api/auth.py

@@ -72,10 +72,10 @@ class AuthSession:
 class SimpleAuthMiddleware(BaseHTTPMiddleware):
     """Simple authentication middleware for web interface routes"""
     
-    def __init__(self, app, config):
+    def __init__(self, app, config, session_manager=None):
         super().__init__(app)
         self.config = config
-        self.session_manager = AuthSession(config.web_auth_session_timeout)
+        self.session_manager = session_manager or AuthSession(config.web_auth_session_timeout)
         self.security = HTTPBasic()
         
         # Routes that require authentication (web interface)

start_web.py

@@ -129,7 +129,8 @@ def main():
     
     # Add authentication middleware if enabled (BEFORE routes)
     if auth_enabled:
-        app.add_middleware(SimpleAuthMiddleware, config=config)
+        # Pass the session manager to middleware so it uses the same instance
+        app.add_middleware(SimpleAuthMiddleware, config=config, session_manager=session_manager)
         print("🔐 Authentication middleware added to web interface")
     
     # Setup static files and routes