Update src/app/api/auth/signup/route.ts

src/app/api/auth/signup/route.ts

@@ -66,6 +66,10 @@ export async function POST(request: NextRequest) {
     // ── Create Session ────────────────────────────────────────────────
     const token = await createSession(user.id);
 
+    // ── Determine if behind HTTPS proxy ───────────────────────────────
+    const forwardedProto = request.headers.get('x-forwarded-proto');
+    const isSecure = forwardedProto === 'https' || process.env.NODE_ENV === 'production';
+
     // ── Set Cookie & Respond ──────────────────────────────────────────
     const response = NextResponse.json({
       user: {
@@ -79,7 +83,7 @@ export async function POST(request: NextRequest) {
 
     response.cookies.set(SESSION_COOKIE_NAME, token, {
       httpOnly: true,
-      secure: true,
+      secure: isSecure,
       sameSite: 'lax',
       path: '/',
       maxAge: 7 * 24 * 60 * 60, // 7 days