madgerm/drivetimeplaner
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add HttpOnly cookie auth for cross-domain SPA login

Browse Source 
Problem: Frontend JS bundle used credentials:'same-origin' which
dropped cookies on cross-domain requests. Login worked (200) but
the subsequent /auth/me check returned 401, leaving the user stuck
on the login screen.

Fix:
- AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh
- Cookie uses Domain=.fahrschultermin.de (shared between frontend
  and api subdomain), Secure, SameSite=Lax, Max-Age=8h
- JwtMiddleware reads JWT from Authorization header OR cookie
- Added AuthController::me() endpoint (was missing, caused 500)
- Logout endpoint clears the cookie
- Frontend index.php patches fetch() to use credentials:'include'
  for all /api/v1/* calls
This commit is contained in:
Hermes Agent
2026-06-04 20:33:31 +02:00
parent 5f753c15df
commit 5d87e4975c
1040 changed files with 95 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/AppointmentsController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/AuthController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/BootstrapController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/InstructorsController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/ReferenceDataController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/StudentsController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/TenantsController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Http/Controllers/UsersController.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/AppointmentRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/BaseRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/InstructorRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/ReferenceDataRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/StudentRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/TenantRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Repositories/UserRepository.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Services/CalendarService.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Services/HolidayService.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Services/RequirementService.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Services/SunTimesService.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Support/Auth.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Support/Database.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Support/Request.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Support/Response.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/Support/Router.php Normal file → Executable file
View File

0
backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/app/bootstrap.php Normal file → Executable file
View File