fix(navbar): recognize authenticated users with active sessions

[Copilot]

Authenticated users on cloud.layer5.io were not recognized on docs.layer5.io because checkUserAuth bailed out before making the API call when the provider_token cookie wasn't present on the docs subdomain. Safari and other browsers with strict cookie isolation are particularly affected.

Changes:

• Removed early throw when provider_token cookie is absent — the function now always attempts the API call
• Added credentials: 'include' to the fetch so the browser sends cloud.layer5.io session cookies cross-origin
• ****** still sent when the local cookie exists (backward compatible)

const fetchOptions = {
  method: 'GET',
  credentials: 'include',
};

if (token) {
  fetchOptions.headers = {
    'Authorization': `******
  };
}

const re = await fetch(`${cloudAppUrl}/api/identity/users/profile`, fetchOptions);

Note: This requires the cloud.layer5.io API to respond with appropriate Access-Control-Allow-Credentials: true and Access-Control-Allow-Origin headers for docs.layer5.io. If CORS isn't already configured for credentialed requests, a corresponding server-side change will be needed.

[github-actions]

PR Preview Action v1.6.3
Preview removed because the pull request was closed.
2026-06-30 01:11 UTC

[Copilot]

Pull request overview

This PR updates the docs site navbar auth check so that users with an active Layer5 Cloud session (via cloud.layer5.io cookies) are recognized on docs.layer5.io, even when the provider_token cookie is not present on the docs subdomain (notably impacting Safari/strict cookie isolation).

Changes:

• Removes the early failure when provider_token is missing; the profile API call is now attempted regardless.
• Adds credentials: 'include' to the profile fetch request so cross-origin Cloud session cookies are sent.
• Keeps sending the Authorization: Bearer ... header when a local provider_token cookie exists (backward compatible).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package-lock.json	Reorders the existing typescript@6.0.2 entry (no functional dependency change).
layouts/partials/navbar.html	Updates checkUserAuth to always attempt the Cloud profile fetch and include credentials for session-cookie-based auth.