From 98f0b3ffad7d0762d78a157aa14282fd2d8c5f2c Mon Sep 17 00:00:00 2001
From: root <melabidi@alrahmaisgl.org>
Date: Sat, 4 Jul 2026 18:36:50 -0400
Subject: [PATCH] fix session cookies url

---
 .env.docker.production.generated | 1 +
 .env.example                     | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/.env.docker.production.generated b/.env.docker.production.generated
index b1febc0..0894271 100644
--- a/.env.docker.production.generated
+++ b/.env.docker.production.generated
@@ -45,6 +45,7 @@ CORS_ORIGINS=https://example.com,https://www.example.com
 JWT_SECRET=placeholder
 JWT_EXPIRY=8h
 RENTER_JWT_EXPIRY=7d
+SESSION_COOKIE_DOMAIN=.example.com
 NODE_ENV=production
 
 # File storage
diff --git a/.env.example b/.env.example
index 6e5bf39..ae679e8 100644
--- a/.env.example
+++ b/.env.example
@@ -21,6 +21,9 @@ NEXT_PUBLIC_API_URL=http://localhost:4000/api/v1
 JWT_SECRET=8bf96de20297c2c295a60e4040e937a7eb8ec7d7d2b83e79a1fc98463322a97c
 JWT_EXPIRY=8h
 RENTER_JWT_EXPIRY=7d
+# Optional in local development. Required in production when auth spans sibling subdomains.
+# Example: SESSION_COOKIE_DOMAIN=.rentaldrivego.ma
+SESSION_COOKIE_DOMAIN=
 
 # ─── Clerk (Company employee auth) ────────────────────────────
 NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_test_...