search

and-rad / heyapple

Food & nutrient tracker, recipe manager, shopping list generator
https://heyapple.org
GNU Affero General Public License v3.0
1 stars 0 forks source link

Incorrect redirects when logged in #44

Open and-rad opened 7 months ago

and-rad commented 7 months ago

Due to the current redirection rules, a logged-in user cannot use confirmation links that point to the auth path in the URL. The auth app redirects all requests to the actual app if the visitor is logged in already. This hasn't been a problem until now, but with the implementation of e-mail address change requests, this causes inconvenience because users must log out first before they can confirm the changes to their e-mail address.

and-rad commented 7 months ago

The Anon middleware should take a new parameter that defines exceptions to redirection. This seems like the easiest and most straightforward way to go.