mirror of
https://github.com/OpenSquawk/OpenSquawk
synced 2026-08-01 22:26:04 +08:00
32f3998d6c
Three dead ends, one cause: these routes resolved to pages that stayed on the website, and nothing here answered them any more. /start — this page became the app's front page in the split (it is index.vue now), so every pre-split bookmark and the website's own redirect landed on a 404. Caught here so the app's old URLs work without waiting for the website to be redeployed. /login — the app has no login by design, identity comes from the issuer. But five call sites still send people there: logout, the live-atc session guard, the bridge pairing screen. In the monorepo that path was the website's login form; since the split it was nothing, so signing out dropped the user on a blank page. It is a forwarder to the issuer, not a login form. /logout — after clearing the app session it sent the user to /login, which under SSO means an issuer where they are still signed in: they would be handed a fresh code and land straight back inside. It now signs them out at the issuer too, which bumps tokenVersion and invalidates every refresh token. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>