fix: fix cookie

frontend/app/api/admin/login/route.ts

@@ -1,12 +1,10 @@
 import { type NextRequest, NextResponse } from "next/server";
+import { setAdminSessionCookie, ADMIN_COOKIE } from "@/lib/admin-session-cookie";
 import { backendUrl } from "@/lib/backend-url";
 
 export const dynamic = "force-dynamic";
 export const runtime = "nodejs";
 
-const ADMIN_COOKIE = "admin_session";
-const SESSION_MAX_AGE = 60 * 60 * 12;
-
 function sessionValue(setCookie: string | null) {
   const pair = setCookie?.split(";")[0] ?? "";
   const [name, ...valueParts] = pair.split("=");
@@ -41,13 +39,7 @@ export async function POST(request: NextRequest) {
 
   const value = sessionValue(response.headers.get("set-cookie"));
   if (response.ok && value) {
-    nextResponse.cookies.set(ADMIN_COOKIE, value, {
-      httpOnly: true,
-      sameSite: "lax",
-      secure: request.nextUrl.protocol === "https:",
-      maxAge: SESSION_MAX_AGE,
-      path: "/",
-    });
+    setAdminSessionCookie(nextResponse.headers, value, request.nextUrl.protocol === "https:");
   }
 
   return nextResponse;

frontend/app/api/admin/logout/route.ts

@@ -1,11 +1,10 @@
 import { type NextRequest, NextResponse } from "next/server";
+import { clearAdminSessionCookie } from "@/lib/admin-session-cookie";
 import { backendUrl } from "@/lib/backend-url";
 
 export const dynamic = "force-dynamic";
 export const runtime = "nodejs";
 
-const ADMIN_COOKIE = "admin_session";
-
 export async function POST(request: NextRequest) {
   let response: Response;
   try {
@@ -28,13 +27,7 @@ export async function POST(request: NextRequest) {
       "content-type": response.headers.get("content-type") ?? "application/json",
     },
   });
-  nextResponse.cookies.set(ADMIN_COOKIE, "", {
-    httpOnly: true,
-    sameSite: "lax",
-    secure: request.nextUrl.protocol === "https:",
-    maxAge: 0,
-    path: "/",
-  });
+  clearAdminSessionCookie(nextResponse.headers, request.nextUrl.protocol === "https:");
 
   return nextResponse;
 }

frontend/lib/admin-session-cookie.ts

@@ -0,0 +1,24 @@
+export const ADMIN_COOKIE = "admin_session";
+export const SESSION_MAX_AGE = 60 * 60 * 12;
+
+function attributes(isHttps: boolean, maxAge: number) {
+  const parts = [`Path=/`, `Max-Age=${maxAge}`, "HttpOnly"];
+  if (isHttps) {
+    parts.push("Secure", "SameSite=None", "Partitioned");
+  } else {
+    parts.push("SameSite=Lax");
+  }
+  return parts.join("; ");
+}
+
+export function setAdminSessionCookie(headers: Headers, value: string, isHttps: boolean) {
+  headers.append(
+    "set-cookie",
+    `${ADMIN_COOKIE}=${encodeURIComponent(value)}; ${attributes(isHttps, SESSION_MAX_AGE)}`
+  );
+}
+
+export function clearAdminSessionCookie(headers: Headers, isHttps: boolean) {
+  headers.append("set-cookie", `${ADMIN_COOKIE}=; ${attributes(isHttps, 0)}`);
+}
+