fix: fetch credentials ommitted in legacy impls

Author: Alan-Liang

components/set-property.vue

@@ -73,6 +73,7 @@ export default {
       try {
         this.submitting = true
         const res = await fetch(this.putPath, {
+          credentials: 'same-origin',
           method: 'put',
           body: JSON.stringify(this.getData()),
           headers: { 'Content-Type': 'application/json' },

components/sms-verify.vue

@@ -30,6 +30,7 @@ export default {
       if (!this.number) return
       try {
         const res = await fetch('/api/sms-code', {
+          credentials: 'same-origin',
           method: 'put',
           body: JSON.stringify({ number: this.number, type: this.type }),
           headers: { 'Content-Type': 'application/json' },

pages/index.vue

@@ -63,7 +63,7 @@ export default {
       const avatar = ctx.avatarFromName(avatarName)
       return { notLoggedIn: false, nickname, kredit, avatar, keeerId }
     } else {
-      const res = await fetch('/api/user-information').then(res => res.json())
+      const res = await fetch('/api/user-information', { credentials: 'same-origin' }).then(res => res.json())
       if (res.status !== 0) return notLoggedIn
       else {
         const { nickname, kredit, avatar, keeerId } = res.result
@@ -77,7 +77,7 @@ export default {
   methods: {
     async logout () {
       try {
-        const res = await fetch('/api/token?set-cookie=true', { method: 'delete' }).then(res => res.json())
+        const res = await fetch('/api/token?set-cookie=true', { method: 'delete', credentials: 'same-origin' }).then(res => res.json())
         if (res.status !== 0) this.snackbar(res.message || '未知错误')
         else {
           this.snackbar(res.message || '您已经成功退出登录')

pages/login.vue

@@ -163,6 +163,7 @@ export default {
       this.busy = true
       try {
         const res = await fetch('/api/token?set-cookie=true', {
+          credentials: 'same-origin',
           method: 'put',
           headers: { Authorization: `Basic ${btoa(`${this.identity}:${this.password}`)}` },
         }).then(res => res.json())
@@ -182,6 +183,7 @@ export default {
       try {
         const { identity: number, code, password } = this
         const res = await fetch('/api/user?set-cookie=true', {
+          credentials: 'same-origin',
           method: 'put',
           body: JSON.stringify({ number, code, password }),
           headers: { 'Content-Type': 'application/json' },

pages/recharge-cashier.vue

@@ -45,7 +45,7 @@ export default {
     async poll () {
       console.log('New poll @ ', this.pollUrl)
       try {
-        const res = await fetch(this.pollUrl).then(res => res.json())
+        const res = await fetch(this.pollUrl, { credentials: 'same-origin' }).then(res => res.json())
         if (res.code === 'ETIMEOUT') {
           this.blur = false
           return this.repoll()

pages/recharge.vue

@@ -70,7 +70,7 @@ export default {
       const { nickname } = ctx.state.user.options
       return { notLoggedIn: false, nickname }
     } else {
-      const res = await fetch('/api/user-information').then(res => res.json())
+      const res = await fetch('/api/user-information', { credentials: 'same-origin' }).then(res => res.json())
       if (res.status !== 0) return notLoggedIn
       else {
         const { nickname } = res.result
@@ -90,7 +90,7 @@ export default {
       if (amount > 100000) return this.snackbar('充值金额过大，系统无法处理')
       const url = new URL('/api/recharge-order', location.href)
       url.search = new URLSearchParams({ amount })
-      const order = await fetch(url, { method: 'put' }).then(res => res.json())
+      const order = await fetch(url, { method: 'put', credentials: 'same-origin' }).then(res => res.json())
       if (order.status !== 0) return this.snackbar(order.message || '无法创建请求')
       const { result } = order
       if (/^https?:\/\//.test(result)) location = result