{#
  Generic failure page for GET /admin/auth/consume/{token}.

  Deliberately does NOT distinguish between:
    - token not found
    - token expired
    - token already consumed
  The audit log has the real reason; the visitor only needs to know
  they need a fresh link.
#}
{% extends "admin/base.html" %}

{% block title %}Login link invalid — Admin{% endblock %}

{% block content %}
  <article class="page-article">
    <header class="page-article__header">
      <h1 class="page-article__title">Login link invalid or expired</h1>
    </header>
    <p>
      That login link isn't valid any more. Links expire after 15
      minutes and can only be used once.
    </p>
    <p>
      <a href="/admin/login">Request a new link</a>
    </p>
  </article>
{% endblock %}