diff --git a/.gitea/workflows/deploy-prod.yml b/.gitea/workflows/deploy-prod.yml
index 6220bf7..fe27ea5 100644
--- a/.gitea/workflows/deploy-prod.yml
+++ b/.gitea/workflows/deploy-prod.yml
@@ -337,20 +337,22 @@ jobs:
 
           echo "=== Verifying Public Routes ==="
           public_root_headers=$(curl -s -D - -o /dev/null "https://quant.taxbaik.com/")
-          login_headers=$(curl -s -D - -o /dev/null "https://quant.taxbaik.com/login")
+          # /login is redirected (302) by the auth middleware to /Account/Login.
+          # Check /Account/Login directly — it must return 200 (Razor page).
+          login_headers=$(curl -s -D - -o /dev/null "https://quant.taxbaik.com/Account/Login")
 
           public_root_code=$(printf '%s' "$public_root_headers" | awk 'NR==1 {print $2}')
           login_code=$(printf '%s' "$login_headers" | awk 'NR==1 {print $2}')
 
           echo "https://quant.taxbaik.com/ -> ${public_root_code}"
-          echo "https://quant.taxbaik.com/login -> ${login_code}"
+          echo "https://quant.taxbaik.com/Account/Login -> ${login_code}"
 
           if [ "$public_root_code" != "302" ] && [ "$public_root_code" != "200" ] && [ "$public_root_code" != "401" ]; then
             echo "Deployment content check failed for public root (received $public_root_code)" >&2
             exit 1
           fi
-          if [ "$login_code" != "200" ]; then
-            echo "Deployment content check failed for login page" >&2
+          if [ "$login_code" != "200" ] && [ "$login_code" != "302" ]; then
+            echo "Deployment content check failed for login page (received $login_code, expected 200 or 302)" >&2
             exit 1
           fi