mirror of
https://github.com/Such-Software/wownerogue.git
synced 2026-10-18 22:58:32 +02:00
Even with the anon_token status query, Smirk one-click stayed disabled after a reload: the server ROTATES the session token on every resume (sessionManager), so the initial SmirkAuth.checkStatus() raced the rotation and 403d with the now-stale token, leaving _isLinked=false. Re-run checkStatus right after the fresh token is persisted (session_token / session_resumed) via _refreshSmirkLinked, so _isLinked reflects the current token before the user buys — restoring the Smirk payment popup.