/*
 *
 *  * ------------------------------------------------------------------------------
 *  *  Trusted Network GmbH
 *  * ------------------------------------------------------------------------------
 *  *
 *  *  Copyright (c) 2026 Trusted Network GmbH
 *  *
 *  *  Address        : Max-Planck-Str. 1, D-85716 Unterschleissheim, Germany
 *  *  Phone          : 089 / 54 80 163 - 0
 *  *  Fax            : 089 / 54 80 163 - 222
 *  *  Web            : http://www.tnib.de
 *  *
 *  *  Managing Directors:
 *  *      - Joerg Staedele
 *  *      - Stefan Kinner
 *  *
 *  *  Registered Office:
 *  *      - Unterschleissheim, Germany
 *  *
 *  *  Register Court:
 *  *      - AG Muenchen HRB 108 388
 *  *
 *  *  Data Protection:
 *  *      - The information obligations regarding data protection, in particular
 *  *        the legal basis for customer communication, can be found at
 *  *        https://www.trusted-network.de/datenschutz
 *  *
 *  * ------------------------------------------------------------------------------
 *  *  File Information
 *  * ------------------------------------------------------------------------------
 *  *
 *  *  File Name      : auth.css
 *  *  Created by     : cxylander
 *  *  Last modified  : 2026-7-15 at 8:29
 *  *
 *  * ------------------------------------------------------------------------------
 *
 */

/*
 * ------------------------------------------------------------------------------
 *  Trusted Network GmbH  -  KISS v2 FE
 * ------------------------------------------------------------------------------
 *  auth.css  -  CI-Styling fuer Login / 2FA (Google Authenticator) / Yubikey-OTP.
 *
 *  Hintergrund:
 *    - Basis: mehrfarbiger, animierter CSS-Mesh-Verlauf in CI-Farben (kein Bild).
 *    - Davor: selbst gerenderte Netzwerk-/Datacenter-Animation (Canvas, auth-bg.js)
 *      -> Knoten (Server/Clients) + Verbindungslinien + pulsende Datenpakete.
 *    - Faerbung wechselt automatisch nach Jahreszeit/Festtag ueber die vom Server
 *      gesetzte Klasse .auth-season--* (vgl. Design::authBackgroundClass()); die
 *      Canvas-Animation liest dieselben CSS-Variablen aus.
 *
 *  Alle Effekte sind lizenzfrei (rein CSS + eigener Vanilla-JS-Canvas, keine Libs).
 *  Nur fuer die drei Auth-Seiten geladen (Design::headerCSS()).
 * ------------------------------------------------------------------------------
 */

/* ============================================================
 * Animierter Mesh-Hintergrund (Vollbild, kein Bild-Request)
 * ============================================================ */
.auth-wrapper.auth-bg {
    /* Default-Palette = CI Navy/Blue (Winter-naher Standard).
       Wird von .auth-season--* ueberschrieben. */
    --auth-c1: #16243a;   /* tiefes Navy (Basis) */
    --auth-c2: #6797b0;   /* CI-Blau */
    --auth-accent: #4fd1c5;/* lebendiger Akzent (Tuerkis) */
    --auth-accent2: #a5f6b4;/* CI-Grün (Auswahl-Akzent) */

    position: relative;
    min-height: 100vh;
    padding: 1rem;
    overflow: hidden;
    background:
        radial-gradient(ellipse at 18% 22%, color-mix(in srgb, var(--auth-c2) 55%, transparent) 0%, transparent 45%),
        radial-gradient(ellipse at 82% 78%, color-mix(in srgb, var(--auth-accent) 40%, transparent) 0%, transparent 48%),
        radial-gradient(ellipse at 65% 12%, color-mix(in srgb, var(--auth-accent2) 26%, transparent) 0%, transparent 42%),
        linear-gradient(135deg, var(--auth-c1) 0%, color-mix(in srgb, var(--auth-c1) 55%, var(--auth-c2)) 100%);
    background-color: var(--auth-c1); /* Fallback, falls color-mix nicht unterstuetzt */
}

/* Zwei weiche, langsam driftende Lichtflecken (zusaetzliche Tiefe) */
.auth-wrapper.auth-bg::before,
.auth-wrapper.auth-bg::after {
    content: "";
    position: absolute;
    border-radius: 50%;
    filter: blur(80px);
    z-index: 0;
    pointer-events: none;
    will-change: transform;
}

