5d87e4975c
Problem: Frontend JS bundle used credentials:'same-origin' which dropped cookies on cross-domain requests. Login worked (200) but the subsequent /auth/me check returned 401, leaving the user stuck on the login screen. Fix: - AuthController now sets a dtp_jwt HttpOnly cookie on login/refresh - Cookie uses Domain=.fahrschultermin.de (shared between frontend and api subdomain), Secure, SameSite=Lax, Max-Age=8h - JwtMiddleware reads JWT from Authorization header OR cookie - Added AuthController::me() endpoint (was missing, caused 500) - Logout endpoint clears the cookie - Frontend index.php patches fetch() to use credentials:'include' for all /api/v1/* calls
14 lines
353 B
PHP
Executable File
14 lines
353 B
PHP
Executable File
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
return [
|
|
'app_name' => 'DriveTime Planner',
|
|
'env' => 'local',
|
|
'debug' => true,
|
|
'db_path' => __DIR__ . '/../storage/database/app.sqlite',
|
|
'session_path' => __DIR__ . '/../storage/sessions',
|
|
'session_name' => 'drive_time_session',
|
|
'frontend_entry' => __DIR__ . '/../public/assets/index.js',
|
|
];
|