oauth ask user for consentes

[byteplow]

current

the user automatically consents.

goal

The user should be optional ask for consent. This should be configure per application

task

• ask user for consent
• do not ask user for consent, if the client has automatic consent enabled

design

• ory keto manages app permissions
• oauth clients belong to an app, the permission is set for the app
• client#skip-consent@(app#skip-consent) => every thing with skip-consent on server x, also has skip consent on client
• app#skip-consent@*/user/group => everyone, users or groups can have skip-consent
• before consent client#skip-consent@* and and is checked. If either one is true. Consent is accepted automatically