die tenant admin oauth authentifizierung wurde implementiert und funktioniert jetzt. Zudem wurde das marketing frontend dashboard implementiert.

resources/js/admin/auth/context.tsx

@@ -8,7 +8,7 @@ import {
   registerAuthFailureHandler,
   startOAuthFlow,
 } from './tokens';
-import { ADMIN_LOGIN_PATH } from '../constants';
+import { ADMIN_DEFAULT_AFTER_LOGIN_PATH, ADMIN_LOGIN_PATH } from '../constants';
 
 export type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';
 
@@ -86,17 +86,34 @@ export const AuthProvider: React.FC<{ children: React.ReactNode }> = ({ children
   }, [handleAuthFailure, refreshProfile]);
 
   const login = React.useCallback((redirectPath?: string) => {
-    const target = redirectPath ?? window.location.pathname + window.location.search;
+    const sanitizedTarget = redirectPath && redirectPath.trim() !== '' ? redirectPath : ADMIN_DEFAULT_AFTER_LOGIN_PATH;
+    const target = sanitizedTarget.startsWith('/') ? sanitizedTarget : `/${sanitizedTarget}`;
     startOAuthFlow(target);
   }, []);
 
-  const logout = React.useCallback(({ redirect }: { redirect?: string } = {}) => {
-    clearTokens();
-    clearOAuthSession();
-    setUser(null);
-    setStatus('unauthenticated');
-    if (redirect) {
-      window.location.href = redirect;
+  const logout = React.useCallback(async ({ redirect }: { redirect?: string } = {}) => {
+    try {
+      const csrf = (document.querySelector('meta[name="csrf-token"]') as HTMLMetaElement | null)?.content;
+      await fetch('/logout', {
+        method: 'POST',
+        headers: {
+          'X-Requested-With': 'XMLHttpRequest',
+          ...(csrf ? { 'X-CSRF-TOKEN': csrf } : {}),
+        },
+        credentials: 'same-origin',
+      });
+    } catch (error) {
+      if (import.meta.env.DEV) {
+        console.warn('[Auth] Failed to notify backend about logout', error);
+      }
+    } finally {
+      clearTokens();
+      clearOAuthSession();
+      setUser(null);
+      setStatus('unauthenticated');
+      if (redirect) {
+        window.location.href = redirect;
+      }
     }
   }, []);