Fix: session persistence on refresh - don't clear tokens on network/server errors

static/auth-client.js

@@ -126,23 +126,27 @@
     return this.ensureValidAccessToken()
       .then(function (ok) {
         if (!ok) {
+          // Token refresh failed explicitly — clear session
           self.clearSession();
           return false;
         }
         return loadProfile();
       })
-      .catch(function () {
-        return self.refreshAccessToken().then(function (refreshed) {
-          if (!refreshed) {
-            self.clearSession();
-            return false;
-          }
-          return loadProfile();
-        });
+      .then(function (result) {
+        return result;
       })
-      .catch(function () {
-        self.clearSession();
-        return false;
+      .catch(function (err) {
+        // Network error / server down — DON'T clear session.
+        // Keep tokens so user can retry after server comes back.
+        var msg = (err && err.message) || '';
+        if (msg.indexOf('Session expired') !== -1 || msg.indexOf('401') !== -1) {
+          // Explicit auth failure — clear session
+          self.clearSession();
+          return false;
+        }
+        // Transient error (502, network, timeout) — keep session, show dashboard anyway
+        console.warn('restoreSession: transient error, keeping session:', msg);
+        return true;
       });
   };