Method verifyLogin

apps/backend/src/auth/auth.controller.ts:80–94

(@Query('token') token: string, @Res() res: Response)

  @Get('verify')
  async verifyLogin(@Query('token') token: string, @Res() res: Response) {
    const { token: sessionToken, user } =
      await this.authService.verifyToken(token);

    res.cookie('dyan-token', sessionToken, {
      httpOnly: true,
      secure: false, // set to true in production (with HTTPS)
      maxAge: 7 * 24 * 60 * 60 * 1000, // 7 days
      sameSite: 'lax',
    });

    console.log('Set-Cookie header sent:', sessionToken);

    return res.json({ message: 'Logged in', user });
  }

  @Post('logout')
  logout(@Res() res: Response) {