juwan/juwan-backend
1
0
Fork 0
Code Issues Pull Requests Actions 33 Packages Projects Releases Wiki Activity

fix: 测试脚本适配 __Host- CSRF cookie

Browse Source
This commit is contained in:
zetaloop
2026-04-06 14:49:21 +08:00
parent 59a60e8126
commit c2646163f2
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/dev/test_all_apis.py
+8 -4
View File
@@ -56,7 +56,11 @@ class Session:
"""Minimal cookie-aware HTTP session using stdlib only.""" """Minimal cookie-aware HTTP session using stdlib only."""
def __init__(self): def __init__(self):
self.cookie_jar = http.cookiejar.CookieJar() self.cookie_jar = http.cookiejar.CookieJar(
policy=http.cookiejar.DefaultCookiePolicy(
secure_protocols=("https", "http")
)
)
self.opener = urllib.request.build_opener( self.opener = urllib.request.build_opener(
urllib.request.HTTPCookieProcessor(self.cookie_jar) urllib.request.HTTPCookieProcessor(self.cookie_jar)
) )
@@ -107,7 +111,7 @@ class Session:
return self.request("DELETE", url, **kw) return self.request("DELETE", url, **kw)
def csrf_headers(self): def csrf_headers(self):
token = self.get_cookie("XSRF-TOKEN") token = self.get_cookie("__Host-XSRF-TOKEN")
return {"xsrf-token": token} if token else {} return {"xsrf-token": token} if token else {}
@@ -134,8 +138,8 @@ def phase0_health(s: Session):
print("\n=== Phase 0: Health & CSRF ===") print("\n=== Phase 0: Health & CSRF ===")
code, body, hdrs = s.get(f"{GATEWAY}/healthz") code, body, hdrs = s.get(f"{GATEWAY}/healthz")
report("GET /healthz", code, body) report("GET /healthz", code, body)
xsrf = s.get_cookie("XSRF-TOKEN") xsrf = s.get_cookie("__Host-XSRF-TOKEN")
xsrf_guard = s.get_cookie("XSRF-GUARD") xsrf_guard = s.get_cookie("__Host-XSRF-GUARD")
print(f" XSRF-TOKEN: {xsrf}") print(f" XSRF-TOKEN: {xsrf}")
print(f" XSRF-GUARD: {xsrf_guard}") print(f" XSRF-GUARD: {xsrf_guard}")
if not xsrf: if not xsrf: