<%= t("consent.title", { client: consent.client }) %>

<%# Themed OAuth2 consent page: shown when a third-party client wants access and the user must approve. Reuses the auth layout + auth-card; the form posts (Allow/Deny) to our own /oauth2/consent route, CSRF-guarded (consent-body carries the token). Auto theme (styles.css). %><% const brand = locals.brand || "Plainpages"; const body = include("partials/consent-body", { account: consent.account, challenge: consent.challenge, csrfField, csrfToken, scopes: consent.scopes }); %> <%= t("consent.title", { client: consent.client }) %> <%- include("partials/icons") %>

<%- include("partials/locale-switch", { up: false }) %> <%= brand %>

<%- include("partials/auth-card", { action: localeHref("/oauth2/consent"), body, method: "post", sub: t("consent.sub", { client: consent.client }), title: t("consent.title", { client: consent.client }), }) %> <% if (consent.account) { %> <% } %>