refactor: update session cookie options and improve login view authentication flow

- Revised SameSite attribute for session cookies to clarify its behavior in documentation.
- Streamlined cookie clearing logic in the authentication route by utilizing `getSessionCookieOptions()`.
- Enhanced the login view to support aborting server checks, improving responsiveness during component unmounting.
- Ensured proper handling of server check retries with abort signal integration for better user experience.
This commit is contained in:
webdevcody
2026-01-07 14:33:55 -05:00
parent e58e389658
commit 4d36e66deb
5 changed files with 30 additions and 14 deletions

View File

@@ -233,10 +233,7 @@ export function createAuthRoutes(): Router {
// Using res.cookie() with maxAge: 0 is more reliable than clearCookie()
// in cross-origin development environments
res.cookie(cookieName, '', {
httpOnly: true,
secure: process.env.NODE_ENV === 'production',
sameSite: 'lax',
path: '/',
...getSessionCookieOptions(),
maxAge: 0,
expires: new Date(0),
});