feat: implement httpOnly cookie for JWT authentication and update related API calls

Co-authored-by: Copilot <copilot@github.com>
2026-04-28 14:36:06 -04:00
parent 2eb887c486
commit 567fa66428
27 changed files with 207 additions and 123 deletions
@@ -52,11 +52,7 @@ export default function UsersPage() {
                try {
                    const resp = await fetch(
                        `${process.env.NEXT_PUBLIC_CMS_API_URL || 'http://localhost:3001'}/admin/users/${user.id}/token-limit/check`,
-                        {
-                            headers: {
-                                'Authorization': `Bearer ${localStorage.getItem('studio_token')}`,
-                            },
-                        }
+                        { credentials: 'include' }
                    );
                    if (resp.ok) {
                        const data = await resp.json();