From 4b3a9ef7d72f250c276e86b39d72c47380cfb6ea Mon Sep 17 00:00:00 2001
From: Olov Johansson <johansson.olov@gmail.com>
Date: Mon, 3 Aug 2026 19:31:20 +0200
Subject: [PATCH] fix deck editor login; rename to Decks

---
 deck-editor.html | 18 +++++++-----------
 index.html       |  2 +-
 server.js        |  2 ++
 3 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/deck-editor.html b/deck-editor.html
index b166d81..b54ae5c 100644
--- a/deck-editor.html
+++ b/deck-editor.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Image Decks — Orison Reach</title>
+  <title>Decks — Orison Reach</title>
   <style>
     :root {
       --void:#171513;--void-soft:#211e1a;--panel:#2a2520;--paper:#e8dcc4;
@@ -166,7 +166,7 @@
     <div class="shell">
       <a href="index.html">Archive</a>
       <a href="games.html">Sessions</a>
-      <a href="deck-editor.html" class="active">Image Decks</a>
+      <a href="deck-editor.html" class="active">Decks</a>
       <button x-show="adminToken && !needsAuth" class="btn sm ghost" @click="logout()" style="margin-left:auto">Log out</button>
     </div>
   </nav>
@@ -399,15 +399,11 @@
         saving: false, uploading: false, uploadProg: '',
 
         async init() {
-          // Check if auth is required
-          const r = await fetch('/api/admin/login', { method: 'POST',
-            headers: this.adminHeaders(), body: JSON.stringify({password:''}) })
-          if (r.status === 401) {
-            // Server has a password set — check our stored token
-            const check = await fetch('/api/decks', { headers: {'x-admin-token': this.adminToken} })
-            this.needsAuth = check.status === 401
-          }
-          if (!this.needsAuth) await this.load()
+          const check = await fetch('/api/admin/check', {
+            headers: { 'x-admin-token': this.adminToken }
+          })
+          if (check.status === 401) { this.needsAuth = true; return }
+          await this.load()
         },
 
         async login() {
diff --git a/index.html b/index.html
index ae8294f..73a1574 100644
--- a/index.html
+++ b/index.html
@@ -238,7 +238,7 @@
       <a href="#labour">Labour Project</a>
       <a href="#ledger">Survival Ledger</a>
       <a href="games.html" style="margin-left:auto">Game Sessions</a>
-      <a href="deck-editor.html" style="color:var(--brass)">Image Decks</a>
+      <a href="deck-editor.html" style="color:var(--brass)">Decks</a>
     </div>
   </nav>
 
diff --git a/server.js b/server.js
index fb26d4c..e910128 100644
--- a/server.js
+++ b/server.js
@@ -101,6 +101,8 @@ app.post('/api/admin/login', (req, res) => {
   res.json({ token: makeAdminToken() })
 })
 
+app.get('/api/admin/check', requireAdmin, (req, res) => res.json({ ok: true }))
+
 // --- Live updates (SSE) ---
 app.get('/api/games/:slug/live', (req, res) => {
   res.writeHead(200, {