From ff5f9554f730692a275fbd540a5a66f73f5e14bf Mon Sep 17 00:00:00 2001
From: Rien Maertens <rien.maertens@posteo.be>
Date: Sat, 23 Oct 2021 18:21:06 +0200
Subject: [PATCH] Use absolute path to authorize post URL

---
 src/controllers/oauth_controller.rs | 1 +
 templates/oauth/authorize.html      | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/controllers/oauth_controller.rs b/src/controllers/oauth_controller.rs
index 6f80f52e..efa34776 100644
--- a/src/controllers/oauth_controller.rs
+++ b/src/controllers/oauth_controller.rs
@@ -113,6 +113,7 @@ pub async fn authorize<'r>(
 			cookies.add_private(state.into_cookie()?);
 			Ok(template! {
 				"oauth/authorize.html";
+				authorize_post_url: String = uri!(do_authorize).to_string(),
 				client_name: String = client_name,
 			})
 		} else {
diff --git a/templates/oauth/authorize.html b/templates/oauth/authorize.html
index 0ea75135..daa5d13c 100644
--- a/templates/oauth/authorize.html
+++ b/templates/oauth/authorize.html
@@ -22,7 +22,7 @@
       </div>
 
       <!-- Form -->
-      <form class="is-flex" action="authorize" method="post">
+      <form class="is-flex" action="{{ authorize_post_url }}" method="post">
         <button class="button is-success is-medium" type="submit" name="authorized" value="true">Yes</button>
         <button class="button is-danger is-medium ml-2" type="submit" name="authorized" value="false">No</button>
       </form>