{{define "content"}}
<h1>Invitation</h1>
{{with .Content}}
{{if .Error}}
<p data-error>{{.Error}}</p>
{{else if .Reconcile}}
{{/* Signed in, but with no roster row: the orphan this route exists
     to heal. Accepting spends the token and writes the membership
     against the session already in hand. */}}
<p>You are invited to {{.Site}} as {{.Role.Title}}.</p>
<form method="post" action="/invitations/{{.Token}}"><button type="submit">Accept</button></form>
{{else if .SignedIn}}
<p>You are already a member of {{.Site}}. <a href="/">Go to the board</a>.</p>
{{else}}
{{/* The invitation page never says WHO was invited: idear hands this
     template no address, so it cannot leak one to whoever found the
     link. The token rides the hidden field below, which is what
     idear's CarryToken reads off the POST. */}}
<p>You are invited to {{.Site}} as {{.Role.Title}}. Create your account:</p>
<form method="post" action="/signup">
<input type="hidden" name="invite" value="{{.Token}}">
<label>Email <input type="email" name="email" required autocomplete="username"></label>
<label>Password <input type="password" name="password" required minlength="8" autocomplete="new-password"></label>
<button type="submit">Sign up</button>
</form>
{{end}}
{{end}}
{{end}}