shawn/canteen-asset-tracker
1
0
Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: route planner fetch calls now use api() wrapper with auth token

Browse Source 
Root cause: rpLoadTechs() and all other route planner API calls used
raw fetch() instead of the api() wrapper, so no Authorization header
was attached. Auth middleware returned 401, technician list never
loaded, users saw 'Select at least one technician'.

Fixed by replacing all 6 fetch('/api/...') calls in the route planner
with api('/api/...') and removing redundant .json() parsing (api()
returns parsed data directly).

Tested in browser: technician checkboxes populate, Load Today's Route
returns 3 optimized stops with 12.5km route, map renders correctly,
search tab queries return Disney WO results via auth.

Closes: #issue-to-be-created
This commit is contained in:
Shawn
2026-05-27 19:08:58 -04:00
parent 3eb09bd861
commit e66bf2638b
1 changed files with 6 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/index.html
+6 -12
View File
@@ -5177,8 +5177,7 @@
async function rpLoadTechs() {
const savedTechs = JSON.parse(localStorage.getItem('rpTechs') || '[]');
try {
const r = await fetch('/api/workorders/technicians');
const data = await r.json();
const data = await api('/api/workorders/technicians');
const container = document.getElementById('rpTechCheckboxes');
// Keep the "All" checkbox, remove existing tech checkboxes
container.querySelectorAll('label:not(:first-child)').forEach(el => el.remove());
@@ -5270,8 +5269,7 @@
if (q.length < 2) { container.innerHTML = ''; return; }
container.innerHTML = '<div style="text-align:center;padding:20px;color:var(--text2,#999);">Searching...</div>';
try {
const r = await fetch('/api/workorders/search?q=' + encodeURIComponent(q) + '&limit=30');
const data = await r.json();
const data = await api('/api/workorders/search?q=' + encodeURIComponent(q) + '&limit=30');
if (!data.results || data.results.length === 0) {
container.innerHTML = '<div style="text-align:center;padding:20px;color:var(--text2,#999);">No results</div>';
return;
@@ -5330,8 +5328,7 @@
rpShowLoading('Loading today\u2019s work orders...');
try {
const params = techs.map(t => 'tech=' + encodeURIComponent(t)).join('&');
const r = await fetch('/api/workorders/today?' + params);
const data = await r.json();
const data = await api('/api/workorders/today?' + params);
if (!data.workorders || data.workorders.length === 0) {
rpHideLoading();
return alert('No work orders found for today');
@@ -5368,12 +5365,11 @@
let woDetails = preloaded || null;
if (!woDetails) {
try {
const r = await fetch('/api/workorders/lookup', {
const data = await api('/api/workorders/lookup', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ ids: woIds }),
});
const data = await r.json();
woDetails = data.found || [];
} catch (e) {
rpHideLoading();
@@ -5388,12 +5384,11 @@
};
try {
const r = await fetch('/api/route/optimize', {
const data = await api('/api/route/optimize', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify(payload),
});
const data = await r.json();
rpHideLoading();
rpDisplayRoute(data, woDetails);
} catch (e) {
@@ -5514,8 +5509,7 @@
overlay.style.display = '';
modal.style.display = '';
try {
const r = await fetch('/api/workorders/' + encodeURIComponent(woName) + '/asset');
const data = await r.json();
const data = await api('/api/workorders/' + encodeURIComponent(woName) + '/asset');
const d = data.details || {};
let html = '<div class="asset-header"><div class="asset-title">' + esc(data.asset_name || woName) + '</div></div>';
const sections = {};