LoginController used UserResource (returns `roles`) but the frontend authStore.setUser() expects MeResponse format with `app_roles`. After login, appRoles was set to undefined, making isSuperAdmin always false. Combined with isInitialized staying true after the initial failed /auth/me call, the correct /auth/me was never re-fetched after login. Fix: use MeResource in LoginController (same as MeController) so the login response includes app_roles, permissions, and portal_events. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1.4 KiB
1.4 KiB