fix: backchannel logout react to session ID (simpler approach)

[michaelstingl]

Summary

Alternative, simpler approach to opencloud-eu/web#1969 for backchannel logout session ID matching.

Key difference: Instead of threading sessionId through the updateContext() / signInCallback() call chain (which forces signature changes across 13 files), this reads the session ID directly from the OIDC user profile inside UserManager.

Comparison

	PR opencloud-eu#1969	This approach
Changed files	13	9
Additions / Deletions	69 / 22	39 / 4
updateContext signature	Changed (breaking)	Unchanged
signInCallback signature	Changed	Unchanged
Embed API (postMessage)	Breaking change	Unchanged
accesssToken typo bug	Yes (line 384)	N/A
Dead code (getSessionId())	Yes (never called)	None

How it works

1. UserManager.updateContext() reads user.profile.sid from the stored OIDC user internally — no parameter needed
2. Session ID is stored in the authStore (Pinia)
3. SSE backchannel logout handler compares event sessionid against stored session
4. No sessionid in event → log out all clients (per OIDC Back-Channel Logout spec)
5. Matching sessionid → log out this client only

Files changed

• auth.ts — Add sessionId state to Pinia auth store
• userManager.ts — Read sid from OIDC profile internally (no signature change)
• types.ts — Add sessionid to SSE event schema, AuthStore to SSE options
• common.ts — Backchannel logout logic (session ID comparison)
• bootstrap.ts + index.ts — Pass authStore to SSE event listeners
• 3 test files — Add authStore to test mocks

Issues found in PR opencloud-eu#1969

1. Typo bug: event.data.accesssToken (3× "s") in authService.ts:384 — would be undefined at runtime
2. Dead code: getSessionId() method added to UserManager but never called
3. Breaking embed API: handleDelegatedTokenUpdate changes event.data from string to object

🤖 Generated with Claude Code

[github-actions]

Label error. Requires at least 1 of: Type:Bug, Type:Enhancement, Type:Feature, Type:Breaking-Change, Type:Test, Type:Documentation, Type:Maintenance, Type:Security, Type:Dependencies, Type:DevOps, dependencies. Found: