4 Commits

Include renames

Author	SHA1	Message	Date
Jeroen SchweitzerandClaude Opus 4.5	3fa97bb0b0	feat: silent OIDC auth with JWT Bearer tokens for web ... - Add prompt=none to silently obtain JWT when Authentik session exists - Flutter sends Bearer token to core-api instead of forward auth cookies - Fixes cross-subdomain cookie issues between home/api.schweitz.net - Callback syncs with /auth/sync for user profile and roles - API interceptor now adds Bearer token on web 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 16:11:07 +01:00
Jeroen SchweitzerandClaude Opus 4.5	790ae41171	fix(auth): Riverpod lifecycle error + Authentik logout ... - Fix "Cannot use Ref after disposed" error in OIDC callback page - Store notifier reference before async gap - Add mounted check at start of processing - Add proper SSO logout via Authentik end_session_endpoint - Clears local tokens AND redirects to Authentik logout - Returns to app after Authentik session ends 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 14:50:32 +01:00
Jeroen SchweitzerandClaude Opus 4.5	0a6e9de4a8	fix(auth): persist PKCE state in sessionStorage ... Store OIDC code_verifier and state in sessionStorage instead of static memory variables. This fixes the "No code verifier" error that occurred after Authentik redirect because the Flutter app restarts and loses in-memory state. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 12:40:38 +01:00
Jeroen SchweitzerandClaude Opus 4.5	9c41a8805d	chore: release v1.0.5 ... Web authentication now uses OIDC Authorization Code flow with PKCE instead of NPM forward auth. Added callback route and web utilities. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 12:01:42 +01:00