1 test refresh

// ✅ Log để so sánh console.log("=== POST /api/products ==="); console.log("authHeader token (30 chars):", authHeader?.slice(7, 37)); console.log("cookieToken (30 chars):", cookieToken?.slice(0, 30)); console.log("token dùng (30 chars):", token?.slice(0, 30)); console.log("token source:", authHeader ? "header" : "cookie"); // ✅ Decode để xem exp try { const payload = JSON.parse(Buffer.from(token!.split('.')[1], 'base64').toString()); console.log("token payload:", JSON.stringify(payload)); } catch { console.log("decode failed"); }