{% extends "base.html" %}
{% block body %}
<div class="card">
  <h1>修改密码</h1>
  {% if user.must_change_password %}<p>首次登录或管理员重置密码后，请先设置自己的新密码。</p>{% endif %}
  <form method="post">
    <input type="hidden" name="next" value="{{ request.form.get('next', request.args.get('next', '/')) }}">
    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
    <div class="form-grid">
      <div><label>原密码</label><input type="password" name="old_password" required autocomplete="current-password"></div>
      <div><label>新密码（10 至 128 字符）</label><input type="password" name="password" required minlength="10" maxlength="128" autocomplete="new-password"></div>
      <div><label>再次输入新密码</label><input type="password" name="confirm_password" required minlength="10" maxlength="128" autocomplete="new-password"></div>
    </div>
    <button class="btn primary">更新密码</button>
  </form>
</div>
{% endblock %}