Steve Faulkner c96f4b6b2a fix: preserve multiple Set-Cookie headers in middleware forwarding (#173) ...

* fix: preserve multiple Set-Cookie headers in middleware forwarding

Middleware header forwarding used Headers.set() which overwrites
previous values with the same key. When middleware sets multiple
Set-Cookie headers (session, CSRF, consent), only the last one
survived.

Changes:
- middleware.ts: .set() -> .append() in next and rewrite paths
- app-dev-server.ts: .set() -> .append() in collection and emission
- prod-server.ts: array accumulation for Set-Cookie, getSetCookie()
  for custom middleware responses
- index.ts codegen: .set() -> .append() in production middleware runner
- index.ts Pages dev: setHeader -> appendHeader for middleware headers

* fix: add type annotations for Headers.forEach callback in prod-server

---------

Co-authored-by: ask-bonk[bot] <ask-bonk[bot]@users.noreply.github.com>

2026-02-27 13:51:30 -06:00

..

vinext

fix: preserve multiple Set-Cookie headers in middleware forwarding (#173)

2026-02-27 13:51:30 -06:00