feat(erp): route login through GoTrue + finish Exe Foundry Bold branding

GoTrue: login form posts to /api/auth/gotrue-login when GOTRUE_URL configured
(falls back to stock login otherwise); auto-provisioned users are System Users;
response normalized to Frappe 'Logged In' flow; GOTRUE_ADMIN_TOKEN wired through
entrypoint.sh + docker-compose.yml.
Branding: replaced remaining stock ERPNext logo/favicon/splash/email/manifest/
desktop-icon refs with Exe assets (#0F0E1A/#F5D76E, Epilogue/Manrope/Space Grotesk);
login.bundle.scss confirmed bundled. Follow-up: full JWT/JWKS SSO middleware.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: henrylove0

apps/erpnext/erpnext/desktop_icon/erpnext.json

@@ -9,7 +9,7 @@
  "label": "ERPNext",
  "link": "/app/home",
  "link_type": "External",
- "logo_url": "/assets/erpnext/images/erpnext-logo.svg",
+ "logo_url": "/assets/frappe/images/exe-erp-logo.svg",
  "modified": "2025-11-17 16:33:37.520201",
  "modified_by": "Administrator",
  "name": "ERPNext",

apps/erpnext/erpnext/exe_auth/api.py

@@ -11,14 +11,16 @@
 Configuration (site_config.json):
   {
     "gotrue_url": "http://gotrue:9999",
-    "exe_admin_token": "your-secret-token"
+    "exe_admin_token": "your-secret-token",
+    "gotrue_admin_token": "your-service-role-key"
   }
 """
 
 import hmac
 import os
 import frappe
 import requests
+from frappe.website.utils import get_home_page
 from frappe.rate_limiter import rate_limit
 
 
@@ -77,7 +79,7 @@ def gotrue_login(email=None, password=None, workspace_name=None):
 				"email": email,
 				"first_name": first_name,
 				"enabled": 1,
-				"user_type": "Website User",
+				"user_type": "System User",
 			}
 		)
 		user_doc.flags.ignore_permissions = True
@@ -107,8 +109,10 @@ def gotrue_login(email=None, password=None, workspace_name=None):
 
 	return {
 		"success": True,
+		"message": "Logged In",
 		"user": email,
 		"sid": frappe.session.sid,
+		"home_page": get_home_page() or "/desk",
 	}
 
 
@@ -134,7 +138,9 @@ def admin_token(token=None):
 
 	return {
 		"success": True,
+		"message": "Logged In",
 		"user": "Administrator",
 		"sid": frappe.session.sid,
+		"home_page": get_home_page() or "/desk",
 		"isAdminToken": True,
 	}

apps/erpnext/erpnext/hooks.py

@@ -7,13 +7,13 @@
 app_email = "support@askexe.com"
 app_license = "GNU General Public License (v3)"
 source_link = "https://github.com/AskExe/exe-erp"
-app_logo_url = "/assets/erpnext/images/erpnext-logo.svg"  # TODO: replace with Exe logo
+app_logo_url = "/assets/frappe/images/exe-erp-logo.svg"
 app_home = "/desk"
 
 add_to_apps_screen = [
 	{
 		"name": app_name,
-		"logo": "/assets/erpnext/images/erpnext-logo.svg",
+		"logo": "/assets/frappe/images/exe-erp-logo.svg",
 		"title": app_title,
 		"route": app_home,
 		"has_permission": "erpnext.check_app_permission",
@@ -115,8 +115,8 @@
 website_generators = ["BOM", "Sales Partner"]
 
 website_context = {
-	"favicon": "/assets/erpnext/images/erpnext-favicon.svg",
-	"splash_image": "/assets/erpnext/images/erpnext-logo.svg",
+	"favicon": "/assets/frappe/images/exe-erp-favicon.svg",
+	"splash_image": "/assets/frappe/images/exe-erp-splash.svg",
 }
 
