ENG-0000 fix(portal): changes httpOnly logic to false (#933)

- Updates the cookie check logic to `httpOnly` to `false`
- Wraps the `verifyPrivyAccessToken` in a try/catch block

apps/portal/app/.server/privy.ts

@@ -15,14 +15,19 @@ export const verifyPrivyAccessToken = async (
   const privy = getPrivyClient()
   const authToken = getPrivyAccessToken(req)
   if (!authToken) {
-    logger('No privy access token found')
+    logger('No Privy access token found')
+    return null
+  }
+  try {
+    const verifiedClaims = await privy.verifyAuthToken(
+      authToken,
+      process.env.PRIVY_VERIFICATION_KEY,
+    )
+    return verifiedClaims
+  } catch (error) {
+    logger('Error verifying Privy access token', error)
     return null
   }
-  const verifiedClaims = await privy.verifyAuthToken(
-    authToken,
-    process.env.PRIVY_VERIFICATION_KEY,
-  )
-  return verifiedClaims
 }
 
 // takes user privy DID (e.g. authCheck().userId)

apps/portal/app/routes/app.tsx

@@ -24,11 +24,11 @@ import { Address } from 'viem'
 
 // Create a cookie instance to handle the test cookie
 const privySessionCookie = createCookie('privy-session', {
-  httpOnly: true,
+  httpOnly: false,
   secure: true,
   sameSite: 'strict',
   path: '/',
-  domain: 'portal.intuition.systems',
+  domain: '.portal.intuition.systems',
 })
 
 export async function loader({ request }: LoaderFunctionArgs) {