From 07ff576eb6a304b1ec4d823d492959afd0f0de3a Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Mon, 6 Apr 2026 17:37:35 +0200
Subject: [PATCH] fix: prevent SSO re-login loop on OIDC logout

Logout now always redirects to /login?local, either via OIDC
end_session or as a direct fallback, preventing prompt=none
auto-redirect from logging the user back in immediately.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 ui/src/auth/auth-store.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ui/src/auth/auth-store.ts b/ui/src/auth/auth-store.ts
index 615b5e46..8f08861b 100644
--- a/ui/src/auth/auth-store.ts
+++ b/ui/src/auth/auth-store.ts
@@ -161,6 +161,8 @@ export const useAuthStore = create<AuthState>((set, get) => ({
         post_logout_redirect_uri: postLogoutRedirect,
       });
       window.location.href = `${endSessionEndpoint}?${params}`;
+    } else {
+      window.location.href = `${config.basePath}login?local`;
     }
   },
 }));