From cf42a32800de7af4d90284d3633272188151893b Mon Sep 17 00:00:00 2001 From: Tyler Gillispie Date: Mon, 24 Aug 2026 15:32:26 -0700 Subject: [PATCH] fix(auth): eliminate competing deleteCookie on login verify and ensure proper session persistence --- server/main.ts | 4 +--- ui/components/AuthenticatedLayout.tsx | 2 +- ui/components/LoginPage.tsx | 2 +- ui/components/RegisterPage.tsx | 2 +- ui/public/auth-client.js | 6 +++++- 5 files changed, 9 insertions(+), 7 deletions(-) diff --git a/server/main.ts b/server/main.ts index 5da67db..2110d08 100644 --- a/server/main.ts +++ b/server/main.ts @@ -821,11 +821,9 @@ app.post("/api/login/verify", async (c) => { const cookieDomain = getCookieDomain(rpID); - // Clear any existing host-scoped cookie to prevent domain duplication - deleteCookie(c, "session_id", { path: "/" }); - setCookie(c, "session_id", sessionId, { domain: cookieDomain, + path: "/", httpOnly: true, secure: true, sameSite: "Lax", diff --git a/ui/components/AuthenticatedLayout.tsx b/ui/components/AuthenticatedLayout.tsx index 77373a6..7d87f43 100644 --- a/ui/components/AuthenticatedLayout.tsx +++ b/ui/components/AuthenticatedLayout.tsx @@ -159,7 +159,7 @@ export const AuthenticatedLayout = ({ - +
diff --git a/ui/components/LoginPage.tsx b/ui/components/LoginPage.tsx index 097d8ae..d5a5b49 100644 --- a/ui/components/LoginPage.tsx +++ b/ui/components/LoginPage.tsx @@ -95,7 +95,7 @@ export const LoginPage = () => { - + +