Archived
austin
8a489409fd
Post-login landed on the home page. Spring only remembers the pre-login location when it BOUNCES you off a protected page, but every route here is public — the SPA sends you to the identity provider itself — so nothing is saved and login defaults to '/'. AuthProvider now stashes the current path in sessionStorage before the redirect and navigates back once /api/me confirms the session. sessionStorage, not a query parameter: it survives the redirect chain, stays in this tab, and cannot be pointed at another site. Sign-in is only ever triggered from an /admin route, so that is exactly where the reader is returned. Also merges the motion 12.42.2 bump, which had stayed open on its own PR.