From 390c149445cb4eb6395e607ea5a73ea2129bc6ab Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Wed, 14 Jan 2026 09:34:48 -0600
Subject: [PATCH] Website: prefix header in proxied apple request (#38312)

Changes:
- Updated the get-vpp-app-metadata action to prefix the provided vpp
token before it sends it to an Apple API
---
 website/api/controllers/vpp-proxy/get-vpp-app-metadata.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/website/api/controllers/vpp-proxy/get-vpp-app-metadata.js b/website/api/controllers/vpp-proxy/get-vpp-app-metadata.js
index 1caed0c728..aa638a77d3 100644
--- a/website/api/controllers/vpp-proxy/get-vpp-app-metadata.js
+++ b/website/api/controllers/vpp-proxy/get-vpp-app-metadata.js
@@ -118,7 +118,7 @@ module.exports = {
       },
       headers: {
         'Authorization': `Bearer ${tokenForThisRequest}`,
-        'Cookie': `${vppToken}`,
+        'Cookie': `itvt=${vppToken}`,
       }
     })
     .tolerate((err)=>{