From 3b76e04ec2eb29bed6b7c62d850c57428ceab09c Mon Sep 17 00:00:00 2001
From: erdemcaygor <erdem.caygor@gmail.com>
Date: Mon, 18 Aug 2025 16:47:26 +0300
Subject: [PATCH] ssr code flow authentication updated

---
 .../apps/dev-app/src/app/route.provider.ts     | 18 +-----------------
 npm/ng-packs/apps/dev-app/src/server.ts        |  3 +--
 2 files changed, 2 insertions(+), 19 deletions(-)

diff --git a/npm/ng-packs/apps/dev-app/src/app/route.provider.ts b/npm/ng-packs/apps/dev-app/src/app/route.provider.ts
index e9b07ec0e1..f60e7ca330 100644
--- a/npm/ng-packs/apps/dev-app/src/app/route.provider.ts
+++ b/npm/ng-packs/apps/dev-app/src/app/route.provider.ts
@@ -16,22 +16,6 @@ function configureRoutes() {
       iconClass: 'fas fa-home',
       order: 1,
       layout: eLayoutType.application,
-    },
-    {
-      path: '/identity/users',
-      name: '::Users:Server',
-      iconClass: 'fas fa-home',
-      order: 2,
-      layout: eLayoutType.application,
-      requiredPolicy: 'AbpIdentity.Users'
-    },
-    {
-      path: '/identity/roles',
-      name: '::Roles:Server',
-      iconClass: 'fas fa-home',
-      order: 3,
-      layout: eLayoutType.application,
-      requiredPolicy: 'AbpIdentity.Roles'
-    },
+    }
   ]);
 }
diff --git a/npm/ng-packs/apps/dev-app/src/server.ts b/npm/ng-packs/apps/dev-app/src/server.ts
index 94ce473445..4e5d443a97 100644
--- a/npm/ng-packs/apps/dev-app/src/server.ts
+++ b/npm/ng-packs/apps/dev-app/src/server.ts
@@ -73,9 +73,7 @@ app.get('/', async (req, res, next) => {
     const sess = sid && sessions.get(sid);
     if (!sess || state !== sess.state) return res.status(400).send('invalid state');
 
-    // 👈 v6.6.4: metadata'ya böyle erişilir
     const tokenEndpoint = config.serverMetadata().token_endpoint!;
-    // 👈 redirect_uri'yi SLASHSIZ gönderiyoruz (IdP kaydıyla birebir)
     const body = new URLSearchParams({
       grant_type: 'authorization_code',
       code: String(code),
@@ -99,6 +97,7 @@ app.get('/', async (req, res, next) => {
     const tokens = await resp.json();
     console.log(tokens);
     sessions.set(sid, { ...sess, at: tokens.access_token, refresh: tokens.refresh_token });
+    res.cookie('access_token', tokens.access_token, baseCookie);
     return res.redirect('/');
   } catch (e) {
     console.error('OIDC error:', e);