deliveryman/deliveryman-api
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
aaron 2025-02-27 16:50:33 +08:00
parent 9626f9ecba
commit ae0953e4e5
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/core/security.py
View File

@ -26,7 +26,7 @@ def set_jwt_cookie(response: Response, token: str):
key="access_token", key="access_token",
value=f"Bearer {token}", value=f"Bearer {token}",
httponly=True, # 防止JavaScript访问 httponly=True, # 防止JavaScript访问
secure=not settings.DEBUG, # 生产环境使用HTTPS # secure=not settings.DEBUG, # 生产环境使用HTTPS
samesite="lax", # CSRF保护 samesite="lax", # CSRF保护
max_age=None if settings.ACCESS_TOKEN_EXPIRE_MINUTES is None max_age=None if settings.ACCESS_TOKEN_EXPIRE_MINUTES is None
else settings.ACCESS_TOKEN_EXPIRE_MINUTES * 60 else settings.ACCESS_TOKEN_EXPIRE_MINUTES * 60
@ -37,7 +37,7 @@ def clear_jwt_cookie(response: Response):
response.delete_cookie( response.delete_cookie(
key="access_token", key="access_token",
httponly=True, httponly=True,
secure=not settings.DEBUG, # secure=not settings.DEBUG,
samesite="lax" samesite="lax"
) )