v0.25.2

src/admin/web/app/core.js

@@ -3,6 +3,23 @@ const $ = (id) => document.getElementById(id);
 let language = null;
 try { language = localStorage.getItem("rp-language"); } catch { }
 let csrf = "", authenticated = false, setupRequired = false, sessionInfo = null;
+const ORIGIN_RECOVERY_KEY = "rp-origin-recovery-v1";
+function recoverInvalidOrigin(error) {
+    if (error?.code !== "auth.invalid_origin" || typeof location === "undefined") return false;
+    const marker = `${location.origin}${location.pathname}${location.search}`;
+    try {
+        if (sessionStorage.getItem(ORIGIN_RECOVERY_KEY) === marker) return false;
+        sessionStorage.setItem(ORIGIN_RECOVERY_KEY, marker);
+    } catch {
+        if (recoverInvalidOrigin.attempted) return false;
+        recoverInvalidOrigin.attempted = true;
+    }
+    location.reload();
+    return true;
+}
+function clearInvalidOriginRecovery() {
+    try { sessionStorage.removeItem(ORIGIN_RECOVERY_KEY); } catch { recoverInvalidOrigin.attempted = false; }
+}
 const ADMIN_THEMES = new Set(["dark", "light"]);
 let adminPreferences = null, adminPreferencesLoading = null, adminPreferencesWrite = Promise.resolve();
 function normalizeAdminTheme(value) { return ADMIN_THEMES.has(value) ? value : "dark"; }
@@ -400,10 +417,11 @@ async function revalidateSession() {
     const epoch = authEpoch;
     try {
         const info = await api("/api/auth/session");
+        clearInvalidOriginRecovery();
         if (epoch !== authEpoch) return;
         if (!authenticated) { await activate(info); return; }
         sessionInfo = info; csrf = info.csrf_token; renderSession(); await refresh(true); startLive();
-    } catch (error) { if (error.status !== 401) toast(error.message, true); }
+    } catch (error) { if (recoverInvalidOrigin(error)) return; if (error.status !== 401) toast(error.message, true); }
 }
 window.addEventListener("pageshow", event => { if (event.persisted) void revalidateSession(); });
 document.addEventListener("visibilitychange", () => { if (document.hidden) stopLive(); else if (authenticated) { void revalidateSession(); } });

src/admin/web/app/runtime.js

@@ -4,12 +4,14 @@
         // app.js belongs to the authenticated shell and must not fall back to its
         // legacy embedded sign-in form when another startup step fails.
         const info = await api("/api/auth/session");
+        clearInvalidOriginRecovery();
         await loadLanguages();
         setupRequired = false;
         translate();
         syncAuthForm();
         await activate(info);
     } catch (e) {
+        if (recoverInvalidOrigin(e)) return;
         if (e.status === 401) {
             location.replace(`${location.pathname}${location.search}`);
             return;

src/admin/web/app/settings.js

@@ -6,7 +6,7 @@ function renderSettings() {
     if (!settingsDirty.has("response-form")) {
         const server = config.server_header || {}, compression = config.compression || {}, diagnostics = config.diagnostic_headers || {};
         $("expose-request-id").checked = !!diagnostics.request_id;
-        $("server-mode").value = server.mode || "preserve"; $("server-value").value = server.value || "RustProxy/v0.25.1";
+        $("server-mode").value = server.mode || "preserve"; $("server-value").value = server.value || "RustProxy/v0.25.2";
         for (const name of ["gzip", "br", "zstd", "deflate"]) $(`compress-${name}`).checked = !!compression[name];
         $("compress-min").value = compression.min_bytes ?? 1024; syncServerMode();
     }