Add HttpOnly cookie auth for cross-domain SPA login

Browse Source

Problem: Frontend JS bundle used credentials:'same-origin' which
dropped cookies on cross-domain requests. Login worked (200) but
the subsequent /auth/me check returned 401, leaving the user stuck
on the login screen.

Fix:
- AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh
- Cookie uses Domain=.fahrschultermin.de (shared between frontend
  and api subdomain), Secure, SameSite=Lax, Max-Age=8h
- JwtMiddleware reads JWT from Authorization header OR cookie
- Added AuthController::me() endpoint (was missing, caused 500)
- Logout endpoint clears the cookie
- Frontend index.php patches fetch() to use credentials:'include'
  for all /api/v1/* calls

...

This commit is contained in:

Hermes Agent

2026-06-04 20:33:31 +02:00

parent 5f753c15df

commit 5d87e4975c

1040 changed files with 95 additions and 13 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/database/app.sqlite Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/database/app.sqlite.bak-20260422203538 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/database/app.sqlite.bak-users-20260422204004 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0006a50819ddb4c83f8927e073726008 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_00309f86663d537153fcb66685d86df7 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_00409744a4c7e3bb92d2eb4076f6f9f1 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_004433bebe95f3233eb3afeacee557d2 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_01276da25030fe7610e51db01928f92e Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_013cba357db97c86d9affd6f490425d2 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_01db5cc5dc2af4df786929887036129e Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_025b3db5cdc9307a49bbc4e7c8569322 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_02ce241714378b298d820865b9f207fa Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0302bb8051aea505d498b8118cf07cbc Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_033690960537713e4b7584067e851174 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0387d0c9c23e92d7c5da1f59219d140a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_03ab912d95e7096bd5041a815feaaac6 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_03bec560a62e6282f3c00ee39e0b5185 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_03f80785c72e82de6dbb20e633f8e70b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_04921a0b3787740b88c11ab3b2b4d4dc Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_04ba107751852addceb705f95cb01636 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_04e7eeca7ab45efc4714e55d0e488aab Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_04ec6601cf72642f743fb0ad41d466b8 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0521642416caa2fbc62e3f8298109cf1 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_052b45081be50758c250257b9a65d04a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_05fa0356f494ca589061fb1f1cda9f38 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_05fc405f00dd93a93a4e02d048ecfdef Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_05fe8c42f2d6ce2eb298f3773fe7aa46 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_06322d63f2b61ed856911309f0491b02 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_068031028f6af11d6206ba4e176e106f Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_06b2450149fb978337c3b300c5177c89 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_06d7f7359a7c55810206e5722284344a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_076f1f9b3f3607d85628e676aa3deeef Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0781485879098048ec9ec26f838e230b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0854ff9e45ba1f5477fbbad5e54698f3 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_087a67b3949d5d39a90f231048dbc168 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_09013b1da99e4f816a92e860b645e65b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0979ad1bce9bd29c7f78266fb0db9496 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_09a34f83873ab7845a54ad0e1f123da2 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0a1062c7493039579c5b1ccf819017cf Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0a3a77bb3b296f6ef7c2c58f223522dc Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0a457d212ce74a302f1245eaadd68550 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0a8407b10f0705fb94abc083ef7629a1 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0a918e1bf4f81d888710bb6eabccf5b7 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0b02235f6c9d7a8fdd13403950def66a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0b4c3e7eeb7915687615efbcb7ad351a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0b689f1efcd64909309b788ce0aa77a8 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0b7a6dd656b413dfa91158a8f36533fe Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0bee18c4dceb5b1916bfb6d16f940237 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0c6b2d92ad51dc235c8a326a6f15bbde Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0cc19484bb603a199b713e1506f53ba0 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0cf9ec95094969104196ac2547eb3cc5 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0d444063fde0f76a4a254962ecc24900 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0d674f078cb072a267fab787102b842c Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0dca6c782e6359327b87294c5be46f45 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0df4eb5e781f33fdf8978650b309cd49 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e04def9d162ce239e6947e6321ae8ee Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e42f0bcb89c3342f5fd4f7440391e29 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e5c1480078e1d9b5f84eba3b40bb77e Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e60def1012c7eb8dcd4e9c711f82bd1 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e98d5ac2834ebc5bf78d2d5f0c91fea Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0e9b111cebcfc845371544ee02e6ba44 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0f07e83c587cd6ba9d4374bad4a0e050 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0f1d85f511393a35984d6532feb1861d Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0f20d94dbfd397db961146e58523b752 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0f2589aadc148fbb95ddae15307b2ea9 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0fb288edf359a988efacf668fabed004 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_0ff28449277d7fe69998599d5c19d934 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_10009006bdabf68eb0fab5eb37ca2fe3 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_110b899ae4b4a0c037123345c4e49d27 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_117db80a15a6ba699f9678b99a1d9de7 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1202777c449219fd2aac7b5ffb07de17 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1247d7fb0d48d3e756c4dffbc1270e2a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_124be71b45653d1b3f57538d487fa105 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_125bf65956128d9a6750548f818c3348 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_128a4fda8650abb78800f45754ad48be Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_12a821bed8de2d9944c9f8796684d638 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_14624d98ed0c363b2a095334c7a924c4 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_14b57fe7649feaf9706aea2773911e8a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1506f280114920a5be86dc1437738d5d Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_15ff36ba1e9ccbb86875e7ffe82f935f Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_165fb060e3ebc3fc704b851ac1d01598 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_16732beb713293cfc64b4a62d20e5cf0 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_16ef8072fdc04f0357bc1654ccd9b88b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_16f69df80eee2cd72267465123374bed Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_176074fcad8595788ae0cdc97b974c18 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_176897c620d6f055c1dbcb598905cc3b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1779168ab91c36713aafe5bf02bcc109 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1790c58801f9b2487b8c093cc82be8e9 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_17a0585e95ccd9c51a580839630dc92b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_180e9fa06a637da36cb1f76f4d0ccb9a Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_18c8679e062e0a332aca916fe40c6859 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_18e0ea982f318fbb1005dfcda8a8bdf1 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_192aef27a1fce8903cf7d28379fa497c Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_192bccfcedba055ff11758985c9485f7 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_194c7cd0b03e84efe00b5484ca2d8aac Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1950a2ef1291ec9df468535c6b0fc191 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_19770a921c71cfc42485c3ac4615611b Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_19c0d2d4a229fd60d2099992ea8690a0 Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_19fa167361a1d43b543976961054333c Normal file → Executable file

0

backup/fahrschultermin_20260518_223313/www/fahrschultermin.de/storage/sessions/sess_1a912668b674f48b5ffc7de9e824aa5e Normal file → Executable file

Some files were not shown because too many files have changed in this diff Show More