Redirect unauthorized users to /login

[localzet]

Motivation

• When unauthenticated requests hit protected admin routes the app rendered a 401 HTML error page; instead users should be sent to the login screen to improve UX.

Description

• Update src/error.rs so AppError::into_response returns Redirect::to("/login") for AppError::Unauthorized, and add the Redirect import from axum::response.

Testing

• Ran formatting and type checks: cargo fmt --all and cargo check, both completed successfully.

---

Codex Task

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a44cee98a4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Keep API auth failures as 401 instead of redirecting

This unconditional redirect changes every AppError::Unauthorized into a 303 /login, including API handlers in src/routes/api.rs that call auth::require_admin. Because fetch follows redirects, the admin frontend (static/admin-app.js) receives a 200 HTML login page and then fails at response.json() (or misclassifies auth loss as a generic parse error) when a session expires, instead of getting a clean 401 auth failure signal.

Useful? React with 👍 / 👎.