[backend] set domain in cookies

Author: aahnik

server/src/auth/auth.controller.ts

@@ -18,6 +18,8 @@ import { UserPermsOutDto } from 'src/users/dto/user-perms-out.dto';
 import { Response } from 'express';
 import { AuthorizedRequest } from './entities/authorized-request.entity';
 import { Throttle } from '@nestjs/throttler';
+import { appConfig } from 'src/config';
+
 @Throttle({ default: { limit: 2, ttl: 60000 } })
 @ApiTags('auth')
 @Controller('auth')
@@ -31,7 +33,10 @@ export class AuthController {
     @Res({ passthrough: true }) res: Response,
   ) {
     const token = await this.service.login(loginDto.email, loginDto.password);
-    res.cookie('accessToken', token.access_token, { sameSite: 'none' });
+    res.cookie('accessToken', token.access_token, {
+      sameSite: 'none',
+      domain: appConfig.frontendDomain,
+    });
     return token;
   }
 
@@ -44,6 +49,7 @@ export class AuthController {
     const token = await this.service.register(registerDto);
     res.cookie('accessToken', token.access_token, {
       sameSite: 'none',
+      domain: appConfig.frontendDomain,
     });
     return token;
   }

server/src/config.ts

@@ -23,6 +23,8 @@ export const appConfig = {
     port: parseInt(fromEnv('REDIS_PORT')),
   },
 
+  frontendDomain: fromEnv('FRONTEND_DOMAIN'),
+
   debug: fromEnv('DEBUG', 'false').toLowerCase() === 'true',
 };
 

server/src/oauth/oauth.controller.ts

@@ -9,6 +9,7 @@ import { AuthService } from 'src/auth/auth.service';
 import { OAuthProvider } from 'src/users/dto/find-or-create-user.dto';
 import { Response } from 'express';
 import { oauthConfig } from './config';
+import { appConfig } from 'src/config';
 
 @ApiTags('oauth')
 @Public()
@@ -39,7 +40,10 @@ export class OauthController {
     });
 
     const token = await this.authService.generateJwtToken(user.email);
-    res.cookie('accessToken', token, { sameSite: 'none' });
+    res.cookie('accessToken', token, {
+      sameSite: 'none',
+      domain: appConfig.frontendDomain,
+    });
     res.redirect(oauthConfig.frontendUrl);
   }
 
@@ -61,7 +65,10 @@ export class OauthController {
       email: req.user.emails[0].value,
     });
     const token = await this.authService.generateJwtToken(user.email);
-    res.cookie('accessToken', token, { sameSite: 'none' });
+    res.cookie('accessToken', token, {
+      sameSite: 'none',
+      domain: appConfig.frontendDomain,
+    });
     res.redirect(oauthConfig.frontendUrl);
   }
 }