44 lines
1.9 KiB
Plaintext
44 lines
1.9 KiB
Plaintext
<%#
|
|
Themed OAuth2 consent page: shown when a third-party client wants access and the
|
|
user must approve. Reuses the auth layout + auth-card; the form posts (Allow/Deny) to our own
|
|
/oauth2/consent route, CSRF-guarded (consent-body carries the token). Auto theme (styles.css).
|
|
%><%
|
|
const brand = locals.brand || "Plainpages";
|
|
const body = include("partials/consent-body", { account: consent.account, challenge: consent.challenge, csrfField, csrfToken, scopes: consent.scopes });
|
|
%><!doctype html>
|
|
<html lang="<%= locale %>" dir="<%= dir %>">
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
<title><%= t("consent.title", { client: consent.client }) %></title>
|
|
<link rel="stylesheet" href="/public/css/styles.css" />
|
|
<link rel="stylesheet" href="/public/css/auth.css" />
|
|
<link rel="icon" href="/public/favicon.svg" />
|
|
</head>
|
|
<body>
|
|
<%- include("partials/icons") %>
|
|
<main class="auth-stage">
|
|
<div class="auth">
|
|
<div class="auth-brand">
|
|
<%- include("partials/locale-switch", { up: false }) %>
|
|
<span class="brand-mark"><svg class="ico ico-sm"><use href="#i-box" /></svg></span>
|
|
<span class="brand-name"><%= brand %></span>
|
|
</div>
|
|
<%- include("partials/auth-card", {
|
|
action: localeHref("/oauth2/consent"),
|
|
body,
|
|
method: "post",
|
|
sub: t("consent.sub", { client: consent.client }),
|
|
title: t("consent.title", { client: consent.client }),
|
|
}) %>
|
|
<% if (consent.account) { %>
|
|
<form class="auth-alt" method="post" action="<%= localeHref("/logout") %>">
|
|
<input type="hidden" name="<%= csrfField %>" value="<%= csrfToken %>">
|
|
<%= t("consent.notYou") %> <button type="submit"><%= t("shell.signOut") %></button>
|
|
</form>
|
|
<% } %>
|
|
</div>
|
|
</main>
|
|
</body>
|
|
</html>
|