{{define "title"}} - Login{{end}}
{{define "container-class"}}auth-container{{end}}
{{define "content"}}
<div class="auth-header">
    <div class="brand">mcat</div>
    <div class="tagline">MCIAS Login Policy Tester</div>
</div>
<div class="card">
    <div class="card-title">Sign In</div>
    {{if .Error}}<div class="error">{{.Error}}</div>{{end}}
    {{if .SSO}}
    <p>Sign in to test MCIAS login policies.</p>
    <div class="form-actions">
        <a href="/sso/redirect" class="btn">Sign in with MCIAS</a>
    </div>
    {{else}}
    <form method="POST" action="/login">
        {{csrfField}}
        <div class="form-group">
            <label for="username">Username</label>
            <input type="text" id="username" name="username" autocomplete="username" required autofocus>
        </div>
        <div class="form-group">
            <label for="password">Password</label>
            <input type="password" id="password" name="password" autocomplete="current-password" required>
        </div>
        <div class="form-group">
            <label for="totp_code">TOTP Code (optional)</label>
            <input type="text" id="totp_code" name="totp_code" autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]*" placeholder="6-digit code">
        </div>
        <div class="form-actions">
            <button type="submit">Login</button>
        </div>
    </form>
    {{end}}
</div>
{{end}}