refactor(login): Stripe-style split layout + multi-step polish

Reworks the auth flow from a single centered card into a two-pane
layout — form on the left, tenant brand on the right — and tightens the
multi-step login UX along the way. Major changes:

LAYOUT
- templates/login.phtml splits into a flex-column body so the footer
  spans both panes at the bottom instead of getting clipped under main.
- New .login-form-pane and .login-brand-pane on a 1fr/1fr grid above
  768px; mobile stacks brand on top as a slim band, form below.
- Brand pane carries a soft halo + dot grid + tinted base, all derived
  from --app-primary so it tracks the tenant accent automatically.
- Login card gets a Stripe-style hairline border + soft shadow, no
  Pico article > header sectioning band, h1 in semibold + tracking-tight.
- The "body > main" global padding is overridden for login so the brand
  panel reaches the very top + bottom edges of its column.

OS THEME FALLBACK
- New appExplicitTheme() returns the user/tenant theme or empty string,
  used by login.phtml + error.phtml to OMIT data-theme entirely when no
  preference exists. CSS prefers-color-scheme media query then drives
  the theme — DB stays the source of truth, no browser-side persistence.

MULTI-STEP UX
- Heading is stage-aware: "Login" / "Select tenant" / "Login to {tenant}".
  Drops the redundant "Login credentials" subtitle.
- Stage 3 gets an identity pill (icon + email + compact "use different
  email" button) replacing the old tenant-context block, so the user
  always sees which account they're signing in with regardless of
  multi-tenant status.
- Stage 2 tenant selection drops avatars + initials — just radio + name
  with text-overflow ellipsis for long tenant names.
- Tightens primary CTA: full-width on every stage incl. <p>-wrapped
  buttons. autofocus moves to the right input per stage (ldap_username
  / password).

NOTICE / HELP LINKS
- The placeholder "Problems logging in" link is gone (it used to point
  at the imprint route — misleading). show_support wired through 6
  auth pages and the partial removed; architecture tests adjusted.
- Help-links centered with bullet separators between items, hairline
  border-top so they read as secondary navigation under the main CTA.
- The "Encrypted / HTTPS/TLS 1.2+" trust badge at the card bottom is
  removed — modern users assume HTTPS, and the badge added noise.

DEAD CODE
- $authLogoHref, $selectedTenantAvatarUrl, $selectedTenantInitial,
  $hasSelectedTenantAvatar, $canSwitchTenant — unused after the
  identity-pill / brand-pane move, removed from all 6 auth pages.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-04-25 21:16:26 +02:00
parent 4890a280fb
commit e775ed2800
15 changed files with 242 additions and 222 deletions

