OG T
95de7e0e15
E2E Health Check / e2e-health (push) Successful in 19s
fix(web): 活躍事件 Y/n 按鈕補上 CSRF Token (P0 根本原因)
問題: DualStateIncidentCard 的 Y/n 按鈕呼叫 apiClient.signApproval/rejectApproval
時,沒有帶 X-CSRF-Token header 也沒有 credentials: 'include'
後端返回 403 CSRF token cookie missing
修復:
- api-client.ts: signApproval/rejectApproval 加入 csrfToken 參數
+ X-CSRF-Token header + credentials: 'include'
- dual-state-incident-card.tsx: 加入 useCSRF() hook,
將 csrfToken 傳入 API 呼叫,更新 useCallback deps
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-31 22:45:27 +08:00
..
2026-03-31 18:59:28 +08:00
2026-03-22 18:57:44 +08:00
2026-03-23 01:19:08 +08:00
2026-03-31 22:45:27 +08:00
2026-03-29 16:04:43 +08:00
2026-03-31 16:18:36 +08:00
2026-03-31 18:59:28 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 15:33:36 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 15:19:52 +08:00
2026-03-31 19:10:33 +08:00
2026-03-31 16:18:36 +08:00
2026-03-22 18:57:44 +08:00
2026-03-24 16:16:34 +08:00
2026-03-24 15:19:52 +08:00
2026-03-24 15:19:52 +08:00
2026-03-28 18:04:12 +08:00
2026-03-22 18:57:44 +08:00
2026-03-31 11:18:53 +08:00