I think i figured out why Apple watch doesn't work on wasteof3: it doesn't support the set-cookie header
The solution is:
add an api to get auth that doesn’t send the token in a header (mostly copy-pasting from the current auth api)
add a listener to the form to intercept the default behavior (posting to the original api) and instead post to the new api and then save the returned cookie in the browser using
document.cookie(this works, I’ve tested)But don’t change the form’s default behavior, so it’ll still work when javascript is disabled
The beta actually looks more Apple Watch friendly than wasteof2, because it has <dialog>s in many places instead of alerts
the solution is that apple stops being difficult and just follows the web spec. its not for me to bend over backwards to support their dumb limitations