# users.py
# explicit cookie_secure only for testing, I'll replace w an ENV variable when deployed
cookie_transport = CookieTransport(cookie_max_age=3600, cookie_name="token", cookie_secure=False)

auth_backend_cookie = AuthenticationBackend(
    name="cookie",
    transport=cookie_transport,
    get_strategy=get_jwt_strategy,
)

fastapi_users = FastAPIUsers(
    get_user_manager,
    [auth_backend_cookie],
    User,
    UserCreate,
    UserUpdate,
    UserDB,
)

#app.py
app.add_middleware(
    CORSMiddleware,
    allow_origins=["http://localhost:3000"],
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],
    expose_headers=["Content-Type", "Cookie", "Set-Cookie"],
)

app.include_router(fastapi_users.get_auth_router(auth_backend_cookie), prefix="/auth/cookie", tags=["auth"])
app.include_router(
    fastapi_users.get_register_router(),
    prefix="/auth",
    tags=["auth"],
    dependencies=[Depends(validate_invite)],
)

const resp = await fetch(`${api.host}/users/me`, {
                    credentials: 'include',
                })
                console.log('UsersMe resp', resp)
                const data = await resp.json()
                console.log('Data', data)