fix(auth): 修复访问令牌加密Cookie的域和过期时间配置
- 为Access-Token-Encrypt Cookie添加Domain配置 - 设置Cookie的MaxAge过期时间参数 - 确保Cookie在指定域名下正确存储 - 统一Cookie的过期时间配置与JWT令牌一致
This commit is contained in:
@@ -545,7 +545,11 @@ namespace YLErp.Web.Controllers
|
||||
MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds)
|
||||
});
|
||||
|
||||
Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken));
|
||||
Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken), new CookieOptions
|
||||
{
|
||||
Domain = Request.Host.Host,
|
||||
MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds)
|
||||
});
|
||||
|
||||
// 打印日志
|
||||
var logger = LogFactory.GetLogger<AccountController>();
|
||||
|
||||
Reference in New Issue
Block a user