Add HttpOnly cookie auth for cross-domain SPA login
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
This commit is contained in:
Hermes Agent
0
backup/old_api_20260520/app/Http/Controllers/AppointmentsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/AppointmentsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/AuthController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/AuthController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/BootstrapController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/BootstrapController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/InstructorsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/InstructorsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/ReferenceDataController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/ReferenceDataController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/StudentsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/StudentsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/TenantsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/TenantsController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/UsersController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Http/Controllers/UsersController.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/AppointmentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/AppointmentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/AppointmentRequestRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/AppointmentRequestRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/BaseRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/BaseRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorAvailabilityRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorAvailabilityRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorBreakRuleRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorBreakRuleRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorHomeToTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorHomeToTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorTravelTimeRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorTravelTimeRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorVacationRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/InstructorVacationRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/PrivateAppointmentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/PrivateAppointmentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/ReferenceDataRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/ReferenceDataRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/StudentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/StudentRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/StudentTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/StudentTenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/TenantRegistrationCodeRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/TenantRegistrationCodeRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/TenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/TenantRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/UserRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Repositories/UserRepository.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/CalendarService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/CalendarService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/HolidayService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/HolidayService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/RequirementService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/RequirementService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/SunTimesService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Services/SunTimesService.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Auth.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Auth.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Database.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Database.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Request.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Request.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Response.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Response.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Router.php
Normal file → Executable file
0
backup/old_api_20260520/app/Support/Router.php
Normal file → Executable file
0
backup/old_api_20260520/app/bootstrap.php
Normal file → Executable file
0
backup/old_api_20260520/app/bootstrap.php
Normal file → Executable file
0
backup/old_api_20260520/bin/migrate.php
Normal file → Executable file
0
backup/old_api_20260520/bin/migrate.php
Normal file → Executable file
0
backup/old_api_20260520/bin/seed.php
Normal file → Executable file
0
backup/old_api_20260520/bin/seed.php
Normal file → Executable file
0
backup/old_api_20260520/config/app.php
Normal file → Executable file
0
backup/old_api_20260520/config/app.php
Normal file → Executable file
0
backup/old_api_20260520/database/import_pgsql.sql
Normal file → Executable file
0
backup/old_api_20260520/database/import_pgsql.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/001_initial.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/001_initial.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/002_instructors_user_link.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/002_instructors_user_link.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/003_backfill_instructor_user_links.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/003_backfill_instructor_user_links.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/004_lesson_type_template_visibility.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/004_lesson_type_template_visibility.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/005_tenant_location_sun.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/005_tenant_location_sun.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/006_tenant_federal_state.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/006_tenant_federal_state.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/007_student_prior_completed_units.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/007_student_prior_completed_units.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/008_lesson_type_system_key.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/008_lesson_type_system_key.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/009_requirement_phase_labels.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/009_requirement_phase_labels.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/010_student_email.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/010_student_email.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/010_students_contact_flags.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/010_students_contact_flags.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/011_student_needs_glasses.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/011_student_needs_glasses.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/012_split_combination_templates.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/012_split_combination_templates.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/013_combo_generic_key_cleanup.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/013_combo_generic_key_cleanup.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/014_legacy_student_key_aliases_to_lesson_type_keys.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/014_legacy_student_key_aliases_to_lesson_type_keys.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/015_instructor_pre_start_buffer.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/015_instructor_pre_start_buffer.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/015_lesson_type_allows_student_and_notes_private.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/015_lesson_type_allows_student_and_notes_private.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/016_consolidate_lesson_types.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/016_consolidate_lesson_types.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/017_student_booking_schema.sql
Normal file → Executable file
0
backup/old_api_20260520/database/migrations/017_student_booking_schema.sql
Normal file → Executable file
0
backup/old_api_20260520/database/schema_pgsql.sql
Normal file → Executable file
0
backup/old_api_20260520/database/schema_pgsql.sql
Normal file → Executable file
Reference in New Issue
Block a user