/* --- Authentification renforcée (P31) : boutons fournisseurs, second facteur, codes de secours, sécurité ---
   Composants autonomes sur les jetons existants ; identité visuelle P29. */
.provider-buttons { margin: 1.25rem 0; display: grid; gap: 0.6rem; }
.provider-buttons__separator { display: flex; align-items: center; gap: 0.75rem; color: var(--color-muted); font-size: 0.9rem; margin: 0 0 0.25rem; }
.provider-buttons__separator::before, .provider-buttons__separator::after { content: ""; flex: 1; border-top: 1px solid var(--color-border); }
.provider-form { margin: 0; }
.provider-button { display: inline-flex; align-items: center; justify-content: center; gap: 0.75rem; width: 100%; min-height: 44px; padding: 0.55rem 1rem; border-radius: 6px; font-family: inherit; font-size: 0.95rem; font-weight: 500; line-height: 1.2; cursor: pointer; }
.provider-button:focus-visible { outline: 3px solid var(--color-focus); outline-offset: 2px; }
.provider-button__logo { width: 20px; height: 20px; flex: none; }
/* Google : fond blanc, bordure #747775, texte #1F1F1F (règles de la marque Google pour le bouton « Sign in with Google »). */
.provider-button--google { background: #fff; color: #1f1f1f; border: 1px solid #747775; }
.provider-button--google:hover { background: #f8f9fa; }
/* Apple : fond noir, texte et logo blancs, coins arrondis (règles « Sign in with Apple », variante noire). */
.provider-button--apple { background: #000; color: #fff; border: 1px solid #000; }
.provider-button--apple:hover { background: #1a1a1a; }
.first-factors { list-style: none; padding: 0; display: grid; gap: 0.6rem; }
.first-factors li { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; }
.inline-form { display: inline; }
#security-sessions tr.is-current td { background: var(--color-notice-bg); }
.security-actions { margin: 0.5rem 0 1.5rem; display: flex; flex-wrap: wrap; gap: 0.5rem; }

/* --- Second facteur (refonte du 2 octobre 2026) : la carte d'accès du site, sur les jetons --ln-* -------------------------
   Activation (deux étapes numérotées, code QR dans son cadre et clé manuelle à côté), codes de secours (grille, copie,
   impression), vérification et vérification de l'adresse. Un seul bouton plein par écran ; la sortie est un lien. */
.auth-card { max-width: 34rem; margin: 0 auto; padding: var(--sp-8); }
.auth-card--wide { max-width: 42rem; }
.auth-card__head { margin-bottom: var(--sp-6); }
.auth-card__kicker { display: inline-flex; align-items: center; gap: 6px; }
.auth-card__kicker .ln-icon { width: 14px; height: 14px; }
.auth-card h1 { font-size: var(--ln-text-xl, 30px); margin: 0 0 var(--sp-2); }
.step-indicator { display: inline-block; margin: 0 0 var(--sp-3); padding: 3px 10px; border-radius: 999px; background: var(--ln-sky); color: var(--ln-accent); font-size: var(--ln-text-sm); font-weight: 500; }
.auth-card__lead { color: var(--ln-muted); line-height: 1.65; margin: 0; }
.auth-steps { list-style: none; margin: 0; padding: 0; display: grid; gap: var(--sp-6); }
.auth-step { display: grid; grid-template-columns: 32px minmax(0, 1fr); gap: var(--sp-4); align-items: start; }
.auth-step + .auth-step { padding-top: var(--sp-6); border-top: 1px solid var(--ln-line); }
.auth-step__number { width: 32px; height: 32px; border-radius: 50%; display: grid; place-items: center; background: var(--ln-sky); color: var(--ln-accent); font-weight: 600; font-size: 15px; }
.auth-step__body h2 { font-size: 17px; font-weight: 600; margin: 4px 0 var(--sp-4); color: var(--ln-title); }
