kolaente 08f426fcd5 fix(auth): don't auto-redirect to the OIDC provider when the login URL must stay copyable
The single-provider auto-redirect added in 18ee92f2 fires on every visit to
/login, including the two cases where the login page has to stay put:

- A native client's /oauth/authorize URL is parked in the login hash so it can
  be copied into the browser the user is actually signed in to (#2654). The
  auto-redirect replaced that URL with the provider's before it could be
  copied. Copying the provider URL instead does not work either, because the
  OIDC state lives in the originating browser's localStorage, so finishing the
  flow elsewhere fails the state check.
- Inside the Electron window, login is handed off to the system browser by
  DesktopLogin. Redirecting to the provider in-window stranded the user there.

Move the decision into getAutoRedirectProvider() and cover it with unit tests.

Fixes #3473
2026-08-18 12:17:39 +02:00
2026-07-19 12:58:41 +02:00
2026-08-04 00:24:53 +02:00
2026-08-04 13:42:43 +02:00

Build Status License: AGPL-3.0-or-later Install Docker Pulls OpenAPI Docs

Vikunja

The task manager you actually own.

If Vikunja is useful to you, please consider supporting the project. You can buy a coffee, sponsor on GitHub or buy a sticker pack. We're also offering a hosted version of Vikunja if you want a hassle-free solution for yourself or your team. If you or your company needs admin panel, audit logs or time tracking, check out Vikunja Pro.

Note

For the development of Vikunja, we're using LLM-Assisted coding tools in various parts of the codebase. Most contributions made @tink-bot are built that way.

Table of contents

Security Reports

If you find any security-related issues you don't want to disclose publicly, please use the contact information on our website.

Features

See the features page on our website for a more exhaustive list or try it on try.vikunja.io!

Docs

All docs can be found on the Vikunja home page.

Roadmap

See the roadmap (hosted on Vikunja!) for more!

Contributing

Please check out the contribution guidelines on the website.

License

Most of this repository is licensed under AGPL3.0orlater. The contents of desktop/ are licensed under GPL3.0orlater.

Unsplash Images

Background images from Unsplash are distributed under the Unsplash License. The license requires giving credit to the photographer and Unsplash. See Unsplashs terms for more information.

S
Description
No description provided
Readme AGPL-3.0
1.3 GiB
Latest
2026-08-04 06:42:44 -05:00
Languages
Go 50.5%
JavaScript 30.3%
TypeScript 10%
Vue 8.5%
SCSS 0.3%
Other 0.2%