新增cookie登录鉴权模式，避免secret硬编码鉴权安全缺陷

2026-06-12 19:24:22 +08:00 · 2026-02-19 22:56:23 +08:00
parent 22dede5a18
commit 3a35144243
8 changed files with 201 additions and 46 deletions
--- a/postman/ZLMediaKit.postman_collection.json
+++ b/postman/ZLMediaKit.postman_collection.json
@@ -2950,7 +2950,52 @@
 				}
 			},
 			"response": []
-		}
+		},
+        {
+          "name": "登录(login)",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{ZLMediaKit_URL}}/index/api/login?digest=d00414822dfd8eabed87c5e24ffcdca7",
+              "host": [
+                "{{ZLMediaKit_URL}}"
+              ],
+              "path": [
+                "index",
+                "api",
+                "login"
+              ],
+              "query": [
+                {
+                  "key": "digest",
+                  "value": "",
+                  "description": "MD5(\"zlmediakit:\"+${secret}+\":\" +${cookie})"
+                }
+              ]
+            }
+          },
+          "response": []
+        },
+        {
+          "name": "登出(logout)",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{ZLMediaKit_URL}}/index/api/logout",
+              "host": [
+                "{{ZLMediaKit_URL}}"
+              ],
+              "path": [
+                "index",
+                "api",
+                "logout"
+              ]
+            }
+          },
+          "response": []
+        }
 	],
 	"event": [
 		{