Ronni Baslund
65a68ee126
ci / typecheck (map[dir:apps/booking name:booking]) (push) Has been cancelled
ci / typecheck (map[dir:apps/portal name:portal]) (push) Has been cancelled
ci / typecheck (map[dir:apps/website name:website]) (push) Has been cancelled
ci / typecheck (map[dir:services/platform-api name:platform-api]) (push) Has been cancelled
ci / test (push) Has been cancelled
- Request offline_access for the ocis-web client (WEB_OIDC_SCOPE) so the web SPA gets a refresh token and renews silently instead of dropping the session (no surprise logouts; the "no permission to upload" symptom was the expired-token state). The ocis-provider already has the offline_access scope mapping; its access-token validity is bumped 5m → 1h (refresh 30d). - Flatten the remaining brand gradients in index.html: the active sidebar highlight (.oc-background-primary-gradient) and primary buttons (.oc-button-primary-filled) are now solid carbon (text stays light/readable). - Document the offline_access + token-validity provider settings in AUTHENTIK-SETUP.md (the provider lives in Authentik's DB, not git).