From 1289e2476c2d0f01a1cae91f623acd67043e0b9d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Br=C3=BCckner?= <j.brueckner@airitsystems.de>
Date: Thu, 4 Jun 2026 14:09:55 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20restore=20configurable=20redirect=20URI?=
 =?UTF-8?q?=20field=20=E2=80=93=20required=20when=20APP=5FURL=20is=20not?=
 =?UTF-8?q?=20set?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/Settings.tsx | 13 +++++++++++++
 src/vite-env.d.ts           |  1 +
 2 files changed, 14 insertions(+)
 create mode 100644 src/vite-env.d.ts

diff --git a/src/components/Settings.tsx b/src/components/Settings.tsx
index cafeba1..fd48d80 100644
--- a/src/components/Settings.tsx
+++ b/src/components/Settings.tsx
@@ -355,6 +355,19 @@ export default function Settings({ currentUser: _currentUser }: SettingsProps) {
               onToggleShow={() => setShowAzureSecret(v => !v)}
             />
           </FieldRow>
+          <div className="sm:col-span-2">
+            <FieldRow
+              label="Redirect URI"
+              hint="Must match exactly what is registered in Azure Portal → App registrations → Authentication. Leave blank to auto-derive from APP_URL."
+            >
+              <Input
+                value={azureRedirectUri}
+                onChange={setAzureRedirectUri}
+                placeholder={effectiveRedirectUri || 'https://…/api/auth/azure/callback'}
+                monospace
+              />
+            </FieldRow>
+          </div>
           <FieldRow
             label="Allowed Group"
             hint="Object ID of an Azure AD group. If set, only members of this group can sign in."
diff --git a/src/vite-env.d.ts b/src/vite-env.d.ts
new file mode 100644
index 0000000..11f02fe
--- /dev/null
+++ b/src/vite-env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />