/* ============================================================
   ORUS KEYCLOAK THEME - login.css

   ============================================================ */


/* Variables CSS (mode clair) */
:root {
  /* Barre clair / auto / sombre (coin en haut à gauche) */
  --orus-color-switch-display: flex;
  /* Verrou thème : none | light | dark */
  --orus-theme-lock: light;

  /* Palette principale */
  --c-accent:        #dc2626;
  --c-accent-hover:  #b91c1c;
  --c-accent-text:   #ffffff;

  /* Surfaces */
  --c-bg:            #f0f2f5;
  --c-bg-image:      url("../img/wallpaper.jpg");
  --c-card:          #ffffff;
  --c-card-border:   rgba(0, 0, 0, 0.07);
  --c-input-bg:      #f8fafc;
  --c-input-border:  #d1d5db;
  --c-input-focus:   #dc2626;

  /* Texte */
  --c-text:          #1e1e2e;
  --c-text-muted:    #6b7280;
  --c-text-inverse:  #ffffff;

  /* Feedback */
  --c-error:   #FF0000;
  --c-success: #16a34a;
  --c-warning: #d97706;
  --c-info:    #2563eb;

  /* Layout Sidebar : même image que le fond (--c-bg-image), pas de variable séparée */
  --c-sidebar-overlay: rgba(0, 0, 0, 0.25);
  --sidebar-w:         460px;
  /* 1 | true | yes : active sidebar-activate.css - Login page dans un style Microsoft Like*/
  --orus-load-sidebar: 0;

  /* Layout Centered */
  --card-w: 420px;

  /* Géométrie */
  --r-card:   14px;
  --r-input:   8px;
  --r-btn:     8px;
  --shadow:   0 8px 32px rgba(0, 0, 0, 0.10);
  --pwd-toggle-w: 40px;

  /* Icônes SVG */
  --orus-icon-theme-auto: url("../img/icons/theme-auto.svg");
  --orus-icon-theme-light: url("../img/icons/theme-light.svg");
  --orus-icon-theme-dark: url("../img/icons/theme-dark.svg");
  --orus-icon-pwd-open: url("../img/icons/pwd-open.svg");
  --orus-icon-pwd-closed: url("../img/icons/pwd-closed.svg");

  /* Icones MFA : Font Awesome 4 (patternfly-addons)*/
  --orus-icon-auth-default: "\f03a";
  --orus-icon-auth-recovery: "\f03a";
  --orus-icon-auth-password: "\f09c";
  --orus-icon-auth-otp: "\f10b";
  --orus-icon-auth-webauthn: "\f084";
  --orus-icon-auth-webauthn-pl: "\f084";
  --orus-icon-auth-email: "\f0e0";
  --orus-icon-auth-sms: "\f075";
  --orus-icon-wa-default: "\f084";
  --orus-icon-wa-internal: "\f084";
  --orus-icon-wa-usb: "\f287";
  --orus-icon-wa-nfc: "\f1eb";
  --orus-icon-wa-ble: "\f294";
  --orus-icon-wa-unknown: "\f084";
  --orus-icon-otp-tile: "\f10b";
  --orus-icon-chevron-right: "\f105";
  --orus-icon-reset-flow: "\f14d";
  /* Tuiles MFA : hauteur uniforme */
  --orus-mfa-tile-min-h: 5.625rem;
  --orus-mfa-desc-lines: 2;
  /* MFA enforce (tuiles #mfa-*) : optionnel ; sinon repli sur --orus-icon-auth-* (une seule surcharge realm) */
}

/*  CSS mode sombre*/
@media (prefers-color-scheme: dark) {
  html:not([data-theme]) {
    --c-accent:        #6366f1;
    --c-accent-hover:  #818cf8;
    --c-bg:            #0f172a;
    --c-card:          #1e293b;
    --c-card-border:   rgba(255, 255, 255, 0.06);
    --c-input-bg:      #334155;
    --c-input-border:  #475569;
    --c-input-focus:   #6366f1;
    --c-text:          #f1f5f9;
    --c-text-muted:    #94a3b8;
    --shadow:          0 8px 32px rgba(0, 0, 0, 0.45);
    --c-sidebar-overlay: rgba(0, 0, 0, 0.50);
  }
}

html[data-theme="dark"] {
  --c-accent:        #6366f1;
  --c-accent-hover:  #818cf8;
  --c-bg:            #0f172a;
  --c-card:          #1e293b;
  --c-card-border:   rgba(255, 255, 255, 0.06);
  --c-input-bg:      #334155;
  --c-input-border:  #475569;
  --c-input-focus:   #6366f1;
  --c-text:          #f1f5f9;
  --c-text-muted:    #94a3b8;
  --shadow:          0 8px 32px rgba(0, 0, 0, 0.45);
  --c-sidebar-overlay: rgba(0, 0, 0, 0.50);
  color-scheme: dark;
}

html[data-theme="light"] {
  color-scheme: light;
}

html:not([data-theme]) {
  color-scheme: light dark;
}


/* Sélecteur de thème */
.orus-color-switch {
  position: fixed;
  z-index: 10050;
  top: 12px;
  left: 12px;
  display: var(--orus-color-switch-display, flex);
  align-items: center;
  gap: 2px;
  padding: 4px;
  border-radius: 999px;
  background: color-mix(in srgb, var(--c-card) 88%, transparent);
  border: 1px solid var(--c-card-border);
  box-shadow: var(--shadow);
  backdrop-filter: blur(8px);
  -webkit-backdrop-filter: blur(8px);
}

.orus-color-switch-btn {
  display: flex;
  align-items: center;
  justify-content: center;
  width: 36px;
  height: 32px;
  padding: 0;
  border: none;
  border-radius: 999px;
  background: transparent;
  color: var(--c-text-muted);
  cursor: pointer;
  transition: color 0.15s ease, background 0.15s ease, transform 0.1s ease;
}

.orus-color-switch-btn:hover {
  color: var(--c-text);
  background: var(--c-input-bg);
}

.orus-color-switch-btn.is-active {
  color: var(--c-accent);
  background: color-mix(in srgb, var(--c-accent) 14%, transparent);
}

.orus-color-switch-btn:focus-visible {
  outline: 2px solid var(--c-accent);
  outline-offset: 2px;
}

.orus-color-switch-ic {
  display: block;
  width: 18px;
  height: 18px;
  flex-shrink: 0;
  pointer-events: none;
  background-color: currentColor;
  -webkit-mask-size: contain;
  mask-size: contain;
  -webkit-mask-repeat: no-repeat;
  mask-repeat: no-repeat;
  -webkit-mask-position: center;
  mask-position: center;
}

.orus-color-switch-btn[data-orus-theme="auto"] .orus-color-switch-ic {
  -webkit-mask-image: var(--orus-icon-theme-auto);
  mask-image: var(--orus-icon-theme-auto);
}

