MetaZone/mce
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 临时登录cookie改用maxAge=IdleTimeout替代session模式

Browse Source 
- rememberMe=false时maxAge从0改为IdleTimeout秒数（默认2h），与Redis TTL一致
- 解决服务器重启后部分浏览器（尤其隐私窗口）将session cookie视为失效的问题
- 关浏览器后依然自动清除（maxAge到期 + Redis TTL双保险）
This commit is contained in:
Victor Jay
2026-06-03 01:07:47 +08:00
parent ae15025b1d
commit 58aabb9bf0
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/common/cookie.go
View File

@ -15,8 +15,8 @@ const (
) )
// SetSessionCookie 写入会话 ID Cookie // SetSessionCookie 写入会话 ID Cookie
// rememberMe=true → Cookie 持久化（30天），关浏览器后仍保持登录 // rememberMe=true → Cookie maxAge=30天，关浏览器后仍保持登录
// rememberMe=false → Cookie session 模式（maxAge=0），关浏览器即清除 // rememberMe=false → Cookie maxAge=空闲超时（默认2h），与Redis TTL一致，关浏览器后自动清除
func SetSessionCookie(c *gin.Context, sid string, rememberMe bool, cfg *config.Config) { func SetSessionCookie(c *gin.Context, sid string, rememberMe bool, cfg *config.Config) {
secure := cfg.Server.Mode != "debug" secure := cfg.Server.Mode != "debug"
c.SetSameSite(http.SameSiteLaxMode) c.SetSameSite(http.SameSiteLaxMode)
@ -25,7 +25,7 @@ func SetSessionCookie(c *gin.Context, sid string, rememberMe bool, cfg *config.C
if rememberMe { if rememberMe {
maxAge = cfg.Session.RememberTimeout * 60 // 分钟 → 秒 maxAge = cfg.Session.RememberTimeout * 60 // 分钟 → 秒
} else { } else {
maxAge = 0 // session cookie maxAge = cfg.Session.IdleTimeout * 60 // 分钟 → 秒，与 Redis TTL 一致
} }
log.Printf("[SetSessionCookie] sid=%s rememberMe=%v maxAge=%ds secure=%v", sid[:16]+"...", rememberMe, maxAge, secure) log.Printf("[SetSessionCookie] sid=%s rememberMe=%v maxAge=%ds secure=%v", sid[:16]+"...", rememberMe, maxAge, secure)