mirror of
https://github.com/openclaw/openclaw.git
synced 2026-06-03 13:34:06 +00:00
HTTP auth challenges (basic, digest, negotiate) only fire the browser's native credentials dialog when the response comes straight from the network. Service worker responses bypass the WWW-Authenticate flow, so reverse-proxy deployments with HTTP auth in front of the gateway show a bare 401 after the browser's HTTP-auth memory cache expires (e.g. on full browser restart) — forcing users to clear site data to recover. Skip event.request.mode === "navigate" so the browser handles those requests natively. Offline navigation of the app shell is lost, but the SPA cannot function without network (all API calls go to the network), so the trade-off is acceptable. Refs: #85939, #71669, #53274