Add CORS support for Cross-Device Authentication in passkey handling

Enhance authentication options in the server API by adding CORS headers to support cross-device authentication. Implement handling for preflight OPTIONS requests and increase timeout for registration and authentication processes to 5 minutes, improving user experience and compatibility across devices.

server/api/auth/passkeys/login.post.js

@@ -18,6 +18,19 @@ function findUserByCredentialId(users, credentialId) {
 }
 
 export default defineEventHandler(async (event) => {
+  // CORS-Header für Cross-Device Authentication
+  const origin = getHeader(event, 'origin')
+  if (origin) {
+    setHeader(event, 'Access-Control-Allow-Origin', origin)
+    setHeader(event, 'Access-Control-Allow-Credentials', 'true')
+    setHeader(event, 'Access-Control-Allow-Methods', 'POST, OPTIONS')
+    setHeader(event, 'Access-Control-Allow-Headers', 'Content-Type, Authorization')
+  }
+
+  if (getMethod(event) === 'OPTIONS') {
+    return { success: true }
+  }
+
   const ip = getClientIp(event)
   const body = await readBody(event)
   const response = body?.credential