From 4e0861df719eaa06fbfcc7e05a5e550facf2bd8c Mon Sep 17 00:00:00 2001
From: root <cheffe01@web.de>
Date: Wed, 29 Jul 2026 19:29:46 +0200
Subject: [PATCH] Fix Login: Session-Cookies via Vite-Proxy +
 credentials:include
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Vite-Proxy für /api/* zum Express-Backend (localhost:8080)
- credentials: 'include' in customFetch für Cross-Origin-Cookie-Support
- Behebt: Login-Response-Set-Cookie wurde vom Browser ignoriert
---
 artifacts/toolrate/vite.config.ts        | 6 ++++++
 lib/api-client-react/src/custom-fetch.ts | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/artifacts/toolrate/vite.config.ts b/artifacts/toolrate/vite.config.ts
index 3fd6022..55190c4 100644
--- a/artifacts/toolrate/vite.config.ts
+++ b/artifacts/toolrate/vite.config.ts
@@ -63,6 +63,12 @@ export default defineConfig({
     strictPort: true,
     host: "0.0.0.0",
     allowedHosts: true,
+    proxy: {
+      "/api": {
+        target: process.env.API_SERVER_URL || "http://localhost:8080",
+        changeOrigin: true,
+      },
+    },
     fs: {
       strict: true,
     },
diff --git a/lib/api-client-react/src/custom-fetch.ts b/lib/api-client-react/src/custom-fetch.ts
index 3a5021b..ee21bad 100644
--- a/lib/api-client-react/src/custom-fetch.ts
+++ b/lib/api-client-react/src/custom-fetch.ts
@@ -360,7 +360,7 @@ export async function customFetch<T = unknown>(
 
   const requestInfo = { method, url: resolveUrl(input) };
 
-  const response = await fetch(input, { ...init, method, headers });
+  const response = await fetch(input, { ...init, method, headers, credentials: "include" });
 
   if (!response.ok) {
     const errorData = await parseErrorBody(response, method);