refactor: update login-related URLs to use /api prefix and standardize paths

Author: yahyafakhroji

apps/login/src/app/(login)/accounts/page.tsx

@@ -80,7 +80,7 @@ export default async function Page(props: {
 
         <div className="flex flex-col w-full space-y-2">
           <SessionsList sessions={sessions} requestId={requestId} />
-          <Link href={`/loginname?` + params}>
+          <Link href={`/login?` + params}>
             <div className="flex flex-row items-center py-3 px-4 hover:bg-black/10 dark:hover:bg-white/10 rounded-md transition-all">
               <div className="w-8 h-8 mr-4 flex flex-row justify-center items-center rounded-full bg-black/5 dark:bg-white/5">
                 <UserPlusIcon className="h-5 w-5" />

apps/login/src/app/(login)/device/consent/page.tsx

@@ -91,7 +91,7 @@ export default async function Page(props: {
           deviceAuthorizationRequestId={deviceAuthorizationRequest?.id}
           scope={deviceAuthorizationRequest.scope}
           appName={deviceAuthorizationRequest?.appName}
-          nextUrl={`/loginname?` + params}
+          nextUrl={`/login?` + params}
         />
       </div>
     </DynamicTheme>

…login/src/app/(login)/loginname/page.tsx apps/login/src/app/(login)/login/page.tsxapps/login/src/app/(login)/loginname/page.tsx renamed to apps/login/src/app/(login)/login/page.tsx apps/login/src/app/(login)/loginname/page.tsx renamed to apps/login/src/app/(login)/login/page.tsx

@@ -41,6 +41,8 @@ export default async function Page(props: {
     organization: organization ?? defaultOrganization,
   });
 
+  console.log({ loginSettings });
+
   const contextLoginSettings = await getLoginSettings({
     serviceUrl,
     organization,

apps/login/src/app/(login)/otp/[method]/set/page.tsx

@@ -114,7 +114,7 @@ export default async function Page(props: {
     if (requestId) {
       paramsToContinue.append("authRequest", requestId);
     }
-    urlToContinue = `/login?` + paramsToContinue;
+    urlToContinue = `/api/login?` + paramsToContinue;
   } else if (loginName) {
     if (requestId) {
       paramsToContinue.append("requestId", requestId);

apps/login/src/app/(login)/page.tsx

@@ -3,6 +3,6 @@ import { redirect } from "next/navigation";
 export default function Page() {
   // automatically redirect to loginname
   if (process.env.DEBUG !== "true") {
-    redirect("/loginname");
+    redirect("/login");
   }
 }

apps/login/src/app/login/route.ts apps/login/src/app/api/login/route.tsapps/login/src/app/login/route.ts renamed to apps/login/src/app/api/login/route.ts

@@ -27,7 +27,7 @@ import { Session } from "@zitadel/proto/zitadel/session/v2/session_pb";
 import { IdentityProviderType } from "@zitadel/proto/zitadel/settings/v2/login_settings_pb";
 import { headers } from "next/headers";
 import { NextRequest, NextResponse } from "next/server";
-import { DEFAULT_CSP } from "../../../constants/csp";
+import { DEFAULT_CSP } from "../../../../constants/csp";
 
 export const dynamic = "force-dynamic";
 export const revalidate = false;
@@ -296,7 +296,7 @@ export async function GET(request: NextRequest) {
           }
         }
 
-        const loginNameUrl = constructUrl(request, "/loginname");
+        const loginNameUrl = constructUrl(request, "/login");
         if (authRequest.id) {
           loginNameUrl.searchParams.set("requestId", `oidc_${authRequest.id}`);
         }
@@ -446,7 +446,7 @@ export async function GET(request: NextRequest) {
         }
       }
     } else {
-      const loginNameUrl = constructUrl(request, "/loginname");
+      const loginNameUrl = constructUrl(request, "/login");
 
       loginNameUrl.searchParams.set("requestId", requestId);
       if (authRequest?.loginHint) {

apps/login/src/app/security/route.ts apps/login/src/app/api/security/route.tsapps/login/src/app/security/route.ts renamed to apps/login/src/app/api/security/route.ts

@@ -69,7 +69,7 @@ export async function getNextUrl(
       params.append("organization", command.organization);
     }
 
-    return `/login?` + params;
+    return `/api/login?` + params;
   }
 
   if (defaultRedirectUri) {

apps/login/src/lib/client.ts

@@ -18,7 +18,9 @@ export const config = {
 async function loadSecuritySettings(
   request: NextRequest,
 ): Promise<SecuritySettings | null> {
-  const securityResponse = await fetch(`${request.nextUrl.origin}/security`);
+  const securityResponse = await fetch(
+    `${request.nextUrl.origin}/api/security`,
+  );
 
   if (!securityResponse.ok) {
     console.error(