From b6715e495aed4c100dab330428cdc17d5c69413a Mon Sep 17 00:00:00 2001
From: Daniel Harvey <the.real.daniel.harvey@gmail.com>
Date: Mon, 18 May 2026 15:38:24 -0400
Subject: [PATCH] Fix 401 on track delete: attach JWT bearer token in
 TrackList.ConfirmAndDelete

---
 DeepDrftCms/Pages/Tracks/TrackList.razor | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/DeepDrftCms/Pages/Tracks/TrackList.razor b/DeepDrftCms/Pages/Tracks/TrackList.razor
index f6892c6..a7f66d4 100644
--- a/DeepDrftCms/Pages/Tracks/TrackList.razor
+++ b/DeepDrftCms/Pages/Tracks/TrackList.razor
@@ -1,11 +1,13 @@
 @page "/cms/tracks"
 @rendermode InteractiveServer
 @using System.Net
+@using System.Net.Http.Headers
 @using AuthBlocksWeb.HierarchicalAuthorize
 @using DeepDrftModels.Models
 @attribute [HierarchicalRoleAuthorize("Admin")]
 @inject ITrackService TrackService
 @inject IHttpClientFactory HttpClientFactory
+@inject AuthBlocksWeb.Services.ITokenService TokenService
 @inject IDialogService DialogService
 @inject ISnackbar Snackbar
 @inject ILogger<TrackList> Logger
@@ -115,6 +117,9 @@
         try
         {
             var client = HttpClientFactory.CreateClient("DeepDrft.API");
+            var token = await TokenService.GetAccessTokenAsync();
+            if (!string.IsNullOrEmpty(token))
+                client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token);
             var response = await client.DeleteAsync($"api/cms/track/{track.Id}");
 
             if (response.IsSuccessStatusCode)