From 1017c71ba1d80a1690e357a938ad46f246a456ae Mon Sep 17 00:00:00 2001
From: Andrew Godwin
Date: Sat, 10 Dec 2022 21:03:14 -0700
Subject: Working start of an OAuth flow

---
 templates/api/oauth_authorize.html | 39 ++++++++++++++++++++++++++++++++++++++
 templates/auth/login.html          |  1 +
 2 files changed, 40 insertions(+)
 create mode 100644 templates/api/oauth_authorize.html

(limited to 'templates')

diff --git a/templates/api/oauth_authorize.html b/templates/api/oauth_authorize.html
new file mode 100644
index 0000000..41aac0d
--- /dev/null
+++ b/templates/api/oauth_authorize.html
@@ -0,0 +1,39 @@
+{% extends "base.html" %}
+
+{% block title %}Authorize {{ application.name }}{% endblock %}
+
+{% block content %}
+    {% if not identities %}
+        <p>
+            You cannot give access to {{ application.name }} as you
+            have no identities yet. Log in via the website and create
+            at least one identity, then retry this process.
+        </p>
+    {% else %}
+        <form method="POST">
+            {% csrf_token %}
+            <fieldset>
+                <legend>Authorize</legend>
+                <div class="field">
+                    <div class="label-input">
+                        <label for="identity">Select Identity</label>
+                        <select name="identity" id="identity">
+                            {% for identity in identities %}
+                                <option value="{{ identity.pk }}">{{ identity.handle }}</option>
+                            {% endfor %}
+                        </select>
+                    </div>
+                </div>
+                <p>Do you want to give {{ application.name }} access to this identity?</p>
+                <p>It will have permission to: {{ scope }}</p>
+                <input type="hidden" name="client_id" value="{{ application.client_id }}">
+                <input type="hidden" name="redirect_uri" value="{{ redirect_uri }}">
+                <input type="hidden" name="scope" value="{{ scope }}">
+            </fieldset>
+            <div class="buttons">
+                <a href="#" class="secondary button left">Deny</a>
+                <button>Allow</button>
+            </div>
+        </form>
+    {% endif %}
+{% endblock %}
diff --git a/templates/auth/login.html b/templates/auth/login.html
index 80b003b..96c0e98 100644
--- a/templates/auth/login.html
+++ b/templates/auth/login.html
@@ -11,6 +11,7 @@
                 {% include "forms/_field.html" %}
             {% endfor %}
         </fieldset>
+        <input type="hidden" name="next" value="{{ next }}" />
         <div class="buttons">
             <a href="{% url "trigger_reset" %}" class="secondary button left">Forgot Password</a>
             <button>Login</button>
-- 
cgit v1.2.3