From 896e42d9ccbe8696c9450aeec31d9812cebcf6bb Mon Sep 17 00:00:00 2001
From: COMTREE <vibsin74@gmail.com>
Date: Fri, 22 Aug 2025 16:42:30 +0900
Subject: [PATCH] fix(admin): include credentials on auth requests and adapt
 login response

---
 admin/script.js | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/admin/script.js b/admin/script.js
index 44825d2..8ef7403 100644
--- a/admin/script.js
+++ b/admin/script.js
@@ -461,7 +461,7 @@ class AdminFileManager {
 
     async checkSession() {
         try {
-            const response = await fetch('/api/auth/session');
+            const response = await fetch('/api/auth/session', { credentials: 'include' });
             if (response.ok) {
                 const data = await response.json();
                 if (data.user) {
@@ -494,20 +494,21 @@ class AdminFileManager {
                 headers: {
                     'Content-Type': 'application/json'
                 },
+                credentials: 'include',
                 body: JSON.stringify({ email, password })
             });
 
             const data = await response.json();
 
             if (response.ok) {
-                this.currentUser = data.user;
+                this.currentUser = data.user || data.data || null;
                 this.isLoggedIn = true;
                 this.showNotification('로그인되었습니다!', 'success');
                 
                 await this.loadData();
                 this.updateUI();
             } else {
-                throw new Error(data.message || '로그인에 실패했습니다.');
+                throw new Error(data.error || data.message || '로그인에 실패했습니다.');
             }
         } catch (error) {
             console.error('로그인 오류:', error);
@@ -520,7 +521,7 @@ class AdminFileManager {
 
     async handleLogout() {
         try {
-            await fetch('/api/auth/logout', { method: 'POST' });
+            await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
             
             this.currentUser = null;
             this.isLoggedIn = false;