From 49fea21571a4060aa8570cbf220088352e2ccf15 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期三, 16 九月 2026 17:33:01 +0800
Subject: [PATCH] docs(工作日结): 补记 2026-09-16 收工记录（origin 已推 80e0879、gitea 仍不通、未提交项与明日计划）
---
docs/功能测试报告/功能测试报告_局域网IP访问登录CORS修复_2026-09-16.md | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++
1 files changed, 53 insertions(+), 0 deletions(-)
diff --git "a/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\261\200\345\237\237\347\275\221IP\350\256\277\351\227\256\347\231\273\345\275\225CORS\344\277\256\345\244\215_2026-09-16.md" "b/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\261\200\345\237\237\347\275\221IP\350\256\277\351\227\256\347\231\273\345\275\225CORS\344\277\256\345\244\215_2026-09-16.md"
new file mode 100644
index 0000000..572d7b8
--- /dev/null
+++ "b/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\261\200\345\237\237\347\275\221IP\350\256\277\351\227\256\347\231\273\345\275\225CORS\344\277\256\345\244\215_2026-09-16.md"
@@ -0,0 +1,53 @@
+# 鍔熻兘娴嬭瘯鎶ュ憡_灞�鍩熺綉IP璁块棶鐧诲綍CORS淇_2026-09-16
+
+> 妯″潡锛氱郴缁熷畨鍏紙璺ㄥ煙鐧藉悕鍗曪級+ 鐧诲綍銆�娴嬭瘯浜猴細Codex銆�鏃ユ湡锛�2026-09-16
+
+## 涓�銆佸姛鑳借鏄�
+
+**闂鐜拌薄**锛氱敤 `http://192.168.177.26:8080/` 鎵撳紑椤甸潰锛岀櫥褰曢〉鑳芥甯告樉绀猴紝浣嗙偣銆岀櫥褰曘�嶆彁绀恒�岀綉缁滈敊璇紝鐧诲綍澶辫触銆嶏紱鍚屼竴濂楁湇鍔＄敤 `http://localhost:8080/` 鐧诲綍姝ｅ父銆�
+
+**鏍瑰洜**锛氭祻瑙堝櫒瀵� POST/PUT/DELETE **蹇呭甫 `Origin` 澶�**锛圙ET 涓嶅甫锛夈��9-14 瀹夊叏鏁存敼鎶� CORS 浠� `allowedOriginPattern("*") + allowCredentials(true)` 鏀剁揣涓哄彧鍒楀叿浣撴潵婧愶紙`http://localhost:8080,http://127.0.0.1:8080`锛夈�傜粡 dev-server 浠ｇ悊鏃� `Origin` 鍘熸牱杞彂缁欏悗绔紝浜庢槸 `Origin: http://192.168.177.26:8080` 鍛戒腑涓嶄簡鐧藉悕鍗曪紝`CorsFilter` 鐩存帴杩斿洖 403 `Invalid CORS request`锛堝疄娴嬫姤鏂囪鐢ㄤ緥 C2锛夈��
