fix: get all Set-Cookie headers to support both cc-session and parent_session_credentials

ClassCharts returns two cookies on login:
- cc-session
- parent_session_credentials

The original code used response.headers.get('set-cookie') which only
returns the first cookie, causing subsequent API calls to fail with
'You are not logged in'.

This fix uses getSetCookie() to retrieve all Set-Cookie headers.

Author: adaclaw

src/core/parentClient.ts

@@ -61,11 +61,23 @@ export class ParentClient extends BaseClient {
 			);
 		}
 
-		const cookies = String(response.headers.get("set-cookie"));
-		// this.authCookies = cookies.split(";");
-		const sessionCookies = parseCookies(cookies);
+		// Get ALL Set-Cookie headers (get() only returns the first one!)
+		const setCookieHeaders = response.headers.getSetCookie();
+		if (!setCookieHeaders || setCookieHeaders.length < 2) {
+			await response.body?.cancel();
+			throw new Error("Unauthenticated: Missing Set-Cookie headers");
+		}
+
+		// Parse both cookies
+		const cookie1 = parseCookies(setCookieHeaders[0]);
+		const cookie2 = parseCookies(setCookieHeaders[1]);
+
+		// Store both cookies for API requests
+		this.authCookies = [setCookieHeaders[0], setCookieHeaders[1]];
+
+		// Get session ID from parent_session_credentials cookie
 		const sessionID = JSON.parse(
-			String(sessionCookies.parent_session_credentials),
+			String(cookie1.parent_session_credentials || cookie2.parent_session_credentials),
 		);
 		this.sessionId = sessionID.session_id;
 		this.pupils = await this.getPupils();