From 5c4269fd6ee548b51983cec65b4bf839b0fb432f Mon Sep 17 00:00:00 2001
From: Johan Lundberg <lundberg@sunet.se>
Date: Thu, 19 Feb 2026 09:52:45 +0100
Subject: [PATCH] feat: add consent page template

---
 src/porchlight/templates/consent.html | 35 +++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 src/porchlight/templates/consent.html

diff --git a/src/porchlight/templates/consent.html b/src/porchlight/templates/consent.html
new file mode 100644
index 0000000..395ba5d
--- /dev/null
+++ b/src/porchlight/templates/consent.html
@@ -0,0 +1,35 @@
+{% extends "base.html" %}
+
+{% block title %}Authorize — Porchlight{% endblock %}
+
+{% block content %}
+<div class="card consent-card">
+    <h1>Authorize {{ client_id }}</h1>
+    <p>This application is requesting access to your account.</p>
+
+    <form method="post" action="/consent">
+        <fieldset>
+            <legend>Permissions requested</legend>
+            <ul class="scope-list" role="list">
+                {% for scope in scopes %}
+                <li>
+                    <label>
+                        <input type="checkbox" name="scope" value="{{ scope.name }}"
+                            {% if scope.required %}checked disabled{% else %}checked{% endif %}>
+                        {{ scope.description }}
+                    </label>
+                    {% if scope.required %}
+                    <input type="hidden" name="scope" value="{{ scope.name }}">
+                    {% endif %}
+                </li>
+                {% endfor %}
+            </ul>
+        </fieldset>
+
+        <div class="consent-actions">
+            <button type="submit" name="action" value="allow" class="btn btn-primary">Allow</button>
+            <button type="submit" name="action" value="deny" class="btn btn-secondary">Deny</button>
+        </div>
+    </form>
+</div>
+{% endblock %}