weichen 17796113a1 Fix auth dead-ends locking admins out of user management ...

Why: an admin with a stale API key in localStorage was 401'd on every
request despite a valid session (Bearer precedence), and API-key holders
entering the forced-change gate could never complete it (passwords are
session-owned) while every 401 showed "wrong username or password",
masking the real cause.

Evidence: backend go test ./... and frontend vitest 93/93 green locally
(SELF); sub-repo PRs Backend#153 / Frontend#54 carry GATE CI; combined
make test evidence recorded in the task card.

Impact: pins backend 6681c3b and frontend dc18d6c via gitlinks; fills
the task card with diagnosis, requirements R1-R4 and plan.

Refs: task feature/admin-auth-gate-fix.

2026-10-11 13:47:28 +00:00

..

backend @ 6681c3b47c

Fix auth dead-ends locking admins out of user management

2026-10-11 13:47:28 +00:00

core @ 89f3906c39

Pin the U4 component set: core surface TS types, ui SurfaceView, frontend preview

2026-10-11 12:21:12 +00:00

documents @ eb36571653

Merge authoritative main into the task branch

2026-10-11 13:11:18 +00:00

frontend @ dc18d6c747

Fix auth dead-ends locking admins out of user management

2026-10-11 13:47:28 +00:00

ui @ 6f68a9579d

Re-pin ui with the knip baseline bump (#45)

2026-10-11 12:27:10 +00:00