Release v3.23.1 – Auth Callback Guest Redirection, Modular Editor & SSR Stability · VeriWorkly/veriworkly

🚀 v3.23.1

VeriWorkly v3.23.1 focuses on authentication flow improvements, guest mode routing, modular studio editor components, and workspace store stability.

Login redirect with callbackURL parameter for unauthenticated visits
Shared-domain guest access cookie across root domain and subdomains
Modular resume and cover letter editor form primitives and specialized toolbars
PDF export contract tests verifying template rendering and appearance compliance
SSR-seeded workspace state store initialization preventing hydration layout shifts
Local-first draft recovery during 401/404 server responses without database sync

Login redirect with callback URL (PR #194): Unauthenticated visitors navigating to private dashboard or editor routes in Studio and Portfolio are now sent to /login first. The original destination is preserved in a callbackURL parameter so users land right where they intended after signing in.
Shared domain guest cookie: Clicking "Continue as Guest" on the login page now writes a veriworkly-guest-mode=true cookie across .veriworkly.com (in production) or .localhost (in local development). This grants guest access across subdomains without bypassing the initial login screen.
Middleware proxy cleanup: Removed automatic guest cookie creation from proxy middleware. Public routes (such as /login, /share/*, /api/*, static assets, and _next) remain accessible without redirection.
Local-first draft safety during 401 errors: Updated loadWorkspace in the portfolio store to catch 401 and 404 responses gracefully. If an unauthenticated guest visits the editor, the app initializes the workspace using local cache data without attempting to sync drafts to the cloud database. Publishing remains locked for guests until they log in.

Modular form primitives and toolbars: Split resume and cover letter editor controls into reusable shared form components and specialized section toolbars.
Section editor enhancements: Added stricter validation and layout wrappers across custom section editors.
PDF export contract tests: Added automated contract tests to verify that every resume template renders all user fields, applies custom theme colors, and wraps long text blocks without clipping.

Layout routing and SSR store bootstrap: Streamlined portfolio layout routes and fixed hydration order so server-rendered workspace data passes directly into the store instance.
Template library submodule updates: Updated template font modules, shared CSS variables, and layout styles across Signal, Nimbus, and Cipher templates.
Codebase formatting: Formatted all template submodules and workspace packages with Prettier.

SSRF parsing fixes: Fixed IPv6 address validation in ATS file inspection routes to block local network probe attempts.
Type check and test coverage: Resolved portfolio builder type definitions and added mock coverage for template rendering tests in CI.
API documentation sync: Updated OpenAPI paths, changelog definitions, and test configurations across the server and docs platform.

#194 — [Feature] [Auth]: Require login redirect with callback for guest access

Thank you to the contributor who authored code in this release:

Thank you for using VeriWorkly!