Gal Eyal 35c080b65c fix(auth): keep the OAuth return target through the provider callback ... OAuth2AuthorizationRequestRedirectFilter invokes the resolver on every request in the chain and the delegate answers null for anything that is not an authorization request. Recording the return target on those calls cleared it again on the next request without a returnTo parameter — the provider callback included, which this filter processes before login succeeds. The success handler therefore always found an empty session attribute and fell back to the default target, so returnTo never worked. Guard the write on a non-null authorization request. As a side effect, anonymous API requests no longer allocate a session via getSession(). Signed-off-by: Gal Eyal <gal.e@popai.health>		2026-07-29 12:44:00 +03:00
..
src	fix(auth): keep the OAuth return target through the provider callback	2026-07-29 12:44:00 +03:00
pom.xml	feat(auth): 邮箱验证码重置密码与 SMTP 配置支持 (#273)	2026-04-13 20:27:00 +08:00