{% extends "base.html" %}

{% block title %}Sign in a device{% endblock %}

{% block content %}

<div class="head"><h1>Sign in a device <small>an app asked to use your account</small></h1></div>

{% if let Some(d) = done %}<p class="note">{{ d }}</p>{% endif %}

{% if let Some(e) = error %}<p class="error">{{ e }}</p>{% endif %}

{% if let Some((d, asked)) = pending %}

<form class="card wide" method="post" action="/device">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <input type="hidden" name="code" value="{{ d.user_code }}">

  <h2><strong>{{ d.client }}</strong> wants to sign in as you</h2>

  <p class="small">Code <code>{{ d.user_code }}</code>. Approve only if this is the code your app shows. It gets a token with what you allow here; you can revoke it under Settings → Tokens.</p>

  <label>Allow it to</label>

  <div class="scopes">

    {% for (name, what) in asked %}<label><input type="checkbox" name="scopes" value="{{ name }}" checked> <code>{{ name }}</code> <span class="small mute">{{ what }}</span></label>{% endfor %}

  </div>

  <button type="submit" name="action" value="approve">APPROVE</button>

  <button type="submit" name="action" value="deny" class="secondary">DENY</button>

</form>

{% else %}

<form class="card" method="post" action="/device">

  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">

  <label for="code">The code your app shows</label>

  <input type="text" id="code" name="code" value="{{ code }}" required autofocus autocomplete="off" placeholder="BCDF-GHJK" style="text-transform:uppercase">

  <button type="submit" name="action" value="lookup">CONTINUE</button>

</form>

{% endif %}

{% endblock %}