Skip to content

feat(auth): WinLab style consent page - #39

Merged
zyx1121 merged 2 commits into
mainfrom
feat/winlab-consent
Oct 14, 2026
Merged

zyx1121 merged 2 commits into
mainfrom
feat/winlab-consent

Conversation

@zyx1121

@zyx1121 zyx1121 commented Oct 14, 2026

Copy link
Copy Markdown
Member

Restyles the OAuth consent page to match @winlab/consent from ui.winlab.tw (NYCU-WinLab/ui#72).

  • Same tokens, spotlight layout and buttons as the block, written as inline CSS (the page stays script-free)
  • Fonts: /fonts/inter-latin.woff2 and /fonts/noto-sans-tc-consent.woff2 served by the site at the same origin; CSP adds only font-src 'self'
  • Form fields, nonce, callback checks and the rest of the CSP are unchanged
  • Test asserts the CSP keeps font-src 'self' and has no script-src

Verified on sandbox: go vet, go test ./internal/carrel/; rendered page served with its real CSP header, Playwright light/dark/390px: 0 console errors, both fonts loaded, no horizontal scroll.

🤖 Generated with Claude Code

zyx1121 and others added 2 commits October 14, 2026 10:35
The OAuth consent page now follows ui.winlab.tw's consent block:
WinLab tokens, spotlight layout, breadcrumb corner, outline and primary
buttons. Fonts load from the site at the same origin (font-src 'self');
without them the page falls back to system fonts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@zyx1121
zyx1121 merged commit 909e20e into main Oct 14, 2026
2 checks passed
@zyx1121
zyx1121 deleted the feat/winlab-consent branch October 14, 2026 02:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant