fix: API Key 删除/创建去掉 CSRF — panel_token HttpOnly 前端无法读取

SameSite=Lax cookie 已防跨站 POST/DELETE, 无需额外 CSRF header 前端 JS 无法读取 HttpOnly cookie, 无法设置 X-CSRF-Token Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-13 18:07:47 +08:00
parent 51c1ee84f0
commit 1d0f227267
4 changed files with 26 additions and 4 deletions
@@ -101,7 +101,7 @@ commands:
    permissions:
    - framework.command.test
    source: internal
-last_updated: 26822.134496381
+last_updated: 27154.562528494
 plugin_commands:
  example_plugin:
    echo: *id001