<%# OAuth2 consent form body: the inner of the auth-card form — the signed-in account, the CSRF + challenge hidden inputs, the requested scopes, then Allow / Deny submit buttons (one `decision` field). Locals: account?, challenge, csrfField, csrfToken, scopes (string[]). Captured by views/oauth-consent.ejs. -%> <% const labels = { email: t("consent.scope.email"), offline_access: t("consent.scope.offline_access"), openid: t("consent.scope.openid"), profile: t("consent.scope.profile") }; -%> <% if (locals.account) { -%>

<%= t("consent.signedInAs") %> <%= account %>

<% } -%> <% if (scopes.length) { -%> <% } -%>