From f1190fa806e31996d17742ffc096c8bc4c364f50 Mon Sep 17 00:00:00 2001
From: FragginWagon <greg.r.jacobs@gmail.com>
Date: Fri, 11 Sep 2026 13:24:27 -0400
Subject: [PATCH] feat: explain expired admin sessions

---
 apps/web/src/pages/LoginPage.vue | 4 +++-
 apps/web/src/router/index.js     | 4 ++--
 docs/IMPLEMENTATION-STATUS.md    | 1 +
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/apps/web/src/pages/LoginPage.vue b/apps/web/src/pages/LoginPage.vue
index b687d76..bf4f8dd 100644
--- a/apps/web/src/pages/LoginPage.vue
+++ b/apps/web/src/pages/LoginPage.vue
@@ -1,10 +1,11 @@
 <script setup>
 import { nextTick, ref, watch } from 'vue';
-import { useRouter } from 'vue-router';
+import { useRoute, useRouter } from 'vue-router';
 
 import { useAuth } from '@/composables/useAuth.js';
 
 const router = useRouter();
+const route = useRoute();
 const { signIn, isLoading, error } = useAuth();
 const email = ref('');
 const password = ref('');
@@ -32,6 +33,7 @@ async function submit() {
     <form class="auth-panel" @submit.prevent="submit">
       <p class="catalog-kicker">Private workspace</p>
       <h1>Sign in</h1>
+      <p v-if="route.query.reason === 'session-expired'" class="state state--error" role="alert" tabindex="-1">Your session expired. Sign in again to continue.</p>
       <p class="detail-notes">Manage your collection, images, and listings.</p>
       <label class="fixture-label" for="admin-email">Email</label>
       <input id="admin-email" v-model="email" class="fixture-input" type="email" autocomplete="username" required />
diff --git a/apps/web/src/router/index.js b/apps/web/src/router/index.js
index 4388627..78d0ebc 100644
--- a/apps/web/src/router/index.js
+++ b/apps/web/src/router/index.js
@@ -45,5 +45,5 @@ const auth = useAuth();
 router.beforeEach(async (to) => {
   if (!to.path.startsWith('/admin')) return true;
   if (!auth.isAuthenticated.value) await auth.load();
-  return auth.isAuthenticated.value ? true : { name: 'login' };
-});
\ No newline at end of file
+  return auth.isAuthenticated.value ? true : { name: 'login', query: { reason: 'session-expired' } };
+});
diff --git a/docs/IMPLEMENTATION-STATUS.md b/docs/IMPLEMENTATION-STATUS.md
index 8e1f653..cb40a55 100644
--- a/docs/IMPLEMENTATION-STATUS.md
+++ b/docs/IMPLEMENTATION-STATUS.md
@@ -277,6 +277,7 @@ Remaining roadmap areas are approved external provider credentials/adapters, bro
 - Login errors now move focus to the announced error message so failed authentication is immediately available to keyboard and assistive-technology users.
 - Login error focus behavior now has Storybook interaction coverage using a deterministic failed-authentication response.
 - Admin logout now exposes a busy state and disables repeat activation while the session is being revoked.
+- Expired admin sessions now redirect to login with an accessible explanation that prompts the user to sign in again.
 
 ## Local Commands