|
All checks were successful
Deploy baustelle-pwa / deploy (push) Successful in 13s
- lib/api.js request(): Authorization:Bearer raus, X-Requested-With + credentials:same-origin rein (Vanilla fetch setzt X-Requested-With nicht automatisch -> ohne ihn 403 an awlauth_require). - login(): kein setToken mehr (Session im HttpOnly-Cookie); logout() ruft jetzt /logout.php (Single-Logout). - Blob-Loader (photo/pdf/file/shipment-pdf): jwt-Query raus, credentials rein; Shipment-PDF setzt zusaetzlich X-Requested-With (shipments.php=CSRF). - app.js: ensureAuth() prueft /verify.php (offline nicht ausloggen), Token-Preload raus, confirm-POST mit X-Requested-With, Audio-/PDF-Download ohne jwt-Query. [deploy] |
||
|---|---|---|
| .. | ||
| api.js | ||
| idb.js | ||
| offline.js | ||
| pdf.min.js | ||
| pdf.worker.min.js | ||
| router.js | ||