{# _auth_main_mfa_challenge.html — MFA challenge form column. Renders
standalone for HTMX fragment responses. The CSS-only recovery-code toggle lives in mfa_challenge.html's head block (not here) because HTMX fragment swaps don't update . Expected context: mfa_token, error, app_name, is_production #} {% import "_partials/_auth_macros.html" as auth %}
{{ auth.kicker(app_name, "Two-factor") }}

Verify code

Enter the 6-digit code from your authenticator app.

{% if error %} {% set flash = { "kind": "err", "message": error } %}
{% include "_partials/_flash.html" %}
{% endif %}