feat(reui): update ReUI components and documentation

- Added new OIDC configuration options in `.env.example`.
- Expanded documentation in `AGENTS.md` to include OIDC endpoints and admin UI.
- Updated ReUI skill version and component count from 17 to 20 across various documentation files.
- Enhanced `README.md` and other related files to reflect the new component structure and usage guidelines.

Co-authored-by: Cursor <[email protected]>

apps/web/src/components/portal-login-form.tsx

@@ -2,7 +2,7 @@ import { useState, type FormEvent } from 'react'
 import { useNavigate, useSearch } from '@tanstack/react-router'
 import { useQueryClient } from '@tanstack/react-query'
 import { EyeIcon, EyeOffIcon } from 'lucide-react'
-import { buildSsoRedirectUrl, isReturnToAllowed } from '@authportal/shared'
+import { buildSsoRedirectUrl, isPortalOidcAuthorizeUrl, isReturnToAllowed } from '@authportal/shared'
 import { Button } from '@authportal/ui/components/button'
 import { Field, FieldGroup, FieldLabel } from '@authportal/ui/components/field'
 import { Input } from '@authportal/ui/components/input'
@@ -17,7 +17,7 @@ import {
   AlertDescription,
   AlertTitle,
 } from '@/components/reui/alert'
-import { ensureReturnToAllowlist, setToken } from '@/lib/auth'
+import { ensureAuthConfig, setToken } from '@/lib/auth'
 import { ApiError } from '@/lib/api-client'
 import { login, meQueryKey } from '@/queries/auth'
 import { AuthLogo } from '@/components/blocks/auth-18/components/auth-logo'
@@ -43,8 +43,12 @@ export function PortalLoginForm() {
       setToken(res.access_token)
       queryClient.setQueryData(meQueryKey, res.user)
 
-      const allowlist = await ensureReturnToAllowlist()
+      const { returnToAllowlist: allowlist, issuer } = await ensureAuthConfig()
       if (returnTo && isReturnToAllowed(returnTo, allowlist)) {
+        if (isPortalOidcAuthorizeUrl(returnTo, issuer)) {
+          window.location.href = returnTo
+          return
+        }
         window.location.href = buildSsoRedirectUrl(
           returnTo,
           res.access_token,