From d5404127d66d0821ca938f4221429bd1677e798f Mon Sep 17 00:00:00 2001
From: wucm667 <stevenwucongmin@gmail.com>
Date: Fri, 1 May 2026 09:18:13 +0800
Subject: [PATCH 1/3] fix(oidc): report provider initialization status to
 prevent auto-redirect failure

When the OIDC issuer (e.g. Authentik) is not reachable at startup, the
provider initialization fails silently and ctrl.oidcProvider remains nil.
However, the status endpoint still reports oidc.enabled=true, causing the
frontend to auto-redirect to a broken /api/v1/users/login/oidc endpoint
which returns HTTP 500 "OIDC provider not available".

Add an "initialized" field to OIDCStatus that reflects whether the provider
was actually created successfully. The frontend now checks this field before
auto-redirecting or showing the OIDC login button.

Fixes sysadminsmedia/homebox#1471

Signed-off-by: wucm667 <stevenwucongmin@gmail.com>
---
 backend/app/api/handlers/v1/controller.go |  2 ++
 frontend/lib/api/types/data-contracts.ts  |  1 +
 frontend/pages/index.vue                  | 10 ++++++++--
 3 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/backend/app/api/handlers/v1/controller.go b/backend/app/api/handlers/v1/controller.go
index f9c5d3af3..f7e18ce4b 100644
--- a/backend/app/api/handlers/v1/controller.go
+++ b/backend/app/api/handlers/v1/controller.go
@@ -106,6 +106,7 @@ type (
 		ButtonText   string `json:"buttonText,omitempty"`
 		AutoRedirect bool   `json:"autoRedirect,omitempty"`
 		AllowLocal   bool   `json:"allowLocal"`
+		Initialized  bool   `json:"initialized"`
 	}
 
 	TelemetryStatus struct {
@@ -166,6 +167,7 @@ func (ctrl *V1Controller) HandleBase(ready ReadyFunc, build Build) errchain.Hand
 				ButtonText:   ctrl.config.OIDC.ButtonText,
 				AutoRedirect: ctrl.config.OIDC.AutoRedirect,
 				AllowLocal:   ctrl.config.Options.AllowLocalLogin,
+				Initialized:  ctrl.oidcProvider != nil,
 			},
 			Telemetry: TelemetryStatus{
 				Enabled: ctrl.config.Otel.Enabled,
diff --git a/frontend/lib/api/types/data-contracts.ts b/frontend/lib/api/types/data-contracts.ts
index 1a869f988..35605dcc2 100644
--- a/frontend/lib/api/types/data-contracts.ts
+++ b/frontend/lib/api/types/data-contracts.ts
@@ -1218,6 +1218,7 @@ export interface OIDCStatus {
   autoRedirect: boolean;
   buttonText: string;
   enabled: boolean;
+  initialized: boolean;
 }
 
 export interface TelemetryStatus {
diff --git a/frontend/pages/index.vue b/frontend/pages/index.vue
index 2044badfb..9303520e7 100644
--- a/frontend/pages/index.vue
+++ b/frontend/pages/index.vue
@@ -73,7 +73,13 @@
     }
 
     // Auto-redirect to OIDC if autoRedirect is enabled, but not if there's an OIDC initialization error
-    if (status?.oidc?.enabled && status?.oidc?.autoRedirect && !oidcError.value && !shownErrorMessage.value) {
+    if (
+      status?.oidc?.enabled &&
+      status?.oidc?.initialized &&
+      status?.oidc?.autoRedirect &&
+      !oidcError.value &&
+      !shownErrorMessage.value
+    ) {
       loginWithOIDC();
     }
   });
@@ -384,7 +390,7 @@
                   </div>
 
                   <Button
-                    v-if="status?.oidc?.enabled"
+                    v-if="status?.oidc?.enabled && status?.oidc?.initialized"
                     type="button"
                     variant="outline"
                     class="w-full"

From f07088d047836146be74717ac1263126f693158c Mon Sep 17 00:00:00 2001
From: wucm667 <stevenwucongmin@gmail.com>
Date: Fri, 1 May 2026 13:08:03 +0800
Subject: [PATCH 2/3] ci: fix lint job missing Node.js LTS setup

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/partial-frontend.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/partial-frontend.yaml b/.github/workflows/partial-frontend.yaml
index 43722d6ef..f0170c7b1 100644
--- a/.github/workflows/partial-frontend.yaml
+++ b/.github/workflows/partial-frontend.yaml
@@ -19,6 +19,10 @@ jobs:
         with:
           fetch-depth: 0
 
+      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d799
+        with:
+          node-version: lts/*
+
       - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061
         with:
           version: 10

From 42e73141b8f1b98c224607d1ca22908b4ac9c57a Mon Sep 17 00:00:00 2001
From: wucm667 <stevenwucongmin@gmail.com>
Date: Fri, 1 May 2026 17:38:23 +0800
Subject: [PATCH 3/3] ci: fix invalid setup-node action SHA

---
 .github/workflows/partial-frontend.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/partial-frontend.yaml b/.github/workflows/partial-frontend.yaml
index f0170c7b1..79788120f 100644
--- a/.github/workflows/partial-frontend.yaml
+++ b/.github/workflows/partial-frontend.yaml
@@ -19,7 +19,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d799
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
         with:
           node-version: lts/*