vibe2/gitea-pages
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto-login via hidden iframe POST (code-server only accepts empty href)

Browse Source 
Form POSTs into a hidden iframe to set the session cookie cross-origin,
then navigates top window to the ?folder URL.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Telecom 2026-05-22 09:19:35 +05:00
parent 29d4b9389e
commit 490c9678af
1 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
index.html
View File

@ -2937,17 +2937,22 @@ const SCHEDULE = [
} }
} }
// Auto-login: POST password to code-server, then go to ?folder=... URL. // Auto-login: POST password to code-server в скрытый iframe (получаем cookie),
// затем переходим в нужную ?folder URL — cookie позволит пропустить login.
const CODE_PASSWORD = 'zorro'; const CODE_PASSWORD = 'zorro';
function redirectTo(cdn, vscodeUrl) { function redirectTo(cdn, vscodeUrl) {
const fullUrl = vscodeUrl || (CODE_BASE + encodeURIComponent(cdn) + '/'); const fullUrl = vscodeUrl || (CODE_BASE + encodeURIComponent(cdn) + '/');
// href = query+hash portion (everything after origin), e.g. "?folder=/Users/..."
const u = new URL(fullUrl); const u = new URL(fullUrl);
const href = u.search + u.hash;
const iframe = document.createElement('iframe');
iframe.name = 'code-login-iframe';
iframe.style.display = 'none';
document.body.appendChild(iframe);
const form = document.createElement('form'); const form = document.createElement('form');
form.method = 'POST'; form.method = 'POST';
form.action = u.origin + '/login'; form.action = u.origin + '/login';
form.target = 'code-login-iframe';
form.style.display = 'none'; form.style.display = 'none';
const add = (name, value) => { const add = (name, value) => {
const i = document.createElement('input'); const i = document.createElement('input');
@ -2956,8 +2961,18 @@ const SCHEDULE = [
}; };
add('password', CODE_PASSWORD); add('password', CODE_PASSWORD);
add('base', '.'); add('base', '.');
add('href', href); add('href', '');
document.body.appendChild(form); document.body.appendChild(form);
let navigated = false;
const go = () => {
if (navigated) return;
navigated = true;
window.location.href = fullUrl;
};
iframe.addEventListener('load', () => setTimeout(go, 150));
// Fallback на случай, если iframe не вызовет load
setTimeout(go, 2500);
form.submit(); form.submit();
} }