View File

@@ -1,33 +1,52 @@
@layer pages {
.login-card header {
/* Reset Pico's article > header sectioning pattern: we don't want the
negative-margin "header band" with its own bg + bottom border on the
auth card — Stripe-style auth cards have a plain h1 sitting in the
normal content flow above the form, separated by whitespace only. */
.login-card > header {
margin: 0 0 calc(var(--app-spacing) * 2) 0;
padding: 0;
background: transparent;
border: 0;
border-radius: 0;
}
.login-card > header h1 {
margin: 0;
font-size: var(--text-xl);
font-weight: var(--font-semibold);
letter-spacing: var(--tracking-tight);
}
/* Login forms rely on a full-width primary submit button as the main CTA.
Global button[type="submit"] no longer defaults to width:100%, so we
restore that specifically for the auth flow. */
restore that specifically for the auth flow — including the Pico-style
<p> button wrappers used across all stages. */
.login-main form > button[type="submit"],
.login-main form > .grid > button[type="submit"] {
.login-main form > .grid > button[type="submit"],
.login-main form > p > button[type="submit"] {
width: 100%;
}
/* ── Logo ── */
/* ── Logo (brand pane) — sits directly on the patterned brand-pane bg
without card chrome. Halo + tinted background give visual anchor. ── */
.login-logo {
margin-bottom: 1.25rem;
display: flex;
align-items: center;
justify-content: center;
}
.login-logo-link:focus-visible {
outline: 2px solid var(--app-primary-focus);
outline-offset: 2px;
}
.login-logo-img {
max-height: 2.5rem;
max-width: 10rem;
max-height: 6rem;
max-width: 16rem;
object-fit: contain;
display: block;
}
/* ── Password toggle ── */
@@ -71,27 +90,89 @@
outline-offset: 1px;
}
main.login-main {
/* ── Split layout: form pane (left) + brand pane (right) ──
The body is a flex-column so the footer sits full-width at the bottom
across both panes; main grows to fill the remaining viewport height. */
body:has(main.login-main) {
display: flex;
flex-direction: column;
min-height: 100dvh;
display: grid;
align-content: center;
gap: 0.75rem;
padding-block: 1rem 2rem;
}
.login-content-container.container-small {
width: min(300px, calc(100vw - 2rem));
max-width: none;
body:has(main.login-main) > .site-footer {
flex: 0 0 auto;
}
main.login-main {
flex: 1 1 auto;
display: grid;
grid-template-columns: 1fr;
margin: 0;
min-height: 0;
/* Override global "body > main" padding-block so the split panes
reach the very top + bottom edges of their column. */
padding-block: 0;
}
.login-form-pane {
display: flex;
align-items: center;
justify-content: center;
padding: calc(var(--app-spacing) * 2) var(--app-spacing);
}
.login-brand-pane {
display: flex;
align-items: center;
justify-content: center;
padding: calc(var(--app-spacing) * 2) var(--app-spacing);
min-height: 6rem;
position: relative;
isolation: isolate;
/* Three layers, top → bottom:
1. Soft radial halo behind the logo (Tenant-Accent glow).
2. Dot grid (subtle, 24px spacing).
3. Tinted base bg. */
background:
radial-gradient(
circle at 50% 50%,
color-mix(in srgb, var(--app-primary) 18%, transparent),
transparent 55%
),
radial-gradient(
circle,
color-mix(in srgb, var(--app-primary) 22%, transparent) 1px,
transparent 1.5px
)
0 0 / 24px 24px,
color-mix(in srgb, var(--app-primary) 6%, var(--app-background-color));
}
.login-brand-pane > * {
position: relative;
z-index: 1;
}
.login-content-container {
position: relative;
z-index: 1;
width: min(330px, calc(100vw - 2rem));
}
.login-card {
border: 1px solid color-mix(in srgb, var(--app-border) 75%, transparent);
box-shadow: none;
border: 1px solid color-mix(in srgb, var(--app-border) 40%, transparent);
border-radius: calc(var(--app-border-radius) * 1.5);
box-shadow:
0 8px 24px rgba(0, 0, 0, 0.06),
0 1px 3px rgba(0, 0, 0, 0.04);
margin-bottom: 0;
}
[data-theme="dark"] .login-card {
box-shadow:
0 8px 24px rgba(0, 0, 0, 0.35),
0 1px 3px rgba(0, 0, 0, 0.2);
}
.login-tenant-select-form {
@@ -154,33 +235,12 @@
align-self: center;
}
.login-tenant-choice-body {
display: flex;
align-items: center;
gap: 0.75rem;
width: 100%;
}
.login-tenant-choice-avatar {
width: 5rem;
height: 2rem;
display: block;
object-fit: contain;
object-position: left center;
justify-self: start;
}
.login-tenant-choice-avatar-placeholder {
width: 8rem;
height: 3rem;
border-radius: var(--app-border-radius);
display: inline-flex;
align-items: center;
