{% extends "site/site_base.html" %} {% from 'macros/auth_page_wrapper.html' import auth_page_card %} {% block title %}{{ title }} - {{ product_name }}{% endblock %} {% block body_class %}dz-auth-page{% endblock %} {% block body_attrs %}hx-history="false"{% endblock %} {% block body %} {% call auth_page_card(title, product_name) %} {# The form is intercepted by _auth_form_script.html (preventDefault + fetch with X-CSRF-Token header). #} {# `method` attribute omitted — submission is always via the JS handler; CSRF protection is header-based. #}
{% endcall %} {% endblock %} {% block scripts_extra %} {% endblock %}