;s;

app/api/auth/sync-session/route.ts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
-import { AUTH_COOKIE_DOMAIN } from "@/config/domain.config";
+import { getAuthCookieDomain } from "@/config/domain.config";
 
 const COOKIE_NAME = "pb_session";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 365; // 365 天，登录态持续有效直至用户主动退出
@@ -19,9 +19,10 @@ export async function POST(request: NextRequest) {
   });
   const encoded = Buffer.from(payload, "utf-8").toString("base64url");
 
+  const domain = getAuthCookieDomain(request);
   const res = NextResponse.json({ ok: true });
   res.cookies.set(COOKIE_NAME, encoded, {
-    domain: AUTH_COOKIE_DOMAIN,
+    ...(domain && { domain }),
     path: "/",
     maxAge: COOKIE_MAX_AGE,
     secure: process.env.NODE_ENV === "production",