Provider-only sign-in mode: storefront and panel login pages, My account, sign-out at the provider by KrzysztofPajak · Pull Request #908 · grandnode/grandnode2

Storefront: provider-only sign-in sends login, registration and password recovery to the identity provider

KrzysztofPajak

committed

75a6d25

Panels: provider-only sign-in redirects the login pages; the Admin password form stays for break-glass accounts

KrzysztofPajak

committed

0eee4c6

Panels: a signed-in account without panel access gets a sign-out link instead of a redirect loop through the provider

KrzysztofPajak

committed

91fe05a

Panels: the signed-in-without-access notice signs out through the storefront logout

KrzysztofPajak

committed

7c0b00a

My account in provider-only mode: e-mail, password, two-factor and the provider connection are managed by the identity provider

KrzysztofPajak

committed

0545aae

Sign-out in provider-only mode also ends the session at the identity provider when a provider exposes it

KrzysztofPajak

committed

c8f3f51

Sign-out: accept only absolute http(s) provider URLs; drop the unused authentication service from the panel home controllers

KrzysztofPajak

committed

c889b46

Admin login: ?password=1 opens the break-glass password form (the query value now binds as text: 1 or true)

KrzysztofPajak

committed

61c8fd2

Storefront login in provider-only mode: a signed-in account sent to /login gets a sign-out link instead of a loop through the provider

KrzysztofPajak

committed

895fe1d

Panels: the signed-in notice on the login page fits staff who do have access and the break-glass password form

KrzysztofPajak

committed

c069184

IGrandAuthenticationService.HasOidcSession has a default (no provider session), so existing implementations still build

KrzysztofPajak

committed

3251299

Provider-only sign-out: a cross-site navigation to the logout URL signs out locally only, never at the identity provider

KrzysztofPajak

committed

e25eae9

Provider-only AutoProvision: /register goes to the identity provider, also when the store's registration is disabled

KrzysztofPajak

committed

297b569

Navigation Menu

Repository navigation

Provider-only sign-in mode: storefront and panel login pages, My account, sign-out at the provider - #908

Provider-only sign-in mode: storefront and panel login pages, My account, sign-out at the provider#908
KrzysztofPajak merged 13 commits into
developfrom
feature/oidc-provider-only-web

Commits on Oct 14, 2026

Storefront: provider-only sign-in sends login, registration and password recovery to the identity provider

Panels: provider-only sign-in redirects the login pages; the Admin password form stays for break-glass accounts

Panels: a signed-in account without panel access gets a sign-out link instead of a redirect loop through the provider

Panels: the signed-in-without-access notice signs out through the storefront logout

My account in provider-only mode: e-mail, password, two-factor and the provider connection are managed by the identity provider

Sign-out in provider-only mode also ends the session at the identity provider when a provider exposes it

Sign-out: accept only absolute http(s) provider URLs; drop the unused authentication service from the panel home controllers

Admin login: ?password=1 opens the break-glass password form (the query value now binds as text: 1 or true)

Storefront login in provider-only mode: a signed-in account sent to /login gets a sign-out link instead of a loop through the provider

Panels: the signed-in notice on the login page fits staff who do have access and the break-glass password form

IGrandAuthenticationService.HasOidcSession has a default (no provider session), so existing implementations still build

Provider-only sign-out: a cross-site navigation to the logout URL signs out locally only, never at the identity provider

Provider-only AutoProvision: /register goes to the identity provider, also when the store's registration is disabled