v0.31.3

src/admin/web/app/runtime.js

@@ -21,12 +21,11 @@ async function startAdminPanel() {
         // app.js belongs to the authenticated shell and must not fall back to its
         // legacy embedded sign-in form when another startup step fails.
         const info = await api("/api/auth/session");
-        clearInvalidOriginRecovery();
         await loadLanguages();
         setupRequired = false;
         translate();
         syncAuthForm();
-        await activate(info);
+        if (await activate(info)) clearInvalidOriginRecovery();
     } catch (e) {
         if (recoverInvalidOrigin(e)) return;
         if (e.status === 401) {