{#
ChatPVT stack-owned override of templates/pages/sso.html (operator ruling
2026-07-10): AUTO-CONTINUE the first-party SSO consent. MAS v1.23.0 has no
skip-consent knob (the clients config carries no trust flag and the compat
handler renders this page unconditionally), so the page submits its own
Continue form on load. The only registered clients are ChatPVT's first-party
apps with fixed redirect URIs, so consent here is a formality click; the
button remains as the no-JS fallback and on a back-forward cache restore
(the guard never resubmits a restored page).

Provenance: stock v1.23.0 templates/pages/sso.html plus the script block at
the end of the content block. Re-diff against the new tag's file on every
MAS_VERSION bump (same duty as mas-app.html / mas-base.html).
-#}
{#
Copyright 2024, 2025 New Vector Ltd.
Copyright 2022-2024 The Matrix.org Foundation C.I.C.

SPDX-License-Identifier: AGPL-3.0-only
SPDX-FileCopyrightText: 2026 Ahania <https://ahania.com>
-#}

{#
  ═══ Licensing: Ahania relies on the AGPL branch ════════════════════════════
  Upstream matrix-authentication-service is offered by Element under either the
  GNU Affero General Public License v3.0 only, or a paid-for Element Commercial
  License. Ahania holds no Element Commercial License, so Ahania receives and
  uses this file under AGPL-3.0-only. The dual offer remains Element's; the
  single identifier above is Ahania's elected branch for this copy, and it is
  not a claim that the commercial branch is unavailable to anyone else.

  Upstream copyright stands as written above and is never replaced. The Ahania
  copyright line covers only the modification described below.

  MODIFIED BY AHANIA on 2026-07-10 (AGPL-3.0 section 5(a) notice):
  an auto-continue script for the first-party SSO consent page.

  Licence text: LICENSES/AGPL-3.0-only.txt in this repository.
  Corresponding Source for the deployed modified version, including this file:
  https://source.ahania.com/chatpvt/mas/1.23.0/
  ════════════════════════════════════════════════════════════════════════════
-#}

{% set consent_page = true %}

{% extends "base.html" %}

{% block content %}
  {% set client_name = login.redirect_uri | simplify_url %}

  <header class="page-heading">
    <div class="flex justify-center">
      <div class="consent-client-icon generic">
        {{ icon.web_browser() }}
      </div>
    </div>

    <div class="header">
      <h1 class="title">
        {{ _('mas.consent.continue_to', client_name=client_name) }}
      </h1>
      <p class="text [&>span]:whitespace-nowrap [&>span]:text-[var(--cpd-color-text-link-external)]">
        {{ _("mas.legacy_consent.this_will_setup", client_name=client_name, server_name=branding.server_name) }}
      </p>
    </div>
  </header>

  {% set initial -%}
    {%- if matrix_user.display_name -%}
      {{- matrix_user.display_name[0] | upper -}}
    {%- else -%}
      {{- matrix_user.mxid[1] | upper -}}
    {%- endif -%}
  {%- endset %}

  <section class="flex items-center p-4 gap-4 border border-[var(--cpd-color-gray-400)] rounded-xl">
    <div class="avatar-placeholder" data-color="{{ matrix_user.mxid | id_color_hash }}">{{ initial }}</div>
    <div class="flex flex-col">
      <div class="text-primary cpd-text-body-lg-semibold">{{ matrix_user.display_name or current_session.user.username }}</div>
      <div class="text-secondary cpd-text-body-md-regular">{{ matrix_user.mxid }}</div>
    </div>
  </section>

  <section class="flex flex-col gap-6">
    <form method="POST" class="cpd-form-root">
      <input type="hidden" name="csrf" value="{{ csrf_token }}" />
      {{ button.button(text=_("action.continue")) }}
    </form>

    {% call logout.button(csrf_token=csrf_token, post_logout_action=action) %}
      <button type="submit" class="cpd-button primary" data-kind="secondary" data-size="lg" type="submit">
        {{ _("mas.consent.use_another_account") }}
      </button>
    {% endcall %}
  </section>

  <script>
    // ChatPVT auto-continue (see the header comment). Prerender-guarded so a
    // speculative render never consumes the grant; the dataset guard keeps a
    // back-forward cache restore from resubmitting.
    (function () {
      var go = function () {
        var form = document.querySelector('form.cpd-form-root');
        if (form && !form.dataset.autoSubmitted) {
          form.dataset.autoSubmitted = '1';
          form.submit();
        }
      };
      if (document.prerendering) {
        document.addEventListener('prerenderingchange', go, { once: true });
      } else {
        go();
      }
    })();
  </script>
{% endblock content %}