{% extends "base.html" %}
{% block title %}Change password{% endblock %}
{% block content %}
<div class="card" style="max-width:480px;margin:0 auto">
  <h1>Change password</h1>
  {% if g.user.must_change_pw %}
    <div class="flash info">For security, choose a new password before continuing.</div>
  {% endif %}
  <form method="post">
    <input type="hidden" name="_csrf" value="{{ csrf_token() }}">
    <div class="field"><label>Current password</label><input type="password" name="current" required autocomplete="current-password"></div>
    <div class="field"><label>New password</label><input type="password" name="new" required autocomplete="new-password">
      <div class="hint">At least {{ 6 if g.user.role == 'student' else 8 }} characters.</div></div>
    <div class="field"><label>Repeat new password</label><input type="password" name="new2" required autocomplete="new-password"></div>
    <button class="btn primary" type="submit">Save password</button>
  </form>
</div>
{% endblock %}