greeneclipse/descrybe
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
9a839d6d136a2fadbe096649fac86fce0af72f20
descrybe/apps/api/internal/httpapi
T
History
greeneclipseandClaude Fable 5 0eef202f56 Add SESSION_COOKIE_DOMAIN so /admin SSR sees the session cookie 
Production splits web (descrybe.io) and API (api.descrybe.io). The session
cookie was host-only for api.descrybe.io, so the browser never sent it to
the web host. The /admin SvelteKit SSR gate (fetchMeStaff in
+layout.server.ts) forwards the incoming cookie header to /api/auth/me —
with no cookie to forward it always got 401 and bounced every successful
login back to /login?next=/admin (login POST 200, /me 200 from the
browser, /me 401 from the web server).

New SESSION_COOKIE_DOMAIN env (default empty = host-only, local dev
unchanged) sets the session cookie Domain attribute; set it to the parent
domain (descrybe.io) in production so both hosts receive the cookie.
Leading dot is normalized away. CSRF needs no change — it already seeds
cross-origin via the X-CSRF-Token response header.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 00:31:58 +02:00
..
accept_invite_url_test.go
fix
2026-08-17 21:20:45 +02:00
admin_ai_role_test_handler_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_ai_role_test_handler.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_analytics_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_analytics_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_authz_test.go
fix
2026-08-17 09:33:07 +02:00
admin_clone_catalog_handlers_test.go
fixes
2026-08-16 11:37:42 +02:00
admin_clone_catalog_handlers.go
fix
2026-08-16 12:00:28 +02:00
admin_companies_without_plan_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_dev_handlers.go
fix
2026-08-14 01:38:34 +02:00
admin_dev_impersonation_test.go
fix
2026-08-14 01:38:34 +02:00
admin_dev_labels_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_diagnostics_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_diagnostics_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_fix_catalog_handlers_test.go
fix
2026-08-16 18:36:56 +02:00
admin_fix_catalog_handlers.go
fix
2026-08-17 09:33:07 +02:00
admin_handlers.go
fix
2026-08-17 00:39:25 +02:00
admin_mail_test_handler.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_orgs_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_readiness_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_set_password_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_settings_ai_config_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_settings_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_settings_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_staff_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_staff_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_store_reconnect_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_store_reconnect.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_stripe_sync_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
admin_sync_a1_upload_test.go
fix
2026-08-17 00:39:25 +02:00
ai_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
apikey_handlers_test.go
fix
2026-08-17 09:33:07 +02:00
apikey_handlers.go
fix
2026-08-17 09:33:07 +02:00
auth_handlers.go
fix
2026-08-17 23:06:07 +02:00
auth_session_integration_test.go
Add SESSION_COOKIE_DOMAIN so /admin SSR sees the session cookie
2026-08-18 00:31:58 +02:00
billing_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
brand_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
brand_logo_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
campaigns_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
catalog_handlers_seo_test.go
Split A1 category prompts canonically; retire attributes prompting
2026-08-18 00:13:44 +02:00
catalog_handlers.go
fix
2026-08-17 21:20:45 +02:00
catalog_import_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
catalog_v1_handlers_test.go
fix
2026-08-17 21:20:45 +02:00
catalog_v1_handlers.go
fix
2026-08-17 21:20:45 +02:00
company_handlers.go
fix
2026-08-17 00:53:51 +02:00
company_invite_test.go
fix
2026-08-17 21:20:45 +02:00
company_member_role_test.go
fix
2026-08-17 11:30:14 +02:00
company_settings_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
csrf_test.go
fix
2026-08-13 21:01:49 +02:00
email_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
export_selected_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
feeds_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
health_test.go
fix
2026-08-17 21:20:45 +02:00
health.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
locale_middleware_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
locale_middleware.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
login_lockout_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
login_lockout.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
marketing_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
mcp_removal_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
middleware.go
fix
2026-08-17 11:30:14 +02:00
observability.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
pagination_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
pagination.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
password_reset_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
password_reset_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
password_reset_integration_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
plan_features_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
plan_features_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
plan_gate_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
plan_gate.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
platform_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
processing_handlers.go
fix
2026-08-17 21:20:45 +02:00
product_list_fields_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
products_reset_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
products_v1_handlers_test.go
fix
2026-08-17 21:20:45 +02:00
products_v1_handlers.go
fix
2026-08-17 21:20:45 +02:00
public_error_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
ratelimit_race_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
ratelimit_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
ratelimit.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
respond_coded_error_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
respond_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
respond.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
sales_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
sales_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
security_middleware_test.go
fix
2026-08-13 21:01:49 +02:00
security_middleware.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
seo_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
server.go
fix
2026-08-17 11:30:14 +02:00
shopify_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
staff_authz_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
standard_fields_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
store_merchant_handlers_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
stripe_handlers_test.go
fixes
2026-08-16 11:37:42 +02:00
stripe_handlers.go
fix
2026-08-17 00:39:25 +02:00
support_auth_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
support_csat_auth_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
support_csat_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
support_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
support_kb_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
tenant_test.go
fix
2026-08-14 00:06:43 +02:00
v1_auth_test.go
fix
2026-08-17 21:20:45 +02:00
v1_csrf_tenant_test.go
fix
2026-08-17 21:20:45 +02:00
v1_domain_crud_integration_test.go
fix
2026-08-17 21:20:45 +02:00
v1_export_campaigns_test.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
v1_export_campaigns.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
v1_feeds_test.go
fix
2026-08-17 21:20:45 +02:00
v1_feeds.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
v1_openapi_test.go
fix
2026-08-17 21:56:09 +02:00
v1_openapi.go
fix
2026-08-17 21:56:09 +02:00
v1_process_handlers_test.go
fix
2026-08-17 21:20:45 +02:00
v1_process_handlers.go
fix
2026-08-17 21:20:45 +02:00
v1.go
fix
2026-08-17 21:20:45 +02:00
vector_categories_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
woocommerce_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00
woocommerce_orders_handlers.go
Initial commit of Descrybe v2 without local scratch artifacts.
2026-08-09 22:47:43 +02:00