fix(auth): add production url to trustedOrigins and fix secure cookies

src/lib/auth.ts

@@ -40,9 +40,13 @@ export const auth = betterAuth({
         }
     },
     advanced: {
-        useSecureCookies: false, // Ensure cookies work on HTTP localhost
+        useSecureCookies: process.env.NODE_ENV === "production", // Secure in prod, insecure in dev
     },
-    trustedOrigins: ["http://localhost:3000", "http://127.0.0.1:3000"],
+    trustedOrigins: [
+        "http://localhost:3000",
+        "http://127.0.0.1:3000",
+        ...(process.env.BETTER_AUTH_URL ? [process.env.BETTER_AUTH_URL] : [])
+    ],
     secret: process.env.BETTER_AUTH_SECRET || (process.env.CI ? "dummy_secret_for_ci_build" : undefined),
     baseURL: process.env.BETTER_AUTH_URL || (process.env.CI ? "http://localhost:3000" : undefined),
 });