mirror of
https://github.com/coollabsio/coolify.git
synced 2026-10-28 17:44:36 +08:00
A Laravel app on a sibling subdomain with SESSION_DOMAIN=.example.com sets a second XSRF-TOKEN cookie that the browser also sends to Coolify. The terminal server forwarded only the first one, so Laravel answered 419 and the terminal closed with 4401. Try each distinct token (at most five) and keep the accepted one for the requests that follow on the connection. Closes #10397 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>