Repository navigation

feat(cli): redesign the OAuth login callback page, and fix the seven defects around it - #820

Open

MisonL wants to merge 18 commits into

crafter-station:mainfrom

MisonL:feat/cli-auth-callback-page

Open

feat(cli): redesign the OAuth login callback page, and fix the seven defects around it#820
MisonL wants to merge 18 commits into
crafter-station:mainfrom
MisonL:feat/cli-auth-callback-page

Commits on Oct 9, 2026
- feat(cli): redesign the OAuth callback page and defer its response
  MisonL
  committed
  c2dd13b
- fix(cli): bound the token calls, and stop reporting a stale session
  MisonL
  committed
  7c9791b
- fix(cli): keep the callback port open so a late reader sees the timeout page
  MisonL
  committed
  d7b26e3
- fix(cli): require the expected state before a callback may end a login
  
  MisonL
  and
  claude
  committed
  3d782f3
- fix(cli): only let the button point at an http or https origin
  
  MisonL
  and
  claude
  committed
  6a87622
- fix(cli): send the page-security headers on every reply
  
  MisonL
  and
  claude
  committed
  66f46f5
- test(cli): cover the request deadline on the token and userinfo calls
  
  MisonL
  and
  claude
  committed
  cf2e29e
- docs(cli): correct the stated reason for not reusing the app CSP
  
  MisonL
  and
  claude
  committed
  43a1911
- fix(cli): keep the detail line, and drop the error page's dead CTA copy
  
  MisonL
  and
  claude
  committed
  9a72f79
- fix(cli): answer a malformed request target instead of crashing
  
  MisonL
  and
  claude
  committed
  471e73c
- test(cli): stop a slow machine from failing the malformed-target case
  
  MisonL
  and
  claude
  committed
  d052fb6
- fix(cli): answer a callback that lands after the login finished
  
  MisonL
  and
  claude
  committed
  30abca0
- test(cli): drive a hostile value through the JSON escape
  
  MisonL
  and
  claude
  committed
  a9fa199
- test(cli): assert the deadline is bounded, not merely present
  
  MisonL
  and
  claude
  committed
  abaaa6d
- feat(cli): set the callback page in the site's own type
  
  MisonL
  and
  claude
  committed
  b211f82
- docs(cli): record why the callback page follows the OS theme
  
  MisonL
  and
  claude
  committed
  69566f8
- docs(cli): note the one diff font regeneration cannot avoid
  
  MisonL
  and
  claude
  committed
  6e13f81
- fix(cli): make the late-callback test prove its connection was accepted
  
  MisonL
  and
  claude
  committed
  b8f4326

Commits

Commits on Oct 9, 2026