From 50a76e69ccc61ffb92d93f92d3191ca7aa31e2f3 Mon Sep 17 00:00:00 2001
From: nmemmert <67961292+nmemmert@users.noreply.github.com>
Date: Mon, 27 Jul 2026 15:29:33 -0400
Subject: [PATCH] Clear stale PIN from sessionStorage on load

Wipes any previously cached PIN so old browser sessions can't
auto-unlock the dashboard.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 public/admin.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/public/admin.js b/public/admin.js
index 8b4fadd..3a1347d 100644
--- a/public/admin.js
+++ b/public/admin.js
@@ -6,6 +6,7 @@ const esc = (s) =>
     ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])
   );
 
+sessionStorage.removeItem('pin');
 let parentPin = null;
 
 async function api(path, opts = {}) {