9 Commits (master)

Author SHA1 Message Date
Guillermo Pages 49865e66d6 fix: logout redirect loop
Changed GET /auth/logout to redirect to rpFrontendUrl instead of /login
to prevent re-authentication loop. When user logged out, redirecting to
/login would immediately start new OIDC flow with still-valid SwissOID
session, causing auto-login.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2 months ago
Guillermo Pages 2c254d490f feat: add POST_LOGIN_PATH and ALLOW_CONTINUE_PARAM env vars
- Added POST_LOGIN_PATH env var (default: '/')
- Added ALLOW_CONTINUE_PARAM env var (default: true)
- Updated appConfigMap to read and pass these values
- Updated oidcConfigBuilder to include them in OIDC config

This allows consumers to configure post-login redirect behavior via env vars.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
3 months ago
Guillermo Pages c15b407e1c fix: remove hardcoded URLs and add configurable post-login redirect
- Fixed hardcoded finalize URL to build from rpCallbackUrl
- Removed hardcoded /workspace redirect path
- Added postLoginPath config option (default: '/')
- Added allowContinueParam config option (default: true)
- Continue parameter now flows through signed state to session to final redirect

This fixes biblio-stats authentication flow and makes the package work for any RP.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
3 months ago
Guillermo Pages 0196ef9340 fix: polyfill 3 months ago
Guillermo Pages 40bf4b1647 feat: onUserAuthenticated hook 3 months ago
Guillermo Pages e1ec5ebb0c fix: harden middleware config 3 months ago
Guillermo Pages d7b3f2a4df fix: dropping the legacy surface 3 months ago
Guillermo Pages 9f2176cd4b freeze: just commit to have a history track, but this code is not working yet 3 months ago
Guillermo Pages 157b11d45d feat: seems migrated 3 months ago