{% extends "base.html" %}

{% block title %}Authorize {{ client.app_name }} - {{ site_name }}{% endblock %}

{% block content %}
<div class="container mt-5">
    <div class="row justify-content-center">
        <div class="col-md-8 col-lg-6">
            <div class="card shadow-sm">
                <div class="card-header text-center">
                    <h2 class="mb-0">Authorize Application</h2>
                </div>
                <div class="card-body">
                    <p class="text-center">
                        <strong>{{ client.app_name }}</strong> is requesting access to your data.
                    </p>
                    <h5 class="mt-4">Permissions Requested:</h5>
                    <ul class="list-group mb-4">
                        {% for scope in scopes %}
                            <li class="list-group-item">
                                <strong>{{ scope }}</strong>
                                <p class="mb-0 text-muted">
                                    {% if scope == "openid" %}
                                        Access your identity information.
                                    {% elif scope == "profile" %}
                                        Access your user profile information.
                                    {% elif scope == "launch" %}
                                        Launch the application with context.
                                    {% elif scope == "launch/patient" %}
                                        Launch the application with patient context.
                                    {% elif scope == "patient/*.read" %}
                                        Read all patient data.
                                    {% else %}
                                        Custom scope permission.
                                    {% endif %}
                                </p>
                            </li>
                        {% endfor %}
                    </ul>
                    <form method="POST" action="{{ url_for('smart_proxy.handle_consent') }}">
                        <div class="d-flex justify-content-between">
                            <button type="submit" name="consent" value="allow" class="btn btn-primary">
                                <i class="bi bi-check-circle-fill me-1"></i> Allow
                            </button>
                            <button type="submit" name="consent" value="deny" class="btn btn-secondary">
                                <i class="bi bi-x-circle-fill me-1"></i> Deny
                            </button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
</div>
{% endblock %}