@webjsdev/server 0.8.20 → 0.8.21

package/src/page-action.js

@@ -196,9 +196,11 @@ export async function runPageAction(route, params, url, loaded, req, ssrOpts) {
   } catch (err) {
     if (isRedirect(err)) {
       const e = /** @type any */ (err);
-      // A thrown redirect from an action is honored as the page render does.
-      // Use the action's chosen status (307/308) so an explicit redirect()
-      // keeps its semantics; PRG (303) is the SUCCESS-result path below.
+      // A thrown redirect from an action (a POST) defaults to 307 Temporary
+      // Redirect, which is method-preserving so the action's intent survives
+      // the bounce; an explicit `redirect(url, status)` overrides it. This is
+      // deliberately NOT the GET gate's 302 default (see ssr.js). PRG (303) is
+      // the SUCCESS-result path below.
       return new Response(null, { status: e.status || 307, headers: { location: e.url } });
     }
     if (isNotFound(err)) {

package/src/ssr.js

@@ -198,7 +198,12 @@ export async function ssrPage(route, params, url, opts) {
   } catch (err) {
     if (isRedirect(err)) {
       const e = /** @type any */ (err);
-      return new Response(null, { status: e.status || 307, headers: { location: e.url } });
+      // A redirect thrown during a GET page/layout render is a GET-to-GET
+      // navigation (an auth bounce, a gate). 302 Found is the conventional
+      // code there, so it is the default when the caller did not pick one. An
+      // explicit `redirect(url, status)` overrides it. (Action redirects, a
+      // POST, default to 307 in page-action.js so the method is preserved.)
+      return new Response(null, { status: e.status || 302, headers: { location: e.url } });
     }
     if (isNotFound(err)) {
       const html = await ssrNotFoundHtml(null, opts);