When a non-admin user with a valid session cookie visited an admin-protected route, auth_middleware redirected them to /login?next=<admin-path>, and login_page immediately redirected them back because they were "logged in", causing an infinite redirect loop. Fix: only skip the login page when the logged-in user is also an admin. https://claude.ai/code/session_01FKCW3FDjNFj6jve4niMFXH |
||
|---|---|---|
| .. | ||
| src | ||
| Cargo.toml | ||