feat: force Gitea ré-auth en mode link (_force timestamp)

Ajout d'un paramètre _force avec timestamp dans l'URL d'autorisation quand mode=link, pour forcer Gitea à ne pas utiliser le cache. NOTE: Gitea ne supporte pas prompt=login. Si auto-approve persiste, il faudra ajouter un champ token manuel en fallback.
2026-07-13 22:18:31 -04:00
parent 06bf016392
commit f25c8ebaf0
2 changed files with 16 additions and 13 deletions
@@ -121,7 +121,7 @@ async def login(request: Request, provider: str = Query("gitea")):
    # Dynamic redirect URI based on incoming Host header
    host = request.headers.get("host", "localhost:8080")
    dynamic_redirect_uri = f"http://{host}/auth/callback"
-    auth_url = oauth_provider.get_authorize_url(state, redirect_uri=dynamic_redirect_uri)
+    auth_url = oauth_provider.get_authorize_url(state, redirect_uri=dynamic_redirect_uri, force_login=(mode == "link"))
    return RedirectResponse(url=auth_url, status_code=302)