{% extends "base.html" %}
{% from "macros.html" import page_header %}
{% block content %}
{{ page_header("Sign in") }}
<div class="row justify-content-center">
<div class="col-md-6 col-lg-5">
<div class="card card-md">
  <div class="card-body">
    {% if error %}
    <div class="alert alert-danger mb-3" role="alert">{{ error }}</div>
    {% endif %}
    {% if oauth_available %}
    <p class="mb-3">
      <a class="btn btn-outline-primary" href="/auth/oauth/start?next={{ next | urlencode }}">
        Sign in with {{ oauth_provider | e }}
      </a>
    </p>
    {% if local_available %}
    <p class="text-muted small mb-3">or use a local account</p>
    {% endif %}
    {% endif %}
    {% if local_available %}
    <form method="post" action="/login" class="needs-validation" novalidate>
      <input type="hidden" name="next" value="{{ next }}">
      <div class="mb-3">
        <label class="form-label required" for="login_username">Username</label>
        <input type="text" class="form-control" id="login_username" name="username" required
               autocomplete="username" autofocus>
      </div>
      <div class="mb-3">
        <label class="form-label required" for="login_password">Password</label>
        <input type="password" class="form-control" id="login_password" name="password" required
               autocomplete="current-password">
      </div>
      <button type="submit" class="btn btn-primary">Sign in</button>
    </form>
    <p class="mt-3 mb-0 text-muted small">API clients can use <code>POST /token</code> (OAuth2 password) instead.</p>
    {% elif not oauth_available %}
    <p class="text-muted mb-0">No sign-in methods are configured.</p>
    {% endif %}
  </div>
</div>
</div>
</div>
{% endblock %}