pavel/bot
1
0
Fork 0
Code Issues Pull requests Projects Releases 22 Packages Wiki Activity Actions

fix: use cookies

Browse source
This commit is contained in:
pavel 2026-02-11 00:41:53 +01:00
commit 6e1251b136
4 changed files with 164 additions and 85 deletions
Download patch file Download diff file Expand all files Collapse all files

67
frontend/src/main.js
View file

@ -16,8 +16,7 @@ const state = {
selectedRunId: null,
currentView: 'dashboard', // 'dashboard' or 'task'
isEditing: false,
token: localStorage.getItem('auth_token'),
refreshToken: localStorage.getItem('refresh_token')
isAuthenticated: false
};
// DOM elements
@ -58,29 +57,15 @@ const presetBtns = document.querySelectorAll('.btn-preset');
// Wrapper for fetch to include Authorization header
async function fetchWithAuth(url, options = {}) {
if (!state.token) {
showLogin();
throw new Error('Not authenticated');
}
let response = await fetch(url, { ...options, credentials: 'include' });
const headers = {
...options.headers,
'Authorization': `Bearer ${state.token}`
};
let response = await fetch(url, { ...options, headers });
if (response.status === 401 && state.refreshToken) {
if (response.status === 401) {
// Try to refresh token
try {
const success = await attemptTokenRefresh();
if (success) {
// Retry original request with new token
const newHeaders = {
...options.headers,
'Authorization': `Bearer ${state.token}`
};
response = await fetch(url, { ...options, headers: newHeaders });
// Retry original request
response = await fetch(url, { ...options, credentials: 'include' });
}
} catch (error) {
console.error('Token refresh failed:', error);
@ -100,20 +85,12 @@ async function attemptTokenRefresh() {
const response = await fetch(`${API_URL}/auth/refresh`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ refresh_token: state.refreshToken })
credentials: 'include',
body: JSON.stringify({ refresh_token: '' })
});
if (response.ok) {
const data = await response.json();
if (data.access_token) {
state.token = data.access_token;
localStorage.setItem('auth_token', data.access_token);
if (data.refresh_token) {
state.refreshToken = data.refresh_token;
localStorage.setItem('refresh_token', data.refresh_token);
}
return true;
}
return true;
}
} catch (error) {
console.error('Error during token refresh:', error);
@ -514,10 +491,12 @@ async function showLogin() {
}
async function logout() {
state.token = null;
state.refreshToken = null;
localStorage.removeItem('auth_token');
localStorage.removeItem('refresh_token');
try {
await fetch(`${API_URL}/auth/logout`, { method: 'POST', credentials: 'include' });
} catch (error) {
console.error('Logout failed:', error);
}
state.isAuthenticated = false;
showLogin();
}
@ -531,16 +510,13 @@ async function handleCallback() {
loginOverlay.classList.add('hidden');
try {
const response = await fetch(`${API_URL}/auth/callback?code=${code}&redirect_uri=${encodeURIComponent(AUTH_CONFIG.redirectUri)}`);
const response = await fetch(`${API_URL}/auth/callback?code=${code}&redirect_uri=${encodeURIComponent(AUTH_CONFIG.redirectUri)}`, {
credentials: 'include'
});
const data = await response.json();
if (data.access_token) {
state.token = data.access_token;
localStorage.setItem('auth_token', data.access_token);
if (data.refresh_token) {
state.refreshToken = data.refresh_token;
localStorage.setItem('refresh_token', data.refresh_token);
}
if (response.ok) {
state.isAuthenticated = true;
callbackOverlay.classList.add('hidden');
appEl.classList.remove('hidden');
initializeApp();
@ -564,11 +540,6 @@ logoutBtn.addEventListener('click', () => {
});
async function initializeApp() {
if (!state.token) {
showLogin();
return;
}
appEl.classList.remove('hidden');
loginOverlay.classList.add('hidden');