{"topic":{"id":8671,"title":"共享不同域名的登录凭据的程序编不出来","slug":"topic","categoryId":14,"createdAt":"2023-12-27 10:32:28.959685","bumpedAt":"2025-06-17 12:13:56.638373","views":474,"postsCount":8,"highestPostNumber":13,"likeCount":3,"closed":false,"pinned":false,"pinnedGlobally":false,"pinnedAt":null,"pinnedUntil":null,"isBanner":false,"excerpt":"之前的开发任务列表第一条： system: Most Urgent: 修 Mastodon m.xjtu.app 无法使用的问题。共享.men, .live 等不同域名的登陆凭据，否则 xjtu.app 的用户会经常会跳转到 canonical name xjtu.app。自动识别插入的站内 URL 并自动替换到当前访问使用的域名（类似目前的 Watched words，可参考 GitHub - openSUSE-zh/disco…","deletedAt":null,"isAnonymous":false,"category":{"id":14,"name":"问答","slug":"qa","color":"f5c211"},"author":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif"},"tags":["dev","discourse"]},"posts":[{"id":20600,"postNumber":1,"raw":"之前的 [开发任务列表](/t/topic/4730) 第一条：\n\n[quote=\"system, post:1, topic:4730, username:system\"]\nMost Urgent:\n修 Mastodon m.xjtu.app 无法使用的问题。\n\n共享.men, .live 等不同域名的登陆凭据，否则 `xjtu.app` 的用户会经常会跳转到 canonical name `xjtu.app`。自动识别插入的站内 URL 并自动替换到当前**访问**使用的域名（类似目前的 Watched words，可参考 [GitHub - openSUSE-zh/discourse-cjk-text-spacing: Automatically add reasonable half-width spaces between Latin and CJK characters in topic title and post content for discourse](https://github.com/openSUSE-zh/discourse-cjk-text-spacing) ）。解决 CSP 和 CORS 问题。\n\n难度：:star:\n[/quote]\n\n\n程序编不出来，好头大啊。 :exploding_head:\n\n下面是半成品，总体思路是通过共享 cookies 实现不同域名的登录状态同步。\n\n在本站页面嵌入 JS，如果用户已经登录，则在网页中嵌入 N 个不同域名（`xjtu.app`, `xjtu.app`, ...）的形如 `https://xjtu.app/share_sessions/universal.gif?username=admin&key=54904749a6af1f67efab7b257eb` 的不可见图片。这一方法是受 Stack Exchange 启发：\n\nhttps://meta.stackexchange.com/questions/309727/how-does-one-stack-exchange-site-know-that-im-logged-in-to-the-other/312956#312956\n\n使用 `caddy`分流`/share_sessions/universal.gif` 路径下的流量到 Python 写的脚本。\n\n逻辑：读取 request 的 key（之前的 js 里生成的），如果是已经登录的域名（为了防止伪造 cookies 攻击，使用插件将 HMAC 过的用户登录状态保存在 `logged_in` cookie 里，见附件），则将 cookies 等信息存到 redis 里。其他域名此时会有 404，当用户访问其他页面再次请求时，设置 `Access-Control-Allow-Origin` 和`Access-Control-Allow-Credentials`，并将已登录域名的 cookie 写到未登录的域名的储存空间，理论上此时工作就完成了。\n\n然而现在的表现是\n1. 必须要在新标签页打开 `universal.gif`\n2. 可能会在一段时间后手动登录的域名的登录状态会变成退出\n\n\n\n---\n\n附件：\n[details=\"js in head.html\"]\n```js\n\n\n```\n[/details]\n\n\n[details=\"main.py\"]\n```python\nimport base64\nimport datetime\nimport hashlib\nimport hmac\nimport json\nimport logging\nimport os\nimport pickle\nfrom urllib import parse\nfrom flask import Flask, request, abort, make_response, send_file\nfrom redis import Redis\nfrom config import TRUSTED_HOSTNAMES, name_of, AttrDict, Status\n\nr = Redis()\n\napp = Flask(__name__)\n\nDIS_SHARE_SESSION_KEY = os.environ['DIS_SHARE_SESSION_KEY']\n\n\ndef rget(name, key):\n return r.get(name_of(name, key))\n\n\ndef rset(name, key, value):\n r.set(name_of(name, key), value)\n\n\ndef get_domain_policy(host):\n return host if host == 'xjtu.app' else None\n\n\n@app.route('/share_sessions/universal.gif', methods=['GET', 'OPTIONS'])\ndef universal_auth():\n cookies = request.cookies\n host = request.host\n\n if request.method == 'OPTIONS':\n print(f'options {host}')\n else:\n print(f'get {host}')\n js_key = request.args.get('key', None)\n js_username = request.args.get('username', None)\n if js_key is None:\n return abort(404)\n\n if request.host not in TRUSTED_HOSTNAMES:\n return abort(404)\n\n status = rget(js_key, 'status')\n resp = make_response(send_file('static/1x1.gif', mimetype='image/gif'))\n\n if status is None:\n logged_in = cookies.get('logged_in')\n if logged_in is None:\n return abort(404)\n try:\n cookie_logged_in = parse.unquote(logged_in)\n cookie_logged_in = base64.b64decode(cookie_logged_in)\n cookie_logged_in = json.loads(cookie_logged_in)\n _json = cookie_logged_in['json']\n calculated_hmac = hmac.new(bytes(DIS_SHARE_SESSION_KEY, 'utf-8'),\n bytes(_json, 'utf-8'),\n hashlib.sha256).hexdigest()\n except Exception as e:\n logging.error(e)\n return abort(404)\n\n