From a5d700409639fec7619a897ee1e90df6b9ae47b8 Mon Sep 17 00:00:00 2001 From: shangzhongyuan Date: Thu, 12 Mar 2026 09:44:45 +0800 Subject: [PATCH] =?UTF-8?q?fix(auth):=20=E4=BF=AE=E5=A4=8D=E8=AE=BF?= =?UTF-8?q?=E9=97=AE=E4=BB=A4=E7=89=8C=E5=8A=A0=E5=AF=86Cookie=E7=9A=84?= =?UTF-8?q?=E5=9F=9F=E5=92=8C=E8=BF=87=E6=9C=9F=E6=97=B6=E9=97=B4=E9=85=8D?= =?UTF-8?q?=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 为Access-Token-Encrypt Cookie添加Domain配置 - 设置Cookie的MaxAge过期时间参数 - 确保Cookie在指定域名下正确存储 - 统一Cookie的过期时间配置与JWT令牌一致 --- YLErpWeb/Controllers/AccountController.cs | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/YLErpWeb/Controllers/AccountController.cs b/YLErpWeb/Controllers/AccountController.cs index b444c46c..74b3da42 100644 --- a/YLErpWeb/Controllers/AccountController.cs +++ b/YLErpWeb/Controllers/AccountController.cs @@ -545,7 +545,11 @@ namespace YLErp.Web.Controllers MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds) }); - Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken)); + Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken), new CookieOptions + { + Domain = Request.Host.Host, + MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds) + }); // 打印日志 var logger = LogFactory.GetLogger();