From 37de64031771f58978711db48f8aedadd79de150 Mon Sep 17 00:00:00 2001
From: Colin Dawson <me@cjdawson.com>
Date: Tue, 17 Mar 2026 21:10:24 +0000
Subject: [PATCH] Change the redirect behaviour so that the the asp.net
 applcation doesn't attempt to do naughty cors things.

---
 e-suite.API/eSuite.API/Controllers/AccountController.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/e-suite.API/eSuite.API/Controllers/AccountController.cs b/e-suite.API/eSuite.API/Controllers/AccountController.cs
index f9ba3c0..b50932d 100644
--- a/e-suite.API/eSuite.API/Controllers/AccountController.cs
+++ b/e-suite.API/eSuite.API/Controllers/AccountController.cs
@@ -71,7 +71,7 @@ public class AccountController : ESuiteController
         {
             await _cookieManager.DeleteSsoIdCookie(Response);
             var url = await _singleSignOn.StartSingleSignOn(ssoId.Value, cancellationToken);
-            return Redirect(url);
+            return Ok(new { redirectTo = url });
         }
 
         login ??= new Login();