feat: add an env param "InSecure" to allow non-https deploy

Author: JohnathanLin

.env

@@ -7,3 +7,6 @@ PASSWORD="123"
 
 # Path to store sqlite DB file
 DB="fusion.db"
+
+# Allow non-https request
+INSECURE=true

api/session.go

@@ -25,6 +25,13 @@ func (s Session) Create(c echo.Context) error {
 	}
 
 	sess, _ := session.Get("login", c)
+
+	//使用非https请求时，为保证Set-Cookie能正常生效，对Option进行特殊设置
+	if conf.Conf.InSecure {
+		sess.Options.Secure = false
+		sess.Options.SameSite = http.SameSiteDefaultMode
+	}
+
 	sess.Values["password"] = conf.Conf.Password
 	if err := sess.Save(c.Request(), c.Response()); err != nil {
 		return c.NoContent(http.StatusInternalServerError)

conf/conf.go

@@ -13,6 +13,7 @@ var Conf struct {
 	Port     int    `mapstructure:"PORT"`
 	Password string `mapstructure:"PASSWORD"`
 	DB       string
+	InSecure bool `mapstructure:"INSECURE"`
 }
 
 func Load() {