Solves the OIDC-only bootstrap lockout (admin can't reach the in-app OIDC settings page when password login is disabled and OIDC is unset). - Frontend image entrypoint injects /runtime-config.js from the deploy-time HARBORFORGE_OIDC_ONLY env so the SPA knows the mode before the backend exists. - Setup wizard gains an "OIDC" step (between Admin and Backend): required when OIDC-only (incl. admin's OIDC subject so the bootstrap admin can sign in), optional otherwise; written into harborforge.json. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
17 lines
568 B
HTML
17 lines
568 B
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<link rel="icon" type="image/svg+xml" href="/vite.svg" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<title>HarborForge</title>
|
|
</head>
|
|
<body>
|
|
<div id="root"></div>
|
|
<!-- Runtime config injected by the container entrypoint (deploy-time
|
|
HARBORFORGE_OIDC_ONLY). Absent in dev → app falls back to /auth/config. -->
|
|
<script src="/runtime-config.js"></script>
|
|
<script type="module" src="/src/main.tsx"></script>
|
|
</body>
|
|
</html>
|