From f16636cbc14aa53e54a812d461e79f62f8e7257b Mon Sep 17 00:00:00 2001
From: Kieran Klukas <kieran@dunkirk.sh>
Date: Sun, 2 Aug 2026 11:34:59 -0400
Subject: [PATCH] feat: fix scope checkboxes

---
 src/lib/oauth/pages.ts | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/src/lib/oauth/pages.ts b/src/lib/oauth/pages.ts
index 2a5ba21..ec5a121 100644
--- a/src/lib/oauth/pages.ts
+++ b/src/lib/oauth/pages.ts
@@ -381,13 +381,13 @@ export function consentPage(opts: ConsentPageOptions): Response {
     <p class="request-text">wants to access your account</p>
     ${opts.me ? `<div class="me-identity">requesting identity <code>${escapeHtml(opts.me)}</code></div>` : ""}
 
-    <div class="scopes">
-      <div class="scope-title">requested permissions</div>
-      <ul class="scope-list">${scopeItems}
-      </ul>
-    </div>
-
     <form method="POST" action="/auth/authorize">
+      <div class="scopes">
+        <div class="scope-title">requested permissions</div>
+        <ul class="scope-list">${scopeItems}
+        </ul>
+      </div>
+
       <input type="hidden" name="csrf_token" value="${escapeHtml(opts.csrfToken)}" />
       <input type="hidden" name="client_id" value="${escapeHtml(opts.clientId)}" />
       <input type="hidden" name="redirect_uri" value="${escapeHtml(opts.redirectUri)}" />
-- 
2.51.2