内网服务器部署后 使用Admin Token在主页面登录一直转圈

[PIGzyj233]

请教一下 我应该怎么进入管理员页面呢？

采用的版本是v0.6.1

[github-actions]

Thank you for reporting this issue.

Analysis:

Based on your screenshots and the fact that you're deploying on an intranet server (内网服务器), the login spinning issue is most likely caused by the ENABLE_SECURE_COOKIES configuration.

By default, ENABLE_SECURE_COOKIES=true, which means browsers will only accept cookies over HTTPS connections. When accessing via HTTP (not localhost), the browser refuses to set the authentication cookie, causing the login to fail while the UI keeps waiting.

Relevant code:

• src/lib/auth.ts (lines 241-251) - Cookie is set with secure flag based on ENABLE_SECURE_COOKIES
• src/lib/config/env.schema.ts (line 95) - Default value is true

Solution:

Set the environment variable to disable secure cookies for HTTP deployment:

ENABLE_SECURE_COOKIES=false

After adding this environment variable:

1. Restart your service
2. Clear your browser cache (important - old cookies may interfere)
3. Try logging in again

Configuration reference (from .env.example):

# Cookie 安全策略
# - true (默认)：仅允许 HTTPS 传输 Cookie，浏览器会自动放行 localhost 的 HTTP
# - false：允许 HTTP 传输 Cookie（会降低安全性，仅推荐用于内网部署）
# 警告：若设置为 true 且使用远程 HTTP 访问，浏览器将拒绝设置 Cookie 导致无法登录
ENABLE_SECURE_COOKIES=true

To help diagnose if the above doesn't work:

• Check browser developer tools (F12) -> Network tab -> Look at the /api/auth/login response for any error codes
• Check if the auth-token cookie is being set in the Application/Storage tab
• Share any error messages from the browser console or server logs

---

Automated response from Claude AI