/* Standalone auth-style pages (login, 2FA, password reset).
   These pages do not extend portal/base.html, so they load
   tokens.css + this file instead of app.css. */
body {
  min-height: 100vh;
  display: grid;
  place-items: center;
  background: var(--bg);
  padding: 24px 0;
}

.login-panel {
  width: min(420px, 92vw);
  background: #fff;
  border: 1px solid var(--line);
  border-radius: 8px;
  overflow: hidden;
}

.login-panel-wide {
  width: min(460px, 92vw);
}

.login-brand {
  background: var(--brand);
  color: #fff;
  padding: 28px;
  text-align: center;
}

.login-panel-danger .login-brand {
  background: var(--brand-danger);
}

.login-brand img {
  display: block;
  height: 88px;
  margin: 0 auto 12px;
  object-fit: contain;
  width: auto;
}

.login-brand span {
  color: rgba(255, 255, 255, .78);
  display: block;
}

.login-body {
  padding: 28px;
}

/* Django built-in views (password reset) render widgets without the
   form-control class — give bare inputs the same look. */
.login-body input[type="text"]:not(.form-control),
.login-body input[type="email"]:not(.form-control),
.login-body input[type="password"]:not(.form-control) {
  display: block;
  width: 100%;
  padding: .375rem .75rem;
  font-size: 1rem;
  line-height: 1.5;
  color: var(--ink);
  background: #fff;
  border: 1px solid var(--line);
  border-radius: .375rem;
}

.login-body .helptext,
.login-body ul.errorlist {
  color: var(--muted);
  font-size: .85rem;
}

.login-body ul.errorlist {
  color: var(--danger-ink);
  list-style: none;
  margin: 0 0 4px;
  padding: 0;
}

.qr-box {
  text-align: center;
  margin-bottom: 16px;
}

.qr-box img {
  width: 200px;
  height: 200px;
  border: 1px solid var(--line);
  border-radius: 8px;
  padding: 8px;
  background: #fff;
}

.secret-code {
  font-family: monospace;
  word-break: break-all;
  font-size: .85rem;
}