Mercurial > prosody-modules
comparison mod_http_oauth2/html/consent.html @ 5271:3a1df3adad0c
mod_http_oauth2: Allow user to decide which requested scopes to grant
These should at the very least be shown to the user, so they can decide
whether to grant them.
Considered whether to filter the requested scopes down to actually
understood scopes that would be granted, but decided that this was a bit
complex for a first step, since role role selection and other kinds of
scopes are mixed into the same field here.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Thu, 23 Mar 2023 16:28:08 +0100 |
| parents | 7acf73d2ebb5 |
| children | f2c7bb3af600 |
comparison
equal
deleted
inserted
replaced
| 5270:7acf73d2ebb5 | 5271:3a1df3adad0c |
|---|---|
| 35 <em>{state.user.username}@{state.user.host}</em> and associated data, | 35 <em>{state.user.username}@{state.user.host}</em> and associated data, |
| 36 select 'Allow'. Otherwise, select 'Deny'. | 36 select 'Allow'. Otherwise, select 'Deny'. |
| 37 </p> | 37 </p> |
| 38 | 38 |
| 39 <form method="post"> | 39 <form method="post"> |
| 40 <details><summary>Requested permissions</summary>{scopes# | |
| 41 <input class="scope" type="checkbox" id="scope_{idx}" name="scope" value="{item}" checked><label class="scope" for="scope_{idx}">{item}</label>} | |
| 42 </details> | |
| 40 <input type="hidden" name="user_token" value="{state.user.token}"> | 43 <input type="hidden" name="user_token" value="{state.user.token}"> |
| 41 <button type="submit" name="consent" value="denied">Deny</button> | 44 <button type="submit" name="consent" value="denied">Deny</button> |
| 42 <button type="submit" name="consent" value="granted">Allow</button> | 45 <button type="submit" name="consent" value="granted">Allow</button> |
| 43 </form> | 46 </form> |
| 44 </fieldset> | 47 </fieldset> |