{# _auth_main_consent.html — OAuth consent screen column.
   Renders <main class="wf-auth-form"> standalone for HTMX fragment responses.

   Expected context:
     application_name, app_name, logo_url, scope_items,
     client_id, redirect_uri, response_type, scope, state_param,
     code_challenge, code_challenge_method, nonce, csrf_token,
     is_production
#}
{% import "_partials/_auth_macros.html" as auth %}
<main class="wf-auth-form">
  <div class="wf-auth-top">
    {{ auth.kicker(app_name, "Consent") }}
  </div>

  <div class="wf-auth-wrap">
    {% if logo_url and logo_url is startingwith("https://") %}
      <img src="{{ logo_url }}" alt="{{ application_name }}"
           class="wf-mb-4" height="48">
    {% endif %}

    <h1>{{ application_name }}</h1>
    <p class="wf-auth-sub">wants to access the following:</p>

    <div class="wf-framed wf-mt-5">
      <ul class="wf-f wf-col wf-gap-2 wf-p-0">
        {% for item in scope_items %}
          <li class="wf-f wf-gap-2 wf-ai-s">
            <span class="wf-ok" aria-hidden="true">✓</span>
            <span>{{ item.description }}</span>
          </li>
        {% endfor %}
      </ul>
    </div>

    <form method="post" action="/oauth/authorize" class="wf-f wf-col wf-gap-3 wf-mt-5">
      <input type="hidden" name="client_id" value="{{ client_id }}">
      <input type="hidden" name="redirect_uri" value="{{ redirect_uri }}">
      <input type="hidden" name="response_type" value="{{ response_type }}">
      <input type="hidden" name="scope" value="{{ scope }}">
      <input type="hidden" name="state" value="{{ state_param }}">
      <input type="hidden" name="code_challenge" value="{{ code_challenge }}">
      <input type="hidden" name="code_challenge_method" value="{{ code_challenge_method }}">
      {% if nonce %}<input type="hidden" name="nonce" value="{{ nonce }}">{% endif %}
      <input type="hidden" name="csrf_token" value="{{ csrf_token }}">

      <button type="submit" name="consent" value="approve"
              class="wf-btn primary lg wf-w-full">Allow →</button>
      <button type="submit" name="consent" value="deny"
              class="wf-btn wf-w-full">Deny</button>
    </form>

    {% if user_email %}
    <p class="wf-caption wf-mt-4">Authorizing as {{ user_email }}</p>
    {% endif %}
    <p class="wf-caption wf-mt-4">Authorizing will redirect you to {{ redirect_uri }}</p>
  </div>
</main>