Fix cookie secure flag for HTTP
This commit is contained in:
@@ -34,9 +34,10 @@ export async function POST(request: NextRequest) {
|
|||||||
const response = NextResponse.json({ success: true });
|
const response = NextResponse.json({ success: true });
|
||||||
response.cookies.set("auth-token", token, {
|
response.cookies.set("auth-token", token, {
|
||||||
httpOnly: true,
|
httpOnly: true,
|
||||||
secure: process.env.NODE_ENV === "production",
|
secure: false, // Allow HTTP for local/internal deployments
|
||||||
sameSite: "lax",
|
sameSite: "lax",
|
||||||
maxAge: 60 * 60 * 24 * 7, // 7 days
|
maxAge: 60 * 60 * 24 * 7, // 7 days
|
||||||
|
path: "/",
|
||||||
});
|
});
|
||||||
console.log("[LOGIN] Cookie set, returning success");
|
console.log("[LOGIN] Cookie set, returning success");
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user