{#
  Login page (spec section 10.2).

  Context:
    login_url        str  -- POST target for the form (default "login")
    signup_url       str  -- link target when allow_signup_link is true
    allow_signup_link bool -- renderer global; may be overridden per render
    next             str  -- already-validated safe redirect path, may be empty
    error            str  -- generic invalid-credentials message, may be empty
    email            str  -- value to redisplay after a failed attempt
#}
{% extends "base.html" %}

{% block content %}
  <form class="fa-form" method="post" action="{{ login_url or 'login' }}" novalidate>
    <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
    <input type="hidden" name="next" value="{{ next or '' }}">

    {% if error %}
      <p class="fa-alert" id="login-error" role="alert">{{ error }}</p>
    {% endif %}

    <div class="fa-field">
      <label class="fa-label" for="login-email">Email</label>
      <input
        class="fa-input"
        id="login-email"
        name="email"
        type="email"
        value="{{ email or '' }}"
        autocomplete="email"
        autocapitalize="none"
        spellcheck="false"
        required
        {% if error %}aria-describedby="login-error"{% endif %}
      >
    </div>

    <div class="fa-field">
      <label class="fa-label" for="login-password">Password</label>
      <input
        class="fa-input"
        id="login-password"
        name="password"
        type="password"
        autocomplete="current-password"
        required
        {% if error %}aria-describedby="login-error"{% endif %}
      >
    </div>

    <button class="fa-button" type="submit">Sign in</button>
  </form>
{% endblock %}

{% block below_card %}
  {% if allow_signup_link %}
    <p class="fa-footnote">
      Don&rsquo;t have an account?
      <a class="fa-link" href="{{ signup_url or 'signup' }}">Create one</a>
    </p>
  {% endif %}
{% endblock %}