's'

app/api/auth/sync-session/route.ts

@@ -1,8 +1,8 @@
 import { NextRequest, NextResponse } from "next/server";
+import { getAuthCookieDomain } from "@/app/lib/auth-cookie-domain";
 
 const COOKIE_NAME = "pb_session";
 const COOKIE_MAX_AGE = 60 * 60 * 24 * 365; // 365 天，登录态持续有效直至用户主动退出
-const COOKIE_DOMAIN = process.env.AUTH_COOKIE_DOMAIN || ".hackrobot.cn";
 
 export async function POST(request: NextRequest) {
   const body = await request.json().catch(() => ({}));
@@ -19,9 +19,10 @@ export async function POST(request: NextRequest) {
   });
   const encoded = Buffer.from(payload, "utf-8").toString("base64url");
 
+  const domain = getAuthCookieDomain(request);
   const res = NextResponse.json({ ok: true });
   res.cookies.set(COOKIE_NAME, encoded, {
-    domain: COOKIE_DOMAIN,
+    ...(domain && { domain }),
     path: "/",
     maxAge: COOKIE_MAX_AGE,
     secure: process.env.NODE_ENV === "production",