cookie and pwa stuff

src/lib/supertokens/recipes/start-session.ts

@@ -5,6 +5,40 @@ import SuperTokens from "supertokens-node";
 
 export async function getSessionForStart(request: Request, options?: { sessionRequired?: boolean }) {
   ensureSuperTokensBackend();
+
+  const cookieHeader = request.headers.get('cookie');
+  if (cookieHeader) {
+    const tokens = cookieHeader.match(/sAccessToken=([^;]+)/g);
+    if (tokens && tokens.length > 1) {
+      logger.warn(`Detected ${tokens.length} duplicate sAccessToken cookies, cleaning up`);
+
+      const parsedTokens = tokens.map(tokenStr => {
+        const token = tokenStr.replace('sAccessToken=', '');
+        try {
+          const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64').toString());
+          return { token, exp: payload.exp, iat: payload.iat };
+        } catch (e) {
+          logger.error('Failed to parse token', e);
+          return { token, exp: 0, iat: 0 };
+        }
+      });
+
+      parsedTokens.sort((a, b) => b.exp - a.exp);
+      const freshestToken = parsedTokens[0];
+
+      logger.info(`Using freshest token: exp=${freshestToken.exp}, iat=${freshestToken.iat}`);
+
+      const cleanedCookie = cookieHeader
+        .split(';')
+        .filter(c => !c.trim().startsWith('sAccessToken='))
+        .join(';') + `; sAccessToken=${freshestToken.token}`;
+
+      const cleanedHeaders = new Headers(request.headers);
+      cleanedHeaders.set('cookie', cleanedCookie);
+      request = new Request(request, { headers: cleanedHeaders });
+    }
+  }
+
   try {
     const session = await getSessionForSSR(request);
     

src/lib/supertokens/server.ts

@@ -25,6 +25,7 @@ export const backendConfig = (): TypeInput => {
         cookieSameSite: "lax",
         cookieSecure: process.env.NODE_ENV === "production",
         cookieDomain: process.env.COOKIE_DOMAIN || undefined,
+        olderCookieDomain: undefined,
         antiCsrf: process.env.NODE_ENV === "production" ? "VIA_TOKEN" : "NONE",
 
         // Debug only