justify-content: flex-start;
padding-left: 0.5rem;
font-size: var(--text-sm);
font-weight: var(--font-semibold);
color: var(--app-contrast);
.login-tenant-choice-text {
flex: 1 1 auto;
min-width: 0;
overflow: hidden;
text-overflow: ellipsis;
white-space: nowrap;
}
.login-alt-separator {
@@ -229,81 +289,64 @@
margin-bottom: 0;
}
.login-tenant-context {
margin-bottom: 1rem;
display: grid;
gap: 0.75rem;
border: 1px solid var(--app-border);
border-radius: var(--app-border-radius);
padding: calc(var(--app-spacing) * 0.5);
}
.login-tenant-context-main {
.login-identity-pill {
display: flex;
align-items: center;
flex-wrap: wrap;
gap: calc(var(--app-spacing) * 0.625);
padding: calc(var(--app-spacing) * 0.5) calc(var(--app-spacing) * 0.625);
margin-bottom: var(--app-spacing);
background: color-mix(in srgb, var(--app-color) 4%, transparent);
border: 1px solid color-mix(in srgb, var(--app-border) 40%, transparent);
border-radius: calc(var(--app-border-radius) * 1.1);
font-size: var(--text-sm);
}
.login-tenant-context-avatar,
.login-tenant-context-avatar-placeholder {
width: 7.5rem;
height: 3.25rem;
object-fit: contain;
object-position: left center;
}
.login-tenant-context-avatar-placeholder {
.login-identity-pill-icon {
flex-shrink: 0;
display: inline-flex;
align-items: center;
justify-content: center;
font-size: var(--text-sm);
font-weight: var(--font-bold);
color: var(--app-primary);
width: 32px;
height: 32px;
color: var(--app-muted-color);
font-size: var(--text-xl);
}
.login-tenant-context-avatar-placeholder--name {
width: auto;
max-width: 18rem;
height: auto;
justify-content: flex-start;
text-align: left;
font-weight: var(--font-bold);
.login-identity-pill-email {
flex: 1 1 auto;
min-width: 0;
overflow: hidden;
text-overflow: ellipsis;
white-space: nowrap;
color: var(--app-color);
}
.login-tenant-context-text {
min-width: 0;
overflow-wrap: anywhere;
}
.login-tenant-context-name {
.login-identity-pill-reset-form {
margin: 0;
font-size: var(--text-xs);
white-space: nowrap;
text-overflow: ellipsis;
max-width: 130px;
display: block;
overflow: hidden;
flex-shrink: 0;
}
.login-tenant-context-form {
margin: 0;
}
.login-tenant-context-form button {
width: 100%;
.login-identity-pill-reset-form button {
width: auto;
padding: 4px 10px;
line-height: var(--leading-none);
}
.login-help-links {
margin: 1.4rem 0 0.35rem;
padding-top: 0.2rem;
margin: calc(var(--app-spacing) * 1.25) 0 0;
padding-top: var(--app-spacing);
border-top: 1px solid color-mix(in srgb, var(--app-border) 40%, transparent);
}
.login-help-links-list {
list-style: none;
margin: 0;
padding: 0;
gap: 10px;
display: flex;
flex-wrap: wrap;
align-items: center;
justify-content: center;
gap: calc(var(--app-spacing) * 0.5);
font-size: var(--text-xs);
}
@@ -312,24 +355,26 @@
align-items: center;
margin: 0;
padding: 0;
color: var(--app-muted-color);
}
.login-security-note {
font-size: var(--text-xs);
margin-bottom: 1px;
color: color-mix(in srgb, var(--app-contrast) 78%, var(--app-muted-color));
.login-help-links-item a {
color: var(--app-muted-color);
text-decoration: none;
transition: color 120ms ease;
}
.login-security-note i {
color: var(--app-primary);
font-size: var(--text-sm);
.login-help-links-item a:hover,
.login-help-links-item a:focus-visible {
color: var(--app-color);
text-decoration: underline;
}
.login-security-note-detail {
width: 100%;
display: block;
font-size: var(--text-2xs);
color: color-mix(in srgb, var(--app-muted-color) 75%, transparent);
.login-help-links-item + .login-help-links-item::before {
content: "·";
margin-right: calc(var(--app-spacing) * 0.5);
color: var(--app-muted-color);
opacity: 0.6;
}
form[aria-busy="true"] button[type="submit"],
@@ -338,19 +383,24 @@
cursor: wait;
}
@media (min-width: 600px) {
/* Mobile: brand pane stacks on top as a slim band, then form pane below. */
@media (max-width: 767px) {
.login-brand-pane {
min-height: 7rem;
padding: calc(var(--app-spacing) * 1.25) var(--app-spacing);
order: -1;
}
.login-logo-img {
max-height: 3rem;
max-width: 12rem;
}
}
/* Desktop: side-by-side, form on left, brand on right, both full-height. */
@media (min-width: 768px) {
main.login-main {
min-height: 90vh;
place-content: center;
}
.login-tenant-context {
grid-template-columns: 1fr auto;
align-items: center;
}
.login-tenant-context-form button {
width: auto;
grid-template-columns: minmax(0, 1fr) minmax(0, 1fr);
}
}
}