feat: Remove hardcoded /gatekeeper base path, update image paths, and introduce configurable base URL and cookie domain for improved routing and session management.

packages/gatekeeper/src/app/api/verify/route.ts

@@ -19,7 +19,11 @@ export async function GET(req: NextRequest) {
     req.headers.get("x-forwarded-host") || req.headers.get("host") || "";
   const proto = req.headers.get("x-forwarded-proto") || "https";
 
-  const loginUrl = `${proto}://${host}/gatekeeper/login?redirect=${encodeURIComponent(originalUrl)}`;
+  const gatekeeperUrl =
+    process.env.NEXT_PUBLIC_BASE_URL || `${proto}://gatekeeper.${host}`;
+  const absoluteOriginalUrl = `${proto}://${host}${originalUrl}`;
+
+  const loginUrl = `${gatekeeperUrl}/login?redirect=${encodeURIComponent(absoluteOriginalUrl)}`;
 
   return NextResponse.redirect(loginUrl);
 }

packages/gatekeeper/src/app/login/page.tsx

@@ -22,6 +22,7 @@ export default async function LoginPage({ searchParams }: LoginPageProps) {
     const authCookieName =
       process.env.AUTH_COOKIE_NAME || "mintel_gatekeeper_session";
     const targetRedirect = formData.get("redirect") as string;
+    const cookieDomain = process.env.COOKIE_DOMAIN;
 
     if (password === expectedPassword) {
       const cookieStore = await cookies();
@@ -31,12 +32,11 @@ export default async function LoginPage({ searchParams }: LoginPageProps) {
         path: "/",
         maxAge: 30 * 24 * 60 * 60, // 30 days
         sameSite: "lax",
+        ...(cookieDomain ? { domain: cookieDomain } : {}),
       });
       redirect(targetRedirect);
     } else {
-      redirect(
-        `/gatekeeper/login?error=1&redirect=${encodeURIComponent(targetRedirect)}`,
-      );
+      redirect(`/login?error=1&redirect=${encodeURIComponent(targetRedirect)}`);
     }
   }
 

packages/gatekeeper/src/app/page.tsx

@@ -1,5 +1,5 @@
 import { redirect } from "next/navigation";
 
 export default function RootPage() {
-  redirect("/gatekeeper/login");
+  redirect("/login");
 }