From fea8a663a04e59131dbd9d71a8035613f99ffa27 Mon Sep 17 00:00:00 2001
From: Sandra <229708855+SandraNelj@users.noreply.github.com>
Date: Mon, 27 Apr 2026 13:04:04 +0200
Subject: [PATCH] fix: use cookie-based auth in admin audit log page

- Replace localStorage token with credentials: 'same-origin'
- Fix search functionality not working due to missing auth
---
 src/main/resources/static/admin-audit-log.html | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/main/resources/static/admin-audit-log.html b/src/main/resources/static/admin-audit-log.html
index f6ed032..d7f655f 100644
--- a/src/main/resources/static/admin-audit-log.html
+++ b/src/main/resources/static/admin-audit-log.html
@@ -35,7 +35,6 @@ <h1 class="text-3xl font-bold mb-6">📋 Audit Log</h1>
 
 <script>
     const API = '/api/admin/audit';
-    const token = localStorage.getItem('token');
 
     document.getElementById('searchInput').addEventListener('keypress', e => {
         if (e.key === 'Enter') searchLogs();
@@ -54,7 +53,7 @@ <h1 class="text-3xl font-bold mb-6">📋 Audit Log</h1>
 
     async function fetchLogs(url) {
         try {
-            const res = await fetch(url, { headers: { 'Authorization': 'Bearer ' + token } });
+            const res = await fetch(url, { credentials: 'same-origin' });
             if (!res.ok) {
                 console.warn('Audit log fetch failed:', res.status);
                 document.getElementById('logBody').innerHTML =