jayvenn21 opened a new pull request, #37773: URL: https://github.com/apache/superset/pull/37773
### Summary After the frontend porting in Superset 6.0.0, most user-facing views were migrated to the React SPA and rendered via `render_app_template`. However, the legacy Flask-AppBuilder password reset views (`ResetPassword` and `ResetMyPassword`) remain directly accessible via URL and render using server-side templates. This results in inconsistent behavior and exposes legacy SSR FAB views that were not intended to be accessible post-migration. ### What this PR does - Prevents direct URL access to legacy FAB password reset views - Aligns password-related routes with the post-6.0.0 SPA-based frontend architecture - Ensures legacy SSR views are no longer rendered when accessed directly ### What this PR does not do - Does not redesign password reset UX - Does not migrate legacy FAB views to SPA - Does not modify existing admin password reset behavior - Does not introduce new authentication flows ### Rationale This change addresses an unintended side effect of the FAB → SPA migration and keeps Superset’s frontend behavior consistent without expanding scope into broader authentication or UX changes. ### Related Issue Fixes #37700 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
