fix: WebSocket 鉴权 — Cookie 优先 (支持 HttpOnly)

根因: panel_token 是 HttpOnly cookie, JS getCookie() 读不到
→ 前端 WS ?token= 参数为空 → 认证失败 → 仪表盘无数据

修复:
- _ws_auth_wrapper: Cookie 优先 → query token 备用 → API Key
- 浏览器同源 WS 自动发送 Cookie, 无需 ?token=
- dashboard.js / logs.js 移除多余的 getCookie+?token=

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
qinglong
2026-06-13 17:45:58 +08:00
parent 557135c376
commit 5e06c17b52
7 changed files with 84 additions and 9 deletions
+1 -1
View File
@@ -93,7 +93,7 @@ commands:
permissions:
- framework.command.test
source: internal
last_updated: 17177.060053342
last_updated: 25770.099665272
plugin_commands:
sentinel:
sentinel: *id001