tegwick 50799938db fix(openbao-ui): handle OIDC callback without Ember popup flow ...

OpenBao's Ember UI expects OIDC to complete in a popup and postMessage to
window.opener. The standalone KeyCape login uses a full-page redirect, so the
callback now exchanges the authorization code directly, persists the UI token
in localStorage, and redirects into the vault UI. Unauthenticated /ui/ loads
also redirect to the standalone login page to avoid ?with= bounce loops.

2026-06-19 21:18:34 +02:00

..

openbao-apply-initial-config.sh

Configure OpenBao file audit declaratively

2026-06-01 22:12:23 +02:00

openbao-apply-ssh-engine.sh

fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers

2026-06-18 01:18:56 +02:00

openbao-tune-auth-listing.sh

Fix OpenBao login falling back to token auth

2026-06-19 21:04:31 +02:00

openbao-ui-overlay-apply.sh

fix(openbao-ui): handle OIDC callback without Ember popup flow

2026-06-19 21:18:34 +02:00

openbao-validate-emergency-drill-evidence.sh

Reject placeholder OpenBao drill evidence

2026-06-02 02:02:09 +02:00

openbao-validate-restore-evidence.sh

Reject placeholder OpenBao drill evidence

2026-06-02 02:02:09 +02:00

openbao-verify-authenticated.sh

feat(openbao): enable bao.coulomb.social ingress and Traefik middlewares

2026-06-18 01:23:02 +02:00

openbao-verify-login-overlay.sh

fix(openbao-ui): handle OIDC callback without Ember popup flow

2026-06-19 21:18:34 +02:00

openbao-verify-ssh-engine.sh

feat(openbao): add SSH engine automation for ops-warden signing

2026-06-18 01:06:43 +02:00

openbao-verify.sh

Configure OpenBao file audit declaratively

2026-06-01 22:12:23 +02:00