.auth-wrapper.auth-bg::before {
    width: 55vmax;
    height: 55vmax;
    top: -18vmax;
    left: -12vmax;
    opacity: 0.5;
    background: radial-gradient(circle, var(--auth-accent) 0%, rgba(255, 255, 255, 0) 60%);
    animation: authDrift1 26s ease-in-out infinite alternate;
}

.auth-wrapper.auth-bg::after {
    width: 50vmax;
    height: 50vmax;
    right: -10vmax;
    bottom: -14vmax;
    opacity: 0.42;
    background: radial-gradient(circle, var(--auth-accent2) 0%, rgba(255, 255, 255, 0) 60%);
    animation: authDrift2 32s ease-in-out infinite alternate;
}

@keyframes authDrift1 {
    from { transform: translate3d(0, 0, 0) scale(1); }
    to   { transform: translate3d(9vmax, 7vmax, 0) scale(1.14); }
}

@keyframes authDrift2 {
    from { transform: translate3d(0, 0, 0) scale(1.06); }
    to   { transform: translate3d(-8vmax, -6vmax, 0) scale(1); }
}

/* Netzwerk-/Datacenter-Canvas (von auth-bg.js eingefuegt) */
.auth-bg-canvas {
    position: absolute;
    inset: 0;
    width: 100%;
    height: 100%;
    z-index: 1;
    pointer-events: none;
}

/* Bewegung respektieren: bei Reduce-Motion statischer Verlauf
   (die Canvas-Animation stoppt sich in auth-bg.js zusaetzlich selbst) */
@media (prefers-reduced-motion: reduce) {
    .auth-wrapper.auth-bg::before,
    .auth-wrapper.auth-bg::after {
        animation: none;
    }
}

/* ============================================================
 * Saison-Paletten (Easter-Egg, vom Server per Klasse gesetzt)
 *   --auth-c1  Basis-Navy   --auth-c2 Hauptfarbe
 *   --auth-accent / --auth-accent2  zwei lebendige Akzente
 * ============================================================ */
.auth-season--spring    { --auth-c1: #16302a; --auth-c2: #4f9d69; --auth-accent: #8fd694; --auth-accent2: #d5f06b; }
.auth-season--summer    { --auth-c1: #0e3d4c; --auth-c2: #3aa6b9; --auth-accent: #4fd1c5; --auth-accent2: #ffd166; }
.auth-season--autumn    { --auth-c1: #2c1a10; --auth-c2: #b5651d; --auth-accent: #e0a458; --auth-accent2: #d9534f; }
.auth-season--winter    { --auth-c1: #16243a; --auth-c2: #5b8aa6; --auth-accent: #79c7e3; --auth-accent2: #a9c9dd; }
.auth-season--christmas { --auth-c1: #0f261e; --auth-c2: #1f6b3b; --auth-accent: #57c98a; --auth-accent2: #e74c3c; }
.auth-season--newyear   { --auth-c1: #14152a; --auth-c2: #3a4d8f; --auth-accent: #7c8cff; --auth-accent2: #d4af37; }

/* ============================================================
 * Auth-Karte im CI-Look (zentriert, modern, glasig)
 * ============================================================ */
.auth-wrapper.auth-bg .auth-box {
    position: relative;
    z-index: 2;
    width: 100%;
    max-width: 430px;
    overflow: hidden; /* fuer den Gradient-Accent oben */
    border: 1px solid rgba(255, 255, 255, 0.55);
    border-radius: var(--kiss-radius-card, 1rem);
    box-shadow:
        0 1.5rem 3.5rem rgba(0, 0, 0, 0.28),
        0 0 0 1px rgba(255, 255, 255, 0.04);
    background: rgba(255, 255, 255, 0.92);
    -webkit-backdrop-filter: blur(14px) saturate(120%);
    backdrop-filter: blur(14px) saturate(120%);
    /* Karte bleibt hell und lesbar, auch wenn das Body-Theme dunkel ist */
    color: var(--kiss-navy, #1f2f41);
    animation: authCardIn 0.6s cubic-bezier(0.16, 1, 0.3, 1) both;
}

/* CI-Gradient-Akzentleiste am oberen Kartenrand */
.auth-wrapper.auth-bg .auth-box::before {
    content: "";
    position: absolute;
    top: 0;
    left: 0;
    right: 0;
    height: 4px;
    background: var(--kiss-gradient, linear-gradient(135deg, #1f2f41 0%, #6797b0 100%));
}

@keyframes authCardIn {
    from { opacity: 0; transform: translateY(14px) scale(0.985); }
    to   { opacity: 1; transform: translateY(0) scale(1); }
}

