Flask Session -> Double Token

frontend/static/js/theme.js

@@ -26,18 +26,11 @@
   }
 
   function fetchTheme(cb) {
-    var xhr = new XMLHttpRequest();
-    xhr.open('GET', '/api/theme');
-    xhr.onload = function () {
-      if (xhr.status === 200) {
-        var d = {};
-        try { d = JSON.parse(xhr.responseText || '{}'); } catch (e) {}
-        if (d.effective) apply(d.effective);
-        if (cb) cb(d);
-      }
-    };
-    xhr.onerror = function () { /* 网络失败保持当前主题 */ };
-    xhr.send();
+    // noRedirect: 登录页/未登录时 401 静默失败（保持默认主题），绝不跳转造成循环
+    Auth.request('GET', '/api/theme', null, function (d, status) {
+      if (status === 200 && d.effective) apply(d.effective);
+      if (cb) cb(d);
+    }, { noRedirect: true });
   }
 
   function initTheme() {