Recipe Library

Email {# maxlength=254 matches the real login form's render (Django auto-injects it from AuthenticationForm's username field, an EmailField-shaped username per accounts.User) - this is hand-written markup (a duplicate of that form for the quick-add dialog's inline login), so it doesn't get that auto-injection and needs it by hand for UX parity. Server-side validation is unaffected either way: this POSTs to accounts:login, handled by the real LockoutAuthenticationForm. Phase 11.9 form-field max-length audit, 2026-08-16. #}

Password