- Runtime container env injected by docker/entrypoint.sh -> runtime-env.js
(loaded before the bundle); src/lib/runtime-env.ts reads it.
FABRIC_OIDC_ONLY hides the password form; FIX_TO_CENTER pins the
Center base and hides its input. Dockerfile ENTRYPOINT + ENV defaults.
- LoginPage: 'Sign in with SSO' when /auth/oidc/status enabled; password
form gated by OIDC_ONLY; center input gated by FIX_TO_CENTER.
- /oidc route (OidcCallback) redeems the fragment ticket via
/auth/oidc/exchange and adopts the session (AuthContext.adoptSession).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hzhang
92d3b4dc1b