4 Commits

Author	SHA1	Message	Date
ryan	b7e5e811d1	fix(auth): register CAP scope, 400 on captcha, 403 for permission ... Navigating from login reused a send_email_code token on register. Captcha failure used 401 so the client stored /register as the post-login target and never left the page. Permission denials now return 403, and the API client no longer wipes the session on 401.	2026-09-02 18:26:22 +08:00
ryan	9f15f42b47	fix(frontend): keep browser API on same-origin rewrites in dev ... Document that NEXT_PUBLIC_WAVELET_BACKEND_URL must stay unset for local next dev so axios hits /api/* and Next rewrites proxy to the backend.	2026-08-03 21:25:22 +08:00
ryan	e0eb4e5975	prettier	2026-07-13 15:17:45 +08:00
ryan	72d72810b2	cap 与系统信息	2026-06-08 20:37:47 +08:00