获取到 UID 后删除cookie中的UID，防止有人从 cookie 读取

ccbikai
Commit be84296d4857c1bfa1bb5728e4e9a60d7985184c 1 parent 8255a977
Showing 1 changed file with 1 additions and 0 deletions
doraemon/middleware/user.js
--- a/doraemon/middleware/user.js
View file @be84296
+++ b/doraemon/middleware/user.js
View file @be84296
@@ -8,6 +8,7 @@ module.exports = () => {
 
         if (md5(key) === token) {
             req.user.uid = uid;
+             delete req.cookies._YOHOUID;
         }
 
         next();