@media (prefers-reduced-motion: reduce) {
    .auth-wrapper.auth-bg .auth-box { animation: none; }
}

/* Logo dezent begrenzen + Titel im CI-Gradient */
.auth-wrapper.auth-bg .auth-box .logo img {
    max-width: 180px;
    height: auto;
}

.auth-wrapper.auth-bg .auth-box .box-title {
    background: var(--kiss-gradient, linear-gradient(135deg, #1f2f41 0%, #6797b0 100%));
    -webkit-background-clip: text;
    background-clip: text;
    -webkit-text-fill-color: transparent;
    color: var(--kiss-navy, #1f2f41); /* Fallback */
    font-weight: 700;
}

/* Input-Group-Icon (Yubico/Lock) im CI-Akzent */
.auth-wrapper.auth-bg .auth-box .input-group-text {
    background: var(--kiss-gradient, linear-gradient(135deg, #1f2f41 0%, #6797b0 100%));
    border-color: transparent;
    color: #fff;
}

/* ============================================================
 * Karten-Anordnung: Logo / Titel / Sprache / Footer
 * ============================================================ */

/* Sprachauswahl dezent oben rechts in der Karte (gilt fuer Login + Recover) */
.auth-wrapper.auth-bg .auth-lang {
    position: absolute;
    top: 0.8rem;
    right: 0.95rem;
    display: flex;
    gap: 0.4rem;
    z-index: 3;
}
.auth-wrapper.auth-bg .auth-lang a {
    opacity: 0.4;
    font-size: 1rem;
    line-height: 1;
    padding: 0.15rem;
    border-radius: 4px;
    transition: var(--kiss-transition, all 0.3s ease);
}
.auth-wrapper.auth-bg .auth-lang a:hover,
.auth-wrapper.auth-bg .auth-lang a.active {
    opacity: 1;
    transform: translateY(-1px);
}

/* Kopfbereich: zentriertes Logo + Titel + dezenter Untertitel
   (gilt fuer Login UND beide 2FA-Seiten, deren .logo kein text-center traegt) */
.auth-wrapper.auth-bg .auth-box .logo {
    margin-top: 0.25rem;
    margin-bottom: 1.25rem;
    text-align: center;
}
.auth-wrapper.auth-bg .auth-box .logo img {
    display: inline-block;
}
.auth-wrapper.auth-bg .auth-subtitle {
    margin: 0.15rem 0 0;
    font-size: 0.9rem;
    color: #7b8a97;
    font-weight: 500;
}

/* Footer-Links (Impressum / Datenschutz) bewusst dezent */
.auth-wrapper.auth-bg .auth-foot { margin-top: 1.4rem; }
.auth-foot-link {
    color: #8a97a3 !important;
    font-size: 0.78rem;
    text-decoration: none;
    transition: var(--kiss-transition, all 0.3s ease);
}
.auth-foot-link:hover {
    color: var(--kiss-blue, #6797b0) !important;
    text-decoration: underline;
}
.auth-wrapper.auth-bg .auth-foot .sep {
    color: #c2cbd3;
    margin: 0 0.45rem;
    font-size: 0.75rem;
}

/* ============================================================
 * Responsive
 * ============================================================ */
@media (max-width: 575.98px) {
    .auth-wrapper.auth-bg { padding: 0.5rem; }
    .auth-wrapper.auth-bg .auth-box {
        max-width: 100%;
        padding: 1.25rem !important; /* p-4 (1.5rem) auf Mobil etwas reduzieren */
    }
    .auth-wrapper.auth-bg .auth-box .logo img { max-width: 150px; }
    .auth-wrapper.auth-bg .auth-lang { top: 0.6rem; right: 0.7rem; }
}

/* ============================================================
 * Login-spezifische Reste (frueher in default.css)
 * ============================================================ */
.ota-input {
    font-size: 20px;
    text-align: center;
    letter-spacing: 12px;
    padding-left: 10px;
}

.highlighted-timer {
    font-size: 1.5em; /* Groessere Darstellung der Sekunden */
    font-weight: bold;
}

/* ============================================================
 * Login-Modus-Umschalter (Kundenportal vs. E-Mail-Verwaltung)
 *   Grosse, moderne Karten ueber der Auth-Box. Aktiv = Gradient
 *   (Portal CI Navy->Blau, E-Mail schickes Violett). Der Hintergrund
 *   wechselt im E-Mail-Modus (.mode-email) klar sichtbar mit.
 * ============================================================ */

