gaoxiaopei
/
assets-ai
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: logout 端点添加 domain 参数清除跨域 cookie 

- logout 端点清除 cookie 时添加 domain 参数
- 修复 .tlyq.ai 域的 tlyq_session cookie 未正确清除的问题
This commit is contained in:
gitadmin 2026-06-29 20:05:19 +08:00
parent 60e4694d76
commit 2554a61b44
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/app/api/auth/logout/route.ts
View File

@ -6,9 +6,12 @@ import { writeAuditLog, getClientIP } from '@/lib/audit'
export async function POST(request: Request) { export async function POST(request: Request) {
const session = await getSession() const session = await getSession()
const cookieStore = await cookies() const cookieStore = await cookies()
cookieStore.set('session_assets', '', { maxAge: 0, path: '/' }) const domain = process.env.COOKIE_DOMAIN || ''
cookieStore.set('tlyq_session', '', { maxAge: 0, path: '/' })
cookieStore.set('oidc_id_token', '', { maxAge: 0, path: '/' }) // 清除 cookie 时必须指定与设置时相同的 domain
cookieStore.set('session_assets', '', { maxAge: 0, path: '/', domain })
cookieStore.set('tlyq_session', '', { maxAge: 0, path: '/', domain })
cookieStore.set('oidc_id_token', '', { maxAge: 0, path: '/', domain })
if (session) { if (session) {
writeAuditLog({ writeAuditLog({