.orus-color-switch-btn[data-orus-theme="light"] .orus-color-switch-ic {
  -webkit-mask-image: var(--orus-icon-theme-light);
  mask-image: var(--orus-icon-theme-light);
}

.orus-color-switch-btn[data-orus-theme="dark"] .orus-color-switch-ic {
  -webkit-mask-image: var(--orus-icon-theme-dark);
  mask-image: var(--orus-icon-theme-dark);
}

html[data-orus-theme-locked] .orus-color-switch {
  display: none;
}


/* Icônes Font Awesome 4 */
i.orus-auth-icon,
i.orus-webauthn-dev,
i.orus-otp-icon,
i.orus-select-auth-arrow-icon,
i.orus-reset-flow {
  font-style: normal;
  font-weight: normal;
  font-family: FontAwesome;
  display: inline-flex;
  align-items: center;
  justify-content: center;
  line-height: 1;
  text-rendering: auto;
  -webkit-font-smoothing: antialiased;
  -moz-osx-font-smoothing: grayscale;
}

i.orus-auth-icon::before,
i.orus-webauthn-dev::before,
i.orus-otp-icon::before,
i.orus-select-auth-arrow-icon::before,
i.orus-reset-flow::before {
  line-height: 1;
}

i.orus-auth-icon.orus-auth-icon--default::before { content: var(--orus-icon-auth-default); }
i.orus-auth-icon.orus-auth-icon--recovery::before { content: var(--orus-icon-auth-recovery); }
i.orus-auth-icon.orus-auth-icon--password::before { content: var(--orus-icon-auth-password); }
i.orus-auth-icon.orus-auth-icon--otp::before { content: var(--orus-icon-auth-otp); }
i.orus-auth-icon.orus-auth-icon--webauthn::before { content: var(--orus-icon-auth-webauthn); }
i.orus-auth-icon.orus-auth-icon--webauthn-pl::before { content: var(--orus-icon-auth-webauthn-pl); }
i.orus-auth-icon.orus-auth-icon--email::before { content: var(--orus-icon-auth-email); }
i.orus-auth-icon.orus-auth-icon--sms::before { content: var(--orus-icon-auth-sms); }

i.orus-webauthn-dev.orus-webauthn-dev--default::before { content: var(--orus-icon-wa-default); }
i.orus-webauthn-dev.orus-webauthn-dev--internal::before { content: var(--orus-icon-wa-internal); }
i.orus-webauthn-dev.orus-webauthn-dev--usb::before { content: var(--orus-icon-wa-usb); }
i.orus-webauthn-dev.orus-webauthn-dev--nfc::before { content: var(--orus-icon-wa-nfc); }
i.orus-webauthn-dev.orus-webauthn-dev--ble::before { content: var(--orus-icon-wa-ble); }
i.orus-webauthn-dev.orus-webauthn-dev--unknown::before { content: var(--orus-icon-wa-unknown); }

i.orus-otp-icon::before { content: var(--orus-icon-otp-tile); }

i.orus-select-auth-arrow-icon::before { content: var(--orus-icon-chevron-right); }

#reset-login i.orus-reset-flow::before { content: var(--orus-icon-reset-flow); }


/* Œil mot de passe (SVG `--orus-icon-pwd-open` / `--orus-icon-pwd-closed`) */
.orus-pwd-toggle-ic {
  display: block;
  width: 1.125rem;
  height: 1.125rem;
  flex-shrink: 0;
  background-color: currentColor;
  -webkit-mask-size: contain;
  mask-size: contain;
  -webkit-mask-repeat: no-repeat;
  mask-repeat: no-repeat;
  -webkit-mask-position: center;
  mask-position: center;
}

.orus-pwd-toggle-ic--open {
  -webkit-mask-image: var(--orus-icon-pwd-open);
  mask-image: var(--orus-icon-pwd-open);
}

.orus-pwd-toggle-ic--closed {
  display: none;
  -webkit-mask-image: var(--orus-icon-pwd-closed);
  mask-image: var(--orus-icon-pwd-closed);
}

.orus-pwd-toggle.orus-pwd-toggle--revealed .orus-pwd-toggle-ic--open {
  display: none;
}

.orus-pwd-toggle.orus-pwd-toggle--revealed .orus-pwd-toggle-ic--closed {
  display: block;
}


/* Reset */
*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
html { height: 100%; }

body {
  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto,
               'Helvetica Neue', Arial, sans-serif;
  font-size: 15px;
  line-height: 1.6;
  color: var(--c-text);
  background-color: var(--c-bg);
  background-image: var(--c-bg-image);
  background-size: cover;
  background-position: center;
  background-repeat: no-repeat;
  background-attachment: fixed;
  min-height: 100vh;
}

/* iOS : fixed + grandes hauteurs peut être capricieux ; le défilement reste sur la carte */
@supports (-webkit-touch-callout: none) {
  @media (max-width: 768px) {
    body {
      background-attachment: scroll;
    }
  }
}

a { color: var(--c-accent); text-decoration: none; }
a:hover { text-decoration: underline; }


/* ============================================================
   LAYOUT 1 : Style Keycloak (centré)
   ============================================================ */
body.layout-centered {
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  min-height: 100vh;
  padding: 24px;
  box-sizing: border-box;
}

body.layout-centered .orus-card {
  background: var(--c-card);
  border: 1px solid var(--c-card-border);
  border-radius: var(--r-card);
  box-shadow: var(--shadow);
  width: 100%;
  max-width: var(--card-w);
  padding: 0;
  max-height: calc(100vh - 48px);
  max-height: calc(100dvh - 48px);
  overflow: hidden;
  display: flex;
  flex-direction: column;
  margin: auto;
}

body.layout-centered .orus-brand {
  flex-shrink: 0;
  margin-bottom: 0;
  padding: 44px 40px 0;
}

body.layout-centered .orus-card-scroll {
  flex: 1;
  min-height: 0;
  overflow-x: hidden;
  overflow-y: auto;
  -webkit-overflow-scrolling: touch;
  overscroll-behavior: contain;
  padding: 24px 40px 44px;
}

/* Shell sidebar : toujours dans le DOM ; masqué en mode carte centrée (défaut). */
body.layout-centered .orus-sidebar-image {
  display: none;
}

body.layout-centered .orus-panel {
  flex: 1 1 auto;
  width: 100%;
  min-height: 0;
  margin: 0;
  padding: 0;
  background: transparent;
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  overflow: visible;
}


/* ============================================================
   LAYOUT 2 : SIDEBAR  (style Microsoft)
   Image plein-écran à gauche, panneau de login à droite.
   ============================================================ */
body.layout-sidebar {
  display: flex;
  flex-direction: row;
  min-height: 100vh;
}

body.layout-sidebar .orus-sidebar-image {
  flex: 1 1 auto;
  min-width: 0;
  background-image: var(--c-bg-image);
  background-size: cover;
  background-position: center;
  position: relative;
  min-height: 300px;
}

