diff --git a/src/app/admin-login/page.tsx b/src/app/admin-login/page.tsx index ab4e6c6..5b18b12 100644 --- a/src/app/admin-login/page.tsx +++ b/src/app/admin-login/page.tsx @@ -34,10 +34,12 @@ export default function AdminLoginPage() { const data = await res.json(); if (res.ok && data.success) { - console.log("LoginPage: success, checking cookie before redirect..."); - const token = document.cookie.match(/tia_admin_session=([^;]+)/)?.[1]; - console.log("LoginPage: cookie token =", token ? "found" : "NOT FOUND"); - router.push("/admin"); + // Verify session server-side before redirect + const sessionRes = await fetch("/api/admin/auth"); + const sessionData = await sessionRes.json(); + if (sessionData.authenticated) { + router.push("/admin"); + } } else { setError(data.error || "Invalid credentials"); }