loks0n 84dc921d41 fix: replace utopia-php/framework with http, fix RFC 6265 cookie handling ...

utopia-php/framework was the old name for utopia-php/http. Replacing it
with utopia-php/http 0.34.19 which fixes getCookie() to use Swoole's
native cookie store (populated via php_raw_url_decode) instead of
re-parsing the raw Cookie header without URL-decoding.

This fixes a production auth bug where Swoole's setcookie() URL-encodes
base64 session values (+ → %2B, / → %2F, = → %3D) in Set-Cookie headers.
RFC 6265 clients (Dart, Swift) reflect these verbatim; the old getCookie()
returned %2B/%2F/%3D to base64_decode() which produced corrupted output,
rejecting valid sessions.

Also updates the e2e test client to use cURL's built-in RFC 6265 cookie
engine (CURLOPT_COOKIEFILE) instead of parse_str() which silently
URL-decoded values, masking the bug in tests. Adds a cookie roundtrip
assertion to testCreateAccountSession.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-08 15:07:46 +01:00

..

General

fix post-merge e2e test regressions

2026-04-07 15:05:07 +05:30

Scopes

Fix scopes

2026-04-08 10:01:52 +02:00

Services

fix: replace utopia-php/framework with http, fix RFC 6265 cookie handling

2026-04-08 15:07:46 +01:00

Traits

added tests

2026-02-25 16:08:40 +05:30

Client.php

fix: use cURL cookie engine instead of parse_str for RFC 6265 compliance

2026-04-08 15:07:46 +01:00