-border-input)]"
+                            />
+                        </div>
+                    </div>
+                </div>
+            </div>
+
             <!-- Attribute Mapping -->
             <div
                 v-if="form.sso_provider !== 'none'"

package/src/pages/Admin/Settings/TwoFactor.vue

@@ -12,6 +12,7 @@ defineProps({
 const page = usePage();
 const showSetup = ref(false);
 const setupData = computed(() => page.props.flash?.two_factor_setup);
+const confirmedData = computed(() => page.props.flash?.two_factor_confirmed);
 
 function startSetup() {
     router.post(
@@ -98,12 +99,37 @@ function disable() {
                 v-if="setupData && !enabled"
                 class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
             >
-                <TwoFactorSetup
-                    :qr-uri="setupData.qr_uri"
-                    :recovery-codes="setupData.recovery_codes"
-                    @confirm="confirmCode"
-                    @cancel="showSetup = false"
-                />
+                <TwoFactorSetup :qr-uri="setupData.qr_uri" @confirm="confirmCode" @cancel="showSetup = false" />
+            </div>
+
+            <div
+                v-if="confirmedData?.recovery_codes?.length"
+                class="rounded-xl border border-[var(--esc-panel-border)] bg-[var(--esc-panel-surface)] p-6"
+            >
+                <div class="flex items-start justify-between gap-4">
+                    <div>
+                        <h3 class="text-sm font-semibold text-[var(--esc-panel-text)]">Recovery Codes</h3>
+                        <p class="mt-2 text-sm text-[var(--esc-panel-text-tertiary)]">
+                            Save these codes now. Each one can be used once if you lose access to your authenticator.
+                        </p>
+                    </div>
+                    <button
+                        type="button"
+                        class="rounded-lg border border-[var(--esc-panel-border)] px-4 py-2 text-sm text-[var(--esc-panel-text-secondary)] hover:bg-[var(--esc-panel-surface-alt)]"
+                        @click="navigator.clipboard?.writeText(confirmedData.recovery_codes.join('\n'))"
+                    >
+                        Copy Codes
+                    </button>
+                </div>
+                <div class="mt-4 grid gap-2 md:grid-cols-2">
+                    <code
+                        v-for="code in confirmedData.recovery_codes"
+                        :key="code"
+                        class="rounded-lg bg-[var(--esc-panel-surface-alt)] px-3 py-2 text-center text-sm font-mono text-[var(--esc-panel-text-secondary)]"
+                    >
+                        {{ code }}
+                    </code>
+                </div>
             </div>
         </div>
     </EscalatedLayout>