/* Sanfter Uebergang des Hintergrunds beim Moduswechsel */
.auth-wrapper.auth-bg {
    transition: background-color 0.6s ease;
}

/* E-Mail-Modus: schicke Violett-Welt (statt Navy/Blau) — elegant und klar anders.
   3 Klassen -> hoehere Spezifitaet als .auth-season--* (1 Klasse) -> gewinnt. */
.auth-wrapper.auth-bg.mode-email {
    --auth-c1: #1b1030;    /* tiefes Indigo/Aubergine */
    --auth-c2: #7c3aed;    /* Violett */
    --auth-accent: #a855f7;/* Purpur */
    --auth-accent2: #d8b4fe;/* sanftes Lavendel */
}

/* Akzentleiste der Karte in der Mail-Farbwelt */
.auth-wrapper.auth-bg.mode-email .auth-box::before {
    background: linear-gradient(135deg, #7c3aed 0%, #c084fc 100%);
}

/* ============================================================
 * Split-Hero-Layout (nur Login): links Marken-Hero (Blickfang),
 * rechts das Login-Panel. Ersetzt den frueheren vertikalen
 * Stapel. Auf schmalen Viewports klappt es zu 'Hero oben,
 * Panel darunter' -> bleibt kompakt & responsiv.
 * ============================================================ */
.auth-split {
    position: relative;
    z-index: 2;
    width: 100%;
    max-width: 900px;
    display: flex;
    align-items: stretch;
    gap: 2.75rem;
}

/* ---- Linke Marken-Buehne auf dem animierten CI-Hintergrund ---- */
.auth-hero {
    flex: 1 1 0;
    min-width: 0;
    display: flex;
    align-items: center;
    justify-content: center;
    color: #fff;
}
.auth-hero__inner {
    max-width: 22rem;
    text-align: left;
    animation: authHeroIn 0.7s cubic-bezier(0.16, 1, 0.3, 1) both;
}
/* Logo UNVERAENDERT im CI-Original (kein Filter!). Damit es auf dem dunklen Hero
   (Navy wie Violett) lesbar bleibt, sitzt es auf einem dezenten weissen Chip. */
.auth-hero__logo {
    display: inline-block;
    max-width: 240px;
    height: auto;
    margin-bottom: 1.75rem;
    padding: 0.8rem 1rem;
    background: #fff;
    border-radius: 0.9rem;
    box-shadow: 0 0.6rem 1.6rem rgba(0, 0, 0, 0.22);
}
.auth-hero__title {
    font-size: clamp(2rem, 2.2vw + 1rem, 2.85rem);
    font-weight: 800;
    letter-spacing: -0.015em;
    line-height: 1.05;
    margin: 0 0 0.7rem;
    color: #fff;
    text-shadow: 0 2px 20px rgba(0, 0, 0, 0.28);
}
.auth-hero__tagline {
    font-size: 0.92rem;
    line-height: 1.5;
    font-weight: 400;
    margin: 0;
    max-width: 19rem;
    color: rgba(255, 255, 255, 0.78);
}

/* "v2" als kleines Glas-Badge neben dem Titel */
.auth-hero__ver {
    display: inline-block;
    margin-left: 0.5rem;
    padding: 0.14em 0.5em;
    font-size: 0.34em;
    font-weight: 700;
    line-height: 1;
    letter-spacing: 0.03em;
    vertical-align: middle;
    transform: translateY(-0.22em);
    color: #fff;
    border: 1px solid rgba(255, 255, 255, 0.5);
    border-radius: 999px;
    background: rgba(255, 255, 255, 0.12);
    -webkit-backdrop-filter: blur(6px);
    backdrop-filter: blur(6px);
}

@keyframes authHeroIn {
    from { opacity: 0; transform: translateY(16px); }
    to   { opacity: 1; transform: translateY(0); }
}
@media (prefers-reduced-motion: reduce) {
    .auth-hero__inner { animation: none; }
}

/* ---- Rechte Panel-Spalte: haelt die Login-Karte in ruhiger Breite ---- */
.auth-panel {
    flex: 0 0 410px;
    max-width: 410px;
    display: flex;
    align-items: center;
}
.auth-panel .auth-box {
    width: 100%;
    margin: 0;
}
/* Pille steht ganz oben in der Karte -> etwas Luft zur Sprachauswahl (oben rechts) */
.auth-panel #loginform { margin-top: 0.7rem; }
.auth-panel .auth-subtitle {
    text-align: center;
    margin: 0 0 1.2rem;
}