if calculated_hmac != cookie_logged_in['hmac']:\n return abort(404)\n\n user_info = json.loads(_json)\n del cookie_logged_in\n user_info = AttrDict(user_info)\n username = user_info.username\n\n if username != js_username:\n return abort(404)\n\n other_domains = TRUSTED_HOSTNAMES.copy()\n other_domains.remove(host)\n\n origin = f'https://{host}'\n\n rset(js_key, 'status', Status.PENDING.value)\n rset(js_key, 'cookies', pickle.dumps(cookies))\n rset(js_key, 'origin', origin)\n rset(js_key, 'other_domains', '|'.join(other_domains))\n\n return resp\n\n else:\n status = rget(js_key, 'status')\n\n # TODO: handle partial finished (user log in to other domain manually)\n if Status(int(status.decode())) == Status.FINISHED.value:\n return abort(404)\n\n origin = rget(js_key, 'origin')\n origin = origin.decode()\n cookies = rget(js_key, 'cookies')\n cookies = pickle.loads(cookies)\n other_domains = rget(js_key, 'other_domains')\n other_domains = other_domains.decode()\n other_domains = set(other_domains.split('|'))\n if host not in other_domains and request.method == 'GET':\n return abort(404)\n\n resp.headers.add('Access-Control-Allow-Origin', origin)\n resp.headers.add('Access-Control-Allow-Credentials', 'true')\n\n if request.method == 'GET':\n req_cookies = request.cookies\n flag_should_remove_host = []\n for k, v in cookies.items():\n print(f'{host}: set {k} to {v}')\n if k == '_t':\n expire_date = datetime.datetime.now() + datetime.timedelta(days=60) # 1440 hours\n elif k == '_forum_session':\n expire_date = None\n else:\n expire_date = None\n resp.set_cookie(k, v, domain=get_domain_policy(host), httponly=True, secure=True, samesite='None',\n expires=expire_date)\n if req_cookies.get(k) == v:\n flag_should_remove_host.append(True)\n if len(flag_should_remove_host) > 0 and all(flag_should_remove_host):\n logging.warning(f'{host}: removed')\n other_domains.remove(host)\n rset(js_key, 'other_domains', '|'.join(other_domains))\n if len(other_domains) == 0:\n rset(js_key, 'status', Status.FINISHED.value)\n\n print(f'host {host} finished')\n return resp\n```\n[/details]\n\n\n[details=\"config.py\"]\n```python\nfrom enum import Enum, auto\n\nTRUSTED_HOSTNAMES = '''\nxjtu.app\nxjtu.app\nxjtu.app\n# cf.xjtu.app\n# ipv4.xjtu.app\n# ipv6.xjtu.app\n# us.xjtu.app\n# jp.xjtu.app\n# hk.xjtu.app\n# direct.xjtu.app\n'''\nTRUSTED_HOSTNAMES = [i.strip() for i in TRUSTED_HOSTNAMES.strip().splitlines()\n if len(i.strip()) != 0 and not i.strip().startswith('#')]\nTRUSTED_HOSTNAMES = set(TRUSTED_HOSTNAMES)\n\nname_of = lambda name, key: f'xjtumen-share-session-{name}-{key}'\n\n\nclass AttrDict(dict):\n __setattr__ = dict.__setitem__\n __getattr__ = dict.__getitem__\n\nclass Status(int, Enum):\n PENDING = auto()\n FINISHED = auto()\n\n```\n[/details]\n\n\n[details=\"plugin.rb\"]\n```ruby\nclass ExCurrentUserProvider < Auth::DefaultCurrentUserProvider\n TOKEN_COOKIX ||= \"logged_in\".freeze\n TOKEN_COOKIX2 ||= \"universal_auth\".freeze\n\n def log_on_user(user, session, cookies, opts = {})\n super\n\n require 'openssl' if !defined?(OpenSSL)\n require 'base64' if !defined?(Base64)\n\n payload = { username: user.username, user_id: user.id, avatar: user.avatar_template, group: user.title }\n hash_function = OpenSSL::Digest.new('sha256')\n payload_json = payload.to_json\n hmac = OpenSSL::HMAC.hexdigest(hash_function, SiteSetting.cookie_ui_key, payload_json)\n payload_sha = Digest::SHA256.hexdigest SiteSetting.cookie_ui_key\n payload2 = {json: payload_json, hmac: hmac, payload_sha: payload_sha}\n token = Base64.strict_encode64(payload2.to_json)\n cookies.permanent[TOKEN_COOKIX] = { value: token, httponly: true, secure: true, domain: :all, same_site: 'None' }\n end\n\n def log_off_user(session, cookies)\n super\n\n cookies[TOKEN_COOKIX] = { value: '', httponly: true, secure: true, domain: :all }\n cookies[TOKEN_COOKIX2] = { value: '', secure: true, domain: :all }\n end\n\nend\n\n```\n[/details]","cooked":"

