Function signInHeaders

e2e/src/surfaces/api.ts:43–56

(baseUrl: string, identity: Identity)

// Better Auth email sign-in → session cookie (selfhost). The `origin` header is
// required: Better Auth rejects state-changing requests without one.
const signInHeaders = (baseUrl: string, identity: Identity) =>
  Effect.promise(async (): Promise<Record<string, string>> => {
    const credentials = identity.credentials;
    if (!credentials) throw new Error(`identity ${identity.label} has no headers or credentials`);
    const response = await fetch(new URL("/api/auth/sign-in/email", baseUrl), {
      method: "POST",
      headers: { "content-type": "application/json", origin: new URL(baseUrl).origin },
      body: JSON.stringify(credentials),
      redirect: "manual",
    });
    const cookie = (response.headers.getSetCookie?.() ?? []).map((c) => c.split(";")[0]).join("; ");
    if (!cookie) throw new Error(`api: sign-in set no cookie (${response.status})`);
    return { cookie };
  });