From f2822a38540a417cd1e81ad746c7d0cf39318076 Mon Sep 17 00:00:00 2001
From: Fredrik Ahlgren <fredrik@sourceful-labs.com>
Date: Sat, 17 Oct 2026 10:21:36 +0200
Subject: [PATCH 1/2] fix(oauth): the consent page says to scan the QR code or
 open the link

The FTW app now goes straight to review from the link or the QR code, so
the page leads with those. The code is for an owner who can do neither,
in the FTW app or on the box's own page under Settings, then Access.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 internal/oauth/oauth_test.go | 6 ++++--
 internal/oauth/page.go       | 4 ++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/internal/oauth/oauth_test.go b/internal/oauth/oauth_test.go
index afabddb..c864e5c 100644
--- a/internal/oauth/oauth_test.go
+++ b/internal/oauth/oauth_test.go
@@ -929,8 +929,10 @@ func TestTheConsentPage(t *testing.T) {
 	page := string(body)
 	for _, want := range []string{"Let Claude into your home?", "From example.com. FTW Cloud does not know this client", "127.0.0.1:8123",
 		"a program on this computer", "<svg", AppLink, scopeWords[ScopeDispatchHold], "Control lasts minutes",
-		// An owner with no app approves and removes on the box's own page.
-		"open Settings, then Access, and type", "in the FTW app or on your box"} {
+		// The QR code or the link opens the app; the code is for an owner
+		// who has neither, in the app or on the box's own page.
+		"scan the QR code with your phone, or open the link", "Type this code in the FTW app, or on your box's own page under Settings, then Access",
+		"in the FTW app or on your box"} {
 		if !strings.Contains(page, want) {
 			t.Fatalf("the page lacks %q", want)
 		}
diff --git a/internal/oauth/page.go b/internal/oauth/page.go
index b4ff6a6..19f97de 100644
--- a/internal/oauth/page.go
+++ b/internal/oauth/page.go
@@ -130,9 +130,9 @@ var consentTmpl = template.Must(template.New("consent").Parse(`<!doctype html>
 <div class="approve">
 <div class="qr">{{.QR}}</div>
 <div>
-<p>Approve in the FTW app: scan the code with your phone, or</p>
+<p>Approve in the FTW app: scan the QR code with your phone, or open the link.</p>
 <p><a class="button" href="{{.Link}}">Open the FTW app</a></p>
-<p class="muted">No app? On your box's own page, open Settings, then Access, and type</p>
+<p class="muted">Can't scan or open the link? Type this code in the FTW app, or on your box's own page under Settings, then Access.</p>
 <p class="code">{{.Code}}</p>
 </div>
 </div>

From 60355d7c708b282c78f17fb67e50ffe6fe08531b Mon Sep 17 00:00:00 2001
From: Fredrik Ahlgren <fredrik@sourceful-labs.com>
Date: Sat, 17 Oct 2026 10:56:18 +0200
Subject: [PATCH 2/2] fix(oauth): the page says tap the button, and where the
 code goes
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

"Open the link" pointed at a button labelled Open the FTW app, which a
desktop browser cannot open. The page now says to scan with the phone's
camera or tap the button on the phone, and names where to type the code:
Settings → Assistants and support → Add an assistant in the app, Settings
→ Access on the box's own page.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 internal/oauth/oauth_test.go | 3 ++-
 internal/oauth/page.go       | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/internal/oauth/oauth_test.go b/internal/oauth/oauth_test.go
index c864e5c..789c3e3 100644
--- a/internal/oauth/oauth_test.go
+++ b/internal/oauth/oauth_test.go
@@ -931,7 +931,8 @@ func TestTheConsentPage(t *testing.T) {
 		"a program on this computer", "<svg", AppLink, scopeWords[ScopeDispatchHold], "Control lasts minutes",
 		// The QR code or the link opens the app; the code is for an owner
 		// who has neither, in the app or on the box's own page.
-		"scan the QR code with your phone, or open the link", "Type this code in the FTW app, or on your box's own page under Settings, then Access",
+		"scan the QR code with your phone's camera, or tap the button on your phone",
+		"Type this code in the FTW app under Settings → Assistants and support → Add an assistant, or on your box's own page under Settings → Access",
 		"in the FTW app or on your box"} {
 		if !strings.Contains(page, want) {
 			t.Fatalf("the page lacks %q", want)
diff --git a/internal/oauth/page.go b/internal/oauth/page.go
index 19f97de..bbe9535 100644
--- a/internal/oauth/page.go
+++ b/internal/oauth/page.go
@@ -130,9 +130,9 @@ var consentTmpl = template.Must(template.New("consent").Parse(`<!doctype html>
 <div class="approve">
 <div class="qr">{{.QR}}</div>
 <div>
-<p>Approve in the FTW app: scan the QR code with your phone, or open the link.</p>
+<p>Approve in the FTW app: scan the QR code with your phone's camera, or tap the button on your phone.</p>
 <p><a class="button" href="{{.Link}}">Open the FTW app</a></p>
-<p class="muted">Can't scan or open the link? Type this code in the FTW app, or on your box's own page under Settings, then Access.</p>
+<p class="muted">Can't do either? Type this code in the FTW app under Settings → Assistants and support → Add an assistant, or on your box's own page under Settings → Access.</p>
 <p class="code">{{.Code}}</p>
 </div>
 </div>