Files
awoooi/apps/web
OG T 589f2fc4c7
All checks were successful
E2E Health Check / e2e-health (push) Successful in 15s
fix(web): openclaw-state-machine 補上 CSRF Token (P0 根本原因)
根本原因: 首頁用的是 openclaw-state-machine.tsx 而非 LiveApprovalPanel
該元件的 handleApprove 完全沒有 CSRF token 和 credentials: include
導致後端回傳 "CSRF token cookie missing" → 按鈕沒有任何反應

修復:
- import useCSRF hook
- handleApprove 加上 X-CSRF-Token header
- fetch 加上 credentials: 'include'
- useCallback deps 加上 csrfToken

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-31 21:50:34 +08:00
..
2026-03-31 16:18:36 +08:00