diff --git a/app/views/oauth2/authorize-dialog.pug b/app/views/oauth2/authorize-dialog.pug
index 9785bd4..881e517 100644
--- a/app/views/oauth2/authorize-dialog.pug
+++ b/app/views/oauth2/authorize-dialog.pug
@@ -1,5 +1,62 @@
 extends ../layouts/main
+block dtp-navbar
 block content
 
-  h1 OAuth2 Authorization
-  pre= JSON.stringify(oauth2, null, 2)
\ No newline at end of file
+  section.uk-section.uk-section-default
+    .uk-container
+
+      .uk-card.uk-card-default
+        .uk-card-header
+          h1.uk-card-title DTP Connect
+
+        .uk-card-body
+          .uk-margin
+            div #{oauth2.client.site.name} is requesting access to your #{oauth2.user.username_lc}@#{site.domainKey} community account. If you authorize this access, you will be able to use #{oauth2.client.site.name} as #{oauth2.user.username_lc}@#{oauth2.client.site.domainKey}.
+
+          .uk-margin
+            div(uk-grid).uk-flex-middle.uk-grid-divider.uk-grid-match
+              div(class="uk-width-1-1 uk-width-auto@m")
+                div(uk-grid).uk-grid-small.uk-flex-middle
+                  .uk-width-auto
+                    img(src=`http://${oauth2.client.site.domain}/img/icon/${oauth2.client.site.domainKey}/icon-48x48.png`)
+                  .uk-width-expand
+                    h4.uk-margin-remove= oauth2.client.site.name
+                    .uk-text-small.uk-text-muted= oauth2.client.site.domainKey
+
+              div(class="uk-width-1-1 uk-width-auto@m").uk-text-center
+                span
+                  i.fas.fa-link
+
+              div(class="uk-width-1-1 uk-width-auto@m")
+                div(uk-grid).uk-grid-small
+                  .uk-width-auto
+                    img(src=`/image/${oauth2.user.picture.small._id}`, style="width: 48px; height: auto;")
+                  div(class="uk-width-auto")
+                    h4.uk-margin-remove= oauth2.user.displayName
+                    .uk-text-small.uk-text-muted @#{oauth2.user.username}
+      
+          .uk-margin
+            -
+              var scopeMap = {
+                'account-read': 'Read account information (not email)',
+                'event-write': 'Write events to your timelines',
+              };
+              var scopes = oauth2.client.scopes.map((scope) => {
+                return scopeMap[scope] || scope;
+              });
+            
+            .uk-text-bold Permissions requested:
+            ul.uk-list.uk-list-square
+              each scope in scopes
+                li= scope
+
+        .uk-card-footer
+          div(uk-grid)
+            .uk-width-expand
+              +renderBackButton()
+            .uk-width-auto
+              button(id="deny", type="submit", value="Deny").uk-button.uk-button-default Deny
+            .uk-width-auto
+              button(id="allow", type="submit", value="Allow").uk-button.uk-button-primary Allow
+      
+      //- pre= JSON.stringify(oauth2, null, 2)
\ No newline at end of file