fix login and some errors while login

apps/dashboard/next.config.js

@@ -1,27 +1,6 @@
 /** @type {import('next').NextConfig} */
 
-const securityHeaders = [
-  { key: 'Strict-Transport-Security', value: 'max-age=31536000; includeSubDomains' },
-  { key: 'X-Content-Type-Options', value: 'nosniff' },
-  { key: 'X-Frame-Options', value: 'DENY' },
-  { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
-  { key: 'Permissions-Policy', value: 'camera=(), microphone=(), geolocation=()' },
-  {
-    key: 'Content-Security-Policy',
-    value: [
-      "default-src 'self'",
-      "script-src 'self' 'unsafe-inline'",
-      "style-src 'self' 'unsafe-inline'",
-      "img-src 'self' data: blob: https:",
-      "font-src 'self' data:",
-      "connect-src 'self' https: wss:",
-      "frame-ancestors 'none'",
-      "base-uri 'self'",
-      "form-action 'self'",
-      "object-src 'none'",
-    ].join('; '),
-  },
-]
+const { buildSecurityHeaders, normalizeAssetPrefix } = require('../../config/nextSecurityHeaders')
 const toStoragePattern = (rawUrl) => {
   try {
     const u = new URL(rawUrl.replace(/\/api\/v1\/?$/, ''))
@@ -46,13 +25,16 @@ const storagePatterns = [
   .filter(Boolean)
   .filter((p, i, arr) => arr.findIndex((q) => q.hostname === p.hostname && q.port === p.port) === i)
 
+const DASHBOARD_BASE_PATH = '/dashboard'
+
 // In Docker dev the dashboard app runs on port 3001 while the marketplace proxy
 // is served from port 3000. When DASHBOARD_ASSET_PREFIX is set, Next should emit
 // absolute chunk URLs so /dashboard pages load their own JS/CSS from port 3001.
-const assetPrefix = process.env.DASHBOARD_ASSET_PREFIX || undefined
+const assetPrefix = normalizeAssetPrefix(process.env.DASHBOARD_ASSET_PREFIX, DASHBOARD_BASE_PATH)
+const securityHeaders = buildSecurityHeaders({ assetSources: [assetPrefix] })
 
 const nextConfig = {
-  basePath: '/dashboard',
+  basePath: DASHBOARD_BASE_PATH,
   ...(assetPrefix ? { assetPrefix } : {}),
   images: {
     remotePatterns: [