From 7a3f95667079100f4e404ea766faa27be975edd8 Mon Sep 17 00:00:00 2001
From: Helmut Merz <helmutm@cy55.de>
Date: Mon, 27 Oct 2025 18:31:41 +0100
Subject: [PATCH] fixes for OIDC authentication

---
 cco/member/auth.pt    | 5 +++--
 cco/member/browser.py | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/cco/member/auth.pt b/cco/member/auth.pt
index 18d1b54..c6355e7 100644
--- a/cco/member/auth.pt
+++ b/cco/member/auth.pt
@@ -3,14 +3,15 @@
 
 <metal:login define-macro="login_form"
              i18n:domain="cco.member"
-             tal:define="principal request/principal/id">
+             tal:define="principal request/principal/id;
+	   			   camefrom python:request.get('camefrom') or request.URL[-1]">
     <p style="color: Red"
        tal:condition="request/error_message|nothing"
        i18n:translate=""
        tal:content="request/error_message" />
     <h2 i18n:translate="title_login">Login</h2>
 	<p i18n:domain="loops"
-	   tal:condition="view/oidc_allowed">
+	   tal:condition="item/oidc_allowed">
 	  <a tal:attributes="href string:/@@auth_login?camefrom=$camefrom"
          i18n:translate="login-with-oidc">Login with OpenID Connect (Zitadel)</a>
 	</p>
diff --git a/cco/member/browser.py b/cco/member/browser.py
index 86deb4f..f08e6b8 100644
--- a/cco/member/browser.py
+++ b/cco/member/browser.py
@@ -73,7 +73,7 @@ class LoginBase:
         return 'legacy'
 
     @Lazy
-    def oidc_Allowed(self):
+    def oidc_allowed(self):
         return self.authMethod in ('select', 'oidc')
 
     def authOidc(self):