Merge pull request #125 from AllForNothing/fix/same-site

fix: add new setting item to disable/enable same site for session_id cookie
This commit is contained in:
crazywoola
2025-09-16 10:09:59 +08:00
committed by GitHub
3 changed files with 7 additions and 2 deletions

View File

@ -1,7 +1,7 @@
import type { NextRequest } from 'next/server'
import { ChatClient } from 'dify-client'
import { v4 } from 'uuid'
import { API_KEY, API_URL, APP_ID } from '@/config'
import { API_KEY, API_URL, APP_ID, APP_INFO } from '@/config'
const userPrefix = `user_${APP_ID}:`
@ -15,7 +15,10 @@ export const getInfo = (request: NextRequest) => {
}
export const setSession = (sessionId: string) => {
return { 'Set-Cookie': `session_id=${sessionId}` }
if (APP_INFO.disable_session_same_site)
return { 'Set-Cookie': `session_id=${sessionId}; SameSite=None; Secure` }
return { 'Set-Cookie': `session_id=${sessionId}` }
}
export const client = new ChatClient(API_KEY, API_URL || undefined)