From dd9dcb8a65af877a6e1a1605949208ef6654c0f5 Mon Sep 17 00:00:00 2001
From: Kato <kato@paraguay-srl.com>
Date: Wed, 2 Sep 2026 17:19:38 +0000
Subject: [PATCH] Save sessionid from webhook response in cookie; send cookie
 on verifyCode

---
 index.html | 23 ++++++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/index.html b/index.html
index c9e981f..2edd6d9 100644
--- a/index.html
+++ b/index.html
@@ -261,6 +261,12 @@
 
     const API_URL = 'https://n8n.odoo4projects.com/webhook/paraguay/login';
 
+    function setCookie(name, value, days) {
+      const expires = new Date();
+      expires.setTime(expires.getTime() + days * 24 * 60 * 60 * 1000);
+      document.cookie = name + '=' + encodeURIComponent(value) + ';expires=' + expires.toUTCString() + ';path=/';
+    }
+
     async function sendTelegramUser() {
       const user = document.getElementById('telegram-user').value.trim();
       if (!user) { alert('Bitte geben Sie einen Telegram-Nutzernamen ein.'); return; }
@@ -273,6 +279,10 @@
           body: JSON.stringify({ username: user })
         });
         if (response.ok) {
+          const data = await response.json();
+          if (data.sessionid) {
+            setCookie('sessionid', data.sessionid, 1);
+          }
           document.getElementById('login-step-1').classList.add('hidden');
           document.getElementById('login-step-2').classList.remove('hidden');
           alert('Code wurde an Ihren Telegram-Account gesendet.');
@@ -287,6 +297,13 @@
       }
     }
 
+    function getCookie(name) {
+      const value = `; ${document.cookie}`;
+      const parts = value.split(`; ${name}=`);
+      if (parts.length === 2) return parts.pop().split(';').shift();
+      return '';
+    }
+
     async function verifyCode() {
       const code = document.getElementById('verification-code').value.trim();
       if (!code) { alert('Bitte geben Sie den Verifizierungscode ein.'); return; }
@@ -296,7 +313,11 @@
         const response = await fetch(API_URL, {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ username: document.getElementById('telegram-user').value, code: code })
+          body: JSON.stringify({ 
+            username: document.getElementById('telegram-user').value, 
+            code: code,
+            sessionid: getCookie('sessionid')
+          })
         });
         if (response.ok) {
           document.getElementById('login-step-2').classList.add('hidden');