{# The sign-in page (spec §3.3).

   Renders inside the layout for the stylesheet's sake, but replaces the
   masthead with nothing: its navigation would lead only to pages this visitor
   cannot open yet, and its Sign out button is meaningless to someone who is not
   signed in. #}
{% extends "base.html" %}

{% block title %}Sign in · mcp-api-gateway{% endblock %}
{% block body_class %}page--centred{% endblock %}
{% block masthead %}{% endblock %}

{% block content %}
<section class="card card--narrow">
  <h1 class="card__title">mcp-api-gateway</h1>
  {% if error %}<p class="flash flash--error" role="alert">{{ error }}</p>{% endif %}
  <form method="post" action="{{ login_path }}">
    <input type="hidden" name="next" value="{{ next }}" />
    <label class="field">
      <span class="field__label">Username</span>
      <input
        class="field__input"
        name="username"
        value="{{ username }}"
        autocomplete="username"
        autofocus
        required
      />
    </label>
    <label class="field">
      <span class="field__label">Password</span>
      <input
        class="field__input"
        name="password"
        type="password"
        autocomplete="current-password"
        required
      />
    </label>
    <button class="button button--primary button--block" type="submit">Sign in</button>
  </form>
</section>
{% endblock %}