fix login and some errors while login

apps/admin/next.config.js

@@ -1,52 +1,16 @@
 /** @type {import('next').NextConfig} */
 
-const securityHeaders = [
-  { key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' },
-  { key: 'X-Content-Type-Options', value: 'nosniff' },
-  { key: 'X-Frame-Options', value: 'DENY' },
-  { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
-  { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' },
-  {
-    key: 'Content-Security-Policy',
-    value: [
-      "default-src 'self'",
-      "script-src 'self' 'unsafe-inline'",
-      "style-src 'self' 'unsafe-inline'",
-      "img-src 'self' data: blob: https:",
-      "font-src 'self' data:",
-      "connect-src 'self' https: wss:",
-      "frame-ancestors 'none'",
-      "base-uri 'self'",
-      "form-action 'self'",
-      "object-src 'none'",
-    ].join('; '),
-  },
-]
+const { buildSecurityHeaders, normalizeAssetPrefix } = require('../../config/nextSecurityHeaders')
 const apiOrigin = (process.env.API_INTERNAL_URL ?? process.env.API_URL ?? 'http://localhost:4000').replace(/\/api\/v1\/?$/, '')
 const apiUrl = new URL(apiOrigin)
 const ADMIN_BASE_PATH = '/admin'
 
-function ensureAdminAssetPrefix(rawValue) {
-  if (!rawValue) return undefined
-
-  try {
-    const url = new URL(rawValue)
-    const pathname = url.pathname.replace(/\/$/, '')
-    if (!pathname.endsWith(ADMIN_BASE_PATH)) {
-      url.pathname = `${pathname}${ADMIN_BASE_PATH}`
-    }
-    return url.toString().replace(/\/$/, '')
-  } catch {
-    const trimmed = rawValue.replace(/\/$/, '')
-    return trimmed.endsWith(ADMIN_BASE_PATH) ? trimmed : `${trimmed}${ADMIN_BASE_PATH}`
-  }
-}
-
 // In Docker dev the admin app runs on port 3002 while the marketplace proxy
 // serves it from port 3000. When ADMIN_ASSET_PREFIX is set, Next emits
 // absolute chunk URLs so /admin pages load their JS/CSS and HMR directly from
 // port 3002, bypassing the proxy (which can't upgrade WebSocket connections).
-const assetPrefix = ensureAdminAssetPrefix(process.env.ADMIN_ASSET_PREFIX)
+const assetPrefix = normalizeAssetPrefix(process.env.ADMIN_ASSET_PREFIX, ADMIN_BASE_PATH)
+const securityHeaders = buildSecurityHeaders({ assetSources: [assetPrefix] })
 
 const nextConfig = {
   basePath: ADMIN_BASE_PATH,