23a581134278ace80b8582b4cc4c2273c5a83660
The auth gate read only `pn-crm.session_token`, but better-auth prefixes the cookie `__Secure-pn-crm.session_token` whenever it issues secure cookies (production/HTTPS). So in prod every authenticated request was bounced to /login — sign-in returned 200 + Set-Cookie, but the gate couldn't see the (prefixed) cookie on the next navigation. Worked in dev (HTTP → no prefix). Check both names. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Description
No description provided
Languages
TypeScript
98.7%
HTML
1%
CSS
0.1%
Shell
0.1%