html lang="en"
  head
    meta charset="utf-8"
    meta name="viewport" content="width=device-width, initial-scale=1"
    meta name="robots" content="noindex"
    title "Verify · GoArk Admin"
    link rel="icon" href="/public/goark/favicon.ico" sizes="any"
    link rel="icon" type="image/png" href="/public/goark/favicon-32.png" sizes="32x32"
    link rel="apple-touch-icon" href="/public/icons/apple-touch-icon.png"
    link rel="stylesheet" href="/public/goark/admin.css"
    script src="/public/goark/operator.js" defer="defer"
  body
    main.auth data-auth="verify"
      section.auth-hero
        div.grid-art data-art="grid"
        div.brand
          img.brand-mark src="/public/goark/icon-mark-white.png" alt=""
          div.brand-name "GoArk Admin"
        div.stack
          h2 "Run GoArk from one console."
          div.auth-points
            div
              span.ic data-i="shield-check"
              span "Two-factor sign-in is on for this admin account"
        footer data-bind="copyright" "GoArk"
      section.auth-panel
        div.auth-form
          form.stack.gap-18 method="post" action="/admin/verify"
            input type="hidden" name="_csrf" value="{{csrfToken}}"
            div.stack
              h1 "Enter your sign-in code"
              p.lead "We emailed a 6-digit code to {{email}}. It expires in 10 minutes."
            if notice
              div.banner.ok role="status" "{{notice}}"
            if error
              div.banner.bad role="alert" "{{error}}"
            div.field
              label for="otp-code" "Sign-in code"
              input#otp-code.input.otp-single type="text" name="code" inputmode="numeric" autocomplete="one-time-code" maxlength="6" placeholder="000000" required="required"
            button.btn.primary.lg.block type="submit" "Verify and continue"
          div.between.small
            span.muted "Didn't get a code?"
            form method="post" action="/admin/verify/resend"
              input type="hidden" name="_csrf" value="{{csrfToken}}"
              button.link-btn type="submit" "Resend code"
          form method="post" action="/admin/signout"
            input type="hidden" name="_csrf" value="{{csrfToken}}"
            button.link-btn type="submit" "Use a different account"