/* Voile sombre sur l'image pour améliorer le contraste */
body.layout-sidebar .orus-sidebar-image::after {
  content: '';
  position: absolute;
  inset: 0;
  background: var(--c-sidebar-overlay);
}

body.layout-sidebar .orus-panel {
  flex: 0 0 var(--sidebar-w);
  width: var(--sidebar-w);
  max-width: min(100%, var(--sidebar-w));
  min-height: 100vh;
  background: var(--c-card);
  display: flex;
  flex-direction: column;
  align-items: center;
  justify-content: center;
  padding: 48px 44px;
  overflow-y: auto;
  -webkit-overflow-scrolling: touch;
  overscroll-behavior: contain;
}

body.layout-sidebar .orus-card {
  width: 100%;
  max-width: 100%;
  display: flex;
  flex-direction: column;
  overflow: visible;
  max-height: none;
  padding: 0;
  background: transparent;
  border: none;
  border-radius: 0;
  box-shadow: none;
}

/* Panneau latéral : tout le bloc carte défile avec le panneau */
body.layout-sidebar .orus-card-scroll {
  flex: 0 0 auto;
  overflow: visible;
  min-height: auto;
  padding: 0;
}

/* Responsive sidebar : empilé sur mobile */
@media (max-width: 768px) {
  body.layout-sidebar { flex-direction: column; }

  .orus-sidebar-image {
    flex: none;
    height: 180px;
  }

  body.layout-sidebar .orus-panel {
    flex: 1 1 auto;
    width: 100%;
    max-width: none;
    min-height: auto;
    padding: 32px 24px;
  }

  body.layout-sidebar .orus-card { max-width: 100%; }
}


/* ============================================================
   LOGO
   ============================================================ */
.orus-brand {
  text-align: center;
  margin-bottom: 24px;
}

.orus-logo {
  display: flex;
  justify-content: center;
  margin-bottom: 10px;
}

.orus-logo img {
  max-height: 56px;
  max-width: 200px;
  object-fit: contain;
}

.orus-tagline {
  margin: 0;
  font-size: 13px;
  font-weight: 500;
  color: var(--c-text-muted);
  letter-spacing: 0.02em;
}


/* ============================================================
   TITRE DE PAGE
   ============================================================ */
#kc-page-title {
  font-size: 20px;
  font-weight: 700;
  color: var(--c-text);
  text-align: center;
  margin-bottom: 24px;
  letter-spacing: -0.01em;
}

/* Masque le titre dupliqué dans le header Keycloak */
#kc-header-wrapper { display: none; }

/* ============================================================
   ZONE CONTENU (#kc-content / #kc-content-wrapper)
   Texte informatif centré par défaut ; formulaires avec champs alignés au début (LTR/RTL via start).
   ============================================================ */
#kc-content,
#kc-content-wrapper {
  width: 100%;
  max-width: 100%;
  box-sizing: border-box;
}

#kc-content-wrapper {
  text-align: center;
}

/* Choix d’authentificateur : pas de champ texte → :has() ci‑dessous ne s’applique pas ; éviter le centrage des tuiles */
#kc-content-wrapper:has(#kc-select-credential-form) {
  text-align: start;
}

/* Tout formulaire qui contient un vrai champ (hors submit/bouton/hidden/reset seuls) */
#kc-content-wrapper form:has(input:not([type="hidden"]):not([type="submit"]):not([type="button"]):not([type="reset"])),
#kc-content-wrapper form:has(textarea),
#kc-content-wrapper form:has(select) {
  text-align: start;
}

/*
 * Actions en fin de <form> sans wrapper #kc-form-buttons (ex. configure-totp.ftl : submit + annuler).
 * text-align: center sur le form centre la ligne des contrôles inline / inline-flex ; on rétablit start
 * sur les blocs champs (enfants directs hors boutons).
 */
#kc-content-wrapper form:not(:has(#kc-form-buttons)):has(> input[type="submit"]) {
  text-align: center;
}

#kc-content-wrapper form:not(:has(#kc-form-buttons)):has(> input[type="submit"]) > *:not(input[type="submit"]):not(input[type="button"]):not(button) {
  text-align: start;
}

#kc-content-wrapper form:not(:has(#kc-form-buttons)):has(> input[type="submit"]) > input[type="submit"],
#kc-content-wrapper form:not(:has(#kc-form-buttons)):has(> input[type="submit"]) > input[type="button"],
#kc-content-wrapper form:not(:has(#kc-form-buttons)):has(> input[type="submit"]) > button {
  margin-top: 18px;
  margin-left: 6px;
  margin-right: 6px;
  vertical-align: middle;
}

#kc-content-wrapper form#kc-select-credential-form,
#kc-content-wrapper form#kc-select-try-another-way-form {
  text-align: start;
}

/* Formulaires sans saisie (ex. login-idp-link-confirm.ftl #kc-register-form) : boutons en pile,
 * pleine largeur, espacement - aligné sur #kc-form-buttons.
 */
#kc-content-wrapper form:not(:has(input:not([type="hidden"]):not([type="submit"]):not([type="button"]):not([type="reset"]))):not(:has(textarea)):not(:has(select)) .orus-form-group:has(button, input[type="submit"], input[type="button"]) {
  display: flex;
  flex-direction: column;
  align-items: stretch;
  gap: 12px;
  width: 100%;
  max-width: 100%;
  box-sizing: border-box;
}

#kc-content-wrapper form:not(:has(input:not([type="hidden"]):not([type="submit"]):not([type="button"]):not([type="reset"]))):not(:has(textarea)):not(:has(select)) .orus-form-group:has(button, input[type="submit"], input[type="button"]) > :is(.orus-btn, .orus-btn-primary, button, input[type="submit"], input[type="button"]) {
  width: 100%;
  max-width: 100%;
  box-sizing: border-box;
}

/* Ligne « * Champs obligatoires » (displayRequiredFields dans template.ftl) */
header.orus-page-header .orus-label-wrap.subtitle {
  display: none;
}


/* ============================================================
   IDENTIFIANT AFFICHÉ + « REDÉMARRER LA CONNEXION » (MFA, OTP, etc.)
   Texte centré, lien simple - pas de carte / bouton
   ============================================================ */

header.orus-page-header .col-md-10:has(#kc-username) {
  width: 100%;
  max-width: 100%;
  margin-left: auto;
  margin-right: auto;
  float: none;
}

#kc-username.orus-form-group {
  margin-bottom: 20px;
}

#kc-username {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 6px;
  width: 100%;
  margin: 0 auto;
  text-align: center;
}

