++ add backup totale applicativo

resources/views/auth/password-change.blade.php

@@ -0,0 +1,77 @@
+<x-layouts.guest title="Cambio password">
+    <div class="bg-white rounded-xl shadow-lg border border-gray-200 p-6 space-y-5">
+        <div>
+            <h1 class="text-xl font-bold text-gray-900">
+                {{ $forced ? 'Imposta una nuova password' : 'Cambia password' }}
+            </h1>
+            <p class="mt-1 text-sm text-gray-500">
+                Account: <span class="font-medium text-gray-700 break-all">{{ $user->email }}</span>
+            </p>
+        </div>
+
+        @if(session('success'))
+            <div class="rounded-lg bg-green-50 border border-green-200 px-4 py-2.5 text-sm text-green-800">
+                {{ session('success') }}
+            </div>
+        @endif
+
+        @if($forced)
+            <div class="rounded-lg border border-amber-300 bg-amber-50 px-4 py-3 text-sm text-amber-800">
+                <strong>Ripristino da backup eseguito.</strong>
+                Il pacchetto di backup contiene le password di tutti gli account, quindi
+                le vecchie credenziali non sono piu&rsquo; considerate sicure. Scegli una
+                nuova password per continuare: fino ad allora il resto dell&rsquo;applicazione
+                resta bloccato.
+            </div>
+        @endif
+
+        @if($errors->any())
+            <div class="rounded-lg bg-red-50 border border-red-200 px-4 py-2.5 text-sm text-red-800">
+                <ul class="list-disc list-inside space-y-0.5">
+                    @foreach($errors->all() as $error)
+                        <li>{{ $error }}</li>
+                    @endforeach
+                </ul>
+            </div>
+        @endif
+
+        <form method="POST" action="{{ route('password.change.store') }}" class="space-y-4">
+            @csrf
+
+            {{-- L'email in un campo nascosto: senza, i gestori di password non
+                 sanno a quale account associare la credenziale che salvano. --}}
+            <input type="hidden" name="email" autocomplete="username" value="{{ $user->email }}">
+
+            <div>
+                <label for="password" class="block text-sm font-medium text-gray-700">Nuova password</label>
+                <input type="password" name="password" id="password" required autofocus autocomplete="new-password"
+                       class="mt-1 block w-full rounded-lg border-gray-300 shadow-sm focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+                <p class="mt-1 text-xs text-gray-500">Almeno 8 caratteri.</p>
+            </div>
+
+            <div>
+                <label for="password_confirmation" class="block text-sm font-medium text-gray-700">Conferma nuova password</label>
+                <input type="password" name="password_confirmation" id="password_confirmation" required autocomplete="new-password"
+                       class="mt-1 block w-full rounded-lg border-gray-300 shadow-sm focus:ring-indigo-500 focus:border-indigo-500 text-sm">
+            </div>
+
+            <button type="submit"
+                    class="w-full inline-flex items-center justify-center px-4 py-2.5 text-sm font-medium text-white rounded-lg transition"
+                    style="background:#4f46e5" onmouseover="this.style.background='#4338ca'" onmouseout="this.style.background='#4f46e5'">
+                Salva la nuova password
+            </button>
+        </form>
+
+        <div class="flex justify-between text-xs text-gray-500 pt-1 border-t border-gray-100">
+            @if($forced)
+                <span>Non sei tu? Esci e accedi con un altro account.</span>
+            @else
+                <a href="{{ route('dashboard') }}" class="hover:text-indigo-600">Torna alla home</a>
+            @endif
+            <form method="POST" action="{{ route('logout') }}">
+                @csrf
+                <button type="submit" class="hover:text-indigo-600">Esci</button>
+            </form>
+        </div>
+    </div>
+</x-layouts.guest>