Fix Google login loop and unify login/signup flow#650

Merged

bokelley merged 21 commits intomainfrom

fix-google-login-loop

Oct 28, 2025

Commits on Oct 27, 2025

fix: Prevent OAuth login loop when user lacks tenant access

bokelley
and
claude
committed
fix: Remove custom OAuth state parameter that breaks Authlib CSRF protection

bokelley
and
claude
committed
fix: Pass tenant context via OAuth redirect_uri query parameters

bokelley
and
claude
committed
fix: Restore working custom OAuth state parameter approach

bokelley
and
claude
committed
debug: Add comprehensive OAuth flow logging to diagnose subdomain redirect issue
bokelley
committed
debug: Add detailed OAuth error logging for token exchange failures
bokelley
committed
fix: Let Authlib manage OAuth state for CSRF protection
bokelley
committed
Revert "fix: Let Authlib manage OAuth state for CSRF protection"
bokelley
committed
debug: Add visible flash message to show OAuth callback variables
bokelley
committed
fix: Remove custom OAuth state parameter completely - use session storage only
bokelley
committed
debug: Add detailed access control logging for OAuth callback
bokelley
committed
fix: Check tenant access against specific tenant, not first matching tenant
bokelley
committed
debug: Add detailed exception handling and logging for access check
bokelley
committed

Commits on Oct 28, 2025