Skip to content

Handle expired sessions and keep guests-only pages from logged-in users - #7

Merged
mtiluk merged 1 commit into
mainfrom
auth
Oct 1, 2026
Merged

mtiluk merged 1 commit into
mainfrom
auth

Conversation

@mtiluk

@mtiluk mtiluk commented Oct 1, 2026

Copy link
Copy Markdown
Owner
  • Login maps 401 to "Invalid email or password" and only requires a password to be present (frontend and API), instead of min length 8
  • Global QueryCache/MutationCache handler: a 401 while a user is cached clears the cached /me and re-runs route guards, redirecting to /login
  • Move login and register under a _guest layout that redirects logged-in users to /client; logout stays reachable

- Login maps 401 to "Invalid email or password" and only requires a
  password to be present (frontend and API), instead of min length 8
- Global QueryCache/MutationCache handler: a 401 while a user is cached
  clears the cached /me and re-runs route guards, redirecting to /login
- Move login and register under a _guest layout that redirects
  logged-in users to /client; logout stays reachable
@mtiluk
mtiluk merged commit 573c0da into main Oct 1, 2026
2 checks passed
@mtiluk
mtiluk deleted the auth branch October 1, 2026 01:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant