Allowing unauthenticated users to see scopes

app/web/pages.py

@@ -7,7 +7,7 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.core.config import settings
 from app.core.database import get_db
 from app.crud import user as user_crud
-from app.deps import get_current_web_user
+from app.deps import get_optional_web_user
 from app.models.user import User
 from app.services import ldap as ldap_service
 from app.services.auth import issue_token_pair
@@ -46,8 +46,12 @@ def _set_auth_cookie(response: Response, access_token: str) -> None:
 @router.get("/", response_class=HTMLResponse)
 async def dashboard(
     request: Request,
-    user: User = Depends(get_current_web_user),
+    user: User | None = Depends(get_optional_web_user),
 ):
+    # Anonymous visitors land on the public Scopes page instead of being
+    # bounced to login; the dashboard itself requires an account.
+    if user is None:
+        return RedirectResponse(url="/scopes", status_code=status.HTTP_302_FOUND)
     return templates.TemplateResponse(request, "dashboard.html", {"user": user})