mirror of
https://github.com/PegaProx/project-pegaprox.git
synced 2026-08-12 15:27:47 +08:00
bd938b9f17
AuthProvider.checkSession and LoginScreen both run on mount. On the OIDC callback page the session doesn't exist yet, so checkSession's /auth/check returns 401 and it called logout() — which raced the in-flight callback POST and aborted it (Firefox nginx-499 / 'Network error during OIDC callback'; Chrome won the timing). checkSession now stands down when the URL carries the OAuth code+state (the same signal LoginScreen keys off), leaving the callback handler to own the transition; it reloads on success and this runs cleanly against the new session.