#kc-attempted-username {
  margin: 0;
  font-size: 15px;
  font-weight: 500;
  color: var(--c-text);
  line-height: 1.45;
  word-break: break-word;
}

#kc-username #reset-login {
  display: inline;
  margin: 0;
  padding: 0;
  font-size: 13px;
  font-weight: 500;
  color: var(--c-accent);
  text-decoration: underline;
  text-underline-offset: 3px;
  border: none;
  background: none;
  box-shadow: none;
}

#kc-username #reset-login:hover {
  color: var(--c-accent-hover);
}

#kc-username #reset-login:focus-visible {
  outline: 2px solid var(--c-accent);
  outline-offset: 3px;
  border-radius: 2px;
}

#kc-username .kc-login-tooltip {
  display: inline;
}

/* Icône PF/FA : masquée ici pour un libellé type lien uniquement */
#kc-username #reset-login .kc-login-tooltip i {
  display: none;
}


/* ============================================================
   PAGE « FLUX / SESSION EXPIRÉ » (login-page-expired.ftl)
   Deux phrases centrées + liens « Cliquez ici » (#loginRestartLink, #loginContinueLink)
   ============================================================ */

#kc-content p#instruction1.instruction {
  margin: 0 auto 24px;
  padding: 0 12px;
  max-width: 28rem;
  text-align: center;
  font-size: 15px;
  font-weight: 500;
  line-height: 1.7;
  color: var(--c-text);
}

#instruction1.instruction a#loginRestartLink,
#instruction1.instruction a#loginContinueLink {
  color: var(--c-accent);
  font-weight: 500;
  text-decoration: underline;
  text-underline-offset: 3px;
}

#instruction1.instruction a#loginRestartLink:hover,
#instruction1.instruction a#loginContinueLink:hover {
  color: var(--c-accent-hover);
}

#instruction1.instruction a#loginRestartLink:focus-visible,
#instruction1.instruction a#loginContinueLink:focus-visible {
  outline: 2px solid var(--c-accent);
  outline-offset: 3px;
  border-radius: 2px;
}


/* ============================================================
   MESSAGES DE RETOUR (alertes)
   ============================================================ */
.alert {
  padding: 12px 16px;
  border-radius: var(--r-input);
  font-size: 14px;
  margin-bottom: 20px;
  border: 1px solid transparent;
}

.alert-info    { background: rgba(37,  99,  235, 0.08); border-color: rgba(37,  99,  235, 0.25); color: var(--c-info);    }
.alert-success { background: rgba(22,  163, 74,  0.08); border-color: rgba(22,  163, 74,  0.25); color: var(--c-success); }
.alert-warning { background: rgba(217, 119, 6,   0.08); border-color: rgba(217, 119, 6,   0.25); color: var(--c-warning); }
/* Erreur : danger (template) ou error (certains flux Keycloak) */
.alert-danger,
.alert-error {
  background: rgba(220, 38, 38, 0.1);
  border-color: rgba(220, 38, 38, 0.35);
  color: var(--c-error);
}

.alert-danger .kc-feedback-text,
.alert-error .kc-feedback-text {
  color: var(--c-error);
}

/*
 * Erreurs « par champ » (login.ftl du thème base) :
 * Keycloak met displayMessage=false si messagesPerField.existsError('username','password'),
 * donc le texte n’apparaît PAS dans .alert mais dans <span id="input-error" class="orus-field-error">.
 */
#input-error,
.orus-field-error {
  display: block;
  margin-top: 8px;
  font-size: 13px;
  font-weight: 600;
  line-height: 1.4;
  /* !important : surcharge des styles PatternFly / resources Keycloak sur le span d’erreur */
  color: var(--c-error) !important;
}


/* ============================================================
   FORMULAIRE - groupes, labels, inputs
   ============================================================ */
.orus-form-group {
  margin-bottom: 18px;
}

.orus-label {
  display: block;
  font-size: 13px;
  font-weight: 500;
  color: var(--c-text-muted);
  margin-bottom: 6px;
  letter-spacing: 0.02em;
}

/* Inscription / profil : <div class="orus-label-wrap"><label class="orus-label">…</label> *</div> */
.orus-label-wrap {
  display: flex;
  flex-direction: row;
  flex-wrap: nowrap;
  align-items: baseline;
  gap: 0.2em;
  margin-bottom: 6px;
}

.orus-label-wrap .orus-label {
  display: inline;
  margin-bottom: 0;
  flex: 0 1 auto;
}

.orus-input-wrap {
  width: 100%;
  min-width: 0;
}

.orus-input {
  display: block;
  width: 100%;
  height: 46px;
  padding: 0 14px;
  background: var(--c-input-bg);
  border: 1.5px solid var(--c-input-border);
  border-radius: var(--r-input);
  color: var(--c-text);
  font-size: 15px;
  font-family: inherit;
  transition: border-color 0.18s ease, box-shadow 0.18s ease;
  outline: none;
  -webkit-appearance: none;
  appearance: none;
}

.orus-input:focus {
  border-color: var(--c-input-focus);
  box-shadow: 0 0 0 3px rgba(79, 70, 229, 0.18);
}

/* Anneau focus adapté en mode sombre */
@media (prefers-color-scheme: dark) {
  html:not([data-theme]) .orus-input:focus {
    box-shadow: 0 0 0 3px rgba(99, 102, 241, 0.25);
  }
}

html[data-theme="dark"] .orus-input:focus {
  box-shadow: 0 0 0 3px rgba(99, 102, 241, 0.25);
}

.orus-input::placeholder { color: var(--c-text-muted); opacity: 0.7; }

/* Keycloak / PatternFly : toggle mot de passe natif (icônes PF souvent absentes sans thème complet) - masqué, l’œil Orus remplace */
button[data-password-toggle] {
  display: none !important;
}


/*  Champ mot de passe + bouton œil (même cellule grille = overlay fiable) ─ */
.orus-pwd-wrapper {
  display: grid;
  grid-template-columns: 1fr;
  grid-template-rows: minmax(46px, auto);
  width: 100%;
  min-width: 0;
  align-items: stretch;
  /* Évite que les parents flex/grid Keycloak cassent le positionnement */
  position: relative;
  isolation: isolate;
}

.orus-pwd-wrapper > input {
  grid-area: 1 / 1;
  width: 100%;
  min-width: 0;
  /* Laisse la place à l’œil à droite, dans la zone du champ */
  padding-right: calc(var(--pwd-toggle-w) + 10px);
}

.orus-pwd-toggle {
  grid-area: 1 / 1;
  place-self: center end;
  z-index: 2;
  width: var(--pwd-toggle-w);
  height: var(--pwd-toggle-w);
  margin-right: 4px;
  padding: 0;
  border: none;
  border-radius: 6px;
  background: transparent;
  color: var(--c-text-muted);
  cursor: pointer;
  display: flex;
  align-items: center;
  justify-content: center;
  flex-shrink: 0;
  transition: color 0.15s ease, background 0.15s ease;
  -webkit-tap-highlight-color: transparent;
}

