Fix admin authentication and routing for domain-based access#202
Merged
Conversation
- Update nginx config to serve signup landing at sales-agent.scope3.com root - Fix admin UI root route to properly handle admin vs tenant subdomains - Restrict signup to main domain only (block access on tenant subdomains) - Maintain proper OAuth flow: /admin/ -> /login -> back to admin after auth This ensures: - sales-agent.scope3.com/ shows signup landing page - admin.sales-agent.scope3.com/ goes to login for super admin access - tenant.sales-agent.scope3.com/ shows tenant landing (MCP/A2A info) - tenant.sales-agent.scope3.com/admin/ requires login for tenant admin - Internal Admin links flow through OAuth properly 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
danf-newton
pushed a commit
to Newton-Research-Inc/salesagent
that referenced
this pull request
Nov 24, 2025
) - Update nginx config to serve signup landing at sales-agent.scope3.com root - Fix admin UI root route to properly handle admin vs tenant subdomains - Restrict signup to main domain only (block access on tenant subdomains) - Maintain proper OAuth flow: /admin/ -> /login -> back to admin after auth This ensures: - sales-agent.scope3.com/ shows signup landing page - admin.sales-agent.scope3.com/ goes to login for super admin access - tenant.sales-agent.scope3.com/ shows tenant landing (MCP/A2A info) - tenant.sales-agent.scope3.com/admin/ requires login for tenant admin - Internal Admin links flow through OAuth properly 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>
bokelley
referenced
this pull request
in bokelley/salesagent
May 5, 2026
- Update nginx config to serve signup landing at sales-agent.scope3.com root - Fix admin UI root route to properly handle admin vs tenant subdomains - Restrict signup to main domain only (block access on tenant subdomains) - Maintain proper OAuth flow: /admin/ -> /login -> back to admin after auth This ensures: - sales-agent.scope3.com/ shows signup landing page - admin.sales-agent.scope3.com/ goes to login for super admin access - tenant.sales-agent.scope3.com/ shows tenant landing (MCP/A2A info) - tenant.sales-agent.scope3.com/admin/ requires login for tenant admin - Internal Admin links flow through OAuth properly 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes authentication and routing issues where accessing admin domains was incorrectly redirecting to signup pages instead of login.
Changes
sales-agent.scope3.com/to serve signup landing page instead of redirecting to admin subdomainadmin.sales-agent.scope3.com/→ Login page (super admin)tenant.sales-agent.scope3.com/admin/→ Login page (tenant admin)sales-agent.scope3.com/→ Handled by nginx (signup landing)/signupaccess on tenant subdomains (only allowed on main domain)/admin/→/login→ back to admin after authenticationExpected Behavior After Fix
✅
https://sales-agent.scope3.com/→ Signup landing page✅
https://admin.sales-agent.scope3.com/→ Login page for super admin access✅
https://wonderstruck.sales-agent.scope3.com/→ Tenant landing page (MCP/A2A info)✅
https://wonderstruck.sales-agent.scope3.com/admin/→ Login → tenant admin dashboard✅
https://wonderstruck.sales-agent.scope3.com/signup→ Blocked, redirects to login✅ "Internal Admin" links → Proper OAuth flow (
/admin/→/login→ back to admin)Test Plan
sales-agent.scope3.com/shows signup pageadmin.sales-agent.scope3.com/shows login pagewonderstruck.sales-agent.scope3.com/)wonderstruck.sales-agent.scope3.com/admin/)🤖 Generated with Claude Code