+
+杩欒В閲婁簡"椤甸潰姝ｅ父銆佷竴鐧诲綍灏辩綉缁滈敊璇�"锛氶〉闈� HTML/JS 涓� `GET /api/auth/captcha-config` 閮戒笉甯� `Origin` 鍥犺�屼笉鍙楀奖鍝嶏紙鐧诲綍椤佃兘鏄剧ず"娴嬭瘯妯″紡"鎻愮ず鍗宠瘉鏄庤 GET 鎴愬姛锛夈��
+
+**杩炲甫椋庨櫓锛堟湰娆′竴骞惰В鍐筹級**锛氭墦鍖呴儴缃叉槸鍓嶇鍐呭祵銆佷笌鎺ュ彛鍚屾簮鍦� 8090锛屾祻瑙堝櫒 POST 鍚屾牱浼氬甫 `Origin: http://<閮ㄧ讲鏈篒P>:8090`锛岀敤 IP 璁块棶鏃朵細鍚屾牱琚� 403 鎸′綇鐧诲綍銆�
+
+**鏀瑰姩**锛�2 涓枃浠讹紝`CorsConfig.java` / `application.yml`锛夛細
+
+- `config.setAllowedOrigins(...)` 鈫� `config.setAllowedOriginPatterns(...)`锛岄粯璁ゆ潵婧愭斁瀹戒负鏈満 + 鍐呯綉缃戞锛歚http://localhost:*`銆乣http://127.0.0.1:*`銆乣http://192.168.*:*`銆乣http://10.*:*`銆乣http://172.*:*`銆�
+- 鐧藉悕鍗曟満鍒朵笉鍙橈紙浠嶆槸鏄惧紡鏉ユ簮鏍￠獙锛岄潪閫氶厤鍏ㄦ斁寮�锛夛紝`allowCredentials` 浠嶄负 `false`锛涘鏀圭敤鍩熷悕璁块棶锛岄渶鎶婂煙鍚嶏紙鍚鍙ｏ級杩藉姞鍒� `app.cors.allowed-origins`锛堝凡鍐欏叆 yml 娉ㄩ噴锛夈��
+
+## 浜屻�佹祴璇曠幆澧�
+
+- 鍚庣锛�8090锛屾敼鍚庢寜 PID 绮剧‘閲嶅惎锛坄cmd鈫抝ava(maven)鈫抝ava(app)`锛夛紝`Started TrafficAuditApplication` / `Tomcat started on port(s): 8090 (http)`銆�
+- 鍓嶇锛�8080锛宒ev-server 鏈噸鍚紝椤甸潰涓庝唬鐞嗘部鐢ㄦ湰娆″惎鍔ㄥ疄渚嬨��
+- 娴忚鍣細Codex 搴旂敤鍐呮祻瑙堝櫒锛宍http://192.168.177.26:8080/#/login`锛堢湡瀹炴祻瑙堝櫒璺緞锛岄潪妯℃嫙锛夈��
+- 鍛戒护琛屽鐓э細`curl.exe` 鐩村彂鍚屼竴 URL锛岀敤浜庡尯鍒�"鏈嶅姟绔嫆缁�"涓�"娴忚鍣ㄤ晶澶辫触"銆�
+- 璐﹀彿锛歚admin`锛堟湰鏈哄簱瀵嗙爜 `123456`锛夈��
+
+## 涓夈�佺敤渚嬩笌缁撴灉
+
+| 缂栧彿 | 鐢ㄤ緥 | 杈撳叆 | 棰勬湡 | 瀹為檯 | 缁撹 |
+| --- | --- | --- | --- | --- | --- |
+| C1 | 澶嶇幇锛堜慨澶嶅墠锛屾祻瑙堝櫒锛� | `192.168.177.26:8080/#/login` 杈撳叆 admin/123456 鐐圭櫥褰� | 澶嶇幇"缃戠粶閿欒锛岀櫥褰曞け璐�" | 椤甸潰鎻愮ず銆岀綉缁滈敊璇紝鐧诲綍澶辫触銆嶏紝URL 鍋滃湪 `#/login` | 澶嶇幇鎴愬姛 |
+| C2 | 澶嶇幇锛堜慨澶嶅墠锛屽懡浠よ锛� | POST `/api/auth/login`锛屽甫 `Origin: http://192.168.177.26:8080` | 鑳藉畾浣嶅埌鏈嶅姟绔嫆缁� | `HTTP/1.1 403 Forbidden` + `Invalid CORS request` | 澶嶇幇鎴愬姛锛堝畾浣嶆牴鍥狅級 |
+| C3 | 瀵圭収锛堜慨澶嶅墠锛� | 鍚� C2 浣嗕笉甯� `Origin` | 姝ｅ父 | 200 涓旇繑鍥� token | 閫氳繃锛堣瘉鏄庡樊寮傛潵鑷� Origin锛� |
