From 8209708ff522debb337932c323e6fb20f266d420 Mon Sep 17 00:00:00 2001
From: rohow <admin@dev.cm>
Date: Sat, 16 Aug 2025 14:56:19 +0800
Subject: [PATCH] =?UTF-8?q?feat(cdn):=20cdn=E5=8A=9F=E8=83=BD=E4=BC=98?=
 =?UTF-8?q?=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/infra/net/nginx/ingress-cdn.yaml | 3 +--
 apps/infra/net/nginx/static/sw-cdn.js | 6 +++++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/apps/infra/net/nginx/ingress-cdn.yaml b/apps/infra/net/nginx/ingress-cdn.yaml
index 6795c5f..9e8046f 100644
--- a/apps/infra/net/nginx/ingress-cdn.yaml
+++ b/apps/infra/net/nginx/ingress-cdn.yaml
@@ -16,8 +16,7 @@ metadata:
     nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
     nginx.ingress.kubernetes.io/proxy-cookie-domain: "~^(.+)$ cdn.fillcode.com"
     nginx.ingress.kubernetes.io/proxy-cookie-path: "~^/(.*)$ /$1"
-    nginx.ingress.kubernetes.io/configuration-snippet: |
-      more_set_headers "Set-Cookie $sent_http_set_cookie; SameSite=None; Secure";
+    nginx.ingress.kubernetes.io/proxy-cookie-flags: "* Secure SameSite=None"
 spec:
   ingressClassName: nginx
   rules:
diff --git a/apps/infra/net/nginx/static/sw-cdn.js b/apps/infra/net/nginx/static/sw-cdn.js
index e6a8968..67678c0 100644
--- a/apps/infra/net/nginx/static/sw-cdn.js
+++ b/apps/infra/net/nginx/static/sw-cdn.js
@@ -55,7 +55,11 @@ async function handleStaticResource(request, url) {
 
     try {
         // 创建新请求，保留原始缓存策略
-        const newRequest = new Request(targetUrl, {...request, mode: 'cors'})
+        const newRequest = new Request(targetUrl, {
+            ...request,
+            mode: 'cors',
+            credentials: 'include',
+        })
 
         // 请求目标域名，浏览器会自动处理缓存
         const response = await fetch(newRequest)