fix - 测试 chrome 浏览器扫码后不能正确跳转到操作页

workflow-engine-server/src/main/java/cn/axzo/workflow/server/controller/web/DangerOperationController.java

@@ -81,7 +81,7 @@ public class DangerOperationController {
     // 显示表单页面
     @GetMapping("/web/process/form")
     public String showProcessForm(HttpSession session, Model model) {
-        log.info("{} 访问流程表单页面", getOperatorInfo(session));
+        log.info("{} 访问流程表单页面, SessionID: {}", getOperatorInfo(session), session.getId());
         // 检查session中是否已验证授权码
         Boolean isAuthenticated = (Boolean) session.getAttribute("isAuthenticated");
         model.addAttribute("isAuthenticated", isAuthenticated != null && isAuthenticated);
@@ -233,7 +233,7 @@ public class DangerOperationController {
      */
     @GetMapping("/web/process/dingtalk-callback")
     public String dingTalkCallback(@RequestParam("authCode") String authCode, HttpSession session, Model model, javax.servlet.http.HttpServletRequest request) {
-        log.info("收到钉钉登录回调, authCode: {}", authCode);
+        log.info("收到钉钉登录回调, SessionID: {}, authCode: {}", session.getId(), authCode);
         String myPodNamespace = environment.getProperty(K8S_POD_NAME_SPACE);
         String baseUrl = StringUtils.hasText(myPodNamespace) ? "/workflow-engine" : "";
         model.addAttribute("apiBaseUrl", baseUrl);

workflow-engine-server/src/main/resources/application.yml

@@ -8,4 +8,10 @@ spring:
     cache: false
     encoding: UTF-8
     prefix: classpath:/templates/
-    suffix: .html
+    suffix: .html
+server:
+  servlet:
+    session:
+      cookie:
+        same-site: lax
+        http-only: true