mirror of
https://github.com/yusufipk/OpenFrame.git
synced 2026-09-11 17:46:06 +00:00
yusufipk
fe42c0836f
The login page derives callbackUrl from its own default when the parameter is absent, and on CI it arrives as /login?registered=true&callbackUrl=%2Fdashboard. Anchoring the pattern with $ made that a deterministic CI-only failure while the suite passed locally on every run, including with CI=1. What the register flow promises is the login page plus registered=true. The rest of the query string is not part of that contract, so the pattern now tolerates extra parameters in any order. The page snapshot that diagnosed this also turned up a product bug, recorded in the findings notes rather than fixed here: the success banner tells every new user to check their email for a verification link, including in the self-hosted default where SMTP is unset, email verification is off, and the account is already usable.