From 4c0f8bd06f03aed5f34112cb2d1438047ca692aa Mon Sep 17 00:00:00 2001
From: Ivo Oskamp <ivooskamp@oskamp.info>
Date: Thu, 28 May 2026 16:09:24 +0200
Subject: [PATCH] docs: log SPA auth gate

---
 docs/changelog-develop.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/changelog-develop.md b/docs/changelog-develop.md
index bab698a..d07d753 100644
--- a/docs/changelog-develop.md
+++ b/docs/changelog-develop.md
@@ -2,6 +2,16 @@
 
 This file documents changes on the develop branch of this project.
 
+## 2026-05-28 — Authentication: SPA gate
+
+### Added
+- App boot calls `/api/auth/me`; 401 redirects to `/login.html` (or `/setup.html`).
+- Header user-badge with sign-out button.
+- Users nav link (hidden for non-admin).
+
+### Changed
+- `requestJson` wrapper now redirects on any 401 response.
+
 ## 2026-05-28 — Authentication: setup page
 
 ### Added