auf SSH umstellen

auth/auth.js

@@ -15,9 +15,9 @@ app.post("/api/login", (req,res)=>{
         // Set Session Cookie
         res.cookie("SESSIONID", "dummy-session-"+user, {
             httpOnly: true,
-            secure: false, // in production: set to true when serving over HTTPS
-            // domain: ".server.schooltech.ch", // removed for local dev; set in production
-            sameSite: "Lax", // local dev; use "None" + secure:true for iframe production
+            secure: true, // production: require HTTPS
+            domain: ".server.schooltech.ch", // allow cookie for subdomains
+            sameSite: "None", // required for third-party iframes over HTTPS
             path: "/"
         });
         res.status(200).send({ ok:true });