docs: update domain examples to use gitpod.io instead of preview domains

Update test examples and documentation to use production-appropriate
domain examples (gitpod.io) instead of specific preview environment
domains for better clarity and maintainability.

Co-authored-by: Ona <[email protected]>

Author: iQQBot

components/server/src/auth/api-subdomain-redirect.spec.ts

@@ -14,12 +14,12 @@ describe("API Subdomain Redirect Logic", () => {
 
     describe("isApiSubdomainOfConfiguredHost", () => {
         it("should detect api subdomain of configured host", () => {
-            const configuredHost = "pd-nonce.preview.gitpod-dev.com";
+            const configuredHost = "gitpod.io";
             const testCases = [
-                { hostname: "api.pd-nonce.preview.gitpod-dev.com", expected: true },
-                { hostname: "api.gitpod.io", expected: false }, // Different configured host
-                { hostname: "pd-nonce.preview.gitpod-dev.com", expected: false }, // Main domain
-                { hostname: "workspace-123.pd-nonce.preview.gitpod-dev.com", expected: false }, // Other subdomain
+                { hostname: "api.gitpod.io", expected: true },
+                { hostname: "api.preview.gitpod-dev.com", expected: false }, // Different configured host
+                { hostname: "gitpod.io", expected: false }, // Main domain
+                { hostname: "workspace-123.gitpod.io", expected: false }, // Other subdomain
                 { hostname: "api.evil.com", expected: false }, // Different domain
             ];
 
@@ -39,7 +39,7 @@ describe("API Subdomain Redirect Logic", () => {
         });
 
         it("should handle preview environment correctly", () => {
-            const configuredHost = "pd-nonce.preview.gitpod-dev.com";
+            const configuredHost = "preview.gitpod-dev.com";
             const apiSubdomain = `api.${configuredHost}`;
 
             const result = isApiSubdomainOfConfiguredHost(apiSubdomain, configuredHost);
@@ -52,20 +52,20 @@ describe("API Subdomain Redirect Logic", () => {
             const scenarios = [
                 {
                     name: "GitHub OAuth Callback on API Subdomain",
-                    hostname: "api.pd-nonce.preview.gitpod-dev.com",
-                    configuredHost: "pd-nonce.preview.gitpod-dev.com",
+                    hostname: "api.gitpod.io",
+                    configuredHost: "gitpod.io",
                     shouldRedirect: true,
                 },
                 {
                     name: "Regular Login on Main Domain",
-                    hostname: "pd-nonce.preview.gitpod-dev.com",
-                    configuredHost: "pd-nonce.preview.gitpod-dev.com",
+                    hostname: "gitpod.io",
+                    configuredHost: "gitpod.io",
                     shouldRedirect: false,
                 },
                 {
                     name: "Workspace Port (Should Not Redirect)",
-                    hostname: "3000-pd-nonce.preview.gitpod-dev.com",
-                    configuredHost: "pd-nonce.preview.gitpod-dev.com",
+                    hostname: "3000-gitpod.io",
+                    configuredHost: "gitpod.io",
                     shouldRedirect: false,
                 },
             ];

components/server/src/auth/nonce-service.ts

@@ -32,7 +32,6 @@ export class NonceService {
             secure: this.config.auth.session.cookie.secure,
             sameSite: "strict", // Strict for CSRF protection
             maxAge: 5 * 60 * 1000, // 5 minutes (same as JWT state expiry)
-            path: "/auth", // Limit to auth paths only
         });
     }