@detiq/crawler 1.1.27 → 1.1.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@detiq/crawler",
-  "version": "1.1.27",
+  "version": "1.1.28",
   "private": false,
   "publishConfig": {
     "access": "public",

package/src/crawler.ts

@@ -7013,6 +7013,18 @@ async function runAuthDiscoveryPhase(
       }
 
       const finalUrl = page.url?.() ?? current.url;
+
+      // Skip auth seed paths that redirect to a non-auth URL — the page captured would be the
+      // post-login destination (e.g. dashboard) not the actual auth screen.
+      if (current.source === 'seed_path' && finalUrl !== current.url) {
+        try {
+          const origPath = new URL(current.url).pathname;
+          const finalPath = new URL(finalUrl).pathname;
+          const isAuthSeed = /login|sign-?in|signin|auth|sso|forgot-?password|reset-?password|2fa|mfa/i.test(origPath);
+          if (isAuthSeed && finalPath !== origPath) continue;
+        } catch { /* non-parseable URL — allow capture */ }
+      }
+
       const captureKey = normalizeAuthUrl(finalUrl);
       if (!capturedKeys.has(captureKey)) {
         const result = await captureAuthDiscoveryScreen(page, opts, current.url, current.source, ordinal++);