修复中控

manual_trading_hub/.env.example

@@ -44,6 +44,7 @@ HUB_TRUST_LAN=true
 # 四实例允许被中控 iframe 内嵌（各 crypto_monitor_*/.env，与 hub 同步部署）
 # APP_ALLOW_HUB_EMBED=true
 # HUB_EMBED_PARENT_ORIGINS=https://hub.example.com
+# HTTPS 跨子域 iframe 时四实例还须 APP_COOKIE_SECURE=true（见 crypto_monitor_*/.env.example）
 
 # 浏览器打开的实例/复盘链接（hub_settings 里 flask_url 为 127.0.0.1 时替换为对外地址）
 # 局域网：填内网 IP，见《局域网与反代部署说明.md》

manual_trading_hub/static/app.js

@@ -18,25 +18,55 @@
   }
 
   let instanceFrameUrl = "";
+  /** @type {{ exchangeId: string, nextPath: string, title: string } | null} */
+  let instanceFrameCtx = null;
+
+  async function fetchInstanceOpenUrl(exchangeId, nextPath) {
+    const next = nextPath || "/";
+    const q = new URLSearchParams({ exchange_id: String(exchangeId), next });
+    const r = await apiFetch("/api/instance/open-url?" + q.toString());
+    const j = await r.json();
+    if (!j.ok || !j.url) {
+      throw new Error(j.detail || "无法生成打开链接");
+    }
+    return j.url;
+  }
 
   async function openInstance(exchangeId, nextPath, opts) {
     const options = opts || {};
     const newTab = !!options.newTab;
     const next = nextPath || "/";
     try {
-      const q = new URLSearchParams({ exchange_id: String(exchangeId), next });
-      const r = await apiFetch("/api/instance/open-url?" + q.toString());
-      const j = await r.json();
-      if (!j.ok || !j.url) {
-        showToast(j.detail || "无法生成打开链接", true);
-        return;
-      }
+      const url = await fetchInstanceOpenUrl(exchangeId, next);
       if (newTab) {
-        window.open(j.url, "_blank", "noopener");
+        window.open(url, "_blank", "noopener");
         return;
       }
       const row = lastMonitorRows.find((x) => String(x.id) === String(exchangeId));
-      openInstanceFrame(j.url, row ? row.name : exchangeId);
+      const title = row ? row.name : exchangeId;
+      instanceFrameCtx = { exchangeId: String(exchangeId), nextPath: next, title };
+      openInstanceFrame(url, title);
+    } catch (e) {
+      showToast(String(e), true);
+    }
+  }
+
+  async function refreshInstanceFrame() {
+    if (!instanceFrameCtx) {
+      if (instanceFrameUrl) {
+        const frame = document.getElementById("instance-frame");
+        if (frame) frame.src = instanceFrameUrl;
+      }
+      return;
+    }
+    try {
+      const url = await fetchInstanceOpenUrl(
+        instanceFrameCtx.exchangeId,
+        instanceFrameCtx.nextPath
+      );
+      instanceFrameUrl = url;
+      const frame = document.getElementById("instance-frame");
+      if (frame) frame.src = url;
     } catch (e) {
       showToast(String(e), true);
     }
@@ -63,6 +93,7 @@
     const shell = document.getElementById("instance-frame-shell");
     const frame = document.getElementById("instance-frame");
     instanceFrameUrl = "";
+    instanceFrameCtx = null;
     if (frame) frame.src = "about:blank";
     if (shell) {
       shell.classList.add("hidden");
@@ -979,13 +1010,15 @@
     const newTab = document.getElementById("instance-frame-newtab");
     const frame = document.getElementById("instance-frame");
     if (back) back.onclick = () => closeInstanceFrame();
-    if (refresh && frame) {
-      refresh.onclick = () => {
-        if (instanceFrameUrl) frame.src = instanceFrameUrl;
-      };
-    }
+    if (refresh) refresh.onclick = () => refreshInstanceFrame();
     if (newTab) {
       newTab.onclick = () => {
+        if (instanceFrameCtx) {
+          openInstance(instanceFrameCtx.exchangeId, instanceFrameCtx.nextPath, {
+            newTab: true,
+          });
+          return;
+        }
         if (instanceFrameUrl) window.open(instanceFrameUrl, "_blank", "noopener");
       };
     }

manual_trading_hub/static/index.html

@@ -120,6 +120,6 @@
   </div>
 
   <div id="toast"></div>
-  <script src="/assets/app.js?v=20260530-hub-iframe"></script>
+  <script src="/assets/app.js?v=20260530-hub-sso-fix"></script>
 </body>
 </html>

manual_trading_hub/常见问题.md

@@ -226,7 +226,8 @@ HUB_PUBLIC_ORIGIN=http://192.168.8.6
 1. 四实例未重启，`/hub-sso` 未加载（启动日志勿长期 `[hub_bridge] ImportError`）。
 2. `HUB_BRIDGE_TOKEN` 与四实例 `.env` 不一致。
 3. `hub_settings` 里该户 `key` 与实例 `install_on_app(exchange=...)` 不一致（如 `okx`、`gate_bot`）。
-4. 浏览器仍用旧书签直链首页，未从中控点「实例」（直链本来就要登录）。
+4. **HTTPS 跨域 iframe**：中控与实例不同域名时，四实例须 `APP_COOKIE_SECURE=true`（使 session Cookie 为 `SameSite=None`），否则 SSO 成功仍跳 `/login`。
+5. 浏览器仍用旧书签直链首页，未从中控点「实例」（直链本来就要登录）。
 
 **直链**：`http://IP:端口` 或 `https://实例域名` → 使用各实例 **`APP_USERNAME` / `APP_PASSWORD`**（四所建议统一）。