5d87e4975c
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
13 lines
369 B
Plaintext
Executable File
13 lines
369 B
Plaintext
Executable File
# PostgreSQL Database (fahrschuldesk)
|
|
# Zugriff nur über SSH-Tunnel via fahrschuldesk.de
|
|
|
|
DB_CONNECTION=pgsql
|
|
DB_HOST=127.0.0.1
|
|
DB_PORT=5434
|
|
DB_DATABASE=fahrschuldesk
|
|
DB_USERNAME=fahrschuldesk_api
|
|
DB_PASSWORD=E8xP2mKjQ9nRtWsLvZ3bVc5YyH1sDe7f
|
|
|
|
# SSH Tunnel (aufbauen vor DB-Zugriff):
|
|
# ssh -p 2225 -f -L 5434:10.255.30.11:5433 fahrschuldesk@fahrschuldesk.de sleep 60
|