修改cookie的httponly为false

2026-02-02 16:45:10 +08:00
parent 40305bd4ca
commit a070dda9ac
1 changed files with 2 additions and 2 deletions
--- a/dify_1.11.1/api/libs/token.py
+++ b/dify_1.11.1/api/libs/token.py
@@ -104,7 +104,7 @@ def set_access_token_to_cookie(request: Request, response: Response, token: str,
    response.set_cookie(
        _real_cookie_name(COOKIE_NAME_ACCESS_TOKEN),
        value=token,
-        httponly=True,
+        httponly=False,
        domain=_cookie_domain(),
        secure=is_secure(),
        samesite=samesite,
@@ -117,7 +117,7 @@ def set_refresh_token_to_cookie(request: Request, response: Response, token: str
    response.set_cookie(
        _real_cookie_name(COOKIE_NAME_REFRESH_TOKEN),
        value=token,
-        httponly=True,
+        httponly=False,
        domain=_cookie_domain(),
        secure=is_secure(),
        samesite="Lax",