feat: implement API security measures phase 1

web/src/hooks/useDashboardData.ts

@@ -11,9 +11,20 @@ interface UseDashboardDataResult {
 const API_BASE = "/api";
 
 async function fetchJson<T>(url: string): Promise<T> {
-  const response = await fetch(url);
+  const token = localStorage.getItem("access_token");
+  const headers: Record<string, string> = {
+    "Content-Type": "application/json",
+  };
+  if (token) {
+    headers["Authorization"] = `Bearer ${token}`;
+  }
+  const response = await fetch(url, { headers });
   if (!response.ok) {
-    throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+    const body = await response.json().catch(() => ({}));
+    throw new Error(
+      (body as { error?: string }).error ||
+        `HTTP ${response.status}: ${response.statusText}`
+    );
   }
   return response.json() as Promise<T>;
 }