add warning about unique access to accounts list

lib/AccountManager/App.pm

@@ -644,6 +644,14 @@ sub req_create_accounts {
         $entityid,
     );
 
+    my $download_url = sprintf(
+        "%s?action=download_accounts&entityid=%s&token=%s&key=%s",
+        $self->{configuration}->{app}->{url},
+        $entityid,
+        $download_token->secret(),
+        $key
+    );
+
     $self->respond(
         template => 'create_accounts.tt2.html',
         data     => {
@@ -656,10 +664,9 @@ sub req_create_accounts {
                 entityid => $entityid,
                 url      => $sp->information_url(),
             },
-            email    => $email,
-            key      => $key,
-            token    => $download_token->secret(),
-            days     => $validity_period,
+            email        => $email,
+            download_url => $download_url,
+            days         => $validity_period,
         }
     );
 }

lib/AccountManager/L10N/fr.pm

@@ -75,10 +75,6 @@ msgstr "URL du challenge: %1"
 msgid "Complete email challenge"
 msgstr "Validez le challenge e-mail"
 
-#: templates/web/edugain/create_accounts.tt2.html:14 templates/web/renater/create_accounts.tt2.html:16
-msgid "Download in CSV format"
-msgstr "Télécharger au format CSV"
-
 #: templates/web/edugain/errors.tt2.html:6 templates/web/renater/errors.tt2.html:6
 msgid "Error:"
 msgstr "Erreur:"
@@ -205,6 +201,11 @@ msgstr "Cette information est nécessaire"
 msgid "This is an email challenge automatically sent to you by %1."
 msgstr "Ceci est un message envoyé automatiquement par %1."
 
+#. (download.url)
+#: templates/web/renater/create_accounts.tt2.html:17
+msgid "This page won't be accessible again, you should either keep it open in your web browser, or <a href=\"%1\">download accounts in CSV format</a>."
+msgstr "Il ne sera pas possible de ré-accéder à cette page, vous devriez soit la garder ouverte dans votre navigateur, ou <a href=\"%1\">télécharger les comptes au format CSV</a>."
+
 #: templates/web/edugain/select_email.tt2.html:27 templates/web/renater/select_email.tt2.html:27
 msgid "Those email addresses have been extracted from your service metadata."
 msgstr "Ces addresses e-mail ont été extraites des métadonnées pour votre service."

templates/web/edugain/create_accounts.tt2.html

@@ -7,11 +7,13 @@
 
 <h2>[% lh.maketext("Test accounts created") %]</h2>
 <p>
-[% lh.maketext("You can now use these test accounts to login at your <a href=\"[_1]\">service provider</a>.", sp.url) %]
-[% lh.maketext("To do so, select <strong>[_1]</strong> when choosing an identity provider.", idp.name) %]
+    [% lh.maketext("You can now use these test accounts to login at your <a href=\"[_1]\">service provider</a>.", sp.url) %] 
+    [% lh.maketext("To do so, select <strong>[_1]</strong> when choosing an identity provider.", idp.name) %]
 </p>
 
-<p><a class="button" href="[% app.url %]?action=download_accounts&entityid=[% sp.entityid %]&token=[% token %]&key=[% key %]">[% lh.maketext("Download in CSV format") %]</a></p>
+<p class="callout warning">
+    [% lh.maketext("This page won't be accessible again, you should either keep it open in your web browser, or <a href=\"[_1]\">download accounts in CSV format</a>.", download_url) %]
+</p>
 
 <div class="accounts row">
     [% FOREACH account IN accounts %]

templates/web/renater/create_accounts.tt2.html

@@ -9,11 +9,13 @@
 
 <h2>[% lh.maketext("Test accounts created") %]</h2>
 <p>
-[% lh.maketext("You can now use these test accounts to login at your <a href=\"[_1]\">service provider</a>.", sp.url) %]
-[% lh.maketext("To do so, select <strong>[_1]</strong> when choosing an identity provider.", idp.name) %]
+    [% lh.maketext("You can now use these test accounts to login at your <a href=\"[_1]\">service provider</a>.", sp.url) %] 
+    [% lh.maketext("To do so, select <strong>[_1]</strong> when choosing an identity provider.", idp.name) %]
 </p>
 
-<p><a class="button" href="[% app.url %]?action=download_accounts&entityid=[% sp.entityid %]&token=[% token %]&key=[% key %]">[% lh.maketext("Download in CSV format") %]</a></p>
+<p class="callout alert-callout-border warning">
+    [% lh.maketext("This page won't be accessible again, you should either keep it open in your web browser, or <a href=\"[_1]\">download accounts in CSV format</a>.", download_url) %]
+</p>
 
 <div class="accounts row">
     [% FOREACH account IN accounts %]