xore//auth
Secure access
One sign-on for every service behind the gate.
Welcome back
Enter your account identifier to continue.
or
Protected · all activity logged
Sign in — error states
A per-field wrong-credential message and a form-level rate-limit lockout are visually distinct here; a real login screen should not collapse both into one plain paragraph.
Sign in
Too many attempts. Try again in 42s.
Incorrect password. 2 attempts remaining.
Sign in — identity, then credential
theme.js's plain [role="tab"][data-tab-target] click delegate needs no
tab-strip markup to drive a two-step form -- these buttons keep their normal
.btn styling; only the wiring is reused.
Sign in
or
Password recovery
The generic success notice does not confirm or deny that the account exists -- a deliberate anti-enumeration property, shown here as the three states a consumer actually renders in sequence.
Request a reset
Check your inbox
If that account exists, a reset email is on its way — check your inbox.
Choose a new password
At least 15 characters.
