Guilhem LemouelandClaude Opus 5 6858d1fb30 fix(oauth): only ask for the account chooser on an explicit login click ...

The login page now sends `user_initiated=true` when someone clicks a
provider button, and the backend applies the provider's `extra_params`
only for those requests.

Someone whose browser holds a single Google session whose email is
already registered under a different login type hits
"an user with the email associated to this login exists but with a
different login type" and, with no account chooser, has no way to offer
a different account. The chooser belongs on that click.

It does not belong on the `auto_login_provider` redirect, whose whole
purpose is to sign a public-app or approval-page visitor in without
interaction.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0196aV8v36ukoQcD7L2scvmH

2026-09-03 19:28:46 +02:00

..

lib

fix(oauth): only ask for the account chooser on an explicit login click

2026-09-03 19:28:46 +02:00

routes

fix: add top margin to the home Build with AI section (#10909)

2026-08-31 22:46:15 +02:00

.d.ts

…

.gitkeep

…

app.d.ts

…

app.html

feat(apps): opt-in sandbox isolation for published & raw apps (alpha) (#9420)

2026-06-23 10:05:00 +02:00

global.d.ts

raw apps v2 (#7251)

2025-11-29 01:23:47 +00:00

hooks.ts

…

types.d.ts

…