@dudousxd/nestjs-media-dashboard 0.12.0 → 0.12.1

package/dist/server/index.cjs

@@ -1730,7 +1730,17 @@ var MediaDashboardModule = class _MediaDashboardModule {
         ...imports ?? [],
         MediaConsoleApiModule.register({
           actions,
-          cookiePath: apiBasePath,
+          // `Path=/`, deliberately NOT scoped to `apiBasePath` (nor to `basePath`): the two mounts
+          // are independently configurable and can live at unrelated paths (e.g. a `/media` UI
+          // with a `/api/media/console` API). Scoped to the API base, the browser withheld the
+          // cookie on the full-page navigation to `basePath`, so the freshly minted session could
+          // not open the console it was minted for — the launcher landed on the unauthenticated
+          // page. Scoping to `basePath` instead would just move the failure to the API calls.
+          // The cookie is HttpOnly + signed + short-lived, so the broader scope is a reasonable
+          // trade for being correct in any mount configuration. Matches nestjs-durable-dashboard
+          // and nestjs-agent-dashboard; telescope can scope to its mount because its UI and API
+          // always share one root.
+          cookiePath: "/",
           authProvider,
           imports,
           ...options.guards ? {