enter.html: Google + Microsoft sign-in #9

Merged

Cordy merged 1 commit from feat/sso-buttons into main

2026-08-24 00:10:33 +00:00

Cordy commented

2026-08-24 00:10:23 +00:00

Owner

Pairs with cairn-license-server #21 (merged).

"Continue with Google / Microsooft" buttons on the sign-in and register views, driven by GET /v1/oauth/providers — with no providers configured the page renders exactly as today (buttons stay hidden; fetch failure is silent).
Fragment handling ahead of the router: #oauth=<token>&email=… stores the session and forwards to account.html#/licenses; #oauth-error=<code> shows a plain-language message on the sign-in view (denied / state / exchange / unverified / exists).
Tokens only ever appear in URL fragments (browser-side, never logged).
Styling: existing .btn.ghost + inline provider marks; or with email divider; no new dependencies, zero-build intact.

Verified locally: both inline scripts pass node --check; 26 414 bytes.

Pairs with cairn-license-server #21 (merged). - "Continue with Google / Microsooft" buttons on the sign-in and register views, driven by `GET /v1/oauth/providers` — with no providers configured the page renders exactly as today (buttons stay hidden; fetch failure is silent). - Fragment handling ahead of the router: `#oauth=<token>&email=…` stores the session and forwards to `account.html#/licenses`; `#oauth-error=<code>` shows a plain-language message on the sign-in view (denied / state / exchange / unverified / exists). - Tokens only ever appear in URL fragments (browser-side, never logged). - Styling: existing `.btn.ghost` + inline provider marks; `or with email` divider; no new dependencies, zero-build intact. Verified locally: both inline scripts pass `node --check`; 26 414 bytes.

Cordy added 1 commit

2026-08-24 00:10:23 +00:00