Skip to content

fix(#171): re-enable CustodianHomeController so post-login /custodian/home doesn't 401#172

Merged
dfcoffin merged 1 commit into
mainfrom
fix/171-custodian-home-401
Jun 7, 2026
Merged

fix(#171): re-enable CustodianHomeController so post-login /custodian/home doesn't 401#172
dfcoffin merged 1 commit into
mainfrom
fix/171-custodian-home-401

Conversation

@dfcoffin
Copy link
Copy Markdown
Contributor

@dfcoffin dfcoffin commented Jun 7, 2026

Closes #171.

Custodian login (admin/admin, dev) succeeds but the post-login redirect to /custodian/home returned 401. Root cause: CustodianHomeController's @controller annotation was commented out, so /custodian/home had no handler -> 404 -> re-dispatched to /error -> the resource-server filter chain evaluated it anonymously -> 401. Re-enabled @controller; the templates/custodian/home.html view already exists.

The C2a login work set the form-login DEFAULT_SUCCESS_URL to /custodian/home but the landing controller was left disabled — this reconciles them. One-line change plus an explanatory comment. Surfaced during the local sandbox bring-up.

🤖 Generated with Claude Code

…/home doesn't 401

The custodian login flow (C2a) redirects to /custodian/home on success
(CustomerLoginSecurityConfiguration DEFAULT_SUCCESS_URL), but CustodianHomeController had its
@controller annotation commented out ("UI not needed in resource server"). So /custodian/home had
no handler -> 404 -> re-dispatched to /error -> evaluated by the resource-server filter chain as
anonymous -> 401. Re-enable @controller; the view template templates/custodian/home.html exists.

Surfaced during local sandbox bring-up (admin/admin login -> 401).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@dfcoffin dfcoffin merged commit 0dd0881 into main Jun 7, 2026
4 checks passed
@dfcoffin dfcoffin deleted the fix/171-custodian-home-401 branch June 7, 2026 01:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Custodian login: post-login redirect to /custodian/home returns 401 (CustodianHomeController @Controller disabled)

1 participant