prosody-modules
3a1df3adad0c
mod_http_oauth2/html/consent.html

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Comparison

mod_http_oauth2/html/consent.html @ 5271:3a1df3adad0c

mod_http_oauth2: Allow user to decide which requested scopes to grant These should at the very least be shown to the user, so they can decide whether to grant them. Considered whether to filter the requested scopes down to actually understood scopes that would be granted, but decided that this was a bit complex for a first step, since role role selection and other kinds of scopes are mixed into the same field here.
author Kim Alvefur <zash@zash.se>
date Thu, 23 Mar 2023 16:28:08 +0100
parent 5270:7acf73d2ebb5
child 5418:f2c7bb3af600
comparison
equal deleted inserted replaced
5270:7acf73d2ebb5 5271:3a1df3adad0c
35 <em>{state.user.username}@{state.user.host}</em> and associated data, 35 <em>{state.user.username}@{state.user.host}</em> and associated data,
36 select 'Allow'. Otherwise, select 'Deny'. 36 select 'Allow'. Otherwise, select 'Deny'.
37 </p> 37 </p>
38 38
39 <form method="post"> 39 <form method="post">
40 <details><summary>Requested permissions</summary>{scopes#
41 <input class="scope" type="checkbox" id="scope_{idx}" name="scope" value="{item}" checked><label class="scope" for="scope_{idx}">{item}</label>}
42 </details>
40 <input type="hidden" name="user_token" value="{state.user.token}"> 43 <input type="hidden" name="user_token" value="{state.user.token}">
41 <button type="submit" name="consent" value="denied">Deny</button> 44 <button type="submit" name="consent" value="denied">Deny</button>
42 <button type="submit" name="consent" value="granted">Allow</button> 45 <button type="submit" name="consent" value="granted">Allow</button>
43 </form> 46 </form>
44 </fieldset> 47 </fieldset>