b556c636eb
Replaced loose includes()/startsWith() path checks with exact equality for static routes and strict prefix matching for dynamic-token routes. Added /forgot-password and /reset-password to the allowlist so the password-reset flow is usable without auth. Extracted isAuthPublicPath as a pure testable function with 14 unit tests covering regressions. |
||
|---|---|---|
| .. | ||
| api | ||
| db | ||
| hooks | ||
| i18n | ||
| remoteEventHandler | ||
| repo | ||
| services | ||
| slices | ||
| stores | ||
| sync | ||
| utils | ||
| tripStore.test.ts | ||