<section class="auth-section">
  <div class="container auth-container">
    <div class="auth-card">
      <h1 class="auth-title">Nouveau mot de passe</h1>

      <% if (invalid) { %>
        <div class="notice notice-error">
          Ce lien de réinitialisation est invalide ou a expiré.
        </div>
        <p class="auth-switch"><a href="/forgot-password">Demander un nouveau lien</a></p>
      <% } else { %>
        <p class="auth-sub">Choisissez un nouveau mot de passe pour votre compte.</p>
        <%- include('partials/form-errors', { errors: errors }) %>
        <form action="/reset-password/<%= token %>" method="post" class="form" novalidate>
          <input type="hidden" name="_csrf" value="<%= csrfToken %>" />
          <div class="field">
            <label for="password">Nouveau mot de passe</label>
            <input type="password" id="password" name="password" autocomplete="new-password" required minlength="8" />
            <small class="field-hint">8 caractères minimum.</small>
          </div>
          <div class="field">
            <label for="password_confirm">Confirmer le mot de passe</label>
            <input type="password" id="password_confirm" name="password_confirm" autocomplete="new-password" required minlength="8" />
          </div>
          <button type="submit" class="btn btn-primary btn-block">Réinitialiser</button>
        </form>
      <% } %>
    </div>
  </div>
</section>
