cartsnitch-engineer[bot] 9247a0aafd fix(api): read __Secure- prefixed session cookie for HTTPS environments
Better-Auth automatically prefixes cookie names with __Secure- when serving
over HTTPS. The API gateway now tries __Secure-better-auth.session_token
first (HTTPS/deployed), falling back to better-auth.session_token (HTTP/local dev).

Fixes CAR-321.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-01 04:02:49 +00:00
S
Description
CartSnitch API gateway — frontend-facing REST API
942 KiB
Languages
Python 99.4%
Dockerfile 0.4%
Mako 0.2%