diff --git a/views/admin/layout.ejs b/views/admin/layout.ejs
index ac59c4c..38f7b15 100644
--- a/views/admin/layout.ejs
+++ b/views/admin/layout.ejs
@@ -121,9 +121,19 @@ tr:hover td{background:rgba(255,255,255,.02)}
 <div class="toast" id="toast"></div>
 <script>
 function api(method, url, data) {
-  const opts = { method, headers: { 'Content-Type': 'application/json' } };
+  const opts = { method, headers: { 'Content-Type': 'application/json' }, redirect: 'manual' };
   if (data) opts.body = JSON.stringify(data);
-  return fetch(url, opts).then(r => r.json());
+  return fetch(url, opts).then(r => {
+    if (r.status === 401 || r.type === 'opaqueredirect' || r.status === 0) {
+      window.location.href = '/login?redirect=' + encodeURIComponent(window.location.pathname);
+      return [];
+    }
+    if (!r.ok) return r.json().then(j => { throw new Error(j.error || 'API Error'); });
+    return r.json();
+  }).catch(err => {
+    console.error('API Error:', err);
+    return [];
+  });
 }
 function toast(msg, type = 'success') {
   const el = document.getElementById('toast');