Merge branch 'main' into claude/weekly-leaderboard-view-xt66i

Author: prazgaitis

apps/web/proxy.ts

@@ -1,8 +1,8 @@
 import { NextResponse } from "next/server";
 
 // Better Auth handles authentication via cookies
-// No middleware protection needed - routes are protected at the page/API level
-export default function proxy() {
+// No proxy protection needed - routes are protected at the page/API level
+export function proxy() {
   return NextResponse.next();
 }
 

packages/backend/auth.ts

@@ -31,6 +31,10 @@ export const createAuth = (ctx: GenericCtx<DataModel>) => {
       "http://localhost:3000",
       "http://localhost:3001",
       process.env.SITE_URL || "",
+      // Also trust www variant of the site URL
+      ...(process.env.SITE_URL
+        ? [process.env.SITE_URL.replace("://", "://www.")]
+        : []),
     ].filter(Boolean),
     emailAndPassword: {
       enabled: true,