sso-clear returns 204 for iframe-based logout

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

infrastructure/oauth.py

@@ -132,11 +132,10 @@ def create_oauth_blueprint(app_name: str) -> Blueprint:
     @bp.get("/sso-clear")
     @bp.get("/sso-clear/")
     async def sso_clear():
-        """Clear local session, then redirect to next app in logout chain."""
+        """Clear local session. Called via hidden iframe from account logout."""
         qsession.pop(SESSION_USER_KEY, None)
         qsession.pop("cart_sid", None)
-        next_url = request.args.get("next", "/")
+        return "", 204
-        return redirect(next_url)
 
     @bp.post("/logout")
     @bp.post("/logout/")