 # Exe ERP — GoTrue SSO endpoints
@@ -534,7 +534,7 @@
 	],
 }
 
-email_brand_image = "assets/erpnext/images/erpnext-logo.jpg"
+email_brand_image = "assets/frappe/images/exe-erp-logo.svg"
 
 default_mail_footer = """
 	<span>

apps/erpnext/erpnext/public/manifest.json

@@ -6,6 +6,6 @@
   "background_color": "#0F0E1A",
   "theme_color": "#F5D76E",
   "icons": [
-    {"src": "/assets/erpnext/images/erpnext-logo.svg", "sizes": "any", "type": "image/svg+xml"}
+    {"src": "/assets/frappe/images/exe-erp-logo.svg", "sizes": "any", "type": "image/svg+xml"}
   ]
 }

docker-compose.yml

@@ -24,6 +24,7 @@ services:
       EXE_ERP_ADMIN_TOKEN: ${EXE_ERP_ADMIN_TOKEN:-}
       EXE_ADMIN_TOKEN: ${EXE_ADMIN_TOKEN:-}
       GOTRUE_URL: ${GOTRUE_URL:-}
+      GOTRUE_ADMIN_TOKEN: ${GOTRUE_ADMIN_TOKEN:-}
     volumes:
       - erp-sites:/home/frappe/frappe-bench/sites
     networks:
@@ -56,6 +57,7 @@ services:
       EXE_ERP_ADMIN_TOKEN: ${EXE_ERP_ADMIN_TOKEN:-}
       EXE_ADMIN_TOKEN: ${EXE_ADMIN_TOKEN:-}
       GOTRUE_URL: ${GOTRUE_URL:-}
+      GOTRUE_ADMIN_TOKEN: ${GOTRUE_ADMIN_TOKEN:-}
     ports:
       - "127.0.0.1:8069:8000"
     volumes:

entrypoint.sh

@@ -160,6 +160,9 @@ try:
     _admin_token = '${EXE_ERP_ADMIN_TOKEN:-}' or '${EXE_ADMIN_TOKEN:-}'
     if _admin_token:
         config['exe_admin_token'] = _admin_token
+    _gotrue_admin_token = '${GOTRUE_ADMIN_TOKEN:-}'
+    if _gotrue_admin_token:
+        config['gotrue_admin_token'] = _gotrue_admin_token
     with open('${site_config}', 'w') as f:
         json.dump(config, f, indent=2)
     print('GoTrue SSO configured in site_config.json')

frappe/templates/includes/login/login.js

@@ -3,6 +3,7 @@
 
 window.disable_signup = {{ disable_signup and "true" or "false" }};
 window.show_footer_on_login = {{ show_footer_on_login and "true" or "false" }};
+window.gotrue_login_enabled = {{ gotrue_login_enabled and "true" or "false" }};
 
 window.login = {};
 
@@ -23,7 +24,18 @@ login.bind_events = function () {
 			frappe.msgprint("{{ _('Both login and password required') | striptags | e }}");
 			return false;
 		}
-		login.call(args, null, "/api/method/login");
+		if (window.gotrue_login_enabled) {
+			login.call(
+				{
+					email: args.usr,
+					password: args.pwd,
+				},
+				null,
+				"/api/auth/gotrue-login"
+			);
+		} else {
+			login.call(args, null, "/api/method/login");
+		}
 		return false;
 	});
 
@@ -222,6 +234,12 @@ login.login_handlers = (function () {
 
 	var login_handlers = {
 		200: function (data) {
+			var gotrue_response = data.message && typeof data.message === "object" ? data.message : data;
+			if (gotrue_response && gotrue_response.success) {
+				data.message = "Logged In";
+				data.home_page = gotrue_response.home_page || data.home_page || "/desk";
+			}
+
 			if (data.message == 'Logged In') {
 				login.set_status({{ _("Success") | tojson }}, 'green');
 				document.body.innerHTML = `{% include "templates/includes/splash_screen.html" %}`;

frappe/www/login.py

@@ -45,6 +45,7 @@ def get_context(context):
 	context["disable_signup"] = cint(frappe.get_website_settings("disable_signup"))
 	context["show_footer_on_login"] = cint(frappe.get_website_settings("show_footer_on_login"))
 	context["disable_user_pass_login"] = cint(frappe.get_system_settings("disable_user_pass_login"))
+	context["gotrue_login_enabled"] = bool(frappe.conf.get("gotrue_url"))
 	context["logo"] = get_app_logo()
 	context["app_name"] = (
 		frappe.get_website_settings("app_name") or frappe.get_system_settings("app_name") or _("Exe ERP")