fix(routing): prevent login redirect loops on alias targets

2026-04-26 10:20:28 +02:00
parent d0544d3428
commit dffc4db9a2
7 changed files with 149 additions and 4 deletions
--- a/core/Http/AccessControl.php
+++ b/core/Http/AccessControl.php
@@ -82,7 +82,9 @@ class AccessControl
        }

        $locale = I18n::$locale ?? I18n::$defaultLocale;
-        $loginPath = Request::withLocale('login', $locale);
+        // Use the concrete target route. Minty alias rewrites compare the full
+        // REQUEST_URI (including query), so alias paths with query params are fragile.
+        $loginPath = Request::withLocale('auth/login', $locale);

        $requestUri = $_SERVER['REQUEST_URI'] ?? '';
        $loginTarget = $this->intendedUrlService->buildLoginRedirect($loginPath, $requestUri);