daniel/deepdrft
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 13 Wiki Activity

docs: clear resolved TrackNew bearer-token entry from TODO

Browse Source
This commit is contained in:
Daniel Harvey
2026-05-24 19:01:30 -04:00
parent af59915cef
commit 058e4ca196
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
TODO.md
-4
View File
@@ -3,7 +3,3 @@
Pre-existing bugs and known issues not yet triaged into the roadmap. Items here are waiting for scheduling or architectural clarity.
---
## Attach bearer token to `TrackNew.razor` WAV upload
`DeepDrftManager/Components/Pages/Tracks/TrackNew.razor` at line ~137 POSTs to `api/cms/track` without an `Authorization` header. `CmsUploadController` carries `[Authorize(Roles = "Admin")]`, so uploads return 401 in production. **Fix:** inject `IAuthSession`, copy the `AttachBearerAsync(HttpClient)` helper from the sibling `TrackEdit.razor`, call it on the client immediately after `HttpClientFactory.CreateClient("DeepDrft.API")`. Pre-existing issue, not a regression from the 10.3.33 upgrade. `IAuthSession` is now globally available, so the fix is trivial. A worktree (`tracknew-bearer`) and pending session task already exist for this; the file note here is the persistent record in case the session ends before it lands.