WuYongJie/CaiWuXiTong
1
0
Fork 0
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

修复旧钉钉回调丢失域名会话 #115

Merged
WuYongJie merged 1 commits from fix/WuYongJie-dingtalk-callback-origin into main 2026-09-08 06:31:00 +08:00
Conversation 0 Commits 1 Files Changed 4 +16 -23
WuYongJie commented 2026-09-08 06:30:36 +08:00
Owner
Copy Link

旧 IP 回调经 Nginx 伪装为域名请求后无法携带域名 cookie，导致 OAuth state 校验失败。改为先 302 跳转至固定 HTTPS 域名并保留查询参数，再由 Laravel 核验会话；增加 no-store/no-referrer，更新配置脚本的验收目标。2 项部署测试、14 个断言通过。仅调整 Nginx 回调兼容路径，无数据库迁移、无财务权限变化。生产发布授权沿用本次登录上线任务。

旧 IP 回调经 Nginx 伪装为域名请求后无法携带域名 cookie，导致 OAuth state 校验失败。改为先 302 跳转至固定 HTTPS 域名并保留查询参数，再由 Laravel 核验会话；增加 no-store/no-referrer，更新配置脚本的验收目标。2 项部署测试、14 个断言通过。仅调整 Nginx 回调兼容路径，无数据库迁移、无财务权限变化。生产发布授权沿用本次登录上线任务。
WuYongJie added 1 commit 2026-09-08 06:30:37 +08:00
WuYongJie merged commit cc355b32ce into main 2026-09-08 06:31:00 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
aaron chenxi DoDo jj404877757 limeng qiuxiang renshen shanshi sumu wangshu yueyang yutu zhoushengchen WuYongJie
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: WuYongJie/CaiWuXiTong#115
No description provided.
Delete Branch "fix/WuYongJie-dingtalk-callback-origin"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?