5d87e4975c
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
29 lines
724 B
JSON
Executable File
29 lines
724 B
JSON
Executable File
{
|
|
"name": "drivetimeplaner/api",
|
|
"description": "DriveTime Planner API - Slim 4",
|
|
"type": "project",
|
|
"require": {
|
|
"php": "^8.2",
|
|
"slim/slim": "^4.12",
|
|
"slim/psr7": "^1.6",
|
|
"php-di/php-di": "^7.0",
|
|
"illuminate/database": "^11.0",
|
|
"firebase/php-jwt": "^7.0",
|
|
"respect/validation": "^2.2",
|
|
"robmorgan/phinx": "^0.14",
|
|
"tuupola/cors-middleware": "^1.2",
|
|
"symfony/dotenv": "^7.0"
|
|
},
|
|
"autoload": {
|
|
"psr-4": {
|
|
"App\\": "src/"
|
|
}
|
|
},
|
|
"scripts": {
|
|
"migrate": "phinx migrate",
|
|
"migrate:rollback": "phinx rollback"
|
|
},
|
|
"config": {
|
|
"optimize-autoloader": true
|
|
}
|
|
} |