5d87e4975c
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
29 lines
669 B
PHP
Executable File
29 lines
669 B
PHP
Executable File
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Models;
|
|
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
|
|
|
final class User extends Model
|
|
{
|
|
protected $table = 'users';
|
|
protected $fillable = [
|
|
'tenant_id', 'role', 'email', 'password_hash',
|
|
'first_name', 'last_name', 'is_active',
|
|
];
|
|
protected $casts = ['is_active' => 'integer'];
|
|
protected $hidden = ['password_hash'];
|
|
|
|
public function tenant(): BelongsTo
|
|
{
|
|
return $this->belongsTo(Tenant::class, 'tenant_id');
|
|
}
|
|
|
|
public function instructor()
|
|
{
|
|
return $this->hasOne(Instructor::class, 'user_id');
|
|
}
|
|
} |