/* ============================================================
 * Eingabefelder in der Auth-Karte klar sichtbar machen
 *   (vorher weiss-auf-weiss). Rahmen + betonter Unterstrich +
 *   dezenter Schatten; Fokus im CI-Blau, im E-Mail-Modus Violett.
 *   Gilt fuer Login (User/Passwort, E-Mail/Passwort) UND Recover.
 * ============================================================ */
.auth-wrapper.auth-bg .auth-box .form-control {
    background: #fbfcfd;
    border: 1px solid #d3dae1;
    border-bottom: 2px solid #aeb9c5;
    border-radius: 0.55rem;
    padding: 0.7rem 0.85rem;
    color: var(--kiss-navy, #1f2f41);
    box-shadow: 0 1px 2px rgba(31, 47, 65, 0.06);
    transition: border-color 0.2s ease, box-shadow 0.2s ease, background 0.2s ease;
}
.auth-wrapper.auth-bg .auth-box .form-control::placeholder {
    color: #9aa7b3;
    opacity: 1;
}
.auth-wrapper.auth-bg .auth-box .form-control:focus {
    background: #fff;
    border-color: var(--kiss-blue, #6797b0);
    border-bottom-color: var(--kiss-blue, #6797b0);
    box-shadow: 0 0 0 3px rgba(103, 151, 176, 0.18);
    outline: none;
}
.auth-wrapper.auth-bg.mode-email .auth-box .form-control:focus {
    border-color: #7c3aed;
    border-bottom-color: #7c3aed;
    box-shadow: 0 0 0 3px rgba(124, 58, 237, 0.18);
}

/* ============================================================
 * Login-Modus-Umschalter als schlanke Segment-Pille (im Panel oben)
 *   Portal (CI Navy/Blau) vs. E-Mail (Violett). Aktives Segment
 *   gefuellt mit Gradient; Track dezent im Kartenton.
 * ============================================================ */
.auth-mode-switch {
    display: flex;
    gap: 0.25rem;
    width: 100%;
    padding: 0.28rem;
    margin-bottom: 1.15rem;
    border-radius: 999px;
    background: rgba(31, 47, 65, 0.06);
    border: 1px solid rgba(31, 47, 65, 0.08);
}

.auth-mode-card {
    flex: 1 1 0;
    display: inline-flex;
    align-items: center;
    justify-content: center;
    gap: 0.45rem;
    padding: 0.62rem 0.5rem;
    border: 0;
    border-radius: 999px;
    background: transparent;
    color: #5b6b7a;
    font-weight: 600;
    font-size: 0.92rem;
    cursor: pointer;
    text-align: center;
    transition: color 0.25s ease, background 0.3s ease, box-shadow 0.3s ease;
}

.auth-mode-card__icon {
    font-size: 1.05rem;
    line-height: 1;
}

.auth-mode-card__label {
    letter-spacing: 0.01em;
}

.auth-mode-card:hover {
    color: var(--kiss-navy, #1f2f41);
}

/* Aktiv: CI-Gradient (Portal Navy->Blau), gefuelltes Segment */
.auth-mode-card.active {
    background: var(--kiss-gradient, linear-gradient(135deg, #1f2f41 0%, #6797b0 100%));
    color: #fff;
    box-shadow: 0 0.35rem 0.9rem rgba(31, 47, 65, 0.28);
}
.auth-mode-card.active:hover {
    color: #fff;
}

/* Aktiv im E-Mail-Modus: schickes Violett statt Navy/Blau */
.auth-wrapper.mode-email .auth-mode-card.active {
    background: linear-gradient(135deg, #7c3aed 0%, #c084fc 100%);
    box-shadow: 0 0.35rem 0.9rem rgba(124, 58, 237, 0.30);
}

/* ============================================================
 * Split-Layout responsive: unter md zu Einspalter klappen
 *   (Hero oben, Login-Panel darunter) -> kompakt auf Mobil
 * ============================================================ */
@media (max-width: 767.98px) {
    .auth-split {
        flex-direction: column;
        align-items: center;
        gap: 1.5rem;
        max-width: 430px;
    }
    .auth-hero {
        flex: none;
        width: 100%;
    }
    .auth-hero__inner {
        text-align: center;
        max-width: 100%;
    }
    .auth-hero__logo {
        max-width: 185px;
        margin-bottom: 1rem;
    }
    .auth-hero__title { font-size: 1.95rem; }
    .auth-hero__tagline {
        margin-inline: auto;
        font-size: 0.88rem;
    }
    .auth-panel {
        flex: none;
        width: 100%;
        max-width: 100%;
    }
}