[Bug]: Cookie failure after changing the password causes 403 logout - Githubissues

HXSecurity / DongTai-webapi

DongTai-WebAPI is the server part of the management tool of DongTai-IAST

Apache License 2.0

8 stars 19 forks source link

[Bug]: Cookie failure after changing the password causes 403 logout #315

Closed Bidaya0 closed 2 years ago

Bidaya0 commented 2 years ago

Preflight Checklist

[X] I agree to follow the Code of Conduct that this project adheres to.
[X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
[X] I am not looking for support or already pursued the available support channels without success.

Version

1.1.3

Installation Type

Official SaaS Service

Service Name

DongTai-WebAPI

Describe the details of the bug and the steps to reproduce it

change the password
change success
redriect to default page
403

Additional Information

No response

Logs

No response

liao545 commented 2 years ago

修改默认密码，提交后返回登陆页面。尝试修改后的密码登录，发现登陆失败。使用默认密码登录发现登陆成功。尝试了好几次修改密码，都是返回登录界面但是修改不成功。直到半小时后再次尝试发现修改成功。

Bidaya0 commented 2 years ago

修改默认密码，提交后返回登陆页面。尝试修改后的密码登录，发现登陆失败。使用默认密码登录发现登陆成功。尝试了好几次修改密码，都是返回登录界面但是修改不成功。直到半小时后再次尝试发现修改成功。

是本地部署还是SAAS，能提供详细的复现步骤吗？包括截图和浏览器日志

liao545 commented 2 years ago

是官方saas，复现尝试修改密码不就行了。截图没有。浏览器chrome

liao545 commented 2 years ago

后来我修改成功了，我都不知道算不算bug

Bidaya0 commented 2 years ago

后面我修改成功了，我都不知道算不算bug

这边复现不出来

liao545 commented 2 years ago

等会我试试看看行不行

liao545 commented 2 years ago

我录了视频，怎么发送给你

liao545 commented 2 years ago

我先把视频发给洞态小助手，叫他发给你

Bidaya0 commented 2 years ago

我先把视频发给洞态小助手，叫他发给你

排查好了，您用的那个iast.huoxian.cn对应的服务还没有升级到最新版，正在升级。这边如果网络没有问题的话建议您使用iast.io

liao545 commented 2 years ago

我先把视频告诉你洞态小助手，叫他说你

排查好了，你用的那个iast.huxian.cn的服务还没有到最新版本，正在升级。如果网络没有问题的话建议你使用iast.io

好的