From 478c01db4e98a1c2fe1013b03e86d4490276c569 Mon Sep 17 00:00:00 2001
From: tom27052006 <83423411+tom27052006@users.noreply.github.com>
Date: Sun, 19 Jul 2026 00:14:19 +0200
Subject: [PATCH] Fix admin TOTP endpoint URLs

---
 src/static/scripts/admin_totp.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/static/scripts/admin_totp.js b/src/static/scripts/admin_totp.js
index f80672de..a07962b6 100644
--- a/src/static/scripts/admin_totp.js
+++ b/src/static/scripts/admin_totp.js
@@ -3,7 +3,7 @@
 /* global BASE_URL:readable, _post:readable */
 
 function totpGenerate() {
-    fetch(`${BASE_URL}/totp/generate`, {
+    fetch(`${BASE_URL}/admin/totp/generate`, {
         method: "POST",
         mode: "same-origin",
         credentials: "same-origin",
@@ -33,7 +33,7 @@ function totpEnable() {
         alert("Please enter the 6-digit code from your authenticator app");
         return;
     }
-    _post(`${BASE_URL}/totp/enable`,
+    _post(`${BASE_URL}/admin/totp/enable`,
         "2FA for the admin page is now enabled",
         "Failed to enable 2FA",
         JSON.stringify({ secret, code })
@@ -49,7 +49,7 @@ function totpDisable() {
     if (!confirm("Really disable two-factor authentication for the admin page?")) {
         return;
     }
-    _post(`${BASE_URL}/totp/disable`,
+    _post(`${BASE_URL}/admin/totp/disable`,
         "2FA for the admin page is now disabled",
         "Failed to disable 2FA",
         JSON.stringify({ code })