Separate ViGet catalogs from Progmasoft account ownership. Move login, registration, recovery, and dashboard navigation to account.progmasoft.com, document the canonical account.progmasoft.com/<Account>/dashboard route, and define each ViGet Publisher as that exact Progmasoft Account identity. Redirect legacy ViGet account routes to the account service and expose only the exact registry status endpoint while closing the retired standalone authentication and token API surface.

1 files changed, 39 insertions, 1 deletions

diff --git a/ops/nginx/xsharp.conf b/ops/nginx/xsharp.conf
index 7881759..5c57ff6 100644
--- a/ops/nginx/xsharp.conf
+++ b/ops/nginx/xsharp.conf
@@ -88,7 +88,39 @@ server {
 
     include /etc/nginx/snippets/repository-security-headers.conf;
 
-    location /api/ {
+    location = /login {
+        return 308 https://account.progmasoft.com/login$is_args$args;
+    }
+
+    location = /login/ {
+        return 308 https://account.progmasoft.com/login$is_args$args;
+    }
+
+    location = /register {
+        return 308 https://account.progmasoft.com/register$is_args$args;
+    }
+
+    location = /register/ {
+        return 308 https://account.progmasoft.com/register$is_args$args;
+    }
+
+    location = /recover {
+        return 308 https://account.progmasoft.com/recover$is_args$args;
+    }
+
+    location = /recover/ {
+        return 308 https://account.progmasoft.com/recover$is_args$args;
+    }
+
+    location = /dashboard {
+        return 308 https://account.progmasoft.com/$is_args$args;
+    }
+
+    location = /dashboard/ {
+        return 308 https://account.progmasoft.com/$is_args$args;
+    }
+
+    location = /api/v1/status {
         proxy_http_version 1.1;
         proxy_pass http://127.0.0.1:5080;
         proxy_set_header Host $host;
@@ -98,6 +130,12 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
     }
 
+    # Account registration and registry-token ownership use the canonical
+    # Progmasoft Account service. ViGet does not expose its retired auth API.
+    location ^~ /api/ {
+        return 404;
+    }
+
     location /_astro/ {
         alias /srv/xsharp/website/current/frontend/_astro/;
         include /etc/nginx/snippets/repository-security-headers.conf;