Expire and cookie

src/endpoints/Auth.php

@@ -92,7 +92,7 @@ public function startSession(Request $request, Response $response)
             $expirationMinutes =  get_directus_setting('auto_sign_out');
             $expiry = new \DateTimeImmutable('now + '.$expirationMinutes.'minutes');
             $cookie = new Cookies();
-            $cookie->set('access_token',['value' => $token,'expires' =>$expiry->format(\DateTime::COOKIE),'httponly' => true]);
+            $cookie->set('access_token',['value' => $token,'expires' =>$expiry->format(\DateTime::COOKIE),'path'=>'/','httponly' => true]);
             $response =  $response->withAddedHeader('Set-Cookie',$cookie->toHeaders());
         }
 

src/helpers/all.php

@@ -297,13 +297,9 @@ function get_request_authorization_token(Request $request)
             if (is_string($authorizationHeader) && preg_match("/Bearer\s+(.*)$/i", $authorizationHeader, $matches)) {
                 $authToken = $matches[1];
             }
-        } elseif ($request->hasHeader('Set-Cookie')) {
-            $authorizationHeader = $request->getHeader('Set-Cookie');
-            // If there's multiple Authorization header, pick first, ignore the rest
-            if (is_array($authorizationHeader)) {
-                $authorizationHeader = array_shift($authorizationHeader);
-            }
-
+        } elseif ($request->hasHeader('Cookie')) {
+            $authorizationHeader = $request->getCookieParam('access_token');
+
             if (is_string($authorizationHeader)) {
                 $app = Application::getInstance();
                 $authService = $app->getContainer()->get('services')->get('auth');
@@ -312,7 +308,6 @@ function get_request_authorization_token(Request $request)
                 $authToken = isset($userSession['id']) ? $authToken : null;
             }
         }
-
         return $authToken;
     }
 }