<%
  var _flow             = locals.flow             || 'authorizationCode';
  var _authorizationUrl = locals.authorizationUrl || null;
  var _tokenUrl         = locals.tokenUrl         || null;
  var _refreshUrl       = locals.refreshUrl       || null;
  var _scopes           = locals.scopes           || null;
  var _className        = locals.className        || '';

  var flowLabel = {
    authorizationCode: 'Authorization Code',
    implicit:          'Implicit',
    password:          'Password',
    clientCredentials: 'Client Credentials',
  };

  var flowSteps = {
    authorizationCode: [
      'User clicks "Sign in"',
      'Redirect to /authorize',
      'User grants consent',
      'Code returned to app',
      'Exchange code for token',
    ],
    implicit: [
      'User clicks "Sign in"',
      'Redirect to /authorize',
      'Token returned in URL fragment',
    ],
    password: [
      'App collects username + password',
      'POST credentials to /token',
      'Access token returned',
    ],
    clientCredentials: [
      'App authenticates with client ID + secret',
      'POST to /token',
      'Access token returned',
    ],
  };

  var steps = flowSteps[_flow] || [];
  var label = flowLabel[_flow] || _flow;
  var hasEndpoints = !!(_authorizationUrl || _tokenUrl || _refreshUrl);
%>

  

    

      
OAuth 2.0 Flow
      
<%= label %>
    
    
      
        
      
      <%= _flow %>
    
  

  

    

      
        
      
      User
    
    
    

      
        
      
      Your App
    
    
    

      
        
      
      Auth Server
    
  

  

    <% steps.forEach(function(step, i) { %>
    

      
        <%= i + 1 %>
      
      <%= step %>
    
    <% }); %>
  

  <% if (hasEndpoints) { %>
  

    <% if (_authorizationUrl) { %>
    

      
Authorization URL
      
<%= _authorizationUrl %>
    
    <% } %>
    <% if (_tokenUrl) { %>
    

      
Token URL
      
<%= _tokenUrl %>
    
    <% } %>
    <% if (_refreshUrl) { %>
    

      
Refresh URL
      
<%= _refreshUrl %>
    
    <% } %>
  
  <% } %>

  <% if (_scopes && _scopes.length > 0) { %>
  

    
Available scopes
    

      <% _scopes.forEach(function(s) { %>
      

        
        

          <%= s.name %>
          <% if (s.description) { %> — <%= s.description %><% } %>
        
      
      <% }); %>
    
  
  <% } %>