From 316edb4b3e109383b8a724983ca8ac7619c53cf0 Mon Sep 17 00:00:00 2001
From: Sean O'Connor <sean@soconnor.dev>
Date: Mon, 29 Jun 2026 22:01:41 -0400
Subject: [PATCH] Prefer mobile auth cookie for app requests

---
 src/lib/auth-server.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib/auth-server.ts b/src/lib/auth-server.ts
index d952a15..bf81d05 100644
--- a/src/lib/auth-server.ts
+++ b/src/lib/auth-server.ts
@@ -28,8 +28,6 @@ function looksLikeSessionCookie(cookie: string): boolean {
 }
 
 export function headersWithAuthCookieFallback(headers: Headers): Headers {
-  if (headers.get("cookie")?.trim()) return headers;
-
   const mobileCookie = headers.get(MOBILE_AUTH_COOKIE_HEADER)?.trim();
   if (
     mobileCookie &&
@@ -41,6 +39,8 @@ export function headersWithAuthCookieFallback(headers: Headers): Headers {
     return nextHeaders;
   }
 
+  if (headers.get("cookie")?.trim()) return headers;
+
   const sessionToken = headers.get(MOBILE_SESSION_TOKEN_HEADER)?.trim();
   if (
     sessionToken &&