mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
7b2f28f505
Two backend fixes: 1. proxyReq was forwarding the browser's sencho_token cookie to the remote Sencho. The remote's authMiddleware uses cookieToken || bearerToken, so the invalid local-signed cookie was verified before the valid Bearer token, returning 401 on every proxied API call. Strip the cookie header in proxyReq so remote auth uses only the Bearer token. 2. nodeContextMiddleware blocked /api/nodes when x-node-id referenced a deleted node, trapping the frontend in an unrecoverable 404 loop (it could not fetch the nodes list to discover the node was gone). Exempt /api/nodes alongside /api/auth/ so the app can always self-heal.