<!DOCTYPE html>
<html lang="en">
<head><meta charset="UTF-8"><title>Verify · LPMS Admin Console</title><link rel="stylesheet" href="/css/admin.css"></head>
<body>
  <div class="login-shell">
    <div class="login-card">
      <div class="login-banner">⚠ INTERNAL PLATFORM STAFF ONLY</div>
      <h1>Enter your authenticator code</h1>
      <% if (error) { %><div class="alert alert-danger"><%= error %></div><% } %>
      <form method="post" action="/mfa/verify">
        <input type="hidden" name="pendingToken" value="<%= pendingToken %>">
        <label>6-digit code</label>
        <input type="text" name="code" inputmode="numeric" pattern="\d{6}" maxlength="6" required autofocus>
        <button class="btn" type="submit" style="width:100%;margin-top:20px">Verify</button>
      </form>
    </div>
  </div>
</body>
</html>
