From 8702b95a81951af83a48457038ab2c7ce0c61b79 Mon Sep 17 00:00:00 2001
From: Sainan <sainan@calamity.inc>
Date: Sat, 18 Jan 2025 10:57:14 +0100
Subject: [PATCH] Revalidate authz before requesting inventory

---
 static/webui/script.js | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/static/webui/script.js b/static/webui/script.js
index 36b610a2..f4bcf1f3 100644
--- a/static/webui/script.js
+++ b/static/webui/script.js
@@ -1083,22 +1083,22 @@ function doAddAllMods() {
         modsAll.add(child.getAttribute("data-key"));
     }
 
-    const req = $.get("/api/inventory.php?" + window.authz + "&xpBasedLevelCapDisabled=1");
-    req.done(data => {
-        for (const modOwned of data.RawUpgrades) {
-            if (modOwned.ItemCount ?? 1 > 0) {
-                modsAll.delete(modOwned.ItemType);
+    revalidateAuthz(() => {
+        const req = $.get("/api/inventory.php?" + window.authz + "&xpBasedLevelCapDisabled=1");
+        req.done(data => {
+            for (const modOwned of data.RawUpgrades) {
+                if (modOwned.ItemCount ?? 1 > 0) {
+                    modsAll.delete(modOwned.ItemType);
+                }
             }
-        }
 
-        modsAll = Array.from(modsAll);
-        // Batch to avoid PayloadTooLargeError
-        const batches = [];
-        for (let i = 0; i < modsAll.length; i += 1000) {
-            batches.push(modsAll.slice(i, i + 1000));
-        }
-        batches.forEach(batch => {
-            revalidateAuthz(() => {
+            modsAll = Array.from(modsAll);
+            // Batch to avoid PayloadTooLargeError
+            const batches = [];
+            for (let i = 0; i < modsAll.length; i += 1000) {
+                batches.push(modsAll.slice(i, i + 1000));
+            }
+            batches.forEach(batch => {
                 $.post({
                     url: "/api/missionInventoryUpdate.php?" + window.authz,
                     contentType: "text/plain",