{% extends "_base.html" %}
{% block title %}Try again · Cauldron{% endblock %}
{% block content %}

<div class="page-head">
  <div class="crumb">// auth · interrupted</div>
  <h1>almost <span class="accent">there</span></h1>
  <div class="lede">{{ detail }}</div>
</div>

<section class="panel">
  <div class="panel-head">
    <h2>{{ reason }}</h2>
    <span class="pill pill-warn">retry</span>
  </div>
  <p>
    {% if reason == 'upstream' %}
    the auth server (<code>auth.sulkta.com</code>) didn't answer in time.
    usually means a brief DNS / network blip on the LAN. try again in a sec.
    {% elif reason == 'stale' %}
    your previous login attempt left a one-time token behind that's now expired.
    we cleared it on our side — hit the button below to start fresh.
    {% else %}
    something didn't line up in the OIDC handshake. starting over usually fixes it.
    {% endif %}
  </p>
  <p><a class="btn btn-purple" href="/login">↻ try login again</a></p>
</section>

{% endblock %}