From b38c9b046e588465be7fb16d152ea041232bccd7 Mon Sep 17 00:00:00 2001
From: neodk2004 <barac.daniel@gmail.com>
Date: Sun, 21 Jun 2026 20:47:19 +0200
Subject: [PATCH] fix(invite): add secure flag to pf_invite cookie for HTTPS
 production

---
 src/app/join/page.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/app/join/page.tsx b/src/app/join/page.tsx
index 05acf51..8a5c1b3 100644
--- a/src/app/join/page.tsx
+++ b/src/app/join/page.tsx
@@ -21,6 +21,7 @@ async function submitCode(formData: FormData) {
   const cookieStore = await cookies();
   cookieStore.set("pf_invite", code, {
     httpOnly: true,
+    secure: process.env.NODE_ENV === "production",
     sameSite: "lax",
     maxAge: 60 * 60, // 1 hour
     path: "/",