fixes

apps/portal/src/app/router.tsx

@@ -403,6 +403,6 @@ export const router = createBrowserRouter([
   },
 
   // A typo'd URL should not maroon a signed-in user on the marketing page —
-  // ProtectedRoute sends anonymous visitors on to /login exactly as before.
+  // ProtectedRoute sends anonymous visitors on to / (landing) instead.
   { path: "*", element: <Navigate to="/dashboard" replace /> },
 ]);

libs/auth/src/lib/components/ProtectedRoute.tsx

@@ -7,7 +7,7 @@ interface ProtectedRouteProps {
   loginPath?: string;
 }
 
-export function ProtectedRoute({ children, loginPath = '/login' }: ProtectedRouteProps) {
+export function ProtectedRoute({ children, loginPath = '/' }: ProtectedRouteProps) {
   const location = useLocation();
   const token = useAuthToken();