refactor(fe): replace route-based authorize views with store-driven rendering

src/frontend/src/lib/stores/authorization.store.ts

@@ -5,7 +5,7 @@ export type AuthorizationContext = {
 };
 
 export type Authorized = {
-  accountNumber: bigint | undefined;
+  accountNumber: Promise<bigint | undefined>;
 };
 
 const contextInternal = writable<AuthorizationContext | undefined>();
@@ -16,8 +16,10 @@ export const authorizationStore = {
   setContext: (effectiveOrigin: string): void => {
     contextInternal.set({ effectiveOrigin });
   },
-  /** Called by the UI when the user authorizes with a specific account. */
-  authorize: (accountNumber: bigint | undefined): void => {
+  /** Called by the UI when the user authorizes with a specific account.
+   *  Accepts a promise so the animation can start immediately while the
+   *  account number resolves asynchronously. */
+  authorize: (accountNumber: Promise<bigint | undefined>): void => {
     authorizedInternal.set({ accountNumber });
   },
   subscribe: contextInternal.subscribe,

src/frontend/src/lib/stores/channelHandlers/delegation.ts

@@ -70,11 +70,14 @@ export const handleDelegationRequest =
 
       // Authorization is the commit point — the user may switch identities
       // freely before this. Once authorized, the UI is no longer needed.
-      const { accountNumber } = await waitForStore(authorizedStore);
+      const authorized = await waitForStore(authorizedStore);
 
       // Read the identity *after* authorization so we capture whichever
       // identity the user settled on (they may have switched mid-flow).
-      const { identityNumber, actor } = await waitForStore(authenticationStore);
+      const [accountNumber, { identityNumber, actor }] = await Promise.all([
+        authorized.accountNumber,
+        waitForStore(authenticationStore),
+      ]);
 
       const sessionPublicKey = new Uint8Array(params.publicKey.toDer());
 

src/frontend/src/lib/utils/reroute.ts

@@ -15,10 +15,6 @@ export const reroute: Reroute = ({ url }) => {
   if (url.hash === "#authorize") {
     return get(DISCOVERABLE_PASSKEY_FLOW) ? "/authorize" : "/legacy/authorize";
   }
-  // Load direct authorization page instead if openid param is present
-  if (url.pathname === "/authorize" && url.searchParams.has("openid")) {
-    return `/init-openid-authorize`;
-  }
   if (url.pathname === "/") {
     return get(DISCOVERABLE_PASSKEY_FLOW) || building ? "/" : "/legacy";
   }