source: Klonkt/src/views/pages/auth-reset.ejs@ 0fa59c3

<div class="container auth-page">
  <h1><%= t('arst.title') %></h1>

  <% if (!token) { %>
    <% if (error) { %><div class="alert alert-error"><%= error %></div><% } %>
    <p class="auth-link">
      <a href="/auth/reset-request"><%= t('arst.request_new') %></a>
      &middot;
      <a href="/auth/login"><%= t('arst.back_login') %></a>
    </p>
  <% } else { %>
    <p class="auth-tagline"><%- t('arst.set_for', { username: '<strong>' + username + '</strong>' }) %></p>
    <%# arst.set_for contains {username}; rendered with raw output because username is wrapped in a strong tag %>

    <% if (error) { %><div class="alert alert-error"><%= error %></div><% } %>

    <form method="post" action="/auth/reset/<%= token %>" class="auth-form">
      <label>
        <span><%= t('arst.new_pw') %></span>
        <input type="password" name="new_password" required minlength="8" autofocus autocomplete="new-password">
      </label>
      <label>
        <span><%= t('arst.confirm_pw') %></span>
        <input type="password" name="confirm" required minlength="8" autocomplete="new-password">
      </label>
      <button type="submit" class="btn btn-primary"><%= t('arst.submit') %></button>
    </form>
  <% } %>
</div>