a4394e6a25
- Save PKCE params to sessionStorage.redirectState on 401 instead of overwriting tokenSet - Persist userData in sessionStorage after OIDC callback for later hydration - Hydrate Redux (tokens + userData) from sessionStorage on app start to avoid forced re-login - Keep SPA single route '/' behavior unchanged; only improves auth robustness Files: src/utils/apiUtils.ts, src/features/User/LoginCallback.tsx, src/features/User/HandleLogin.tsx