<%- include('../partials/head') %>
<div class="auth-page">
  <div class="auth-theme"><%- include('../partials/theme-toggle') %></div>
  <div class="auth-card">
    <img src="/img/lockup-color.png" alt="OTENEX" class="logo">
    <div class="auth-tag">Verification</div>
    <% if (error) { %><div class="notice err"><%= error %></div><% } %>
    <p class="hint" style="margin-bottom:16px">Enter the 6-digit code from your authenticator app, or one of your recovery codes.</p>
    <form method="post" action="/login/verify">
      <input type="hidden" name="_csrf" value="<%= csrfToken %>">
      <label class="fld"><span>Code</span>
        <input type="text" name="token" class="mono" inputmode="numeric" autocomplete="one-time-code" required autofocus>
      </label>
      <button class="btn block" type="submit">Verify</button>
    </form>
  </div>
</div>
</body></html>