之前的开发任务列表第一条：

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\tsystem:\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n
Most Urgent:
\n修 Mastodon m.xjtu.app 无法使用的问题。
\n
共享.men, .live 等不同域名的登陆凭据，否则 xjtu.app 的用户会经常会跳转到 canonical name xjtu.app。自动识别插入的站内 URL 并自动替换到当前访问使用的域名（类似目前的 Watched words，可参考 GitHub - openSUSE-zh/discourse-cjk-text-spacing: Automatically add reasonable half-width spaces between Latin and CJK characters in topic title and post content for discourse ）。解决 CSP 和 CORS 问题。
\n
难度：⭐️
\n

\n\t\t\t\t\t\t

程序编不出来，好头大啊。 🤯

下面是半成品，总体思路是通过共享 cookies 实现不同域名的登录状态同步。

在本站页面嵌入 JS，如果用户已经登录，则在网页中嵌入 N 个不同域名（xjtu.app, xjtu.app, ...）的形如 https://xjtu.app/share_sessions/universal.gif?username=admin&key=54904749a6af1f67efab7b257eb 的不可见图片。这一方法是受 Stack Exchange 启发：

https://meta.stackexchange.com/questions/309727/how-does-one-stack-exchange-site-know-that-im-logged-in-to-the-other/312956#312956

使用 caddy分流/share_sessions/universal.gif 路径下的流量到 Python 写的脚本。

逻辑：读取 request 的 key（之前的 js 里生成的），如果是已经登录的域名（为了防止伪造 cookies 攻击，使用插件将 HMAC 过的用户登录状态保存在 logged_in cookie 里，见附件），则将 cookies 等信息存到 redis 里。其他域名此时会有 404，当用户访问其他页面再次请求时，设置 Access-Control-Allow-Origin 和Access-Control-Allow-Credentials，并将已登录域名的 cookie 写到未登录的域名的储存空间，理论上此时工作就完成了。

