docs: clarify AUTH_COOKIE_DOMAIN usage for cross-subdomain authentication and update related documentation

This commit is contained in:
Rotimi Best
2026-03-11 15:52:04 +01:00
parent 1bf0581869
commit c5c65b96d7
6 changed files with 11 additions and 26 deletions
+2 -17
View File
@@ -1,8 +1,7 @@
const {
TRUSTED_ORIGINS: TRUSTED_ORIGINS_STRING,
PUBLIC_SERVER_URL,
AUTH_COOKIE_DOMAIN: AUTH_COOKIE_DOMAIN_STRING,
DASHBOARD_ORIGIN: DASHBOARD_ORIGIN_STRING
AUTH_COOKIE_DOMAIN: AUTH_COOKIE_DOMAIN_STRING
} = process.env;
const DEFAULT_TRUSTED_ORIGINS = [
@@ -31,18 +30,4 @@ export const TRUSTED_ORIGINS = TRUSTED_ORIGINS_STRING
export const BASE_URL = PUBLIC_SERVER_URL || 'http://localhost:3002';
function getAuthCookieDomain(): string | undefined {
const explicit = AUTH_COOKIE_DOMAIN_STRING?.trim();
if (explicit) return explicit;
if (!DASHBOARD_ORIGIN_STRING?.trim()) return undefined;
try {
const url = new URL(DASHBOARD_ORIGIN_STRING.trim());
return url.hostname || undefined;
} catch {
return undefined;
}
}
export const AUTH_COOKIE_DOMAIN = getAuthCookieDomain();
export const AUTH_COOKIE_DOMAIN = AUTH_COOKIE_DOMAIN_STRING?.trim() || undefined;