john/tractatus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(blog): add missing auth headers to submission modal API calls

Browse source 
Fixed 401 Unauthorized errors in blog validation/submission modal:
- Added Authorization Bearer token to /api/blog/admin/:id fetch (line 153)
- Added Authorization Bearer token to /api/submissions/by-blog-post/:id fetch (line 162)
- Added Authorization Bearer token to /api/submissions/:id/export fetch (line 818)

All admin API endpoints require authentication. The submission modal
was making unauthenticated requests, causing 401 errors when trying
to load article data or export submission packages.

The 404 error on by-blog-post is expected when no submission exists
for that blog post ID yet.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
TheFlow 2025-10-24 13:00:11 +13:00
parent 9cb3eadfef
commit 939e207d00
2 changed files with 25 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
public/admin/blog-curation.html
View file

@ -4,9 +4,9 @@
<meta charset="UTF-8"> <meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>External Communications Manager | Tractatus Admin</title> <title>External Communications Manager | Tractatus Admin</title>
<link rel="stylesheet" href="/css/tailwind.css?v=0.1.0.1761262254119"> <link rel="stylesheet" href="/css/tailwind.css?v=">
<link rel="stylesheet" href="/css/tractatus-theme.min.css?v=0.1.0.1761262254119"> <link rel="stylesheet" href="/css/tractatus-theme.min.css?v=">
<script defer src="/js/admin/auth-check.js?v=0.1.0.1761262254119"></script> <script defer src="/js/admin/auth-check.js?v="></script>
<style> <style>
.content-type-card input[type="radio"]:checked + div { .content-type-card input[type="radio"]:checked + div {
border-color: #3b82f6; border-color: #3b82f6;
@ -18,7 +18,7 @@
<!-- Navigation --> <!-- Navigation -->
<div id="admin-navbar" data-page-title="External Communications" data-page-icon="blog"></div> <div id="admin-navbar" data-page-title="External Communications" data-page-icon="blog"></div>
<script src="/js/components/navbar-admin.js?v=0.1.0.1761262254119"></script> <script src="/js/components/navbar-admin.js?v="></script>
<!-- Main Content --> <!-- Main Content -->
<div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8"> <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
@ -413,10 +413,10 @@
<!-- Modals --> <!-- Modals -->
<div id="modal-container"></div> <div id="modal-container"></div>
<script src="/js/admin/blog-curation.js?v=0.1.0.1761262254119"></script> <script src="/js/admin/blog-curation.js?v="></script>
<script src="/js/admin/blog-curation-enhanced.js?v=0.1.0.1761262254119"></script> <script src="/js/admin/blog-curation-enhanced.js?v="></script>
<script src="/js/admin/blog-validation.js?v=0.1.0.1761262254119"></script> <script src="/js/admin/blog-validation.js?v="></script>
<script src="/js/admin/submission-modal-enhanced.js?v=0.1.0.1761262254119"></script> <script src="/js/admin/submission-modal-enhanced.js?v="></script>
</body> </body>
</html> </html>

20
public/js/admin/submission-modal-enhanced.js
View file

@ -149,12 +149,21 @@ async function openManageSubmissionModal(articleId, submissionId) {
// Load article and submission data // Load article and submission data
try { try {
const response = await fetch(`/api/blog/admin/${articleId}`); const token = localStorage.getItem('admin_token');
const response = await fetch(`/api/blog/admin/${articleId}`, {
headers: {
'Authorization': `Bearer ${token}`
}
});
if (!response.ok) throw new Error('Failed to load article'); if (!response.ok) throw new Error('Failed to load article');
currentArticle = await response.json(); currentArticle = await response.json();
// Try to load existing submission // Try to load existing submission
const submissionResponse = await fetch(`/api/submissions/by-blog-post/${articleId}`); const submissionResponse = await fetch(`/api/submissions/by-blog-post/${articleId}`, {
headers: {
'Authorization': `Bearer ${token}`
}
});
if (submissionResponse.ok) { if (submissionResponse.ok) {
currentSubmission = await submissionResponse.json(); currentSubmission = await submissionResponse.json();
} else { } else {
@ -805,7 +814,12 @@ async function exportPackage(format) {
} }
try { try {
const response = await fetch(`/api/submissions/${currentSubmission._id}/export?format=${format}`); const token = localStorage.getItem('admin_token');
const response = await fetch(`/api/submissions/${currentSubmission._id}/export?format=${format}`, {
headers: {
'Authorization': `Bearer ${token}`
}
});
if (!response.ok) throw new Error('Export failed'); if (!response.ok) throw new Error('Export failed');
if (format === 'json') { if (format === 'json') {