{% extends 'core/base.html' %}
{% block title %}Set Password | Killian{% endblock %}
{% block content %}
<div class="auth-card wide">
    {% if invalid_link %}
        <h1>Invitation link unavailable</h1>
        <p>This account setup link is invalid, expired, or has already been used.</p>
        <p>Ask a Killian administrator or manager to send a new invitation.</p>
        <a class="button" href="{% url 'login' %}">Return to sign in</a>
    {% else %}
        <h1>Set your Killian password</h1>
        <p>Account: <strong>{{ target_user.username }}</strong></p>
        <p>Choose a password with at least 10 characters. After signing in, Killian will require MFA enrollment.</p>
        <form method="post">
            {% csrf_token %}
            {% if form.non_field_errors %}<div class="msg error">{{ form.non_field_errors }}</div>{% endif %}
            {% for field in form %}
                <div class="form-field">
                    <label for="{{ field.id_for_label }}">{{ field.label }}</label>
                    {{ field }}
                    {% if field.help_text %}<div class="helptext">{{ field.help_text|safe }}</div>{% endif %}
                    {% for error in field.errors %}<div class="field-error">{{ error }}</div>{% endfor %}
                </div>
            {% endfor %}
            <div class="form-actions"><button type="submit">Set password</button></div>
        </form>
    {% endif %}
</div>
{% endblock %}