Files

bert.hausmans 8ace0480ae fix: handle 401 gracefully in auth initialization after httpOnly migration

Race condition: the axios 401 interceptor uses a dynamic import, so
handleUnauthorized() fires AFTER doInitialize() sets isInitialized=true.
handleUnauthorized() then reset isInitialized to false, leaving the app
stuck on a loading spinner with no way to recover.

Fix: remove isInitialized=false from handleUnauthorized() in all three
apps. When handleUnauthorized() redirects via window.location.href, all
JS state resets naturally. When it skips the redirect (already on a
public page like /login), the app should render normally in an
unauthenticated state.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 16:24:58 +02:00

public

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

src

fix: handle 401 gracefully in auth initialization after httpOnly migration

2026-04-14 16:24:58 +02:00

auto-imports.d.ts

feat(portal): strip Vuexy demo content and create clean portal shell

2026-04-10 17:38:55 +02:00

components.d.ts

feat(portal): restructure into three-screen architecture with event tabs

2026-04-13 13:30:20 +02:00

dev.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.dev.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.prod.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

env.d.ts

feat(portal): restructure into three-screen architecture with event tabs

2026-04-13 13:30:20 +02:00

index.html

fix: add Google Fonts domains to CSP policy

2026-04-14 16:20:51 +02:00

nginx.conf

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

package.json

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

pnpm-lock.yaml

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

prod.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README 2.md

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README.md

chore: align migrations, docs, and frontends with crewli.app setup

2026-04-07 10:45:34 +02:00

shims.d.ts

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

themeConfig.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

tsconfig.json

feat(portal): strip Vuexy demo content and create clean portal shell

2026-04-10 17:38:55 +02:00

typed-router.d.ts

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

vite.config.ts

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

README.md

Crewli — Portal SPA

External-facing app for volunteers (login) and artists/suppliers (token links). Stripped Vuexy layout; same stack as other apps.

Setup

Install dependencies:

pnpm install

Create .env.local:

VITE_API_URL=http://localhost:8000/api/v1
VITE_APP_NAME="Crewli Portal"

Dev server uses port 5175 (see vite.config.ts or run from repo root: make portal).

pnpm dev --port 5175

Port

Runs on http://localhost:5175

Production: e.g. VITE_API_URL=https://api.crewli.app/api/v1 and host the SPA at https://portal.crewli.app (portal links in emails use this host; see api/.env.example).