.orus-pwd-toggle:hover {
  color: var(--c-text);
  background: rgba(0, 0, 0, 0.04);
}

@media (prefers-color-scheme: dark) {
  html:not([data-theme]) .orus-pwd-toggle:hover {
    background: rgba(255, 255, 255, 0.06);
  }
}

html[data-theme="dark"] .orus-pwd-toggle:hover {
  background: rgba(255, 255, 255, 0.06);
}

.orus-pwd-toggle:focus-visible {
  outline: 2px solid var(--c-input-focus);
  outline-offset: 1px;
}

.orus-pwd-toggle .orus-pwd-toggle-ic {
  pointer-events: none;
}


/* Ligne « Se souvenir de moi » + « Mot de passe oublié » (uniquement écran login mot de passe) */
#kc-form-login .orus-form-group:has(> #kc-form-options) {
  display: flex;
  flex-direction: row;
  flex-wrap: wrap;
  align-items: center;
  justify-content: space-between;
  gap: 12px 20px;
  margin-bottom: 22px;
}

#kc-form-options {
  display: flex;
  align-items: center;
  margin-bottom: 0;
  flex: 0 1 auto;
  min-width: 0;
}

#kc-form-options + div {
  flex: 0 0 auto;
  text-align: right;
}

#kc-form-options + div a {
  font-size: 14px;
  font-weight: 500;
  color: var(--c-accent);
  text-decoration: none;
  padding: 6px 4px;
  border-radius: 6px;
  transition: color 0.15s ease, background 0.15s ease;
}

#kc-form-options + div a:hover {
  color: var(--c-accent-hover);
  text-decoration: underline;
  text-underline-offset: 3px;
}

#kc-form-options .checkbox {
  margin: 0;
}

#kc-form-options .checkbox label {
  position: relative;
  display: inline-flex;
  align-items: center;
  gap: 10px;
  cursor: pointer;
  user-select: none;
  padding: 8px 14px 8px 10px;
  margin: -4px -8px;
  border-radius: var(--r-input);
  font-size: 14px;
  font-weight: 500;
  color: var(--c-text);
  letter-spacing: 0.01em;
  transition: background 0.18s ease, color 0.15s ease;
}

#kc-form-options .checkbox label:hover {
  background: var(--c-input-bg);
}

/* Coche en overlay (centrée sur la case) : scale + opacity, pas de fond SVG sur l’input */
#kc-form-options .checkbox label::after {
  content: "";
  position: absolute;
  left: calc(10px + 0.625rem);
  top: 50%;
  width: 12px;
  height: 10px;
  margin: 0;
  pointer-events: none;
  z-index: 2;
  background: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 12 10' fill='none'%3E%3Cpath d='M1 5.2 4.2 8.4 11 1.3' stroke='%23ffffff' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'/%3E%3C/svg%3E")
    center / contain no-repeat;
  opacity: 0;
  transform: translate(-50%, -50%) scale(0.35);
  transition:
    opacity 0.2s ease,
    transform 0.32s cubic-bezier(0.34, 1.4, 0.64, 1);
}

#kc-form-options .checkbox label:has(input:checked)::after {
  opacity: 1;
  transform: translate(-50%, -50%) scale(1);
}

@media (prefers-reduced-motion: reduce) {
  #kc-form-options .checkbox label::after {
    transition: opacity 0.12s ease;
    transform: translate(-50%, -50%) scale(1);
  }
}

#kc-form-options .checkbox input[type="checkbox"] {
  appearance: none;
  -webkit-appearance: none;
  position: relative;
  z-index: 1;
  width: 1.25rem;
  height: 1.25rem;
  margin: 0;
  flex-shrink: 0;
  cursor: pointer;
  border: 2px solid var(--c-input-border);
  border-radius: 6px;
  background: var(--c-card);
  transition: border-color 0.18s ease, background-color 0.18s ease, box-shadow 0.15s ease;
}

#kc-form-options .checkbox input[type="checkbox"]:hover {
  border-color: var(--c-accent);
}

#kc-form-options .checkbox input[type="checkbox"]:focus-visible {
  outline: none;
  box-shadow: 0 0 0 3px color-mix(in srgb, var(--c-accent) 32%, transparent);
}

#kc-form-options .checkbox input[type="checkbox"]:checked {
  background-color: var(--c-accent);
  border-color: var(--c-accent);
}


/* ============================================================
   BOUTONS
   ============================================================ */
.orus-btn,
.orus-btn-primary {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  height: 46px;
  padding: 0 20px;
  background: var(--c-accent);
  color: var(--c-accent-text);
  border: none;
  border-radius: var(--r-btn);
  font-size: 15px;
  font-weight: 600;
  font-family: inherit;
  cursor: pointer;
  text-decoration: none;
  transition: background 0.18s ease, transform 0.1s ease, opacity 0.18s ease;
  -webkit-appearance: none;
  appearance: none;
}

.orus-btn:hover,
.orus-btn-primary:hover  { background: var(--c-accent-hover); text-decoration: none; }

.orus-btn:active,
.orus-btn-primary:active { transform: scale(0.98); }

.orus-btn:disabled,
.orus-btn-primary:disabled { opacity: 0.55; cursor: not-allowed; }

/* Bloc de soumission : boutons empilés (pleine largeur) */
#kc-form-buttons {
  display: flex;
  flex-direction: column;
  gap: 12px;
  align-items: stretch;
  width: 100%;
  min-width: 0;
}

#kc-form-buttons > div {
  display: flex;
  flex-direction: column;
  gap: 12px;
  align-items: stretch;
  width: 100%;
  min-width: 0;
}

#kc-form-buttons .orus-btn,
#kc-form-buttons .orus-btn-primary,
#kc-form-buttons > input[type="submit"],
#kc-form-buttons > input[type="button"],
#kc-form-buttons > button {
  width: 100%;
  max-width: 100%;
  box-sizing: border-box;
  flex-shrink: 0;
}

#kc-form-buttons > div > .orus-btn,
#kc-form-buttons > div > .orus-btn-primary,
#kc-form-buttons > div > input[type="submit"],
#kc-form-buttons > div > button {
  width: 100%;
}

/* Mise à jour e-mail / AIA : bloc Keycloak vide + doublon id - on masque le premier #kc-form-options sans case */
#kc-update-email-form .orus-form-group > #kc-form-options:first-of-type:not(:has(.checkbox)) {
  display: none;
}

#kc-update-email-form .orus-form-group > #kc-form-options:has(.checkbox) {
  width: 100%;
  justify-content: flex-start;
  margin-bottom: 0;
  padding-bottom: 4px;
}

