Files
gh-christianlouis-docuelevate/tests
copilot-swe-agent[bot] 3aa5364e0c fix(auth): return 401 for API paths in require_login to prevent wrong post-login redirect
The common.js fetch('/api/auth/whoami') probe on every page load was
overwriting the redirect_after_login session key with the API endpoint URL.
After login, users were sent to the JSON endpoint instead of the original page.

Fix: require_login now returns HTTP 401 for any /api/* path, consistent
with REST conventions, and never stores API URLs as the post-login redirect.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-08 09:51:23 +00:00
..
2026-02-23 09:33:48 +00:00
2026-02-14 00:16:21 +00:00
2026-02-14 00:16:21 +00:00
2026-02-14 00:16:21 +00:00
2026-02-22 15:25:48 +00:00
2026-02-14 00:16:21 +00:00