hugocasa 3c3c03455d fix: OAuth popup login reliability + auto-login Safari edge cases (#8971) ...

- Login.svelte: poll whoami after popup opens as a safety net for Safari
  ITP — when the popup is opened without a fresh user gesture, cookies
  and localStorage can be partitioned, leaving the existing postMessage
  / storage signaling unable to reach the parent. Polling is independent
  of partitioning since it runs in the parent's own session. An
  oauthFlowDone flag guards the three terminal paths (postMessage,
  storage, poll) so onLoginSuccess fires exactly once. Adds compact
  "oauth: signaled via {postMessage|storage|poll}" diagnostic logs.
- routes/user/login_callback/[client_name]/+page.svelte: replace `??`
  with `||` on the cookie/localStorage fallback. The cookie check
  returns a boolean, so `??` never fell through and the localStorage
  branch was dead code.
- InstanceSettings.svelte: per-category save/discard for the
  Auth/OAuth/SAML tab now sees auto_login_provider and
  disable_password_login. getSettingsForCategory was returning only
  scimSamlSetting for that tab, leaving the dirty check and per-category
  save unable to detect changes to those fields.
- vite.config.js: drop a stale personal dev hostname from allowedHosts.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-30 12:20:12 +00:00

..

close

feat: windmill embed

2024-08-09 09:57:43 +02:00

forgot-password

feat: add password reset flow using configured SMTP settings (#7525)

2026-01-09 10:31:56 +00:00

login_callback/[client_name]

fix: OAuth popup login reliability + auto-login Safari edge cases (#8971)

2026-04-30 12:20:12 +00:00

reset-password

Final Svelte 5 migration (#8211)

2026-03-05 18:11:40 +01:00