propro-utils 1.6.8 → 1.6.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "propro-utils",
-  "version": "1.6.8",
+  "version": "1.6.9",
   "description": "Auth middleware for propro-auth",
   "main": "src/index.js",
   "scripts": {

package/src/server/middleware/cookieUtils.js

@@ -124,12 +124,8 @@ const setAuthCookies = async (res, tokens, account, user, appUrl) => {
       isSecureConnection = false;
     }
     if (domain?.includes("propro.so")) {
-      // Handle both main domain and subdomains of propro.so
-      if (domain.startsWith("short.")) {
-        domain = ".short.propro.so";
-      } else {
-        domain = ".propro.so";
-      }
+      // Always set cookies on the root domain for all propro.so subdomains
+      domain = ".propro.so";
     }
 
     console.log("Cookie configuration:", {
@@ -138,6 +134,7 @@ const setAuthCookies = async (res, tokens, account, user, appUrl) => {
       protocol: urlObj.protocol,
       originalUrl: appUrl,
       processedUrl: processedAppUrl,
+      hostname: urlObj.hostname,
     });
   } catch (error) {
     console.error("Invalid appUrl:", { error, appUrl });
@@ -155,7 +152,7 @@ const setAuthCookies = async (res, tokens, account, user, appUrl) => {
     domain,
     path: "/",
     httpOnly: false,
-    expires: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000),
+    expires: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000), // 1 year expiry as fallback
   };
 
   console.log("Cookie attributes:", commonAttributes);
@@ -275,12 +272,8 @@ const clearAuthCookies = async (res, appUrl) => {
       isSecureConnection = false;
     }
     if (domain?.includes("propro.so")) {
-      // Handle both main domain and subdomains of propro.so
-      if (domain.startsWith("short.")) {
-        domain = "short.propro.so";
-      } else {
-        domain = "propro.so";
-      }
+      // Always set cookies on the root domain for all propro.so subdomains
+      domain = ".propro.so";
     }
 
     console.log("Clear cookies configuration:", {
@@ -289,6 +282,7 @@ const clearAuthCookies = async (res, appUrl) => {
       protocol: urlObj.protocol,
       originalUrl: appUrl,
       processedUrl: processedAppUrl,
+      hostname: urlObj.hostname,
     });
   } catch (error) {
     console.error("Invalid appUrl:", error);
@@ -302,7 +296,7 @@ const clearAuthCookies = async (res, appUrl) => {
     domain,
     path: "/",
     httpOnly: false,
-    expires: new Date(0),
+    expires: new Date(0), // Set expiry to past date to ensure cookie is removed
   };
 
   console.log("Clear cookie attributes:", commonAttributes);