/* Shell for the one unauthenticated back-office page: sign in. Keycloak owns
   the password form, so this is a picture, a logo, a message and a button. */

body {
  background-color: var(--surface);
}

.auth {
  display: flex;
  min-height: 100vh;
}

.auth__image {
  display: none;
  width: 45%;
  object-fit: cover;
}

.auth__panel {
  display: flex;
  flex: 1;
  flex-direction: column;
  align-items: center;
  gap: var(--space-2);
  padding: var(--space-4);
}

.auth__logo {
  margin: var(--space-6) auto;
}

.auth__logo img {
  width: 13.75rem;
}

.auth__body {
  display: flex;
  flex-direction: column;
  gap: var(--space-5);
  width: 100%;
  max-width: 25rem;
  margin-top: var(--space-5);
  text-align: center;
}

@media (min-width: 768px) {
  .auth__image {
    display: block;
  }
}