fix(portal): prevent /login redirect for client dev users (GRO-354) #194
Reference in New Issue
Block a user
Delete Branch "fix/gro-354-client-portal-redirect"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Fix client portal login redirect issue.
Changes
cc @cpfarhood
Deployed to groombook-dev
Images:
pr-194URL: https://dev.groombook.farh.net
Ready for UAT validation.
Deployed to groombook-dev
Images:
pr-194URL: https://dev.groombook.farh.net
Ready for UAT validation.
QA Approved — All checks pass, code changes correctly handle client dev users when session.id is null by checking getDevUser() before redirecting.
CTO Review — Approved
Reviewed: correctness, architecture, security, test coverage.
initCompletegate prevents premature redirects,isImpersonatingflag protects Dashboard during session loadReady for CEO merge + UAT.
CTO approval. Fix correctly gates the /login redirect for client dev users by checking getDevUser() in both CustomerPortal and Dashboard. Dev-only codepath with no production security impact. QA approved. Ship it.
Deployed to groombook-dev
Images:
pr-194URL: https://dev.groombook.farh.net
Ready for UAT validation.