diff --git a/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.manifest.json b/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.manifest.json
index c722004..0b952f8 100644
--- a/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.manifest.json
+++ b/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.manifest.json
@@ -23,7 +23,7 @@
     "officeFabricIconFontName": "Page",
     "properties": {
       "apiBaseUrl": "http://localhost:5080",
-      "useDevAuth": true,
+      "useDevAuth": false,
       "devUserEmail": "dev@tnsu.kz",
       "aadResourceId": "api://9232d9e2-9807-4753-808f-07250e5474b0",
       "portalBaseUrl": "https://api.tnsu.kz"
diff --git a/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.ts b/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.ts
index bb1c75d..febed9b 100644
--- a/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.ts
+++ b/frontend/src/webparts/approvalAdmin/ApprovalAdminWebPart.ts
@@ -36,7 +36,10 @@ export default class ApprovalAdminWebPart extends BaseClientSideWebPart<IApprova
 
   protected onInit(): Promise<void> {
     this.properties.apiBaseUrl = this.properties.apiBaseUrl || 'http://localhost:5080';
-    this.properties.useDevAuth = this.properties.useDevAuth ?? true;
+    // Dev-режим ломает /resolve: наш бэкенд не получает Bearer-токен пользователя
+    // для пересылки в api.tnsu.kz и падает на собственном client_credentials
+    // (TnsuPortal:ClientSecret в appsettings.json пуст). По умолчанию — реальный AAD.
+    this.properties.useDevAuth = this.properties.useDevAuth ?? false;
     this.properties.devUserEmail = this.properties.devUserEmail || 'dev@tnsu.kz';
     this.properties.aadResourceId = this.properties.aadResourceId || 'api://9232d9e2-9807-4753-808f-07250e5474b0';
     this.properties.portalBaseUrl = this.properties.portalBaseUrl || 'https://api.tnsu.kz';