fix(web): stop recursive login redirects

An expired session on a deep link bounced through /login and back,
accumulating a redirect chain instead of landing on the form once.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: Vonng

web-app/src/ProtectedRoutes.tsx

@@ -46,7 +46,7 @@ const ProtectedRoute = ({ Component }: ProtectedRouteProps) => {
 
   const StorePathAndRedirect = () => {
     localStorage.setItem("redirect-path", pathname);
-    return <Navigate to={{ pathname: `login` }} />;
+    return <Navigate to={{ pathname: `/login` }} />;
   };
 
   useEffect(() => {

web-app/tests/subpath-nginx/test-unauthenticated-user.ts

@@ -14,6 +14,7 @@
 // You should have received a copy of the GNU Affero General Public License
 // along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
+import { ClientFunction } from "testcafe";
 import * as elements from "../utils/elements";
 
 // Using subpath defined in `MINIO_BROWSER_REDIRECT_URL`
@@ -26,3 +27,21 @@ test("RootUrl redirects to Login Page", async (t) => {
   const loginButtonExists = elements.loginButton.exists;
   await t.navigateTo(rootUrl).expect(loginButtonExists).ok().wait(2000);
 });
+
+test("Deep routes redirect once to Login Page", async (t) => {
+  const getRedirectState = ClientFunction(() => ({
+    pathname: window.location.pathname,
+    redirectPath: window.localStorage.getItem("redirect-path"),
+  }));
+
+  await t
+    .navigateTo(`${appBaseUrl}/browser`)
+    .expect(elements.loginButton.exists)
+    .ok()
+    .wait(1000)
+    .expect(getRedirectState())
+    .eql({
+      pathname: "/console/subpath/login",
+      redirectPath: "/browser",
+    });
+});