From 0d82304cf0ab97d3b74e865e962a25ea7665c0c2 Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Sat, 14 Mar 2026 14:33:14 +0100
Subject: [PATCH] Fix SPA forward for /oidc/callback and /admin/* routes

The SPA catch-all was missing these paths, causing 404 when Authentik
redirected back to /oidc/callback after authentication.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .../com/cameleer3/server/app/web/SpaForwardController.java    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/web/SpaForwardController.java b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/web/SpaForwardController.java
index 9e07cc8f..4b7e674a 100644
--- a/cameleer3-server-app/src/main/java/com/cameleer3/server/app/web/SpaForwardController.java
+++ b/cameleer3-server-app/src/main/java/com/cameleer3/server/app/web/SpaForwardController.java
@@ -16,7 +16,9 @@ public class SpaForwardController {
     @GetMapping(value = {
             "/login",
             "/executions",
-            "/executions/{path:[^\\.]*}"
+            "/executions/{path:[^\\.]*}",
+            "/oidc/callback",
+            "/admin/{path:[^\\.]*}"
     })
     public String forward() {
         return "forward:/index.html";