fix: change token name and same site lax rule

This commit is contained in:
Simon Ding
2024-09-02 13:59:36 +08:00
parent b12bbd2ad9
commit 32b595e116

View File

@@ -22,7 +22,7 @@ func (s *Server) authModdleware(c *gin.Context) {
c.Next() c.Next()
return return
} }
token, err := c.Cookie("token") token, err := c.Cookie("polaris_token")
if err != nil { if err != nil {
log.Errorf("token error: %v", err) log.Errorf("token error: %v", err)
c.AbortWithStatus(http.StatusForbidden) c.AbortWithStatus(http.StatusForbidden)
@@ -90,11 +90,9 @@ func (s *Server) Login(c *gin.Context) (interface{}, error) {
if err != nil { if err != nil {
return nil, errors.Wrap(err, "sign") return nil, errors.Wrap(err, "sign")
} }
c.SetSameSite(http.SameSiteNoneMode) c.SetSameSite(http.SameSiteLaxMode)
c.SetCookie("token", sig, 0, "/", "", false, false) c.SetCookie("polaris_token", sig, 0, "/", "", false, false)
return gin.H{ return "success", nil
"token": sig,
}, nil
} }
func (s *Server) Logout(c *gin.Context) (interface{}, error) { func (s *Server) Logout(c *gin.Context) (interface{}, error) {
@@ -102,8 +100,8 @@ func (s *Server) Logout(c *gin.Context) (interface{}, error) {
return nil, errors.New( "auth is not enabled") return nil, errors.New( "auth is not enabled")
} }
c.SetSameSite(http.SameSiteNoneMode) c.SetSameSite(http.SameSiteLaxMode)
c.SetCookie("token", "", -1, "/", "", true, false) c.SetCookie("polaris_token", "", -1, "/", "", true, false)
return nil, nil return nil, nil
} }