{# This page includes no header — it is one of the two standalone documents,
`choose_door.html` the other — so it carries its own title, its viewport
declaration and its icon links. Same shape as _header.html's. #}
Login · {{ brand_name | default('little sister') }}
{#- The login page wears the browser's theme too — the look is this browser's,
not this session's, so it survives a logout and greets the next login the
way it was left. No layout attribute: this page has no rail and no menu. -#}
{#- The same partial the header includes — this page carried a copy of it, which
is two inline scripts for one behavior and would have cost two hashes. -#}
{% include '_theme_bootstrap.html' %}
{# The one place the brand gets to introduce itself in full: the
gaze, the wordmark, the tagline. This is the first thing a new
user sees, so it says who is watching before it asks who they
are — the form below is unchanged, and stays the default
provider's (the auth-seam phase may route logins elsewhere). #}
{% set brand_figure = 'gaze' %}
{% include '_brand.html' %}
{#- Which door this is, when it is not the ordinary one. The
system-admin form is this same document (ADR-0069 §5), and a
person who typed their usual login name into it deserves to be
told where they are before they wonder why it refused. Absent —
and silent — on the default door, which needs no explaining. -#}
{% if door_note is defined and door_note %}
{{ door_note }}
{% endif %}
{% if error %}
{{ error }}
{% endif %}
{#- The other door, when the caller has one to offer. Set only by a
provider that is not the system admin itself — this document is
both forms, and a page linking to itself is a page nobody
trusts — and only while that account can take a password, so
this is never a link to the 404 an unconfigured door answers
with. Below the form and quiet on purpose: it is the way in for
the morning the ordinary one cannot answer, not a second way to
do the thing this page is for. -#}
{% if admin_door is defined and admin_door %}