vibe2/gitea-pages
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto-login to code-server: POST password+href instead of GET redirect

Browse Source 
Hardcodes 'zorro' password into auto-submit form so users skip
the VS Code login screen.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Telecom 2026-05-22 09:16:28 +05:00
parent 6535713cf5
commit 29d4b9389e
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
index.html
View File

@ -2937,8 +2937,28 @@ const SCHEDULE = [
} }
} }
// Auto-login: POST password to code-server, then go to ?folder=... URL.
const CODE_PASSWORD = 'zorro';
function redirectTo(cdn, vscodeUrl) { function redirectTo(cdn, vscodeUrl) {
window.location.href = vscodeUrl || (CODE_BASE + encodeURIComponent(cdn) + '/'); const fullUrl = vscodeUrl || (CODE_BASE + encodeURIComponent(cdn) + '/');
// href = query+hash portion (everything after origin), e.g. "?folder=/Users/..."
const u = new URL(fullUrl);
const href = u.search + u.hash;
const form = document.createElement('form');
form.method = 'POST';
form.action = u.origin + '/login';
form.style.display = 'none';
const add = (name, value) => {
const i = document.createElement('input');
i.type = 'hidden'; i.name = name; i.value = value;
form.appendChild(i);
};
add('password', CODE_PASSWORD);
add('base', '.');
add('href', href);
document.body.appendChild(form);
form.submit();
} }
async function apiCall(path, body) { async function apiCall(path, body) {