.auth-qr { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: var(--sp-5); align-items: center; }
.qr-code { width: 184px; padding: 12px; background: #fff; border: 1px solid var(--ln-line); border-radius: var(--ln-radius); }
.qr-code svg { width: 100%; height: auto; display: block; }
.auth-qr__manual p { margin: 0 0 var(--sp-2); font-size: var(--ln-text-sm); color: var(--ln-muted); line-height: 1.55; }
.manual-key { display: block; line-height: 1.9; word-spacing: 0.3em; padding: 10px 14px; background: var(--ln-soft); border: 1px solid var(--ln-line); border-radius: var(--ln-radius-sm); font-size: 15px; letter-spacing: 0.06em; color: var(--ln-title); user-select: all; }
.manual-key span { white-space: nowrap; }
.auth-form { margin: 0; }
.auth-form .field { margin-bottom: var(--sp-4); }
.auth-form input[type="text"].input--code, .input--code { font-size: 22px; letter-spacing: 0.3em; font-variant-numeric: tabular-nums; max-width: 13rem; text-align: center; }
.auth-actions { display: flex; flex-wrap: wrap; align-items: center; gap: var(--sp-3) var(--sp-5); }
.auth-actions .button_to, .auth-actions form { margin: 0; }
.auth-link { background: none; border: 0; padding: 0; font: inherit; font-size: var(--ln-text-sm); color: var(--ln-accent); text-decoration: underline; text-underline-offset: 3px; cursor: pointer; }
.auth-link:hover { color: var(--ln-title); }
.auth-card__foot { margin-top: var(--sp-6); padding-top: var(--sp-4); border-top: 1px solid var(--ln-line); }
.auth-card__leave { margin: 0; }
.auth-card__note { display: flex; gap: 10px; align-items: flex-start; margin: var(--sp-6) 0 0; padding: 12px 14px; background: var(--ln-soft); border-radius: var(--ln-radius-sm); color: var(--ln-muted); font-size: var(--ln-text-sm); line-height: 1.55; }
.auth-card__note .ln-icon { width: 16px; height: 16px; flex: none; margin-top: 2px; color: var(--ln-accent); }
.auth-codes { border: 1px solid var(--ln-line); border-radius: var(--ln-radius); background: var(--ln-soft); padding: var(--sp-5); }
.backup-codes { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px var(--sp-6); margin: 0; padding: 0 0 0 1.6rem; color: var(--ln-muted); font-size: var(--ln-text-sm); }
.backup-codes li { padding-left: 4px; }
.backup-codes code { font-size: 16px; letter-spacing: 0.06em; color: var(--ln-title); user-select: all; }
.auth-codes__tools { display: flex; flex-wrap: wrap; gap: var(--sp-2); margin-top: var(--sp-4); padding-top: var(--sp-4); border-top: 1px solid var(--ln-line); }
.auth-codes__tools .ln-icon { width: 15px; height: 15px; }
.auth-codes__note { margin: var(--sp-3) 0 var(--sp-5); }
.auth-confirm { display: flex; gap: 10px; align-items: flex-start; padding: 12px 14px; border: 1px solid var(--ln-line); border-radius: var(--ln-radius-sm); margin-bottom: var(--sp-4); }
.auth-confirm input { margin-top: 3px; }
@media (max-width: 600px) {
  .auth-card { padding: var(--sp-5); }
  .auth-qr { grid-template-columns: minmax(0, 1fr); }
  .qr-code { width: 200px; }
  .auth-step { grid-template-columns: 28px minmax(0, 1fr); gap: var(--sp-3); }
  .auth-step__number { width: 28px; height: 28px; font-size: 14px; }
  .auth-step__body h2 { margin-top: 2px; }
  .backup-codes { grid-template-columns: minmax(0, 1fr); }
  .auth-form input[type="text"].input--code, .input--code { max-width: 100%; }
}
@media print {
  .auth-card { border: 0; box-shadow: none; padding: 0; }
  .auth-codes { background: none; }
}