Fix OIDC configuration structure - remove duplicate runtimeConfig and use proper callback URL from env var

nuxt.config.ts

@@ -106,6 +106,22 @@ export default defineNuxtConfig({
     }
   },
   runtimeConfig: {
+    openidConnect: {
+      op: {
+        issuer: process.env.KEYCLOAK_ISSUER || "https://auth.portnimara.dev/realms/client-portal",
+        clientId: process.env.KEYCLOAK_CLIENT_ID || "client-portal",
+        clientSecret: process.env.KEYCLOAK_CLIENT_SECRET || "",
+        callbackUrl: process.env.KEYCLOAK_CALLBACK_URL || "https://client.portnimara.dev/auth/callback",
+      },
+      config: {
+        cookieFlags: {
+          access_token: {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === 'production',
+          }
+        }
+      }
+    },
     nocodb: {
       url: "",
       token: "",
@@ -130,7 +146,7 @@ export default defineNuxtConfig({
       issuer: process.env.KEYCLOAK_ISSUER || "https://auth.portnimara.dev/realms/client-portal",
       clientId: process.env.KEYCLOAK_CLIENT_ID || "client-portal",
       clientSecret: process.env.KEYCLOAK_CLIENT_SECRET || "",
-      callbackUrl: "/auth/callback", // Use path only, not full URL
+      callbackUrl: process.env.KEYCLOAK_CALLBACK_URL || "https://client.portnimara.dev/auth/callback",
       scope: ["openid", "email", "profile"],
     },
     config: {