From bbbb417b01b71dd3c6e552f35ee70b1408c8f29e Mon Sep 17 00:00:00 2001
From: rcourtman <courtmanr@gmail.com>
Date: Sat, 22 Nov 2025 07:18:42 +0000
Subject: [PATCH] Prevent token manager auth swap and fix docker agent perms
 (Related to #740)

---
 frontend-modern/src/components/Settings/APITokenManager.tsx | 3 ---
 scripts/install-container-agent.sh                          | 2 +-
 scripts/install-docker-agent-v2.sh                          | 2 +-
 scripts/install-docker-agent.sh                             | 2 +-
 4 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/frontend-modern/src/components/Settings/APITokenManager.tsx b/frontend-modern/src/components/Settings/APITokenManager.tsx
index 4bb203dd4..f6360ce90 100644
--- a/frontend-modern/src/components/Settings/APITokenManager.tsx
+++ b/frontend-modern/src/components/Settings/APITokenManager.tsx
@@ -5,7 +5,6 @@ import { formatRelativeTime } from '@/utils/format';
 import { useWebSocket } from '@/App';
 import type { DockerHost, Host } from '@/types/api';
 import { showTokenReveal, useTokenRevealState } from '@/stores/tokenReveal';
-import { setApiToken as setApiClientToken } from '@/utils/apiClient';
 import { logger } from '@/utils/logger';
 import { Card } from '@/components/shared/Card';
 import { SectionHeader } from '@/components/shared/SectionHeader';
@@ -262,8 +261,6 @@ export const APITokenManager: Component<APITokenManagerProps> = (props) => {
       });
       showSuccess('New API token generated. Copy it below while it is still visible.');
       props.onTokensChanged?.();
-
-      setApiClientToken(token);
     } catch (err) {
       logger.error('Failed to generate API token', err);
       showError('Failed to generate API token');
diff --git a/scripts/install-container-agent.sh b/scripts/install-container-agent.sh
index 5163eeda3..ec4f87508 100755
--- a/scripts/install-container-agent.sh
+++ b/scripts/install-container-agent.sh
@@ -515,7 +515,7 @@ download_agent() {
   fi
 
   mv "$tmp" "$AGENT_PATH"
-  chmod +x "$AGENT_PATH"
+  chmod 0755 "$AGENT_PATH"
   log_success "Agent installed at $AGENT_PATH"
 }
 
diff --git a/scripts/install-docker-agent-v2.sh b/scripts/install-docker-agent-v2.sh
index 2390ace5e..882ce81bd 100755
--- a/scripts/install-docker-agent-v2.sh
+++ b/scripts/install-docker-agent-v2.sh
@@ -875,7 +875,7 @@ if [[ -n "${AGENT_DOWNLOAD_SOURCE:-}" ]]; then
 fi
 
 if ! common::is_dry_run; then
-    chmod +x "$AGENT_PATH"
+    chmod 0755 "$AGENT_PATH"
 fi
 log_success "Agent binary installed"
 
diff --git a/scripts/install-docker-agent.sh b/scripts/install-docker-agent.sh
index e4dd21eaa..366a2aeb3 100755
--- a/scripts/install-docker-agent.sh
+++ b/scripts/install-docker-agent.sh
@@ -1745,7 +1745,7 @@ if [[ -n "$DOWNLOAD_SUCCESS_URL" ]]; then
     fi
 fi
 
-chmod +x "$AGENT_PATH"
+chmod 0755 "$AGENT_PATH"
 log_success "Agent binary installed"
 
 allow_reenroll_if_needed() {