From a14d31e9d3123956349dfa2f1d66a182e5c897a1 Mon Sep 17 00:00:00 2001
From: Danielle McLean <dani@00dani.me>
Date: Fri, 27 Oct 2017 13:26:21 +1100
Subject: [PATCH] Improve the IndieAuth form: include the state parameter, show
 more information, etc.

---
 lemonauth/templates/lemonauth/indie.html | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/lemonauth/templates/lemonauth/indie.html b/lemonauth/templates/lemonauth/indie.html
index adacbc2..ea2c089 100644
--- a/lemonauth/templates/lemonauth/indie.html
+++ b/lemonauth/templates/lemonauth/indie.html
@@ -3,22 +3,28 @@
 <div class="container">
 	<form class="card" method="post" action="{% url 'lemonauth:indie' %}">
 		<h4 class="card-header">
-			<a href="{{ params.client_id }}">{{ params.client_id }}</a>
+			sign in to
+			<a class="h-card code" href="{{ params.client_id }}">
+				{{ params.client_id }}
+			</a>
 		</h4>
 
 		<div class="card-body">
-			<p class="card-text">do you want to confirm your identity, <a href="{{ params.me }}">{{ params.me }}</a>, with this app?</p>
+			<p class="card-text">do you want to confirm your identity, <a class="code" href="{{ params.me }}">{{ params.me }}</a>, with this app?</p>
+			<p class="card-text"><small>you will be redirected to <a class="code" href="{{ params.redirect_uri }}">{{ params.redirect_uri }}</a> after authorising this app</small></p>
 		</div>
 
 		<div class="card-footer">
-			<p class="card-text">you can't actually auth yet but this button is how you will do it</p>
-			<button class="btn btn-success" type="button">
+			<button class="btn btn-success" type="submit">
 				<i class="fa fa-check"></i>
 				approve
 			</button>
 		</div>
 
 		{% csrf_token %}
+		{% if params.state %}
+		<input name="state" type="hidden" value="{{ params.state }}" />
+		{% endif %}
 	</form>
 </div>
 {% endblock %}