- Replace popup OAuth with SDK authWithOAuth2 realtime channel (urlCallback)
so login works in Edge app mode without navigating the main window
- Remove manual redirect/sessionStorage OAuth flow that broke in Edge app mode
- Serve PocketBase config (URL, collection, provider) from server endpoint
backed by env vars instead of hardcoded localhost
- Fix /api/submit: target Notes collection with correct field mapping
(body_plain, body_html, title, type, email, Username, userId, job_note,
Job_Number) instead of Job_Info_Prod with wrong field names
- Remove localhost fallbacks from auth-module backend and frontend
- Create reusable auth-module/ with frontend and backend components
- Frontend: PocketBaseAuth class for OAuth2 login and token management
- Backend: GraphTokenManager and PocketBaseValidator for token operations
- Includes TypeScript types and comprehensive README
- No project-specific dependencies - ready to use in other projects
aewing