fix csrf token hardset, remove cookie from localstorage

2026-02-10 13:16:04 -08:00
parent 1117dc584e
commit bb028ef2db
23 changed files with 412 additions and 145 deletions
@@ -3,6 +3,7 @@ PORT=8000
 NODE_ENV=production
 DATABASE_URL=file:/app/prisma/dev.db
 FRONTEND_URL=http://localhost:6767
+TRUST_PROXY=1
 JWT_SECRET=change-this-secret-in-production-min-32-chars

 # Optional Feature Flags (all default to false for backward compatibility)