{{define "totp_step"}}
<form id="login-form" method="POST" action="/login"
      hx-post="/login" hx-target="#login-form" hx-swap="outerHTML">
  {{if .Error}}<div class="alert alert-error" role="alert">{{.Error}}</div>{{end}}
  <input type="hidden" name="username" value="{{.Username}}">
  <input type="hidden" name="totp_nonce" value="{{.Nonce}}">
  <input type="hidden" name="totp_step" value="1">
  {{if .SSONonce}}<input type="hidden" name="sso_nonce" value="{{.SSONonce}}">{{end}}
  <div class="form-group">
    <label for="totp_code">Authenticator Code</label>
    <input class="form-control" type="text" id="totp_code" name="totp_code"
           autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]{6}"
           maxlength="6" required autofocus placeholder="6-digit code">
  </div>
  <div class="form-actions">
    <button class="btn btn-primary" type="submit" style="width:100%">Verify</button>
  </div>
</form>
{{end}}