From CodeRabbit in apps/web/src/lib/functions/auth.ts:
⚠️ Potential issue | 🟡 Minor
isPublicRoute uses exact string match — pathname variants won't be recognized as public.
PUBLIC_ROUTES.includes(pathname) requires a character-perfect match. If pathname ever arrives with a trailing slash (e.g., /sign-in/) or query string appended, it will return false, treating a public page as protected. Consider normalizing before the check or using startsWith for path-prefix matching.
From CodeRabbit in apps/web/src/lib/functions/auth.ts:
⚠️ Potential issue | 🟡 Minor
isPublicRoute uses exact string match — pathname variants won't be recognized as public.
PUBLIC_ROUTES.includes(pathname) requires a character-perfect match. If pathname ever arrives with a trailing slash (e.g., /sign-in/) or query string appended, it will return false, treating a public page as protected. Consider normalizing before the check or using startsWith for path-prefix matching.