{# auth/forgot.html — ask for a password-reset email (milestone 497). It answers
   the same whether or not an account matched. #}
{% extends "base.html" %}
{% block title %}Forgot your password — Steward{% endblock %}
{% block content %}
<div class="invite-page">
  <div class="card">
    <h1 class="invite-title">Forgot your password?</h1>
    {% if error %}<div class="alert alert-error" role="alert">{{ error }}</div>{% endif %}
    {% if sent %}
    <div class="alert alert-success" role="status">If that names a Steward account with a password and an email address, a link to choose a new password is on its way to that address. It works for an hour.</div>
    <a href="/login" class="btn btn-ghost">Back to sign in</a>
    {% elif not mail_ready %}
    <p class="invite-lede">Steward has no mail server set, so it can't email you a link. Ask an admin to set a new password for you in Settings › Users.</p>
    <a href="/login" class="btn btn-ghost">Back to sign in</a>
    {% else %}
    <p class="invite-lede">Enter your username or email address. If your account has a Steward password, we'll email you a link to choose a new one.</p>
    <form method="post" action="/forgot">{{ csrf_field() }}
      <div class="field">
        <label class="field-label" for="forgot-name">Username or email</label>
        <input class="input" id="forgot-name" type="text" name="name" maxlength="255" required autofocus autocomplete="username">
        <span class="field-hint">Accounts that sign in with LDAP or single sign-on change their password there.</span>
      </div>
      <button type="submit" class="btn invite-submit">Email me a link</button>
    </form>
    <p class="field-hint"><a href="/login">Back to sign in</a></p>
    {% endif %}
  </div>
</div>
{% endblock %}