{% extends "base.html" %}

{% block title %}Authorize — Porchlight{% endblock %}

{% block content %}
<div class="card consent-card">
    <h1>Authorize {{ client_id }}</h1>
    <p>This application is requesting access to your account.</p>

    <form method="post" action="/consent">
        <input type="hidden" name="csrf_token" value="{{ csrf_token_processor(request) }}">
        <fieldset>
            <legend>Permissions requested</legend>
            <ul class="scope-list" role="list">
                {% for scope in scopes %}
                <li>
                    <label>
                        <input type="checkbox" name="scope" value="{{ scope.name }}"
                            {% if scope.required %}checked disabled{% else %}checked{% endif %}>
                        {{ scope.description }}
                    </label>
                    {% if scope.required %}
                    <input type="hidden" name="scope" value="{{ scope.name }}">
                    {% endif %}
                </li>
                {% endfor %}
            </ul>
        </fieldset>

        <div class="consent-actions">
            <button type="submit" name="action" value="allow" class="btn btn-primary">Allow</button>
            <button type="submit" name="action" value="deny" class="btn btn-secondary">Deny</button>
        </div>
    </form>
</div>
{% endblock %}