From 9f4a3b0050ae4a7bdb442b5119cfd6ce2bf1356b Mon Sep 17 00:00:00 2001
From: Chris <wtc.justin82@gmail.com>
Date: Wed, 1 Apr 2026 00:41:38 +0800
Subject: [PATCH] feat(idp): add keycloak-first support with authentik fallback

---
 src/api/auth.js         | 3 ++-
 src/pages/LoginPage.vue | 4 +++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/api/auth.js b/src/api/auth.js
index d0f7344..0953375 100644
--- a/src/api/auth.js
+++ b/src/api/auth.js
@@ -5,7 +5,8 @@ export const getOidcAuthorizeUrl = (redirectUri, options = {}) =>
     params: {
       redirect_uri: redirectUri,
       login_hint: options.loginHint || undefined,
-      prompt: options.prompt || undefined
+      prompt: options.prompt || undefined,
+      idp_hint: options.idpHint || undefined
     }
   })
 
diff --git a/src/pages/LoginPage.vue b/src/pages/LoginPage.vue
index 6fe9630..718f34d 100644
--- a/src/pages/LoginPage.vue
+++ b/src/pages/LoginPage.vue
@@ -97,8 +97,10 @@ async function handleOidcLogin() {
   oidcLoading.value = true
   error.value = ''
   try {
+    const googleIdpHint = import.meta.env.VITE_OIDC_IDP_HINT_GOOGLE || undefined
     await redirectToOidc({
-      prompt: 'select_account'
+      prompt: 'select_account',
+      idpHint: googleIdpHint
     })
   } catch (err) {
     error.value = err.message || '登入失敗，請稍後再試'