{% extends "base.html" %}

{% block title %}Authorize Application - {{ site_name }}{% endblock %}

{% block content %}
<div class="container mt-4">
    <div class="row justify-content-center">
        <div class="col-md-8 col-lg-6">
            <div class="card shadow-sm">
                <div class="card-header">
                    <h2 class="text-center mb-0">Authorize {{ client.app_name }}</h2>
                </div>
                <div class="card-body">
                    <p class="text-muted text-center small mb-4">
                        The application <strong>{{ client.app_name }}</strong> is requesting access to your FHIR data.
                    </p>
                    <h5 class="mb-3">Scopes Requested:</h5>
                    <ul class="list-group mb-4">
                        {% for scope in scopes %}
                            <li class="list-group-item">{{ scope }}</li>
                        {% endfor %}
                    </ul>
                    <form method="POST" action="{{ url_for('smart_proxy.handle_consent') }}" novalidate>
                        {{ form.hidden_tag() }}
                        <input type="hidden" name="consent" id="consent_value">
                        <div class="d-flex justify-content-between gap-2">
                            <button type="submit" class="btn btn-primary" onclick="document.getElementById('consent_value').value='allow'">
                                <i class="bi bi-check-circle-fill me-1"></i> Allow
                            </button>
                            <button type="submit" class="btn btn-secondary" onclick="document.getElementById('consent_value').value='deny'">
                                <i class="bi bi-x-circle-fill me-1"></i> Deny
                            </button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
</div>
{% endblock %}