/* Évite le chevauchement avec les boutons (marges négatives globales sur la checkbox) */
#kc-update-email-form #kc-form-options .checkbox label {
  margin: 0;
}

#kc-update-email-form #kc-form-buttons {
  margin-top: 18px;
  padding-top: 4px;
}

/*
 * WebAuthn - enregistrement passkey (webauthn-register.ftl) : Keycloak met le submit + le form
 * « Annuler » en dehors de #kc-form-buttons → mêmes règles visuelles que #kc-form-buttons / update-email.
 */
#kc-content-wrapper:has(#registerWebAuthn) {
  display: flex;
  flex-direction: column;
  align-items: stretch;
  width: 100%;
}

#kc-content-wrapper:has(#registerWebAuthn) form#register {
  width: 100%;
}

#kc-content-wrapper:has(#registerWebAuthn) #register #kc-form-options:has(.checkbox) {
  width: 100%;
  justify-content: flex-start;
  margin-bottom: 0;
  padding-bottom: 4px;
}

#kc-content-wrapper:has(#registerWebAuthn) #register #kc-form-options .checkbox label {
  margin: 0;
}

#kc-content-wrapper:has(#registerWebAuthn) #registerWebAuthn {
  width: 100%;
  max-width: 100%;
  margin-top: 18px;
  box-sizing: border-box;
  flex-shrink: 0;
}

#kc-content-wrapper:has(#registerWebAuthn) #kc-webauthn-settings-form {
  width: 100%;
  margin-top: 12px;
  margin-bottom: 0;
  flex-shrink: 0;
}

#kc-content-wrapper:has(#registerWebAuthn) #kc-webauthn-settings-form button {
  width: 100%;
  max-width: 100%;
  box-sizing: border-box;
}


/* ============================================================
   SECTION INSCRIPTION / LIEN EN BAS
   ============================================================ */
#kc-info {
  margin-top: 20px;
  text-align: center;
  font-size: 13px;
  color: var(--c-text-muted);
}

#kc-info a {
  color: var(--c-accent);
  font-weight: 500;
}

#kc-info a:hover { text-decoration: underline; }


/* ============================================================
   FOURNISSEURS D’IDENTITÉ - markup thème base (#kc-social-providers), pas de login.ftl Orus
   ============================================================ */

#kc-social-providers {
  margin-top: 28px;
  padding-top: 28px;
  position: relative;
  width: 100%;
  min-width: 0;
  box-sizing: border-box;
}

#kc-social-providers > hr {
  display: none;
}

#kc-social-providers > h2 {
  display: none;
}

#kc-social-providers::before {
  content: "";
  position: absolute;
  top: 0;
  left: 0;
  right: 0;
  height: 1px;
  background: linear-gradient(
    90deg,
    transparent,
    color-mix(in srgb, var(--c-text) 18%, transparent) 20%,
    color-mix(in srgb, var(--c-accent) 35%, transparent) 50%,
    color-mix(in srgb, var(--c-text) 18%, transparent) 80%,
    transparent
  );
  pointer-events: none;
}

#kc-social-providers > ul {
  list-style: none;
  margin: 0;
  padding: 0;
  width: 100%;
  min-width: 0;
  display: flex;
  flex-direction: column;
  gap: 10px;
}

/* Plus de 3 fournisseurs : grille (classe Keycloak ou :has) */
#kc-social-providers > ul:has(> li:nth-child(4)),
#kc-social-providers > ul[class*="grid"] {
  display: grid;
  grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));
  gap: 10px;
}

#kc-social-providers > ul > li {
  margin: 0;
  padding: 0;
  min-width: 0;
}

#kc-social-providers a[id^="social-"] {
  display: grid;
  grid-template-columns: 28px 1fr 28px;
  column-gap: 12px;
  align-items: center;
  width: 100%;
  min-height: 46px;
  padding: 8px 14px;
  box-sizing: border-box;
  border: 1.5px solid var(--c-input-border);
  border-radius: var(--r-btn);
  background: color-mix(in srgb, var(--c-card) 92%, transparent);
  color: var(--c-text);
  font-size: 14px;
  font-weight: 600;
  text-decoration: none;
  transition:
    border-color 0.18s ease,
    background 0.18s ease,
    box-shadow 0.18s ease,
    transform 0.08s ease;
}

#kc-social-providers a[id^="social-"]:hover {
  border-color: color-mix(in srgb, var(--c-accent) 45%, var(--c-input-border));
  background: color-mix(in srgb, var(--c-accent) 7%, var(--c-card));
  box-shadow: 0 0 0 1px color-mix(in srgb, var(--c-accent) 12%, transparent);
  text-decoration: none;
  color: var(--c-text);
}

#kc-social-providers a[id^="social-"]:active {
  transform: scale(0.99);
}

#kc-social-providers a[id^="social-"][aria-disabled="true"] {
  opacity: 0.55;
  pointer-events: none;
}

#kc-social-providers a[id^="social-"] > i:first-child {
  grid-column: 1;
  justify-self: center;
  align-self: center;
  display: flex;
  align-items: center;
  justify-content: center;
  width: 28px;
  height: 28px;
  margin: 0;
  font-size: 1.25rem;
  line-height: 1;
  color: var(--c-text-muted);
}

#kc-social-providers a[id^="social-"] > i:first-child + span {
  grid-column: 2;
  min-width: 0;
  text-align: center;
  line-height: 1.3;
}

#kc-social-providers a[id^="social-"]:not(:has(> i)) > span {
  grid-column: 2;
  min-width: 0;
  text-align: center;
  line-height: 1.3;
}

/*
 * Logos par alias : l’id HTML est social-<alias_realm> (voir resources/img/idp/README.txt).
 * Keycloak n’affiche un <i> (Font Awesome) que si iconClasses est défini sur l’IdP :
 * sans <i>, les règles sur > i ne matchent jamais - on utilise ::before sur le <a>.
 */
#kc-social-providers a#social-github::before,
#kc-social-providers a#social-gitlab::before,
#kc-social-providers a#social-google::before,
#kc-social-providers a#social-keycloak-oidc::before,
#kc-social-providers a#social-microsoft::before {
  content: "";
  grid-column: 1;
  justify-self: center;
  align-self: center;
  width: 22px;
  height: 22px;
  background: center / contain no-repeat;
}

#kc-social-providers a#social-github::before {
  background-image: url("../img/idp/github.svg");
}

#kc-social-providers a#social-gitlab::before {
  background-image: url("../img/idp/gitlab.svg");
}

#kc-social-providers a#social-google::before {
  background-image: url("../img/idp/google.svg");
}

#kc-social-providers a#social-keycloak-oidc::before {
  background-image: url("../img/idp/keycloak.svg");
}

#kc-social-providers a#social-microsoft::before {
  background-image: url("../img/idp/microsoft.svg");
}

