what was i smoking ?
Some url resources are under a login ie. can only access them if a user is logged in.
approaches:
-
maintain a previous url app-wide and redirect back after sign_in. for signout maintain a list of protected actions so we do not redirect back there have to make sure circular redirects do not happen
-
before redirecting to login, store the back url and thereafter do not maintain "back" url.