From 37c30df30f8dc4f23301c9dc30df145cc69a6b1f Mon Sep 17 00:00:00 2001 From: shangzhongyuan Date: Wed, 11 Mar 2026 17:28:07 +0800 Subject: [PATCH 1/3] =?UTF-8?q?=E6=B7=BB=E5=8A=A0Access-Token-Encrypt?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- YLErpWeb/Controllers/AccountController.cs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/YLErpWeb/Controllers/AccountController.cs b/YLErpWeb/Controllers/AccountController.cs index 11801af3..432da023 100644 --- a/YLErpWeb/Controllers/AccountController.cs +++ b/YLErpWeb/Controllers/AccountController.cs @@ -545,6 +545,8 @@ namespace YLErp.Web.Controllers MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds) }); + Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken)); + var userDbInfo = UserInfo.FromDbUser(user); Server.CacheProvider.Set("loginUser^" + user.Id, userDbInfo, TimeSpan.FromMinutes(30)); From 8045eb85c26f7b25776387436f23d98a514c8f8f Mon Sep 17 00:00:00 2001 From: shangzhongyuan Date: Wed, 11 Mar 2026 18:38:41 +0800 Subject: [PATCH 2/3] =?UTF-8?q?feat(AccountController):=20=E6=B7=BB?= =?UTF-8?q?=E5=8A=A0=E7=94=A8=E6=88=B7=E7=99=BB=E5=BD=95=E6=88=90=E5=8A=9F?= =?UTF-8?q?=E6=97=A5=E5=BF=97=E8=AE=B0=E5=BD=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 在用户登录成功后记录日志,便于追踪用户登录情况和JWT令牌生成 --- YLErpWeb/Controllers/AccountController.cs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/YLErpWeb/Controllers/AccountController.cs b/YLErpWeb/Controllers/AccountController.cs index 432da023..b444c46c 100644 --- a/YLErpWeb/Controllers/AccountController.cs +++ b/YLErpWeb/Controllers/AccountController.cs @@ -546,6 +546,10 @@ namespace YLErp.Web.Controllers }); Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken)); + + // 打印日志 + var logger = LogFactory.GetLogger(); + logger.Info($"用户 {user.LoginName} 登录成功,生成JWT令牌"); var userDbInfo = UserInfo.FromDbUser(user); From a5d700409639fec7619a897ee1e90df6b9ae47b8 Mon Sep 17 00:00:00 2001 From: shangzhongyuan Date: Thu, 12 Mar 2026 09:44:45 +0800 Subject: [PATCH 3/3] =?UTF-8?q?fix(auth):=20=E4=BF=AE=E5=A4=8D=E8=AE=BF?= =?UTF-8?q?=E9=97=AE=E4=BB=A4=E7=89=8C=E5=8A=A0=E5=AF=86Cookie=E7=9A=84?= =?UTF-8?q?=E5=9F=9F=E5=92=8C=E8=BF=87=E6=9C=9F=E6=97=B6=E9=97=B4=E9=85=8D?= =?UTF-8?q?=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 为Access-Token-Encrypt Cookie添加Domain配置 - 设置Cookie的MaxAge过期时间参数 - 确保Cookie在指定域名下正确存储 - 统一Cookie的过期时间配置与JWT令牌一致 --- YLErpWeb/Controllers/AccountController.cs | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/YLErpWeb/Controllers/AccountController.cs b/YLErpWeb/Controllers/AccountController.cs index b444c46c..74b3da42 100644 --- a/YLErpWeb/Controllers/AccountController.cs +++ b/YLErpWeb/Controllers/AccountController.cs @@ -545,7 +545,11 @@ namespace YLErp.Web.Controllers MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds) }); - Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken)); + Response.Cookies.Append("Access-Token-Encrypt", DataProtectHelper.Encrypt(jwtToken), new CookieOptions + { + Domain = Request.Host.Host, + MaxAge = TimeSpan.FromSeconds(AuthHelper.ExpireInSeconds) + }); // 打印日志 var logger = LogFactory.GetLogger();