mirror of
https://github.com/Sea-Haven-Industries/seahaven-ap.git
synced 2026-09-30 20:53:18 +00:00
Adam Moussa
bbfa6e4a3c
Replace Bearer as the documented session path with Cognito hosted UI plus __Host-ap_* cookies so the SPA can call /api with credentials include.
5 lines
191 B
YAML
5 lines
191 B
YAML
cookieAuth:
|
|
type: apiKey
|
|
in: cookie
|
|
name: __Host-ap_it
|
|
description: HttpOnly session id-token cookie set by GET /api/auth/callback. Local stage uses ap_it without the __Host- prefix.
|