From 5f916461ac687f8394046b14ca7fb354d8c5e973 Mon Sep 17 00:00:00 2001
From: Davide Scaini <davide.scaini@alumni.cern>
Date: Wed, 3 Jun 2026 21:23:49 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20logout=20loop=20=E2=80=94=20authUrl=20wa?=
 =?UTF-8?q?s=20empty=20in=20user-widget=20script=20due=20to=20Astro=205=20?=
 =?UTF-8?q?define:vars=20behaviour;=20read=20from=20window.=5F=5FbincioAut?=
 =?UTF-8?q?hUrl=20instead?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 site/src/layouts/Base.astro | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/site/src/layouts/Base.astro b/site/src/layouts/Base.astro
index bf1d2de..ab46728 100644
--- a/site/src/layouts/Base.astro
+++ b/site/src/layouts/Base.astro
@@ -101,6 +101,7 @@ try {
   {instancePrivate && !isPublicPage && (
     <style is:inline>[data-auth-pending]{visibility:hidden}</style>
     <script is:inline define:vars={{ authUrl }}>
+      window.__bincioAuthUrl = authUrl;
       fetch('/api/me', { credentials: 'include' })
         .then(r => {
           if (r.status === 401 || r.status === 404) {
@@ -590,7 +591,8 @@ try {
 
   <!-- User widget: only needed for multi-user (single-user nav links are static) -->
   {!singleHandle && (
-    <script define:vars={{ baseUrl, authUrl }}>
+    <script define:vars={{ baseUrl }}>
+      const authUrl: string = (window as any).__bincioAuthUrl ?? '';
       (async () => {
         try {
           const r = await fetch('/api/me', { credentials: 'include' });
@@ -732,6 +734,7 @@ try {
 
   {editEnabled && (
     <script define:vars={{ editUrl, baseUrl }}>
+      const authUrl: string = (window as any).__bincioAuthUrl ?? '';
       const modal         = document.getElementById('upload-modal');
       const openBtn       = document.getElementById('upload-btn');
       const closeBtn      = document.getElementById('upload-close');