cross-domain cookies just don't work a lot of the time, switch to pro…

…xied worker

apps/next/next.config.js

@@ -114,6 +114,17 @@ module.exports = function () {
     compiler: {
       removeConsole: disableBrowserLogs,
     },
+    async rewrites() {
+      return [
+        {
+          source: '/worker/:path*',
+          destination: process.env.NEXT_PUBLIC_API_URL
+            ? `${process.env.NEXT_PUBLIC_API_URL}/worker/:path*`
+            : 'http://localhost:8787/worker/:path*',
+        },
+      ]
+    },
+
   }
 
   for (const plugin of plugins) {

packages/api/src/auth/index.ts

@@ -20,6 +20,9 @@ export const getAllowedOriginHost = (app_url: string, request?: Request) => {
 }
 
 export const isCrossDomain = (appUrl?: string, apiUrl?: string) => {
+  return false;
+  // cross-domain cookies hardly work anymore and are going away
+  // you need to proxy or serve the worker on a subdomain
   if (!appUrl || !apiUrl) return true
   const appHost = new URL(appUrl).host
   const apiHost = new URL(apiUrl).host

packages/api/src/worker.ts

@@ -25,7 +25,7 @@ export type Bindings = Env & {
   [k: string]: unknown
 }
 
-const app = new Hono<{ Bindings: Bindings }>()
+const app = new Hono<{ Bindings: Bindings }>().basePath('/worker')
 
 const corsHandler = async (c: Context<{ Bindings: Bindings }>, next: Next) => {
   if (c.env.APP_URL === undefined) {
@@ -47,6 +47,7 @@ app.use('/trpc/*', corsHandler)
 // Setup TRPC server with context
 app.use('/trpc/*', async (c, next) => {
   return await trpcServer({
+    endpoint: '/worker/trpc',
     router: appRouter,
     createContext: async ({ resHeaders }) => {
       return await createContext(c.env, c, resHeaders)

packages/app/utils/trpc/index.tsx

@@ -37,7 +37,7 @@ export const TRPCProvider: React.FC<{
               'x-enable-tokens': 'true',
             }
           },
-          url: `${getApiUrl()}/trpc`,
+          url: `${getApiUrl()}/worker/trpc`,
         }),
       ],
     })

packages/app/utils/trpc/index.web.tsx

@@ -52,7 +52,7 @@ export function TRPCProvider(props: { children: React.ReactNode }) {
               // always try to include cookies
             })
           },
-          url: `${process.env.NEXT_PUBLIC_API_URL}/trpc`,
+          url: `${typeof window !== 'undefined' ? '' : process.env.NEXT_PUBLIC_API_URL}/worker/trpc`,
         }),
       ],
     })