{% extends "base.html" %}

{% block title %}Reset Password • Keywarden{% endblock %}

{% block content %}
  <div class="mx-auto max-w-md rounded-2xl border border-gray-200 bg-white p-6 shadow-sm sm:p-8">
    <h1 class="text-2xl font-semibold tracking-tight text-gray-900">Reset your password</h1>
    <p class="mt-2 text-sm text-gray-500">
      Enter your Keywarden account email to receive a password reset link.
    </p>
    <form method="post" class="mt-6 space-y-4">
      {% csrf_token %}
      <div>
        <label class="mb-2 block text-sm font-medium text-gray-900" for="{{ form.email.id_for_label }}">Email</label>
        {{ form.email }}
      </div>
      {% if form.errors %}
        <div class="rounded-lg bg-red-50 p-3 text-sm text-red-800">
          Please correct the highlighted issues and retry.
        </div>
      {% endif %}
      <button
        type="submit"
        class="inline-flex w-full items-center justify-center rounded-lg bg-blue-700 px-5 py-2.5 text-sm font-semibold text-white hover:bg-blue-800 focus:outline-none focus:ring-4 focus:ring-blue-300"
      >
        Send reset link
      </button>
    </form>
    <p class="mt-6 text-xs text-gray-500">
      Accounts managed by SSO do not use local password reset.
      {% if idp_account_portal_url %}
        Use your identity provider portal:
        <a href="{{ idp_account_portal_url }}" class="font-semibold text-blue-700 hover:underline">{{ idp_account_portal_url }}</a>.
      {% endif %}
    </p>
  </div>
{% endblock %}