Sso Callback
auth
Sso Callback
Handle the SSO callback after the IdP redirects back.
In production: validates SAML response / OIDC code, resolves or JIT-provisions the user, issues a CL-AT + CL-RT. Here we stub this: any non-error callback is resolved to the first seeded user of the workspace.
GET
Sso Callback