extends ../layouts/focused
block content

  section.uk-section.uk-section-default
    .uk-container(style="max-width: 720px;")

      form(method="POST", action="/oauth2/authorize/decision").uk-form

        input(name="transaction_id", type="hidden", value= oauth2.transactionID)

        .uk-card.uk-card-default
          .uk-card-header
            h1.uk-card-title DTP Connect

          .uk-card-body
            .uk-margin
              div #{oauth2.client.site.name} is requesting access to your #{oauth2.user.username_lc}@#{site.domainKey} community account. If you authorize this access, you will be able to use #{oauth2.client.site.name} as #{oauth2.user.username_lc}@#{oauth2.client.site.domainKey}.

            .uk-margin
              div(uk-grid).uk-flex-middle.uk-grid-divider.uk-grid-match
                div(class="uk-width-1-1 uk-width-auto@m")
                  div(uk-grid).uk-grid-small.uk-flex-middle
                    .uk-width-auto
                      img(src=`http://${oauth2.client.site.domain}/img/icon/${oauth2.client.site.domainKey}/icon-48x48.png`)
                    .uk-width-expand
                      h4.uk-margin-remove= oauth2.client.site.name
                      .uk-text-small.uk-text-muted= oauth2.client.site.domainKey

                div(class="uk-width-1-1 uk-width-auto@m")
                  div(uk-grid).uk-grid-small
                    .uk-width-auto
                      img(src=`/image/${oauth2.user.picture.small._id}`, style="width: 48px; height: auto;")
                    div(class="uk-width-auto")
                      h4.uk-margin-remove= oauth2.user.displayName
                      .uk-text-small.uk-text-muted @#{oauth2.user.username}
        
            -
              var scopeMap = {
                'account-read': 'Read account information (not email)',
                'event-write': 'Write events to your timelines',
              };
              var scopes = oauth2.client.scopes.map((scope) => {
                return scopeMap[scope] || scope;
              });
            
            .uk-text-bold Permissions requested:
            ul.uk-list.uk-list-square
              each scope in scopes
                li= scope

          .uk-card-footer
            div(uk-grid).uk-grid-small
              .uk-width-expand
                +renderBackButton()
              .uk-width-auto
                button(id="deny", type="submit", value="Deny").uk-button.uk-button-default Deny
              .uk-width-auto
                button(id="allow", type="submit", value="Allow").uk-button.uk-button-primary Allow
        
        //- pre= JSON.stringify(oauth2, null, 2)