auth fixes

apps/web/src/auth/oidc.ts

@@ -1,4 +1,3 @@
-// PKCE utilities for OIDC flow
 function generateRandomString(length: number): string {
   const possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
   let text = ''
@@ -34,6 +33,18 @@ export function clearPKCE(): void {
   sessionStorage.removeItem('pkce_verifier')
 }
 
+export function storeState(state: string): void {
+  sessionStorage.setItem('oidc_state', state)
+}
+
+export function getState(): string | null {
+  return sessionStorage.getItem('oidc_state')
+}
+
+export function clearState(): void {
+  sessionStorage.removeItem('oidc_state')
+}
+
 export function storeToken(token: string): void {
   localStorage.setItem('access_token', token)
 }