Merge pull request #1162 from Wikid82/bot/update-geolite2-checksum

chore(docker): update GeoLite2-Country.mmdb checksum

Author: Wikid82

Dockerfile

@@ -679,7 +679,7 @@ SHELL ["/bin/ash", "-o", "pipefail", "-c"]
 # Note: In production, users should provide their own MaxMind license key
 # This uses the publicly available GeoLite2 database
 # In CI, timeout quickly rather than retrying to save build time
-ARG GEOLITE2_COUNTRY_SHA256=53941fb054c1c9c1748d5b3f271d0a26c235e207c0f2a008ccb381ef7dd26161
+ARG GEOLITE2_COUNTRY_SHA256=db73536b02d376c82d63d23aeb0fbac4795901a76b27850ea68c1fab9425270c
 RUN mkdir -p /app/data/geoip && \
         if [ "$CI" = "true" ] || [ "$CI" = "1" ]; then \
             echo "⏱️  CI detected - quick download (10s timeout, no retries)"; \

tests/core/authentication.spec.ts

@@ -412,14 +412,19 @@ test.describe('Authentication Flows', () => {
           // If no redirect, check for session expired message
         }
 
-        // Should either redirect to login or show session expired message
+        // Should either redirect to login or show session expired message.
+        // Don't rely on page.url() alone: Firefox can lag in reporting URL
+        // changes from React Router's client-side history.replaceState(),
+        // so also check for the rendered login form as DOM-level proof of
+        // the redirect (same pattern as the sister test above).
         const isLoginPage = page.url().includes('/login');
+        const hasLoginForm = await page.locator('input[type="email"]').isVisible().catch(() => false);
         const hasSessionExpiredMessage = await page
           .getByText(/session.*expired|please.*login|unauthorized/i)
           .isVisible()
           .catch(() => false);
 
-        expect(isLoginPage || hasSessionExpiredMessage).toBeTruthy();
+        expect(isLoginPage || hasLoginForm || hasSessionExpiredMessage).toBeTruthy();
       });
     });
   });