Fix tenant event form package selector so it no longer renders empty-value options, handles loading/empty

states, and pulls data from the authenticated /api/v1/tenant/packages endpoint.
    (resources/js/admin/pages/EventFormPage.tsx, resources/js/admin/api.ts)
  - Harden tenant-admin auth flow: prevent PKCE state loss, scope out StrictMode double-processing, add SPA
    routes for /event-admin/login and /event-admin/logout, and tighten token/session clearing semantics (resources/js/admin/auth/{context,tokens}.tsx, resources/js/admin/pages/{AuthCallbackPage,LogoutPage}.tsx,
    resources/js/admin/router.tsx, routes/web.php)

resources/js/guest/i18n/messages.ts

@@ -59,6 +59,16 @@ export const messages: Record<LocaleCode, NestedMessages> = {
           description: 'Es gab zu viele Eingaben in kurzer Zeit. Warte kurz und versuche es erneut.',
           hint: 'Tipp: Eine erneute Eingabe ist in wenigen Minuten moeglich.',
         },
+        access_rate_limited: {
+          title: 'Zu viele Aufrufe',
+          description: 'Es gab sehr viele Aufrufe in kurzer Zeit. Warte kurz und versuche es erneut.',
+          hint: 'Tipp: Du kannst es gleich noch einmal versuchen.',
+        },
+        gallery_expired: {
+          title: 'Galerie nicht mehr verfuegbar',
+          description: 'Die Galerie zu diesem Event ist nicht mehr zugaenglich.',
+          ctaLabel: 'Neuen Code anfordern',
+        },
         event_not_public: {
           title: 'Event nicht oeffentlich',
           description: 'Dieses Event ist aktuell nicht oeffentlich zugaenglich.',
@@ -404,6 +414,16 @@ export const messages: Record<LocaleCode, NestedMessages> = {
           description: 'There were too many attempts in a short time. Wait a bit and try again.',
           hint: 'Tip: You can retry in a few minutes.',
         },
+        access_rate_limited: {
+          title: 'Too many requests',
+          description: 'There were too many requests in a short time. Please wait a moment and try again.',
+          hint: 'Tip: You can retry shortly.',
+        },
+        gallery_expired: {
+          title: 'Gallery unavailable',
+          description: 'The gallery for this event is no longer accessible.',
+          ctaLabel: 'Request new code',
+        },
         event_not_public: {
           title: 'Event not public',
           description: 'This event is not publicly accessible right now.',

resources/js/guest/router.tsx

@@ -197,8 +197,12 @@ function getErrorContent(
       return build('token_expired', { ctaHref: '/event' });
     case 'token_rate_limited':
       return build('token_rate_limited');
+    case 'access_rate_limited':
+      return build('access_rate_limited');
     case 'event_not_public':
       return build('event_not_public');
+    case 'gallery_expired':
+      return build('gallery_expired', { ctaHref: '/event' });
     case 'network_error':
       return build('network_error');
     case 'server_error':
@@ -219,4 +223,3 @@ function SimpleLayout({ title, children }: { title: string; children: React.Reac
     </div>
   );
 }
-

resources/js/guest/services/eventApi.ts

@@ -67,6 +67,8 @@ const API_ERROR_CODES: FetchEventErrorCode[] = [
   'token_expired',
   'token_revoked',
   'token_rate_limited',
+  'access_rate_limited',
+  'gallery_expired',
   'event_not_public',
 ];
 
@@ -78,9 +80,9 @@ function resolveErrorCode(rawCode: unknown, status: number): FetchEventErrorCode
     }
   }
 
-  if (status === 429) return 'token_rate_limited';
+  if (status === 429) return rawCode === 'access_rate_limited' ? 'access_rate_limited' : 'token_rate_limited';
   if (status === 404) return 'event_not_public';
-  if (status === 410) return 'token_expired';
+  if (status === 410) return rawCode === 'gallery_expired' ? 'gallery_expired' : 'token_expired';
   if (status === 401) return 'invalid_token';
   if (status === 403) return 'token_revoked';
   if (status >= 500) return 'server_error';
@@ -98,6 +100,10 @@ function defaultMessageForCode(code: FetchEventErrorCode): string {
       return 'Dieser Zugriffscode ist abgelaufen.';
     case 'token_rate_limited':
       return 'Zu viele Versuche in kurzer Zeit. Bitte warte einen Moment und versuche es erneut.';
+    case 'access_rate_limited':
+      return 'Zu viele Aufrufe in kurzer Zeit. Bitte warte einen Moment und versuche es erneut.';
+    case 'gallery_expired':
+      return 'Die Galerie ist nicht mehr verfügbar.';
     case 'event_not_public':
       return 'Dieses Event ist nicht öffentlich verfügbar.';
     case 'network_error':