fix(dev): share auth across dev frontend proxy

src/components/dev-frontend-proxy/nginx.conf

@@ -5,6 +5,29 @@ server {
 
   # The dev frontend is intentionally reached through the existing backend-core
   # microservice proxy so the public port does not need direct access to D601.
+  # Auth endpoints use the production frontend only to issue/clear the shared
+  # host-scoped UniDesk session cookie. Application routes and APIs still go to
+  # frontend-dev.
+  location = /login {
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_pass http://frontend:8080$request_uri;
+  }
+
+  location = /logout {
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_pass http://frontend:8080$request_uri;
+  }
+
   location / {
     proxy_http_version 1.1;
     proxy_set_header Host $host;