From ac665b9740a43c6960e7bdb27ff294bd65c86677 Mon Sep 17 00:00:00 2001
From: avycado13 <108358183+avycado13@users.noreply.github.com>
Date: Wed, 15 Jul 2026 12:51:31 -0700
Subject: [PATCH] fix form to actually submit scopes

---
 src/routes/indieauth.ts | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/routes/indieauth.ts b/src/routes/indieauth.ts
index 203bf4b..87a40d2 100644
--- a/src/routes/indieauth.ts
+++ b/src/routes/indieauth.ts
@@ -1409,10 +1409,11 @@ function showConsentScreen(
       This app would like to access the following information:
     </div>
 
-    <div class="scopes">
-      <div class="scope-title">requested permissions</div>
-      <ul class="scope-list">
-        ${scopes
+    <form method="POST" action="/auth/authorize">
+      <div class="scopes">
+        <div class="scope-title">requested permissions</div>
+        <ul class="scope-list">
+          ${scopes
 					.map((scope) => {
 						const isProfile = scope === "profile";
 						const scopeDescriptions: Record<string, string> = {
@@ -1434,10 +1435,9 @@ function showConsentScreen(
         `;
 					})
 					.join("")}
-      </ul>
-    </div>
+        </ul>
+      </div>
 
-    <form method="POST" action="/auth/authorize">
       <input type="hidden" name="client_id" value="${clientId}" />
       <input type="hidden" name="redirect_uri" value="${redirectUri}" />
       <input type="hidden" name="state" value="${state}" />
-- 
2.51.2