provide option for choosing the scope to request

update to "create" scope by default, but allow the user to choose "post" as a fallback. also updates indieauth/client to 0.2 for json support.

1 files changed, 12 insertions, 2 deletions

diff --git a/views/auth_start.php b/views/auth_start.php
index 93f45e3..1fe0cdb 100644
--- a/views/auth_start.php
+++ b/views/auth_start.php
@@ -53,8 +53,18 @@
 
   <p>Clicking the button below will take you to <strong>your</strong> authorization server which is where you will allow this app to be able to post to your site.</p>
 
-  <a href="<?= $this->authorizationURL ?>" class="btn btn-primary">Authorize</a>
+  <form action="/auth/redirect" method="get">
+    <p>Choose the scope to request:</p>
+    <ul style="list-style-type: none;">
+      <li><input type="radio" name="scope" value="create" checked="checked"> create</li>
+      <li><input type="radio" name="scope" value="post"> post (legacy)</li>
+    </ul>
+
+    <button class="btn btn-primary" type="submit" id="auth-submit">Authorize</button>
+
+    <input type="hidden" name="authorization_url" value="<?= $this->authorizationURL ?>">
+  </form>
 
 <?php endif; ?>
 
-</div>
\ No newline at end of file
+</div>