poduck/smoothschedule
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Clear session and show login when non-platform users access platform subdomain

Browse Source 
Instead of redirecting business users to their business subdomain when
they access the platform subdomain, clear their session and show the
platform login page. This is cleaner when masquerading changes tokens
to a tenant user - they can simply log back in as a platform user.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
poduck
2025-12-20 12:02:16 -05:00
parent e93a7a305d
commit 07f49cb457
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
frontend/src/App.tsx
View File

@@ -10,7 +10,7 @@ import { useCurrentUser, useMasquerade, useLogout } from './hooks/useAuth';
import { useCurrentBusiness } from './hooks/useBusiness'; import { useCurrentBusiness } from './hooks/useBusiness';
import { useUpdateBusiness } from './hooks/useBusiness'; import { useUpdateBusiness } from './hooks/useBusiness';
import { usePlanFeatures } from './hooks/usePlanFeatures'; import { usePlanFeatures } from './hooks/usePlanFeatures';
import { setCookie } from './utils/cookies'; import { setCookie, deleteCookie } from './utils/cookies';
// Import Login Page // Import Login Page
const LoginPage = React.lazy(() => import('./pages/LoginPage')); const LoginPage = React.lazy(() => import('./pages/LoginPage'));
@@ -463,10 +463,13 @@ const AppContent: React.FC = () => {
return <LoadingScreen />; return <LoadingScreen />;
} }
// RULE: Business users on platform subdomain should be redirected to their business subdomain // RULE: Non-platform users on platform subdomain should have their session cleared
if (isBusinessUser && isPlatformDomain && user.business_subdomain) { // This handles cases where masquerading changed tokens to a business user
const port = window.location.port ? `:${window.location.port}` : ''; if (!isPlatformUser && isPlatformDomain) {
window.location.href = `${protocol}//${user.business_subdomain}.${baseDomain}${port}/`; deleteCookie('access_token');
deleteCookie('refresh_token');
localStorage.removeItem('masquerade_stack');
window.location.href = '/platform/login';
return <LoadingScreen />; return <LoadingScreen />;
} }