Merge remote-tracking branch 'origin/master'

ui/src/pages/FirstPasswordChange.vue

@@ -85,17 +85,14 @@ async function submit () {
   loading.value = true
   try {
     // 🔐 TOKEN interceptor ile otomatik
-    const res = await api.post('/password/change', {
+    await api.post('/password/change', {
       current_password: currentPassword.value,
       new_password: newPassword.value
     })
 
-    // 🔄 Session güncelle
-    auth.setSession(res.data)
-    auth.forcePasswordChange = false
-    localStorage.setItem('forcePasswordChange', '0')
-
-    router.replace('/app')
+    // Şifre değişimi sonrası tekrar giriş zorunlu
+    auth.clearSession()
+    router.replace('/login')
 
   } catch (e) {
     error.value =
@@ -109,4 +106,3 @@ async function submit () {
 </script>
 
 
-