# Audible3 Authentication + Audio Upload Fix

Build: 2026-08-12 auth-upload-v6

## Fixed

- Guests always see **Login** and **Sign Up** in the header.
- The **Admin** navigation item is never shown until the server has verified an authenticated administrator session.
- Old/stale browser `memberSession` data can no longer make the site appear logged in when the JWT access token is missing.
- Expired or invalid protected-session requests clear the stale token and return the visitor to Login.
- `/admin` uses the administrator login endpoint.
- Audio/book uploads verify the administrator session before scanning or uploading large files.
- If an admin session expires during an upload, Audible3 shows a clear session-expired message and requires login again.
- Static Sign Up button now opens the actual signup route.
- Service-worker and asset cache versions were bumped so browsers do not keep the old authentication behavior.

## Deployment

Keep the existing production `.env` file. Replace the application files with this build, run `npm install --omit=dev` if dependencies are not already installed, then restart the Node application.

After deployment, refresh Audible3. The new service worker will remove the previous shell cache during activation.