fix cookies for prod, separate names for dev vs prod

netlify/functions/core/middleware/auth.middleware.ts

···
   const cookies = event.headers.cookie
     ? cookie.parse(event.headers.cookie)
     : {};
-  const sessionId = cookies.atlast_session;
+  const sessionId = cookies.atlast_session || cookies.atlast_session_dev;
 
   if (!sessionId) {
     throw new AuthenticationError(ERROR_MESSAGES.NO_SESSION_COOKIE);
···
   const cookies = event.headers.cookie
     ? cookie.parse(event.headers.cookie)
     : {};
-  return cookies.atlast_session || null;
+  return cookies.atlast_session || cookies.atlast_session_dev || null;
 }

netlify/functions/logout.ts

···
     console.log("[logout] Successfully deleted session:", sessionId);
   }
 
-  const config = getOAuthConfig();
+  const config = getOAuthConfig(event);
   const isDev = config.clientType === "loopback";
+  const cookieName = isDev ? "atlast_session_dev" : "atlast_session";
 
   const cookieFlags = isDev
     ? `HttpOnly; SameSite=Lax; Max-Age=0; Path=/`
···
     statusCode: 200,
     headers: {
       "Content-Type": "application/json",
-      "Set-Cookie": `atlast_session=; ${cookieFlags}`,
+      "Set-Cookie": `${cookieName}=; ${cookieFlags}`,
     },
     body: JSON.stringify({ success: true }),
   };

netlify/functions/oauth-callback.ts

···
 
   console.log("[oauth-callback] Created user session:", sessionId);
 
+  const cookieName = isDev ? "atlast_session_dev" : "atlast_session";
   const cookieFlags = isDev
     ? `HttpOnly; SameSite=Lax; Max-Age=${CONFIG.COOKIE_MAX_AGE}; Path=/`
     : `HttpOnly; SameSite=Lax; Max-Age=${CONFIG.COOKIE_MAX_AGE}; Path=/; Secure`;
 
-  return redirectResponse(`${currentUrl}/?session=${sessionId}`, [
-    `atlast_session=${sessionId}; ${cookieFlags}`,
-  ]);
+  return redirectResponse(
+    `${currentUrl}/?session=${sessionId}`,
+    `${cookieName}=${sessionId}; ${cookieFlags}`,
+  );
 };
 
 export const handler = withErrorHandling(oauthCallbackHandler);

netlify/functions/utils/response.utils.ts

···
 
 export function redirectResponse(
   location: string,
-  setCookies?: string[],
+  setCookie?: string,
 ): HandlerResponse {
-  const headers: Record<string, string | string[]> = {
+  const headers: Record<string, string> = {
     Location: location,
   };
 
-  if (setCookies && setCookies.length > 0) {
-    headers["Set-Cookie"] = setCookies;
+  if (setCookie) {
+    headers["Set-Cookie"] = setCookie;
   }
 
   return {
     statusCode: 302,
-    headers: headers as HandlerResponse["headers"],
+    headers,
     body: "",
   };
 }