zeekay 52d8d964d6 fix: OAuth callback handles query string tokens, correct authorize endpoint ...

- Callback page now checks both hash fragment and query string for
  access_token (Casdoor returns it in query string, not hash)
- Login redirect uses /oauth/authorize instead of /login/oauth/authorize
- Add hanzo.id to default OIDC issuers in MPC API
- Update E2E tests to match corrected authorize URL

2025-12-27 11:19:03 -08:00

..

callback

fix: OAuth callback handles query string tokens, correct authorize endpoint

2025-12-27 11:19:03 -08:00