5d87e4975c
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
2 lines
422 B
JavaScript
Executable File
2 lines
422 B
JavaScript
Executable File
import{_ as s}from"./_plugin-vue_export-helper-DlAUqK2U.js";import{f as o,b as e,j as a}from"./index-CeMVzSB6.js";const l={};function r(n,t){return a(),o("div",null,[...t[0]||(t[0]=[e("h1",{class:"text-2xl font-bold mb-6"},"Dateien (DKS)",-1),e("div",{class:"bg-white rounded-xl shadow-sm p-6"},[e("p",{class:"text-slate-500"},"DKS / Datei-Upload kommt bald...")],-1)])])}const i=s(l,[["render",r]]);export{i as default};
|