diff --git a/src/middleware.ts b/src/middleware.ts
index bf12286..f2a9f02 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -84,11 +84,15 @@ export default auth((req) => {
     if (pathname.startsWith('/api/')) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
     }
-    const loginUrl = siteUrl(req, '/login')
-    loginUrl.searchParams.set('callbackUrl', pathname)
-    return NextResponse.redirect(loginUrl)
+    if (pathname !== '/login') {
+      const loginUrl = siteUrl(req, '/login')
+      loginUrl.searchParams.set('callbackUrl', pathname)
+      return NextResponse.redirect(loginUrl)
+    }
+    return NextResponse.next()
   }
 
+  // Logged-in users hitting /login get sent to the dashboard
   if (pathname === '/login') {
     return NextResponse.redirect(siteUrl(req, '/dashboard'))
   }