From 66659ee8d309009a093c905125ce5afc77729a02 Mon Sep 17 00:00:00 2001
From: Anish Sarkar <104695310+AnishSarkar22@users.noreply.github.com>
Date: Tue, 16 Jun 2026 04:36:26 +0530
Subject: [PATCH] feat(docker): update Caddyfile to include specific reverse
 proxy routes for frontend auth and backend user profiles

---
 docker/proxy/Caddyfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docker/proxy/Caddyfile b/docker/proxy/Caddyfile
index 7a812a809..534a8c2c2 100644
--- a/docker/proxy/Caddyfile
+++ b/docker/proxy/Caddyfile
@@ -15,9 +15,16 @@
 		max_size {$SURFSENSE_MAX_BODY_SIZE:5GB}
 	}
 
+	# Frontend-owned auth page (the post-login token handler). More specific than
+	# /auth/*, so Caddy's matcher-specificity sort routes it here, not to backend.
+	reverse_proxy /auth/callback* frontend:3000
+
 	# Backend auth routes (FastAPI Users + OAuth helpers).
 	reverse_proxy /auth/* backend:8000
 
+	# Backend user profile routes (FastAPI Users users router, mounted at /users).
+	reverse_proxy /users/* backend:8000
+
 	# Backend REST, streaming, connector OAuth, and messaging gateway endpoints.
 	# FastAPI already serves /api/v1, so the path is forwarded unchanged.
 	reverse_proxy /api/v1/* backend:8000 {