comparison mod_http_oauth2/html/consent.html @ 5568:540beba5b75b

mod_http_oauth2: Always show list of requested scopes Upon further reflection, these are probably too important to hide behind a <details> thing.
author Kim Alvefur <zash@zash.se>
date Sun, 25 Jun 2023 11:12:07 +0200
parents b45d9a81b3da
children 8de02381e80a
comparison
equal deleted inserted replaced
5567:d52cc18f0aa8 5568:540beba5b75b
12 <p>{state.error}</p> 12 <p>{state.error}</p>
13 </div>} 13 </div>}
14 14
15 <h1>{site_name}</h1> 15 <h1>{site_name}</h1>
16 <fieldset> 16 <fieldset>
17 <form method="post">
17 <legend>Authorize new application</legend> 18 <legend>Authorize new application</legend>
18 <p>A new application wants to connect to your account.</p> 19 <p>A new application wants to connect to your account.</p>
19 <dl> 20 <dl>
20 <dt>Name</dt> 21 <dt>Name</dt>
21 <dd>{client.client_name}</dd> 22 <dd>{client.client_name}</dd>
27 <dd><a href="{client.tos_uri}">View terms</a></dd>} 28 <dd><a href="{client.tos_uri}">View terms</a></dd>}
28 29
29 {client.policy_uri& 30 {client.policy_uri&
30 <dt>Policy</dt> 31 <dt>Policy</dt>
31 <dd><a href="{client.policy_uri}">View policy</a></dd>} 32 <dd><a href="{client.policy_uri}">View policy</a></dd>}
33
34 <dt>Requested permissions</dt>
35 <dd>{scopes#
36 <input class="scope" type="checkbox" id="scope_{idx}" name="scope" value="{item}" checked><label class="scope" for="scope_{idx}">{item}</label>}
37 </dd>
32 </dl> 38 </dl>
33 39
34 <p>To allow <em>{client.client_name}</em> to access your account 40 <p>To allow <em>{client.client_name}</em> to access your account
35 <em>{state.user.username}@{state.user.host}</em> and associated data, 41 <em>{state.user.username}@{state.user.host}</em> and associated data,
36 select 'Allow'. Otherwise, select 'Deny'. 42 select 'Allow'. Otherwise, select 'Deny'.
37 </p> 43 </p>
38 44
39 <form method="post">
40 <details><summary>Requested permissions</summary>{scopes#
41 <input class="scope" type="checkbox" id="scope_{idx}" name="scope" value="{item}" checked><label class="scope" for="scope_{idx}">{item}</label>}
42 </details>
43 <input type="hidden" name="user_token" value="{state.user.token}"> 45 <input type="hidden" name="user_token" value="{state.user.token}">
44 <button type="submit" name="consent" value="denied">Deny</button> 46 <button type="submit" name="consent" value="denied">Deny</button>
45 <button type="submit" name="consent" value="granted">Allow</button> 47 <button type="submit" name="consent" value="granted">Allow</button>
46 </form> 48 </form>
47 </fieldset> 49 </fieldset>