<?php $title = 'Réinitialisation du mot de passe'; $base = rtrim(App\Core\Config::baseUrl(), '/'); ?>
<?php if (!empty($invalid)): ?>
  <div class="alert alert-danger" role="alert">Lien invalide ou expiré. Veuillez recommencer.</div>
  <a href="<?= htmlspecialchars($base) ?>/password/forgot" class="btn btn-outline-primary btn-sm"><i class="fas fa-arrow-left"></i> Nouvelle demande</a>
<?php elseif (!empty($done)): ?>
  <div class="alert alert-success" role="alert">Mot de passe mis à jour avec succès. Vous pouvez vous connecter.</div>
  <a href="<?= htmlspecialchars($base) ?>/login" class="btn btn-primary"><i class="fas fa-right-to-bracket"></i> Connexion</a>
<?php else: ?>
  <h2 class="h5 fw-bold mb-3">Définir un nouveau mot de passe</h2>
  <?php if (!empty($error)): ?><div class="alert alert-danger small" role="alert"><?= htmlspecialchars($error) ?></div><?php endif; ?>
  <form method="post" action="<?= htmlspecialchars($base) ?>/password/reset" class="needs-validation" novalidate autocomplete="off">
    <input type="hidden" name="uid" value="<?= (int)($uid ?? 0) ?>">
    <input type="hidden" name="token" value="<?= htmlspecialchars($token ?? '') ?>">
    <div class="mb-3">
      <label for="rpPassword" class="form-label">Nouveau mot de passe</label>
      <input type="password" class="form-control" id="rpPassword" name="password" required minlength="8" placeholder="••••••••">
      <div class="invalid-feedback">Minimum 8 caractères.</div>
    </div>
    <div class="mb-3">
      <label for="rpPasswordConfirm" class="form-label">Confirmer le mot de passe</label>
      <input type="password" class="form-control" id="rpPasswordConfirm" name="password_confirm" required minlength="8" placeholder="••••••••">
      <div class="invalid-feedback">Confirmation requise.</div>
    </div>
    <div class="d-grid">
      <button class="btn btn-primary" type="submit"><i class="fas fa-key me-1"></i> Réinitialiser</button>
    </div>
  </form>
  <script>
  (function(){ const f=document.querySelector('form.needs-validation'); if(!f) return; f.addEventListener('submit',e=>{ if(!f.checkValidity()){ e.preventDefault(); e.stopPropagation(); } const p=f.querySelector('#rpPassword'); const c=f.querySelector('#rpPasswordConfirm'); if(p && c && p.value!==c.value){ e.preventDefault(); e.stopPropagation(); c.classList.add('is-invalid'); } f.classList.add('was-validated'); }); })();
  </script>
<?php endif; ?>