Fix remote portal trip list

- /api/trips now returns {trips:[...]} to match what history.js expects (result.trips)
- odo_start_km null guard in history.js (server trips have no odometer data)
- require_login returns 401 JSON for /api/* paths instead of HTML redirect

Co-authored-by: Copilot <[email protected]>

server/app.py

@@ -562,8 +562,13 @@ def recompute_trips():
 @app.get("/api/trips")
 @require_login
 def portal_trips_compat():
-    """Pi history.js compatibility alias."""
-    return portal_trips()
+    """Pi history.js compatibility alias — wraps response in {trips: [...]}."""
+    device_id = _portal_device_id()
+    if device_id is None:
+        return jsonify(error="device not configured"), 404
+    limit = min(int(request.args.get("limit", 200)), 1000)
+    trips = db.list_trips(device_id, limit=limit)
+    return jsonify(trips=trips)
 
 
 @app.get("/api/trip/<int:trip_id>")

server/modules/user_auth.py

@@ -38,10 +38,14 @@ def hash_password(plain):
 
 
 def require_login(view):
-    """Decorator: redirect to login page if not authenticated."""
+    """Decorator: redirect to login page if not authenticated (HTML routes),
+    or return 401 JSON for /api/* routes."""
     @wraps(view)
     def wrapped(*args, **kwargs):
         if not current_user.is_authenticated:
+            from flask import request, jsonify
+            if request.path.startswith("/api/"):
+                return jsonify(error="not authenticated"), 401
             return redirect(url_for("login_page"))
         return view(*args, **kwargs)
     return wrapped