修复中控内嵌：跨站 Cookie 被拦时用 embed_sso 维持登录。

SSO 写入 sessionStorage，fetch 自动带 X-Hub-Embed-SSO，避免期权链 API 401。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-01 11:56:51 +08:00
parent e7a4934068
commit 193c02eda8
8 changed files with 131 additions and 2 deletions
@@ -27,6 +27,12 @@ class HubBridgeAuthTests(unittest.TestCase):
        self.assertIn("token=", url)
        self.assertIn("next=%2Fembed", url)

+    def test_embed_session_token(self):
+        from lib.hub.hub_bridge_auth import make_embed_session_token
+
+        tok = make_embed_session_token("secret-token", ttl_sec=120)
+        self.assertTrue(verify_sso_token(tok, "secret-token"))
+

 if __name__ == "__main__":
    unittest.main()