fix the booking and contract

2026-07-27 23:04:26 -04:00
parent 8046a1d447
commit 5649ab02c7
40 changed files with 1699 additions and 1066 deletions
@@ -140,9 +140,9 @@ The sign-in page also supports:

 Important behavior:

- public dashboard routes are limited to sign-in and forgot-password flows
+- public dashboard routes are limited to account creation, password, onboarding, and verification flows
 - all other `/dashboard/*` routes require the `employee_session` cookie
- unauthenticated users are redirected either to the Carplace root or to `/dashboard/sign-in`, depending on host context
+- unauthenticated users are redirected to the homepage sign-in route, `/en/light/sign-in`, with a dashboard return path
 - duplicate `/dashboard/dashboard` paths are normalized back to `/dashboard`

 This means route protection is enforced before React renders the protected pages.
@@ -618,7 +618,8 @@ Public-facing dashboard pages live outside the private shell.

 Notable routes:

- `/dashboard/sign-in`
+- `/en/light/sign-in` (canonical sign-in)
+- `/dashboard/sign-in` (legacy redirect)
 - `/dashboard/sign-up`
 - `/dashboard/forgot-password`
 - `/dashboard/reset-password`