From b63b9aa4bb7d6b24a7563aed80bd154cf79fdee4 Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Sun, 26 Apr 2026 19:38:15 +0200
Subject: [PATCH] fix(ui): drop OidcCallback ?local trap on login_required

---
 ui/src/auth/OidcCallback.tsx | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/ui/src/auth/OidcCallback.tsx b/ui/src/auth/OidcCallback.tsx
index 091a6438..e74bec4c 100644
--- a/ui/src/auth/OidcCallback.tsx
+++ b/ui/src/auth/OidcCallback.tsx
@@ -20,11 +20,6 @@ export function OidcCallback() {
     const errorParam = params.get('error');
 
     if (errorParam) {
-      // prompt=none failed — no session, fall back to login form
-      if (errorParam === 'login_required' || errorParam === 'interaction_required') {
-        window.location.replace(`${config.basePath}login?local`);
-        return;
-      }
       // consent_required — retry without prompt=none so user can grant scopes
       if (errorParam === 'consent_required' && !sessionStorage.getItem('oidc-consent-retry')) {
         sessionStorage.setItem('oidc-consent-retry', '1');
@@ -43,7 +38,7 @@ export function OidcCallback() {
             window.location.href = `${data.authorizationEndpoint}?${p}`;
           }
         }).catch(() => {
-          window.location.replace(`${config.basePath}login?local`);
+          useAuthStore.setState({ error: 'OIDC consent retry failed.', loading: false });
         });
         return;
       }
@@ -77,7 +72,7 @@ export function OidcCallback() {
           {error && (
             <>
               <Alert variant="error">{error}</Alert>
-              <Button variant="secondary" onClick={() => navigate('/login?local')} className={styles.backButton}>
+              <Button variant="secondary" onClick={() => navigate('/login')} className={styles.backButton}>
                 Back to Login
               </Button>
             </>