mirror of
https://github.com/Gimanh/taskview-community.git
synced 2026-09-19 17:15:08 +00:00
Nikolai Giman
40cd8064f5
SSO and social OAuth callbacks complete the login by redeeming a
one-time code through POST /module/auth/login-by-code, but the endpoint
was gated behind RequireLoginMethod('magic-link'). With
AUTH_LOGIN_METHODS excluding magic-link (e.g. "sso"), the redemption
returned an empty 403 and the user silently bounced back to the login
page.
- Add RequireAnyLoginMethod and gate /login-by-code on
magic-link OR sso OR social
- Show a toast on failed code redemption instead of only logging
to console