@page
@using Microsoft.AspNetCore.Http
@model CardsModel
@{
    ViewData["Title"] = "Cards";

    if (HttpContext.Session.GetString("authorized") != "true") {
        Response.Redirect("/");
        return;
    }
}

@foreach (var card in Model.Cards) {
    <img src="@card.CardQr" alt="Ticketcode"/>
    <img src="@card.CardSecCode" alt="Sichtmerkmal"/>
    <a href="/Delete?item=card&id=@card.CardId">
        <img style="margin: -50px; height: 450px; transform: rotate(-90deg); position: relative; left: 130px" src='data:image/svg+xml;base64,@card.CardImage.Base64Encode()' alt="Bahncardimage"/>
    </a>
    <br/>
}
<p style="text-align: right">
    Click on the BahnCard Image to remove a card.
</p>
<br/>
<br/>
<br/>
<br/>
<br/>
<br/>
<h3>Get Cards from bahn.de account</h3>
<br/>
<form method="POST" action="/Card">
    <div class="form-group">
        <input type="text" class="form-control" id="InputUser" name="user" placeholder="bahn.de username">
    </div>
    <div class="form-group">
        <input type="password" class="form-control" id="InputPassword" name="pass" placeholder="bahn.de password">
    </div>
    <div class="form-group">
        <input type="text" class="form-control" id="inputName" name="name" placeholder="Last name of traveller">
    </div>
    @Html.AntiForgeryToken()
    <button type="submit" class="btn btn-primary">Submit</button>
</form>