#kc-social-providers a#social-github > i:first-child,
#kc-social-providers a#social-gitlab > i:first-child,
#kc-social-providers a#social-google > i:first-child,
#kc-social-providers a#social-keycloak-oidc > i:first-child,
#kc-social-providers a#social-microsoft > i:first-child {
  display: none !important;
}


/* ============================================================
   SÉLECTEUR DE LANGUE (drapeaux emoji)
   ============================================================ */
#kc-locale.orus-locale-nav {
  margin-top: 20px;
}

.orus-locale-flags {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-wrap: wrap;
  gap: 6px 10px;
  justify-content: center;
  align-items: center;
}

.orus-locale-flags li {
  margin: 0;
  padding: 0;
}

a.orus-locale-flag,
span.orus-locale-flag {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  min-width: 2.25rem;
  min-height: 2.25rem;
  font-size: 1.45rem;
  line-height: 1;
  text-decoration: none;
  border-radius: 8px;
  padding: 2px 4px;
  transition: opacity 0.15s ease, transform 0.12s ease, box-shadow 0.15s ease;
}

a.orus-locale-flag {
  color: inherit;
  opacity: 0.5;
}

a.orus-locale-flag:hover {
  opacity: 1;
  transform: scale(1.1);
  text-decoration: none;
}

a.orus-locale-flag:focus-visible {
  opacity: 1;
  outline: 2px solid var(--c-accent);
  outline-offset: 2px;
}

span.orus-locale-flag.is-active {
  opacity: 1;
  cursor: default;
  box-shadow: 0 0 0 2px var(--c-accent);
}


/* ============================================================
   FORMULAIRE OTP
   ============================================================ */
.orus-otp-list {
  display: flex;
  flex-direction: column;
  gap: 10px;
  list-style: none;
}

.orus-otp-list li {
  border: 1.5px solid var(--c-input-border);
  border-radius: var(--r-input);
  padding: 12px 16px;
  cursor: pointer;
  transition: border-color 0.18s, background 0.18s;
}

.orus-otp-list li:hover,
.orus-otp-list li.pf-m-selected {
  border-color: var(--c-accent);
  background: var(--c-input-bg);
}

.orus-otp-item-header {
  display: flex;
  align-items: center;
  gap: 10px;
}

.orus-otp-title {
  font-weight: 600;
  font-size: 14px;
}


/* ============================================================
   CONFIGURATION TOTP - QR code centré dans la colonne
   ============================================================ */
#kc-totp-secret-qr-code {
  display: block;
  margin: 16px auto;
  max-width: 100%;
  height: auto;
}

#kc-content-wrapper li:has(#kc-totp-secret-qr-code) {
  text-align: center;
}

#kc-content-wrapper li:has(#kc-totp-secret-qr-code) p {
  text-align: center;
}

/* Secret TOTP (mode manuel) - bloc lisible, sélection « tout d’un coup », copie facilitée */
#kc-totp-secret-key {
  display: inline-block;
  max-width: 100%;
  box-sizing: border-box;
  margin: 6px 0 0;
  padding: 12px 14px;
  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
  font-size: 0.9375rem;
  line-height: 1.45;
  letter-spacing: 0.03em;
  color: var(--c-text);
  background: var(--c-input-bg);
  border: 1px solid var(--c-input-border);
  border-radius: var(--r-input);
  box-shadow: inset 0 1px 2px rgba(0, 0, 0, 0.04);
  word-break: break-all;
  overflow-wrap: anywhere;
  user-select: all;
  -webkit-user-select: all;
  cursor: copy;
}

#kc-totp-secret-key::selection {
  background: color-mix(in srgb, var(--c-accent) 30%, var(--c-input-bg));
}


/* ============================================================
   RESPONSIVE - mobile général
   ============================================================ */
@media (max-width: 480px) {
  body.layout-centered {
    padding: 16px;
    align-items: flex-start;
    padding-top: 32px;
  }

  body.layout-centered .orus-card {
    border-radius: 10px;
    max-height: calc(100vh - 64px);
    max-height: calc(100dvh - 64px);
  }

  body.layout-centered .orus-brand {
    padding: 32px 20px 0;
  }

  body.layout-centered .orus-card-scroll {
    padding: 20px 20px 32px;
  }

  #kc-form-login .orus-form-group:has(> #kc-form-options) {
    flex-direction: column;
    align-items: stretch;
  }

  #kc-form-login #kc-form-options + div {
    text-align: left;
  }
}


/* ============================================================
   SÉLECTION MFA - tuiles
   #kc-select-credential-form : choix d’authentificateur / credential (Keycloak base)
   #kc-select-mfa-form : enforce-mfa / provider custom (onclick + mfaMethod)
   ============================================================ */

#kc-select-credential-form {
  width: 100%;
}

.orus-mfa-stack {
  display: flex;
  flex-direction: column;
  gap: 12px;
  width: 100%;
}

/* Tuile commune - icône centrée verticalement avec le bloc texte */
#kc-select-credential-form button.orus-select-auth-row,
#kc-select-mfa-form [id^="mfa-"],
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"] {
  display: flex;
  flex-direction: row;
  align-items: center;
  gap: 14px;
  width: 100%;
  min-height: var(--orus-mfa-tile-min-h);
  padding: 14px 16px;
  box-sizing: border-box;
  border: 1.5px solid var(--c-input-border);
  border-radius: var(--r-input);
  background: color-mix(in srgb, var(--c-input-bg) 55%, transparent);
  color: var(--c-text);
  text-align: left;
  transition:
    border-color 0.18s ease,
    background 0.18s ease,
    box-shadow 0.18s ease,
    transform 0.1s ease;
}

#kc-select-credential-form button.orus-select-auth-row:hover,
#kc-select-mfa-form [id^="mfa-"]:hover,
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"]:hover {
  border-color: var(--c-accent);
  background: color-mix(in srgb, var(--c-accent) 8%, var(--c-input-bg));
  box-shadow: 0 0 0 1px color-mix(in srgb, var(--c-accent) 25%, transparent);
}

#kc-select-credential-form button.orus-select-auth-row:active,
#kc-select-mfa-form [id^="mfa-"]:active,
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"]:active {
  transform: scale(0.99);
}

@media (prefers-reduced-motion: reduce) {
  #kc-select-credential-form button.orus-select-auth-row:active,
  #kc-select-mfa-form [id^="mfa-"]:active,
  #kc-form-webauthn [id^="kc-webauthn-authenticator-item-"]:active {
    transform: none;
  }
}

/* Formulaire custom : focus clavier si le provider ajoute tabindex="0" sur la tuile */
#kc-select-mfa-form [id^="mfa-"]:focus-visible {
  outline: 2px solid var(--c-accent);
  outline-offset: 2px;
}

