Marcel Raddatz 230ee5a067 fix(join): use secure: !dev for JSESSIONID cookie to work in local dev
Hardcoded secure: true silently drops the cookie on HTTP (localhost),
causing the post-join redirect to bounce back to /login. Use $app/environment
dev flag so the cookie works in development while remaining Secure in production.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 22:25:48 +02:00
2026-04-02 14:45:11 +02:00
Description
No description provided
2.1 MiB
Languages
HTML 62.1%
Java 18.5%
TypeScript 12%
Svelte 7.1%
CSS 0.2%