/* Styles for the unauthenticated surface: Login, ForgotPassword, MfaChallenge + _LoginLayout.
   Extracted from inline style="" attributes (Phase 3-Lite): the strict CSP served to
   unauthenticated requests has style-src 'self' — no inline styles allowed. */

/* ---------- _LoginLayout ---------- */
body.login-page {
    background-color: #c0c0c0;
    margin: 0;
    padding: 0;
}

.login-viewport {
    background-color: #c0c0c0;
    min-height: 100vh;
    display: flex;
    align-items: center;
    justify-content: center;
}

/* ---------- Login ---------- */
.login-card {
    display: flex;
    max-width: 600px;
    box-shadow: 0 2px 10px rgba(0, 0, 0, 0.15);
    overflow: hidden;
}

.login-brand-panel {
    width: 200px;
    flex-shrink: 0;
    background-color: #1B5FAA;
    display: flex;
    align-items: center;
    justify-content: center;
}

.login-brand-panel img {
    width: 100%;
    display: block;
}

.login-form-panel {
    flex: 1;
    background: #fff;
    padding: 30px;
}

.login-validation {
    color: red;
    margin-bottom: 12px;
    font-size: 13px;
}

.login-field {
    margin-bottom: 18px;
}

.login-label {
    font-weight: 700;
    display: block;
    margin-bottom: 4px;
    font-size: 14px;
}

.login-input {
    background-color: #e8f0fe;
    border: 1px solid #ccc;
    padding: 8px;
}

.login-remember-row {
    display: flex;
    justify-content: flex-end;
    align-items: center;
    margin-bottom: 18px;
}

.login-remember-label {
    font-size: 12px;
    color: #114E97;
}

.login-submit {
    width: 100%;
    padding: 10px;
    background: #8CB409;
    color: #fff;
    border: none;
    border-radius: 4px;
    font-size: 14px;
    font-weight: 600;
    cursor: pointer;
}

.login-links {
    text-align: center;
    margin-top: 15px;
    font-size: 12px;
}

.login-links a {
    color: #114E97;
}

.login-links .login-links-sep {
    color: #ccc;
    margin: 0 6px;
}

/* ---------- Shared: ForgotPassword + MfaChallenge card ---------- */
.auth-card {
    max-width: 400px;
    margin: 80px auto;
    padding: 30px;
    background: #fff;
    border: 1px solid #ddd;
    border-radius: 8px;
}

.auth-title {
    color: #114E97;
    text-align: center;
    margin-bottom: 20px;
}

.auth-success {
    color: #65a01d;
    text-align: center;
    margin-bottom: 15px;
}

.auth-center {
    text-align: center;
}

.auth-validation {
    color: red;
    margin-bottom: 15px;
    font-size: 13px;
}

.auth-field {
    margin-bottom: 15px;
}

.auth-label {
    font-weight: 600;
    display: block;
    margin-bottom: 4px;
}

.auth-field-error {
    color: red;
    font-size: 12px;
}

.auth-submit {
    width: 100%;
    padding: 10px;
    background: #114E97;
    color: #fff;
    border: none;
    border-radius: 4px;
    font-size: 14px;
    cursor: pointer;
}

.auth-links {
    text-align: center;
    margin-top: 15px;
}

.auth-links a {
    color: #114E97;
    font-size: 13px;
}

/* ---------- MfaChallenge ---------- */
.mfa-intro {
    text-align: center;
    font-size: 13px;
    color: #666;
    margin-bottom: 20px;
}

.mfa-send-row {
    margin-bottom: 15px;
    display: flex;
    gap: 10px;
    justify-content: center;
}

.mfa-btn {
    padding: 8px 20px;
    color: #fff;
    border: none;
    border-radius: 4px;
    cursor: pointer;
}

.mfa-btn-email {
    background: #114E97;
}

.mfa-btn-sms {
    background: #65a01d;
}

.mfa-status {
    text-align: center;
    margin-bottom: 15px;
    font-size: 13px;
    color: #114E97;
}

/* ---------- AccessDenied / Error (also on _LoginLayout) ---------- */
.notice-card {
    max-width: 400px;
    margin: 80px auto;
    padding: 30px;
    text-align: center;
}

.notice-card-wide {
    max-width: 500px;
}

.notice-title {
    color: #b91c1c;
}

.notice-title-big {
    color: #b91c1c;
    font-size: 48px;
}

.notice-subtitle {
    color: #666;
    margin-top: 10px;
}

.notice-text {
    color: #666;
    margin-top: 15px;
}

.notice-meta {
    margin-top: 20px;
    color: #999;
    font-size: 13px;
}

.notice-actions {
    margin-top: 30px;
}

.notice-card a {
    color: #114E97;
}

.notice-actions a {
    font-size: 14px;
}

/* The validation-summary tag helper renders an empty placeholder
   <li style="display:none"> when there are no errors. The strict CSP blocks that
   inline style, which would leave a stray list bullet — hide it via the attribute
   selector (the attribute stays in the DOM even though the style isn't applied). */
.login-validation li[style],
.auth-validation li[style] {
    display: none;
}

/* ---------- DNTCaptcha ---------- */
/* The tag helper renders style="margin-bottom: 4px;" inline on its image, which the
   strict policy blocks — recreate it here so the layout doesn't shift. */
#dntCaptchaImg {
    margin-bottom: 4px;
}

/* CSK-911: the refresh anchor uses the Bootstrap Icons class
   bi-arrow-counterclockwise, but the icon library was never shipped in this app,
   so the glyph has always been invisible. Draw the arrow directly instead of
   vendoring the whole library for one icon. */
a.bi-arrow-counterclockwise {
    display: inline-block;
    text-decoration: none;
    font-size: 20px;
    line-height: 1;
    color: #114E97;
    cursor: pointer;
    margin-left: 6px;
    vertical-align: middle;
}

a.bi-arrow-counterclockwise::before {
    content: "\21BA"; /* ↺ anticlockwise open circle arrow */
}