first

frontend/vite.config.ts

@@ -0,0 +1,17 @@
+import react from '@vitejs/plugin-react'
+import { defineConfig } from 'vite'
+
+// https://vite.dev/config/
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 5173,
+    proxy: {
+      // Proxied so the browser sees /api and the backend as the same
+      // origin (localhost:5173) in dev -- the refresh-token cookie then
+      // "just works" as same-site without touching CORS/SameSite at all.
+      '/api': 'http://localhost:8080',
+      '/uploads': 'http://localhost:8080',
+    },
+  },
+})