#kc-select-credential-form button.orus-select-auth-row,
#kc-select-mfa-form [id^="mfa-"] {
  touch-action: manipulation;
}

/* Bouton Keycloak (liste d’authentificateurs base) : reset */
#kc-select-credential-form button.orus-select-auth-row {
  margin: 0;
  font: inherit;
  cursor: pointer;
  -webkit-appearance: none;
  appearance: none;
}

#kc-select-credential-form button.orus-select-auth-row:focus-visible {
  outline: 2px solid var(--c-accent);
  outline-offset: 2px;
}

/* select-credential : un seul bloc texte étendu ; pas de « demi-colonne » vide (fill PF inutile ici) */
#kc-select-credential-form .orus-select-auth-body {
  flex: 1 1 0;
  min-width: 0;
  display: flex;
  flex-direction: column;
  justify-content: center;
  gap: 6px;
}

#kc-select-mfa-form [id^="mfa-"] > div:nth-of-type(2),
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"] > div:nth-of-type(2) {
  flex: 1;
  min-width: 0;
  display: flex;
  flex-direction: column;
  justify-content: center;
  gap: 6px;
}

#kc-select-credential-form .orus-select-auth-heading,
#kc-select-mfa-form [id^="mfa-"] > div:nth-of-type(2) > div:first-of-type,
#kc-form-webauthn [id^="kc-webauthn-authenticator-label-"] {
  font-weight: 600;
  font-size: 15px;
  line-height: 1.35;
  color: var(--c-text);
}

#kc-select-credential-form .orus-select-auth-desc,
#kc-select-mfa-form [id^="mfa-"] > div:nth-of-type(2) > div:last-of-type {
  font-size: 13px;
  line-height: 1.45;
  color: var(--c-text-muted);
  min-height: calc(var(--orus-mfa-desc-lines) * 1.45em);
}

/* Passkey : transport + ligne « créé le » (webauthn-authenticate.ftl) */
#kc-form-webauthn [id^="kc-webauthn-authenticator-transport-"] {
  font-size: 13px;
  line-height: 1.45;
  color: var(--c-text-muted);
}

#kc-form-webauthn [id^="kc-webauthn-authenticator-transport-"] span + span {
  margin-left: 0.15em;
}

#kc-form-webauthn .orus-select-auth-body > .orus-select-auth-desc:last-of-type {
  font-size: 12px;
  line-height: 1.4;
  color: var(--c-text-muted);
}

#kc-form-webauthn [id^="kc-webauthn-authenticator-createdlabel-"] {
  margin-right: 0.35em;
}

/* Colonne icône (carré fixe ; glyphes Font Awesome - select-credential + liste passkeys WebAuthn) */
#kc-select-credential-form .orus-select-auth-icon,
#kc-select-mfa-form [id^="mfa-"] > div:first-of-type,
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"] > div:first-of-type {
  flex: 0 0 auto;
  align-self: center;
  display: flex;
  align-items: center;
  justify-content: center;
  width: 44px;
  height: 44px;
  border-radius: 10px;
  background: color-mix(in srgb, var(--c-accent) 12%, transparent);
}

/* Icônes tuiles MFA - select-credential, enforce-mfa, liste passkeys */
#kc-select-credential-form .orus-select-auth-icon > i,
#kc-select-mfa-form [id^="mfa-"] > div:first-of-type > i,
#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"] > div:first-of-type > i {
  margin: 0;
  font-size: 1.125rem;
  line-height: 1;
  color: var(--c-accent);
}

/*
 * Enforce MFA (tuiles #mfa-*) : spécificité #id > .orus-auth-icon seul.
 * --orus-icon-mfa-* optionnel ; sinon même glyphe que le choix d’auth (--orus-icon-auth-*), surchargé en realm.css.
 */
#mfa-email-authenticator-setup .orus-select-auth-icon i::before {
  content: var(--orus-icon-mfa-email, var(--orus-icon-auth-email, "\f0e0"));
}

#mfa-webauthn-register .orus-select-auth-icon i::before {
  content: var(--orus-icon-mfa-webauthn, var(--orus-icon-auth-webauthn, "\f084"));
}

#mfa-CONFIGURE_TOTP .orus-select-auth-icon i::before {
  content: var(--orus-icon-mfa-totp, var(--orus-icon-auth-otp, "\f10b"));
}

/* Colonne fill (select-credential) : repliée pour éviter une demi-largeur vide avant la flèche */
#kc-select-credential-form .orus-select-auth-fill {
  flex: 0 0 0;
  width: 0;
  min-width: 0;
  margin: 0;
  padding: 0;
  overflow: hidden;
  border: none;
}

#kc-form-webauthn [id^="kc-webauthn-authenticator-item-"] > .orus-select-auth-fill {
  flex: 0 0 0;
  width: 0;
  min-width: 0;
  margin: 0;
  padding: 0;
  overflow: hidden;
  border: none;
}

/* Intro « Authenticateurs disponibles » (plusieurs passkeys) */
#kc-form-webauthn p.orus-webauthn-intro {
  margin: 0 0 12px;
  font-size: 14px;
  font-weight: 600;
  color: var(--c-text-muted);
  text-align: left;
}

#kc-form-webauthn .orus-form-group > div:has([id^="kc-webauthn-authenticator-item-"]) {
  display: flex;
  flex-direction: column;
  gap: 10px;
  width: 100%;
}

#kc-form-webauthn #kc-form-buttons {
  margin-top: 16px;
}

/* Flèche select-authenticator (classe orus-select-auth-arrow-icon + --orus-icon-chevron-right) */
#kc-select-credential-form .orus-select-auth-arrow {
  flex: 0 0 auto;
  align-self: center;
  display: flex;
  align-items: center;
  justify-content: center;
  min-width: 1.25rem;
  height: 1.25rem;
  color: var(--c-text-muted);
}

#kc-select-credential-form .orus-select-auth-arrow i.orus-select-auth-arrow-icon {
  margin: 0;
  font-size: 1.15rem;
  line-height: 1;
  opacity: 0.55;
  color: var(--c-text-muted);
}

/* Conteneur du formulaire custom : empiler les options */
#kc-select-mfa-form > div:first-of-type {
  display: flex;
  flex-direction: column;
  gap: 12px;
  width: 100%;
}

/* TOTP enrollment larger card */
body.layout-centered:has(#kc-totp-settings) { --card-w: 32rem; }

#kc-totp-settings { text-align: start; }
#kc-totp-settings > li + li { margin-top: 1rem; }
#kc-totp-settings li:has(#kc-totp-secret-qr-code) > p:first-child { text-align: start; }
#kc-totp-supported-apps { margin-block-start: 0.5rem; padding-inline-start: 1.25rem; }
#kc-totp-secret-qr-code { max-width: 200px; margin: 0.75rem auto; }