0.5.584

Signing in from the desktop opened a page the identity provider refused. It asked to be sent back to a local address, and a provider accepts exactly one address — ours, on the server. The desktop now signs in through the flow the provider actually allows; the code that makes it work travels in the link and is never shown or typed.

A stored sign-in that the server has stopped honouring now says so at startup instead of showing an account name behind which every action quietly failed. Sign out works from the account view — on the desktop it had been doing nothing at all.

The sign-in dialog no longer prints a code and offers to open a page where you could type it. Both of our clients can complete the round trip themselves.