/**
 * @file
 * User login — harmonised with who26.
 *
 * Template: templates/layout/page--user--login.html.twig.
 * Loaded via the global library (per-template attach_library() is unreliable on
 * the Pantheon multidev, see who26.libraries.yml). Scoped to .auth-* and the
 * Drupal login form, so it is inert on every other page.
 */

.auth-shell {
  display: flex;
  align-items: center;
  justify-content: center;
  min-height: 62vh;
  padding: 56px 20px 76px;
  background: linear-gradient(180deg, var(--who-blue-light) 0%, var(--who-gray-50) 100%);
}

.auth-card {
  width: 100%;
  max-width: 460px;
  background: var(--who-white);
  border: 1px solid var(--who-gray-200);
  border-radius: var(--who-radius-lg, 12px);
  box-shadow: 0 10px 40px rgba(0, 32, 92, 0.10);
  padding: 40px 40px 36px;
}

.auth-card-head {
  text-align: center;
  margin-bottom: 26px;
}

.auth-card-head h1 {
  margin: 0 0 6px;
  font-size: 28px;
  font-weight: 800;
  line-height: 1.15;
  color: var(--who-navy);
  letter-spacing: -0.01em;
}

.auth-card-sub {
  margin: 0;
  font-size: 14px;
  color: var(--who-gray-500);
}

/* ── Drupal login form ─────────────────────────────────────────────────────── */
.auth-card .form-item {
  margin: 0 0 18px;
}

.auth-card label {
  display: block;
  margin-bottom: 6px;
  font-size: 13px;
  font-weight: 700;
  color: var(--who-navy);
}

.auth-card .form-required::after {
  color: var(--who-red);
}

.auth-card input[type="text"],
.auth-card input[type="password"],
.auth-card input[type="email"] {
  width: 100%;
  box-sizing: border-box;
  padding: 12px 14px;
  font-size: 15px;
  color: var(--who-gray-800);
  background: var(--who-white);
  border: 1px solid var(--who-gray-300);
  border-radius: var(--who-radius-md, 8px);
  transition: border-color 0.15s ease, box-shadow 0.15s ease;
}

.auth-card input[type="text"]:focus,
.auth-card input[type="password"]:focus,
.auth-card input[type="email"]:focus {
  outline: none;
  border-color: var(--who-blue);
  box-shadow: 0 0 0 3px var(--who-blue-25);
}

.auth-card .description {
  margin-top: 6px;
  font-size: 12px;
  line-height: 1.4;
  color: var(--who-gray-500);
}

/* ── Primary submit → who26 button ─────────────────────────────────────────── */
.auth-card .form-actions {
  margin-top: 6px;
  padding: 0;
}

.auth-card .button,
.auth-card input[type="submit"] {
  display: block;
  width: 100%;
  box-sizing: border-box;
  padding: 13px 24px;
  font-size: 15px;
  font-weight: 700;
  color: var(--who-white);
  background: var(--who-navy);
  border: none;
  border-radius: var(--who-radius-md, 8px);
  cursor: pointer;
  transition: background 0.15s ease;
}

.auth-card .button:hover,
.auth-card input[type="submit"]:hover {
  background: var(--who-blue);
}

/* ── samlauth "Login with Microsoft AD" link → outline button ──────────────── */
.auth-card a[href*="/saml/login"] {
  display: block;
  width: 100%;
  box-sizing: border-box;
  margin-top: 24px;
  padding: 12px 24px;
  text-align: center;
  font-size: 15px;
  font-weight: 700;
  color: var(--who-navy);
  background: var(--who-white);
  border: 2px solid var(--who-navy);
  border-radius: var(--who-radius-md, 8px);
  text-decoration: none;
  transition: background 0.15s ease, color 0.15s ease;
}

.auth-card a[href*="/saml/login"]:hover {
  background: var(--who-navy);
  color: var(--who-white);
}

/* ── Login error / status messages ─────────────────────────────────────────── */
.auth-messages {
  margin-bottom: 18px;
}

@media (max-width: 520px) {
  .auth-card {
    padding: 28px 22px 24px;
    border-radius: 10px;
  }
  .auth-card-head h1 {
    font-size: 24px;
  }
}