fix(auth): 修复访问令牌加密Cookie的域和过期时间配置

- 为Access-Token-Encrypt Cookie添加Domain配置
- 设置Cookie的MaxAge过期时间参数
- 确保Cookie在指定域名下正确存储
- 统一Cookie的过期时间配置与JWT令牌一致
This commit is contained in:
shangzhongyuan
2026-03-12 09:44:45 +08:00
parent 8045eb85c2
commit a5d7004096
+5 -1
View File
@@ -545,7 +545,11 @@ namespace YLErp.Web.Controllers
MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds)
});
Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken));
Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken), new CookieOptions
{
Domain = Request.Host.Host,
MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds)
});
// 打印日志
var logger = LogFactory.GetLogger<AccountController>();