feat: password reset, email change with verification, and password change
Password reset: multi-app support with custom notification linking to correct frontend (app/portal/admin). Email change: self-service with password confirmation and admin-initiated, both sending verification to new address with 24h expiry. Confirmation sent to old email on completion. Password change: authenticated endpoint revoking other sessions. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -13,9 +13,10 @@ export function setupGuards(router: Router) {
|
||||
|
||||
const isPublic = to.meta.public === true
|
||||
|
||||
// Allow public routes (login, 404) — but redirect authenticated users away from login
|
||||
// Allow public routes (login, auth pages, 404) — but redirect authenticated users away from login
|
||||
if (isPublic) {
|
||||
if (authStore.isAuthenticated && to.path === '/login') {
|
||||
const guestOnlyPaths = ['/login', '/forgot-password', '/reset-password', '/verify-email-change']
|
||||
if (authStore.isAuthenticated && guestOnlyPaths.some(p => to.path === p)) {
|
||||
return { name: 'dashboard' }
|
||||
}
|
||||
return
|
||||
|
||||
Reference in New Issue
Block a user