ryan b7e5e811d1 fix(auth): register CAP scope, 400 on captcha, 403 for permission ...

Navigating from login reused a send_email_code token on register.
Captcha failure used 401 so the client stored /register as the
post-login target and never left the page. Permission denials now
return 403, and the API client no longer wipes the session on 401.

2026-09-02 18:26:22 +08:00

..

services

fix(auth): register CAP scope, 400 on captcha, 403 for permission

2026-09-02 18:26:22 +08:00

theme

chore: docs

2026-08-28 00:11:54 +08:00

utils

prettier

2026-07-13 15:17:45 +08:00

api-envelope.ts

prettier

2026-07-13 15:17:45 +08:00

app-info.ts

prettier

2026-07-13 15:17:45 +08:00

cap-solver.ts

fix(frontend): call versioned CAP challenge and redeem APIs

2026-09-02 17:31:06 +08:00

task-param-utils.ts

prettier

2026-07-13 15:17:45 +08:00

utils.ts

fix(auth): register CAP scope, 400 on captcha, 403 for permission

2026-09-02 18:26:22 +08:00