From e49ce229466710c904ef509072fb18fb7e98bbcf Mon Sep 17 00:00:00 2001 From: weichen Date: Sun, 11 Oct 2026 13:53:50 +0000 Subject: [PATCH] Pin frontend with the password-session credential fix Why: password logins hand the browser an HttpOnly session cookie, but a stale Bearer key left in localStorage shadows it server-side (Bearer is checked first), so every request after login returns 401 and refreshes bounce back to the login page. Evidence: frontend commit 09310cb (vitest 19 files / 88 tests green); combined make test in this worktree recorded via evidence into the task card. Impact: dev-instance UIs reachable by LAN IP or hostname log in cleanly with username+password; API-key flow unchanged. Refs: .task/feature-login-clear-stale-key.md --- modules/frontend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/frontend b/modules/frontend index 68f6c863..09310cb7 160000 --- a/modules/frontend +++ b/modules/frontend @@ -1 +1 @@ -Subproject commit 68f6c8638b47349c2aabe0ddd5e8ba5ff7b9ea84 +Subproject commit 09310cb753192adea6f74dc73f3b9bf3a3ff64d0