Use / as the default auth cookie path.

1 files changed, 10 insertions, 3 deletions

diff --git a/auth.go b/auth.go
index ac1fc57..984d614 100644
--- a/auth.go
+++ b/auth.go
@@ -42,6 +42,13 @@ type AuthConfig[T any] struct {
 	MaxAge time.Duration
 }
 
+func (ac AuthConfig[T]) urlPath() string {
+	if ac.URLPath == "" {
+		return "/"
+	}
+	return ac.URLPath
+}
+
 // SerDes defines the interface for serializing and deserializing authentication data.
 //
 // Implementations must handle conversion between type T and byte streams.
@@ -139,7 +146,7 @@ func (a Auth[T]) Set(w http.ResponseWriter, data T) error {
 	cookie := &http.Cookie{
 		Name:     a.config.CookieName,
 		Value:    a.enc.Encrypt(buf.Bytes()),
-		Path:     a.config.URLPath,
+		Path:     a.config.urlPath(),
 		Domain:   a.config.URLDomain,
 		MaxAge:   int(a.config.MaxAge / time.Second),
 		Secure:   a.config.HTTPSOnly,
@@ -193,11 +200,11 @@ func removeSetCookieHeaders(w http.ResponseWriter, cookieName string) {
 func (a Auth[T]) Clear(w http.ResponseWriter) {
 	// Remove any existing Set-Cookie headers for this cookie name
 	removeSetCookieHeaders(w, a.config.CookieName)
-	
+
 	cookie := &http.Cookie{
 		Name:     a.config.CookieName,
 		Value:    "",
-		Path:     a.config.URLPath,
+		Path:     a.config.urlPath(),
 		Domain:   a.config.URLDomain,
 		MaxAge:   -1,
 		Secure:   a.config.HTTPSOnly,