diff --git a/src/app/api/login/route.ts b/src/app/api/login/route.ts index 0078be7..210146a 100644 --- a/src/app/api/login/route.ts +++ b/src/app/api/login/route.ts @@ -76,7 +76,9 @@ export async function POST(req: NextRequest) { response.cookies.set('auth', '', { path: '/', expires: new Date(0), - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response; @@ -103,7 +105,9 @@ export async function POST(req: NextRequest) { response.cookies.set('auth', cookieValue, { path: '/', expires, - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response; @@ -133,7 +137,9 @@ export async function POST(req: NextRequest) { response.cookies.set('auth', cookieValue, { path: '/', expires, - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response; @@ -166,7 +172,9 @@ export async function POST(req: NextRequest) { response.cookies.set('auth', cookieValue, { path: '/', expires, - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response; diff --git a/src/app/api/logout/route.ts b/src/app/api/logout/route.ts index fce7830..ced68a1 100644 --- a/src/app/api/logout/route.ts +++ b/src/app/api/logout/route.ts @@ -9,7 +9,9 @@ export async function POST() { response.cookies.set('auth', '', { path: '/', expires: new Date(0), - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response; diff --git a/src/app/api/register/route.ts b/src/app/api/register/route.ts index 603a984..1bcee22 100644 --- a/src/app/api/register/route.ts +++ b/src/app/api/register/route.ts @@ -108,7 +108,9 @@ export async function POST(req: NextRequest) { response.cookies.set('auth', cookieValue, { path: '/', expires, - sameSite: 'strict', + sameSite: 'lax', // 改为 lax 以支持 PWA + httpOnly: false, // PWA 需要客户端可访问 + secure: false, // 根据协议自动设置 }); return response;