authorize.html.erb in rodauth-oauth-1.6.2

- old
+ new

@@ -2,11 +2,11 @@
   <% if rodauth.oauth_application[rodauth.oauth_applications_logo_uri_column] %>
     <%= image_tag rodauth.oauth_application[rodauth.oauth_applications_logo_uri_column] %>
   <% end %>
   <% application_uri = rodauth.oauth_application[rodauth.oauth_applications_homepage_url_column] %>
   <% application_name = application_uri ? link_to(rodauth.oauth_application[rodauth.oauth_applications_name_column], application_uri) : rodauth.oauth_application[rodauth.oauth_applications_name_column] %>
-  <p class="lead"><%= rodauth.authorize_page_lead(name: application_name) %></p>
+  <p class="lead"><%= rodauth.authorize_page_lead(name: application_name).html_safe %></p>
 
   <div class="list-group">
     <% if rodauth.oauth_application[rodauth.oauth_applications_tos_uri_column] %>
       <%= link_to rodauth.oauth_applications_tos_uri_label, rodauth.oauth_application[rodauth.oauth_applications_tos_uri_column], class: "list-group-item" %>
     <% end %>
@@ -30,11 +30,11 @@
     <% rodauth.authorize_scopes.each do |scope| %>
       <% if rodauth.features.include?(:oidc) && scope == "offline_access" %>
         <%= hidden_field_tag "scope[]", scope %>
       <% else %>
         <div class="form-check">
-          <%= check_box_tag "scope[]", scope, id: scope, class: "form-check-input" %>
+          <%= check_box_tag "scope[]", scope, false, id: scope, class: "form-check-input" %>
           <%= label_tag scope, scope, class: "form-check-label" %>
         </div>
       <% end %>
     <% end %>
     <%= hidden_field_tag :client_id, rodauth.param_or_nil("client_id") %>
@@ -77,10 +77,10 @@
       <% end %>
       <% if rodauth.param_or_nil("registration") %>
         <%= hidden_field_tag :registration, rodauth.param_or_nil("registration") %>
       <% end %>
     <% end %>
-    <% if rodauth.features.include?(:oidc) %>
+    <% if rodauth.features.include?(:oauth_dpop) %>
       <% if rodauth.param_or_nil("dpop_jkt") %>
         <%= hidden_field_tag :dpop_jkt, rodauth.param_or_nil("dpop_jkt") %>
       <% end %>
     <% end %>
   </div>