yuanyuanxiang/SimpleRemoter
0
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 9 Wiki Activity

Fix: share web login session across browser tabs

Browse Source 
The login token and role were stored in sessionStorage, which is
isolated per tab, so opening a second tab forced a fresh password
login. Switch every token/role read and write to localStorage so all
tabs on the same origin share the session and a new tab auto-resumes
it on load. Expiry (device_list ok:false) and explicit logout still
clear it as before.

Co-Authored-By: deepseek-v4-pro
This commit is contained in:
yuanyuanxianganddeepseek-v4-pro committed 2026-10-17 22:44:50 +02:00
1 parent 5cea1167be
commit 04f4eb9947
1 file changed
+9 -9
Download Patch File Download Diff File Expand all files Collapse all files
server/web/index.html
+9 -9
View File
@@ -1743,8 +1743,8 @@
if (!data || !data.token) return false;
token = data.token;
currentUserRole = data.role || 'viewer';
sessionStorage.setItem('token', token);
sessionStorage.setItem('role', currentUserRole);
localStorage.setItem('token', token);
localStorage.setItem('role', currentUserRole);
return true;
} catch (e) {
return false;
@@ -1818,8 +1818,8 @@
if (msg.ok) {
token = msg.token;
currentUserRole = msg.role || 'viewer';
sessionStorage.setItem('token', token);
sessionStorage.setItem('role', currentUserRole);
localStorage.setItem('token', token);
localStorage.setItem('role', currentUserRole);
document.getElementById('login-error').textContent = '';
// Show Users button for admin only
const usersBtn = document.getElementById('users-btn');
@@ -1838,7 +1838,7 @@
if (msg.ok === false) {
// Token invalid (e.g., server restarted), go back to login
token = null;
sessionStorage.removeItem('token');
localStorage.removeItem('token');
showPage('login-page');
break;
}
@@ -2691,7 +2691,7 @@
challengeNonce = '';
connectWebSocket(); // Reconnect immediately
token = null;
sessionStorage.removeItem('token');
localStorage.removeItem('token');
devices = [];
showPage('login-page');
// Hide users button
@@ -4791,9 +4791,9 @@
bindKeyboardBtnEvents(document.getElementById('qc-keyboard'));
bindKeyboardBtnEvents(document.getElementById('btn-keyboard'));
bindKeyboardBtnEvents(document.getElementById('btn-keyboard-bar'));
// Restore token and role from sessionStorage (local-login fallback).
token = sessionStorage.getItem('token');
currentUserRole = sessionStorage.getItem('role') || 'viewer';
// Restore token and role from localStorage (local-login fallback).
token = localStorage.getItem('token');
currentUserRole = localStorage.getItem('role') || 'viewer';
// Attempt portal SSO first: if the user is already logged into the
// parent domain, the server bridges the portal session cookie into
// a YAMA session token so the login form is skipped. On failure