<div class="auth-card">
    <p class="eyebrow">Second step</p>
    <h2>Authentication code</h2>
    <p class="muted">Enter the current six-digit code from your authenticator.</p>
    <form method="post" class="stack-form">
        <?= csrf_field() ?>
        <input type="hidden" name="action" value="verify_2fa">
        <label>Six-digit code<input class="otp-input" type="text" name="code" required inputmode="numeric" pattern="[0-9]{6}" maxlength="6" autocomplete="one-time-code" autofocus></label>
        <button class="button primary full" type="submit">Verify and continue</button>
    </form>
</div>
