{% extends "base.html" %}
{% block title %}Sign in a device{% endblock %}
{% block content %}
<div class="head"><h1>Sign in a device <small>an app asked to use your account</small></h1></div>
{% if let Some(d) = done %}<p class="note">{{ d }}</p>{% endif %}
{% if let Some(e) = error %}<p class="error">{{ e }}</p>{% endif %}
{% if let Some((d, asked)) = pending %}
<form class="card wide" method="post" action="/device">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <input type="hidden" name="code" value="{{ d.user_code }}">
  <h2><strong>{{ d.client }}</strong> wants to sign in as you</h2>
  <p class="small">Code <code>{{ d.user_code }}</code>. Approve only if this is the code your app shows. It gets a token with what you allow here; you can revoke it under Settings → Tokens.</p>
  <label>Allow it to</label>
  <div class="scopes">
    {% for (name, what) in asked %}<label><input type="checkbox" name="scopes" value="{{ name }}" checked> <code>{{ name }}</code> <span class="small mute">{{ what }}</span></label>{% endfor %}
  </div>
  <button type="submit" name="action" value="approve">APPROVE</button>
  <button type="submit" name="action" value="deny" class="secondary">DENY</button>
</form>
{% else %}
<form class="card" method="post" action="/device">
  <input type="hidden" name="_csrf" value="{{ shell.csrf }}">
  <label for="code">The code your app shows</label>
  <input type="text" id="code" name="code" value="{{ code }}" required autofocus autocomplete="off" placeholder="BCDF-GHJK" style="text-transform:uppercase">
  <button type="submit" name="action" value="lookup">CONTINUE</button>
</form>
{% endif %}
{% endblock %}