prosody-modules: mod_http_oauth2/html/consent.html history

mod_http_oauth2: Fix passing claim/scope trough template

Tue, 15 Jul 2025 21:53:37 +0200

mod_http_oauth2: Fix passing claim/scope trough template

mod_http_oauth2: Show scope descriptions

Tue, 15 Jul 2025 16:28:40 +0200

mod_http_oauth2: Show scope descriptions

This should help the user understand and provide _informed_ consent,
although the texts can certainly be improved. Explaining these scopes is
non-trivial.

mod_http_oauth2: Fix XHTML-ness of template

Sat, 31 Aug 2024 14:45:37 +0200

mod_http_oauth2: Fix XHTML-ness of template

Ref 8de02381e80a

mod_http_oauth2: Specify language in templates

Sat, 26 Aug 2023 01:40:23 +0200

mod_http_oauth2: Specify language in templates

Might be used as hint to translation systems.

Maybe one day we'll have i18n built in, but this is not that day!

mod_http_oauth2: Improve templates

Tue, 08 Aug 2023 17:04:50 +0200

mod_http_oauth2: Improve templates

XML-ness by avoiding value-less attributes or whatever they're called

Plus some Aria label tweaks

mod_http_oauth2: Present errors in HTML

Mon, 31 Jul 2023 02:07:24 +0200

mod_http_oauth2: Present errors in HTML

mod_http_oauth2: Move site name into

Mon, 31 Jul 2023 02:05:49 +0200

mod_http_oauth2: Move site name into

Because it's the site header

mod_http_oauth2: Conform to XHTML in templates

Mon, 31 Jul 2023 02:04:05 +0200

mod_http_oauth2: Conform to XHTML in templates

Mostly because pedantic. Seems appropriate.
Nice to be able to use an XML parser.

mod_http_oauth2: Always show list of requested scopes

Sun, 25 Jun 2023 11:12:07 +0200

mod_http_oauth2: Always show list of requested scopes

Upon further reflection, these are probably too important to hide behind
a

thing.

mod_http_oauth2: Revert role selector, going to try something else

Sun, 07 May 2023 19:40:57 +0200

mod_http_oauth2: Revert role selector, going to try something else

Back out f2c7bb3af600

Allowing only a single role to be encoded into the grant takes away the
possibility of having multiple roles in the grant, one of which is
selected when issuing an access token. It also takes away the ability to
have zero roles granted, which could be useful e.g. when you only need
OIDC scopes.

mod_http_oauth2: Add role selector to consent page

Fri, 05 May 2023 01:23:13 +0200

mod_http_oauth2: Add role selector to consent page

List includes all roles available to the user, if more than one.
Defaults to either the first role in the scope string or the users
primary role.

Earlier draft listed all roles, but having options that can't be
selected is bad UX and the entire list of all roles on the server could
be long, and perhaps even sensitive.

Allows e.g. picking a role with fewer permissions than what might
otherwise have been selected.

UX wise, doing this with more checkboxes or possibly radio buttons would
have been confusion and/or looked messier.

Fixes the previous situation where unselecting a role would default to
the primary role, which could be more permissions than requested.

mod_http_oauth2: Allow user to decide which requested scopes to grant

Thu, 23 Mar 2023 16:28:08 +0100

mod_http_oauth2: Allow user to decide which requested scopes to grant

These should at the very least be shown to the user, so they can decide
whether to grant them.

Considered whether to filter the requested scopes down to actually
understood scopes that would be granted, but decided that this was a bit
complex for a first step, since role role selection and other kinds of
scopes are mixed into the same field here.

mod_http_oauth2: Use
in templates because it looks nice

Thu, 23 Mar 2023 16:19:09 +0100

mod_http_oauth2: Use

in templates because it looks nice

Removes some CSS as well

mod_http_oauth2: Close site header tags

Thu, 09 Mar 2023 13:15:13 +0100

mod_http_oauth2: Close site header tags

mod_http_oauth2: Add authentication, consent and error pages

Mon, 06 Mar 2023 09:46:58 +0000

mod_http_oauth2: Add authentication, consent and error pages