From 989a7f580f5ad92f772953c23ea7f853d8b539b6 Mon Sep 17 00:00:00 2001
From: mouazkh <mouazalkhatib2013@gmail.com>
Date: Fri, 7 Aug 2026 00:55:23 +0300
Subject: [PATCH] fixed  middleware

---
 app/services/AuthService.js | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/app/services/AuthService.js b/app/services/AuthService.js
index 4de5b6e..5a0220e 100644
--- a/app/services/AuthService.js
+++ b/app/services/AuthService.js
@@ -25,12 +25,15 @@ import { getCustomerByUserId, getOwnerByUserId, loginWithEmail, loginWithPhone }
 const TOKEN_KEY = "auth_token";
 const USER_KEY = "cached_user";
 
+const isSecureContext = () =>
+  typeof window !== "undefined" && window.location?.protocol === "https:";
+
 const AuthService = Object.freeze({
   addToken(token) {
     if (!token || typeof token !== "string") return;
     Cookies.set(TOKEN_KEY, token, {
       expires: 7,
-      secure: true,
+      secure: isSecureContext(),
       sameSite: "lax",
       path: "/",
     });
@@ -51,7 +54,7 @@ const AuthService = Object.freeze({
   cacheUser(user) {
     Cookies.set(USER_KEY, JSON.stringify(user), {
       expires: 7,
-      secure: true,
+      secure: isSecureContext(),
       sameSite: "lax",
       path: "/",
     });