fix auth and backend force

static/js/api.js

@@ -48,6 +48,8 @@ export async function api(path, options = {}) {
   const timeout = setTimeout(() => controller.abort(), 12000);
   try {
     const headers = new Headers(options.headers || {});
+    const authToken = localStorage.getItem("rustpad:auth-token") || sessionStorage.getItem("rustpad:auth-token");
+    if (authToken && !headers.has("authorization")) headers.set("authorization", `Bearer ${authToken}`);
     if (!(options.body instanceof FormData) && !headers.has("content-type")) headers.set("content-type", "application/json");
     const started = performance.now();
     logDebug("api.request", { method: options.method || "GET", path });

static/js/note-editor.js

@@ -33,7 +33,7 @@ export function startNoteEditor(adapter) {
   function currentOwner() { const color = currentUserColor(); return color ? `${nickname}\u001f${color}` : nickname; }
   function updateCurrentUser() { const color = currentUserColor() || defaultColorFor(nickname); currentUser.querySelector(".user-chip__name").textContent = nickname; currentUser.style.setProperty("--owner", color); userColorPicker.value = /^#[0-9a-f]{6}$/i.test(color) ? color : "#7c6cff"; }
   function toast(text) { const el = document.querySelector("#toast"); el.textContent = text; el.classList.add("visible"); setTimeout(() => el.classList.remove("visible"), 1800); }
-  function sessionHeaders() { const token = getAuthToken(); return token ? { Authorization: `Bearer ${token}` } : {}; }
+  function sessionHeaders() { const token = accessToken || getAuthToken(); return token ? { Authorization: `Bearer ${token}` } : {}; }
   async function loadNoteInfo() { info = await adapter.loadInfo(sessionHeaders()); return info; }
   function updatePresence(users) { const entries = Array.isArray(users) ? users : []; roomCount.textContent = `${entries.length} ${entries.length === 1 ? "user" : "users"}`; roomUsers.replaceChildren(...entries.map(entry => { const user = typeof entry === "string" ? { name: entry, color: "" } : entry || {}; const li = document.createElement("li"), dot = document.createElement("span"), label = document.createElement("span"); li.className = "room-user"; dot.className = "room-user__dot"; dot.style.setProperty("--owner", /^#[0-9a-f]{6}$/i.test(user.color || "") ? user.color : defaultColorFor(user.name)); label.textContent = user.name || "Guest"; li.title = label.textContent; li.append(dot, label); return li; })); if (!entries.length) { const li = document.createElement("li"); li.textContent = "No active users"; roomUsers.append(li); } }
   function updateLatency(ms) { socketLatency.textContent = Number.isFinite(ms) ? `${ms} ms` : "— ms"; }

static/js/workspace.js

@@ -102,7 +102,8 @@ async function openWorkspace() {
 }
 async function init() {
   try {
-    info = await api(`/api/workspaces/${encodeURIComponent(slug)}`);
+    const headers = accessToken ? { Authorization: `Bearer ${accessToken}` } : {};
+    info = await api(`/api/workspaces/${encodeURIComponent(slug)}`, { headers });
     document.querySelector("#workspace-title").textContent = info.title;
     document.querySelector("#workspace-url").textContent = location.pathname;
     if (info.protected && !accessToken) dialog.showModal(); else openWorkspace();