+| C4 | 淇鍚� LAN 鏉ユ簮 | POST `/api/auth/login`锛屽甫 `Origin: http://192.168.177.26:8080` | 200 | 200 + token锛坄绠＄悊鍛榒/5 妯″潡锛� | 閫氳繃锛堟鍚戯級 |
+| C5 | 淇鍚庢祻瑙堝櫒瀹炵櫥 | `http://192.168.177.26:8080/#/login` 杈撳叆 admin/123456 | 鐧诲綍鎴愬姛杩涘伐浣滃彴 | 鎻愮ず銆岀櫥褰曟垚鍔熴�嶏紝璺宠浆 `#/dashboard`锛岄《閮ㄦ樉绀� admin | 閫氳繃锛堟鍚戯紝绔埌绔級 |
+| C6 | 鏈満鏉ユ簮鍥炲綊 | `Origin: http://localhost:8080` | 200 | 200 | 閫氳繃锛堟棤鍥炲綊锛� |
+| C7 | 鍚屾簮閮ㄧ讲鍦烘櫙 | 鐩磋繛 8090锛屽甫 `Origin: http://192.168.177.26:8090` | 200 | 200 | 閫氳繃锛堟鍚戯級 |
+| C8 | 鍐呯綉缃戞鏉ユ簮 | 甯� `Origin: http://10.1.2.3:8080` | 200 | 200 | 閫氳繃锛堟鍚戯級 |
+| C9 | 棰勬璇锋眰 | `OPTIONS /api/auth/login` + `Origin: http://192.168.177.26:8080` | 200 涓斿洖鏄炬斁琛屾潵婧� | 200锛宍Access-Control-Allow-Origin: http://192.168.177.26:8080`锛屾柟娉� `GET,POST,PUT,DELETE,OPTIONS` | 閫氳繃 |
+| C10 | 鏃� Origin 澶� | POST `/api/auth/login`锛坈url 鐩磋繛 8090锛� | 涓嶅彈褰卞搷 | 200 | 閫氳繃 |
+| C11 | 闈炴硶鏉ユ簮 | `Origin: http://evil.example.com` | 鎷掔粷 | 403 `Invalid CORS request` | 閫氳繃锛堣礋鍚戯紝鐧藉悕鍗曚粛鐢熸晥锛� |
+| C12 | 甯︿护鐗屼笟鍔℃帴鍙� | LAN 鏉ユ簮 + `Bearer` 浠ょ墝 GET `/api/user/list` | 200 | 200 | 閫氳繃 |
+
+## 鍥涖�佸彂鐜扮殑闂涓庡缃�
+
+1. **CORS 鐧藉悕鍗曡繃绐勫鑷村眬鍩熺綉 IP/鍚屾簮 IP 璁块棶鐧诲綍澶辫触**锛堟湰娆′富闂锛夛細宸叉敼涓烘寜妯″紡鏀捐鏈満 + 鍐呯綉缃戞锛岃涓婏紱闈炴硶澶栭儴鏉ユ簮浠� 403銆�
+2. 鍓嶇 dev 鏃ュ織鏄剧ず `Network: unavailable`锛坴ue-cli 鏈帰娴嬪埌缃戝崱鍦板潃锛夛紝浣� 8080 瀹為檯鐩戝惉 `0.0.0.0`銆佸眬鍩熺綉璁块棶姝ｅ父锛圕5 瀹炴祴锛夛紝灞炴棩蹇楁彁绀洪棶棰橈紝涓嶅鐞嗐��
+3. 銆岀綉缁滈敊璇紝鐧诲綍澶辫触銆嶈繖涓�鎻愮ず鎶� 403/500 绛夋湁鍝嶅簲鐨勯敊璇篃褰掑埌"缃戠粶閿欒"锛屾帓鏌ユ椂瀹规槗璇锛沗Login.vue` 鏈敼鍔紝鍒椾负鍚庣画鍙�変紭鍖栭」銆�
+
+## 浜斻�佺粨璁�
+
+灞�鍩熺綉 IP锛坄http://192.168.177.26:8080/`锛夌櫥褰曞け璐ラ棶棰樺凡淇锛屽懡浠よ璧版煡锛圕4/C6/C7/C8/C9/C10/C12锛変笌鐪熷疄娴忚鍣ㄧ鍒扮鐧诲綍锛圕5锛夊叏閮ㄩ�氳繃锛岀櫧鍚嶅崟璐熷悜鐢ㄤ緥锛圕11锛変粛鐒舵嫤鎴紝鏈紩鍏ラ壌鏉�/璺ㄥ煙鍥炲綊銆�
--
Gitblit v1.9.1