From 276d76a0cea3359c6a45c0a6e12dee5c92514945 Mon Sep 17 00:00:00 2001 From: Pedro Heyerdahl Date: Tue, 31 Mar 2026 11:25:09 -0300 Subject: [PATCH 1/2] fix(tracking): only resolve signup product when callbackPath was explicitly provided --- src/app/users/after-sign-in/route.tsx | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/app/users/after-sign-in/route.tsx b/src/app/users/after-sign-in/route.tsx index a241a2912a..47fa0e6527 100644 --- a/src/app/users/after-sign-in/route.tsx +++ b/src/app/users/after-sign-in/route.tsx @@ -49,7 +49,10 @@ export async function GET(request: NextRequest) { // callbackPath query param, so the value cannot be user-tampered. This // runs exactly once per signup because has_validation_stytch is set // after account verification completes. - const product = resolveSignupProduct(responsePath, !!url.searchParams.get('source')); + const product = resolveSignupProduct( + callbackPath && isValidCallbackPath(callbackPath) ? responsePath : null, + !!url.searchParams.get('source'), + ); if (product) { PostHogClient().capture({ distinctId: user.google_user_email, From bf31815d0b9d9cec4874a407359935a094f9233a Mon Sep 17 00:00:00 2001 From: Pedro Heyerdahl Date: Tue, 31 Mar 2026 11:26:05 -0300 Subject: [PATCH 2/2] style: apply oxfmt formatting to after-sign-in route --- src/app/users/after-sign-in/route.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app/users/after-sign-in/route.tsx b/src/app/users/after-sign-in/route.tsx index 47fa0e6527..b898fb61be 100644 --- a/src/app/users/after-sign-in/route.tsx +++ b/src/app/users/after-sign-in/route.tsx @@ -51,7 +51,7 @@ export async function GET(request: NextRequest) { // after account verification completes. const product = resolveSignupProduct( callbackPath && isValidCallbackPath(callbackPath) ? responsePath : null, - !!url.searchParams.get('source'), + !!url.searchParams.get('source') ); if (product) { PostHogClient().capture({