From 7e524593c09976492519c04b7b98cc633446d713 Mon Sep 17 00:00:00 2001
From: Christian Heubaum <christian.heubaum@digiseed.de>
Date: Sun, 19 Apr 2026 11:24:55 +0000
Subject: [PATCH] Fix CORS-Preflight: Token als URL-Parameter

---
 index.html | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/index.html b/index.html
index 10bd4f1..0ff9a0b 100644
--- a/index.html
+++ b/index.html
@@ -1715,6 +1715,7 @@ const APP_VERSION = '1.1.0';
 const GITEA_RAW = 'http://72.60.134.73:3000/api/v1/repos/cheubaum/BNI-Vorstellungsrunde/raw';
 const GITEA_API = 'http://72.60.134.73:3000/api/v1/repos/cheubaum/BNI-Vorstellungsrunde';
 function giteaUrl(path) { return `${GITEA_RAW}/${path}?ref=main`; }
+function giteaAuthUrl(path, token) { return `${GITEA_API}/contents/${path}?token=${encodeURIComponent(token)}`; }
 const CHAPTER_CONFIG_KEY = 'bni-active-chapter';
 
 function loadChapterConfig() {
@@ -4409,15 +4410,15 @@ async function uploadMembersToGitea() {
     try {
         // Get current SHA
         let sha = null;
-        const shaRes = await fetch(`${GITEA_API}/contents/${path}`, { headers: { 'Authorization': `token ${token}` } });
+        const shaRes = await fetch(giteaAuthUrl(path, token));
         if (shaRes.ok) sha = (await shaRes.json()).sha;
 
         const body = { message: `Mitglieder aktualisiert ${new Date().toLocaleDateString('de')}`, content };
         if (sha) body.sha = sha;
 
-        const res = await fetch(`${GITEA_API}/contents/${path}`, {
+        const res = await fetch(giteaAuthUrl(path, token), {
             method: sha ? 'PUT' : 'POST',
-            headers: { 'Authorization': `token ${token}`, 'Content-Type': 'application/json' },
+            headers: { 'Content-Type': 'application/json' },
             body: JSON.stringify(body)
         });
         if (res.ok) {