fix(auth): return JSON 401 for API sessions and harden cross-site cookies

2026-02-21 21:55:01 -05:00
parent a8ddae4b1e
commit 83727957ab
5 changed files with 72 additions and 19 deletions
--- a/config/corsOptions.js
+++ b/config/corsOptions.js
@@ -7,6 +7,7 @@ var corsOptions = {
        'http://127.0.0.1:8081',
        'http://localhost:3000', 
        "https://social.emmint.com",  
+        "https://www.social.emmint.com",
        "https://fellowship.emmint.com",
        "https://aeropi.local",
    ],