Use 302 or 303 for oidc redirects

[lovasoa]

Change OIDC auth redirects to use HTTP 303 (SeeOther) instead of 307 (TemporaryRedirect).

This ensures that POST requests are converted to GET requests during the redirect process, which is the standard and expected behavior for OIDC authentication flows. HTTP 307 preserves the original POST method and body, which is not suitable for these redirects.

---

 

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}

[lovasoa]

@cursoragent briefly describe the change and the bug it fixes in the changelog for v0.40

[cursor]

Added a note under 0.40.0 (unreleased) in CHANGELOG.md explaining that OIDC login redirects now return HTTP 303 so POST submissions flip to GET before hitting the identity provider, resolving the previous 307 behavior that kept the POST method/body and broke standard OIDC flows.

---

 

_{Learn more about Cursor Agents}