{{define "footleft"}}<a href="{{.Source}}">barerepo</a>{{end}}

{{define "body" -}}

<div class="bar">

<span class="brand">barerepo</span>

<span class="secondary"><a href="/signup">new account</a></span>

</div>

<div class="pane loose">

<div class="panetitle">sign in</div>

{{if .Error}}<div class="danger small formerror">{{.Error}}{{if .Unknown}}

<a href="/signup">make one</a>, or check the spelling.{{end}}</div>{{end}}

{{if .Nonce}}

<form method="post" action="/auth/verify">

<input type="hidden" name="nonce" value="{{.Nonce}}">

<input type="hidden" name="name" value="{{.Name}}">

<div class="field">

<div class="label">nonce</div>

<pre class="box">{{.Nonce}}</pre>

</div>

<div class="field">

<div class="label">sign it</div>

<pre class="box">printf '%s' '{{.Nonce}}' | ssh-keygen -Y sign -f ~/.ssh/id_ed25519 -n barerepo-auth -</pre>

<div class="hint">stock openssh, nothing to install, nothing left on disk.

this nonce is good for 10 minutes.</div>

</div>

<div class="field">

<div class="label">signature</div>

<textarea class="text tall" name="signature" spellcheck="false" autofocus

placeholder="-----BEGIN SSH SIGNATURE-----"></textarea>

</div>

<div><button class="btn" type="submit">sign in</button></div>

</form>

{{else}}

<form method="post" action="/auth/challenge">

<div class="field">

<div class="label">name</div>

<input class="text" name="name" value="{{.Name}}" autofocus spellcheck="false" autocapitalize="off">

</div>

<div class="actions"><button class="btn" type="submit">send challenge</button></div>

</form>

<div class="muted small stack">

<div>we give you a nonce. you sign it with the key you already have.</div>

<div class="secondary">printf '%s' '&lt;nonce&gt;' | ssh-keygen -Y sign -f ~/.ssh/id_ed25519 -n barerepo-auth -</div>

<div>that is stock openssh. nothing to install.</div>

<div>or <span class="secondary">br auth {{if .Name}}{{.Name}}{{else}}&lt;name&gt;{{end}}</span>,

which does the same thing in one step.</div>

</div>

{{end}}

</div>

{{- end}}