Authenticate ticket popup API session

5714f06ae41723078849465d9161bd369c66aa6b · 2026-09-02 15:11:17 -0700 · Steve Abrams

Files touched

M desktop-bar/TicketBar.swift

Diff

commit 5714f06ae41723078849465d9161bd369c66aa6b
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed Sep 2 15:11:17 2026 -0700

    Authenticate ticket popup API session
---
 desktop-bar/TicketBar.swift | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/desktop-bar/TicketBar.swift b/desktop-bar/TicketBar.swift
index b59b1c75..39a4574b 100644
--- a/desktop-bar/TicketBar.swift
+++ b/desktop-bar/TicketBar.swift
@@ -227,10 +227,10 @@ private final class BarController: NSObject, NSApplicationDelegate, WKNavigation
     web.navigationDelegate = self
     web.autoresizingMask = [.width, .height]
     popup.contentView = web
-    var request = URLRequest(url: viewerURL)
-    let token = Data("admin:DW2024!".utf8).base64EncodedString()
-    request.setValue("Basic \(token)", forHTTPHeaderField: "Authorization")
-    web.load(request)
+    // Let WebKit's HTTP Basic challenge establish a session-wide credential;
+    // a one-off Authorization header would authenticate the HTML navigation but
+    // leave the board's same-origin fetch() calls unauthenticated and blank.
+    web.load(URLRequest(url: viewerURL))
     popup.center()
     ticketPopup = popup
     popup.makeKeyAndOrderFront(nil)

← 29ce97b1 Add draggable ticket status tabs · back to Ticket System · Record ticket control popup proof 5ac7db01 →