feat: 忽略 cookie secure 及 domain 配置
This commit is contained in:
@@ -92,13 +92,8 @@ public class AuthService {
|
|||||||
public ResponseCookie buildCookie(String cookieName, String token) {
|
public ResponseCookie buildCookie(String cookieName, String token) {
|
||||||
var cookieBuilder = ResponseCookie.from(cookieName, token)
|
var cookieBuilder = ResponseCookie.from(cookieName, token)
|
||||||
.httpOnly(true)
|
.httpOnly(true)
|
||||||
.secure(applicationManager.isSslEnabled())
|
|
||||||
.path("/");
|
.path("/");
|
||||||
|
|
||||||
if (applicationManager.isSecureCookieEnabled()) {
|
|
||||||
cookieBuilder.domain(applicationManager.getExternalHost());
|
|
||||||
}
|
|
||||||
|
|
||||||
return cookieBuilder.build();
|
return cookieBuilder.build();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user