SenSu

Files

T

qinglong 5e06c17b52 fix: WebSocket 鉴权 — Cookie 优先 (支持 HttpOnly)

根因: panel_token 是 HttpOnly cookie, JS getCookie() 读不到
→ 前端 WS ?token= 参数为空 → 认证失败 → 仪表盘无数据

修复:
- _ws_auth_wrapper: Cookie 优先 → query token 备用 → API Key
- 浏览器同源 WS 自动发送 Cookie, 无需 ?token=
- dashboard.js / logs.js 移除多余的 getCookie+?token=

Co-Authored-By: Claude <noreply@anthropic.com>

2026-06-13 17:45:58 +08:00

__init__.py

Initial commit: SenSu Alpha 0.2.0

2026-06-10 12:28:05 +08:00

apikeys.py

security: Sentinel 路由鉴权 + API Key CSRF + SSRF 防护

2026-06-13 15:13:56 +08:00

auth.py

security: P3+ — 面板密码哈希 + 上传类型白名单 + CSRF Token

2026-06-13 14:07:38 +08:00

commands.py

fix: web 命令端点 execute_command → process_command (方法名错误)