Figure out compatibility with NextAuth cookies supporting subdomains

[nathanclevenger]

No description provided.

[sam-lippert]

The iss and domain properties are now set. Is this all that was needed?

[nathanclevenger]

Do subdomains validate if you’re logged in to the root domain? That’s what we need to get to.

…

On Fri, Sep 23, 2022 at 4:18 PM sam-lippert ***@***.***> wrote: The iss and domain properties are now set. Is this all that was needed? — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA7QQXW5GLCVYAIUME3AXBTV7YNDNANCNFSM6AAAAAAQSC3T7I> . You are receiving this because you were assigned.Message ID: <drivly/oauth .***@***.***>

[sam-lippert]

I can confirm that there is no redirect happening for login when I switch subdomains, but there is a valid user:

[nathanclevenger]

Ok, the next step will be to validate cookies that are encrypted by NextAuth, because it doesn't use oauth.do for the cookie creation/encryption ... @crisner1978 now has a next-auth implementation that I believe is saving cookies to support subdomains at https://dev.driv.ly ... so @sam-lippert can you create a worker route in Cloudflare like test-auth.dev.driv.ly that could be then routed to the ctx-do worker to see if we can validate that?