{% extends "base.html" %}
{% block title %}Verify · motp-admin portal{% endblock %}
{% block body %}
<div class="card">
  <h2>Verify OTP</h2>
  {% if error %}<div class="alert err">{{ error }}</div>{% endif %}
  {% if expired %}<div class="alert warn">Session expired. Please <a href="{{ url_for('bind_form') }}">start over</a>.</div>{% endif %}
  <form method="post" action="{{ url_for("verify") }}">
    <input type="hidden" name="session_id" value="{{ session_id }}">
    <label for="otp">6-digit code from your authenticator app</label>
    <input id="otp" name="otp" type="text" inputmode="numeric"
           pattern="[0-9]{6}" maxlength="6" required autofocus
           placeholder="123456">
    <button type="submit">Verify</button>
  </form>
  <p class="meta" style="margin-top:18px">
    The code refreshes every 30 seconds. Enter the current one.
  </p>
</div>
{% endblock %}