monster/RECORDGOD
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): login loop — signin() wiped the stored token with the empty token-box

Browse Source 
After redirecting from /login with the token in localStorage, signin() read the (empty) #tok gate
input and overwrote TOKEN with '', so /me 401'd → removeItem + bounce back to /login → loop. Now keeps
the stored token when the box is empty.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
type-two 2026-06-26 17:25:21 +10:00
parent bc59cc1c4c
commit 1c8f15514c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
site/admin.html
View File

@ -97,7 +97,7 @@ async function api(path){ const r = await fetch('/admin'+path, { headers: hdr()
let ROLE = 'staff'; let ROLE = 'staff';
async function signin(){ async function signin(){
TOKEN = $('#tok') ? $('#tok').value.trim() : TOKEN; TOKEN = ($('#tok') && $('#tok').value.trim()) || TOKEN; // keep the stored token if the box is empty
let me; try { me = await api('/me'); } catch(e){ localStorage.removeItem('rg_token'); location.replace('/login'); return; } let me; try { me = await api('/me'); } catch(e){ localStorage.removeItem('rg_token'); location.replace('/login'); return; }
ROLE = me.role || 'staff'; ROLE = me.role || 'staff';
localStorage.setItem('rg_token', TOKEN); localStorage.setItem('rg_token', TOKEN);