From e906b8ad0a8a0bd8112fbd63ae62993dae75ad26 Mon Sep 17 00:00:00 2001 From: 疯狂的狮子Li <15040126243@163.com> Date: 星期一, 14 八月 2023 12:56:31 +0800 Subject: [PATCH] update 优化 全局移除cookie使用 避免安全问题 --- src/views/login.vue | 33 ++++++++++++++++----------------- src/layout/components/SocialCallback/index.vue | 6 ++---- 2 files changed, 18 insertions(+), 21 deletions(-) diff --git a/src/layout/components/SocialCallback/index.vue b/src/layout/components/SocialCallback/index.vue index dd381da..e3a50e0 100644 --- a/src/layout/components/SocialCallback/index.vue +++ b/src/layout/components/SocialCallback/index.vue @@ -4,9 +4,7 @@ <script setup lang="ts"> import { login, callback } from '@/api/login'; -import { setToken } from '@/utils/auth'; -import Cookies from 'js-cookie'; -import { getToken } from '@/utils/auth'; +import { setToken, getToken } from '@/utils/auth'; import { LoginData } from '@/api/types'; const route = useRoute(); @@ -20,7 +18,7 @@ const code = route.query.code as string; const state = route.query.state as string; const source = route.query.source as string; -const tenantId = Cookies.get("tenantId") ? Cookies.get("tenantId") as string : '000000'; +const tenantId = localStorage.getItem("tenantId") ? localStorage.getItem("tenantId") as string : '000000'; const processResponse = async (res: any) => { diff --git a/src/views/login.vue b/src/views/login.vue index 475135b..2ec77e7 100644 --- a/src/views/login.vue +++ b/src/views/login.vue @@ -61,7 +61,6 @@ <script setup lang="ts"> import { getCodeImg, getTenantList } from '@/api/login'; import { authBinding } from '@/api/system/social/auth'; -import Cookies from 'js-cookie'; import { useUserStore } from '@/store/modules/user'; import { LoginData, TenantVO } from '@/api/types'; import { to } from 'await-to-js'; @@ -105,18 +104,18 @@ loginRef.value?.validate(async (valid: boolean, fields: any) => { if (valid) { loading.value = true; - // 鍕鹃�変簡闇�瑕佽浣忓瘑鐮佽缃湪 cookie 涓缃浣忕敤鎴峰悕鍜屽瘑鐮� + // 鍕鹃�変簡闇�瑕佽浣忓瘑鐮佽缃湪 localStorage 涓缃浣忕敤鎴峰悕鍜屽瘑鐮� if (loginForm.value.rememberMe) { - Cookies.set("tenantId", String(loginForm.value.tenantId), { expires: 30 }); - Cookies.set('username', String(loginForm.value.username), { expires: 30 }); - Cookies.set('password', String(loginForm.value.password), { expires: 30 }); - Cookies.set('rememberMe', String(loginForm.value.rememberMe), { expires: 30 }); + localStorage.setItem("tenantId", String(loginForm.value.tenantId)); + localStorage.setItem('username', String(loginForm.value.username)); + localStorage.setItem('password', String(loginForm.value.password)); + localStorage.setItem('rememberMe', String(loginForm.value.rememberMe)); } else { // 鍚﹀垯绉婚櫎 - Cookies.remove("tenantId"); - Cookies.remove('username'); - Cookies.remove('password'); - Cookies.remove('rememberMe'); + localStorage.removeItem("tenantId"); + localStorage.removeItem('username'); + localStorage.removeItem('password'); + localStorage.removeItem('rememberMe'); } // 璋冪敤action鐨勭櫥褰曟柟娉� const [err] = await to(userStore.login(loginForm.value)); @@ -148,11 +147,11 @@ } }; -const getCookie = () => { - const tenantId = Cookies.get("tenantId"); - const username = Cookies.get('username'); - const password = Cookies.get('password'); - const rememberMe = Cookies.get('rememberMe'); +const getLoginData = () => { + const tenantId = localStorage.getItem("tenantId"); + const username = localStorage.getItem('username'); + const password = localStorage.getItem('password'); + const rememberMe = localStorage.getItem('rememberMe'); loginForm.value = { tenantId: tenantId === undefined ? String(loginForm.value.tenantId) : tenantId, username: username === undefined ? String(loginForm.value.username) : username, @@ -178,7 +177,7 @@ //妫�娴嬬鎴烽�夋嫨妗嗙殑鍙樺寲 watch(() => loginForm.value.tenantId, () => { - Cookies.set("tenantId", String(loginForm.value.tenantId), { expires: 30 }) + localStorage.setItem("tenantId", String(loginForm.value.tenantId)) }); /** @@ -201,7 +200,7 @@ onMounted(() => { getCode(); initTenantList(); - getCookie(); + getLoginData(); }); </script> -- Gitblit v1.9.3