{% extends "oauth2_provider/base.html" %}
{% load i18n static %}

{% block title %}Authorize {{ application.name|default:"an app" }} · Redea Social{% endblock title %}

{% block content %}
    <div class="bb-head">
        <img src="{% static 'img/redea-social.svg' %}" alt="Redea Social" class="bb-logo">
        <span class="bb-eyebrow">Redea Social</span>
    </div>

    <div class="bb-card">
        {% if not error %}
            <h1>{% blocktrans with name=application.name|default:"This application" %}Authorize {{ name }}?{% endblocktrans %}</h1>
            <p>{% blocktrans with name=application.name|default:"This application" %}{{ name }} wants to connect to your Redea Social workspace with the following permissions:{% endblocktrans %}</p>

            <form id="authorizationForm" method="post">
                {% csrf_token %}

                {% comment %}
                  Hidden fields carry redirect_uri, state, scope, response_type,
                  code_challenge, etc. — must be rendered or the OAuth flow breaks.
                {% endcomment %}
                {% for field in form %}
                    {% if field.is_hidden %}{{ field }}{% endif %}
                {% endfor %}

                <ul class="bb-scopes">
                    {% for scope in scopes_descriptions %}
                        <li>{{ scope }}</li>
                    {% endfor %}
                </ul>

                <div class="bb-field-group" style="margin: 1.5rem 0;">
                    <label for="id_workspace_id" style="display: block; font-weight: 600; margin-bottom: 0.5rem;">
                        {% trans "Target Workspace" %}
                    </label>
                    <select id="id_workspace_id" name="workspace_id" class="bb-select" required style="width: 100%; padding: 0.5rem; border-radius: 4px; border: 1px solid #ccc;">
                        <option value="" disabled {% if not selected_workspace_id %}selected{% endif %}>
                            {% trans "Select a workspace..." %}
                        </option>
                        {% for ws in workspaces %}
                            <option value="{{ ws.id }}" {% if selected_workspace_id == ws.id|stringformat:"s" %}selected{% endif %}>
                                {{ ws.name }}
                            </option>
                        {% endfor %}
                    </select>
                </div>

                {% if workspace_error %}<div class="bb-error">{{ workspace_error }}</div>{% endif %}
                {% if form.errors %}<div class="bb-error">{{ form.errors }}</div>{% endif %}
                {% if form.non_field_errors %}<div class="bb-error">{{ form.non_field_errors }}</div>{% endif %}

                <div class="bb-actions">
                    {# Cancel must NOT carry name="allow" — its absence signals denial to DOT. #}
                    <input type="submit" class="bb-btn bb-btn-ghost" value="{% trans 'Cancel' %}"/>
                    {# Authorize MUST keep name="allow" — DOT checks for it to detect approval. #}
                    <input type="submit" class="bb-btn bb-btn-primary" name="allow" value="{% trans 'Authorize' %}"/>
                </div>
            </form>

            <p class="bb-foot">{% trans "You can revoke this access at any time from Redea Social." %}</p>
        {% else %}
            <h1>{% trans "Something went wrong" %}</h1>
            <p>{{ error.error }}</p>
            <p>{{ error.description }}</p>
        {% endif %}
    </div>
{% endblock content %}