然而现在的表现是

必须要在新标签页打开 universal.gif
可能会在一段时间后手动登录的域名的登录状态会变成退出

附件：

js in head.html

<!DOCTYPE html>\n<script type=\"text/discourse-plugin\" version=\"0.8\">\n    var div = document.createElement('div');\n    div.className = 'universal_auth_div';\n    div.id = 'op';\n    div.style.cssText = 'position: absolute; z-index: 999; height: 16px; width: 16px; top:70px; display:none';\n    // dec2hex :: Integer -> String\n    // i.e. 0-255 -> '00'-'ff'\n    function dec2hex (dec) {\n      return dec.toString(16).padStart(2, \"0\")\n    }\n\n    // generateId :: Integer -> String\n    function generateId (len) {\n      var arr = new Uint8Array((len || 40) / 2)\n      window.crypto.getRandomValues(arr)\n      return Array.from(arr, dec2hex).join('')\n    }\n\n    function getCookie(cname) {\n      let name = cname + \"=\";\n      let decodedCookie = decodeURIComponent(document.cookie);\n      let ca = decodedCookie.split(';');\n      for(let i = 0; i <ca.length; i++) {\n        let c = ca[i];\n        while (c.charAt(0) == ' ') {\n          c = c.substring(1);\n        }\n        if (c.indexOf(name) == 0) {\n          return c.substring(name.length, c.length);\n        }\n      }\n      return \"\";\n    }\n\n    const user = api.getCurrentUser();\n    console.log(user);\n    if(user) {\n        var myStringArray = [\"xjtu.app\",\"xjtu.app\",\"xjtu.app\"];\n        var arrayLength = myStringArray.length;\n        var imgHtml = \"\";\n        let cookie_key = getCookie(\"universal_auth\");\n        if (cookie_key == \"\") {\n            cookie_key = generateId(128);\n            document.cookie = \"universal_auth=\" + cookie_key;\n        }\n        for (var i = 0; i < arrayLength; i++) {\n            imgHtml += \"<img src=\\\"https://\" + myStringArray[i] + \"/share_sessions/universal.gif?username=\" +\n            user.username + \"&key=\" + cookie_key + \"\\\"\\n\" +\n                \"         style=\\\"display: none\\\"\\n\" +\n                \"         crossorigin=\\\"use-credentials\\\"/>\"\n        }\n\n        div.innerHTML = '<span>' + imgHtml + '</span>';\n\n        document.body.appendChild(div);\n    }\n\n</script>\n

main.py

import base64\nimport datetime\nimport hashlib\nimport hmac\nimport json\nimport logging\nimport os\nimport pickle\nfrom urllib import parse\nfrom flask import Flask, request, abort, make_response, send_file\nfrom redis import Redis\nfrom config import TRUSTED_HOSTNAMES, name_of, AttrDict, Status\n\nr = Redis()\n\napp = Flask(__name__)\n\nDIS_SHARE_SESSION_KEY = os.environ['DIS_SHARE_SESSION_KEY']\n\n\ndef rget(name, key):\n    return r.get(name_of(name, key))\n\n\ndef rset(name, key, value):\n    r.set(name_of(name, key), value)\n\n\ndef get_domain_policy(host):\n    return host if host == 'xjtu.app' else None\n\n\n@app.route('/share_sessions/universal.gif', methods=['GET', 'OPTIONS'])\ndef universal_auth():\n    cookies = request.cookies\n    host = request.host\n\n    if request.method == 'OPTIONS':\n        print(f'options {host}')\n    else:\n        print(f'get {host}')\n    js_key = request.args.get('key', None)\n    js_username = request.args.get('username', None)\n    if js_key is None:\n        return abort(404)\n\n    if request.host not in TRUSTED_HOSTNAMES:\n        return abort(404)\n\n    status = rget(js_key, 'status')\n    resp = make_response(send_file('static/1x1.gif', mimetype='image/gif'))\n\n    if status is None:\n        logged_in = cookies.get('logged_in')\n        if logged_in is None:\n            return abort(404)\n        try:\n            cookie_logged_in = parse.unquote(logged_in)\n            cookie_logged_in = base64.b64decode(cookie_logged_in)\n            cookie_logged_in = json.loads(cookie_logged_in)\n            _json = cookie_logged_in['json']\n            calculated_hmac = hmac.new(bytes(DIS_SHARE_SESSION_KEY, 'utf-8'),\n                                       bytes(_json, 'utf-8'),\n                                       hashlib.sha256).hexdigest()\n        except Exception as e:\n            logging.error(e)\n            return abort(404)\n\n        if calculated_hmac != cookie_logged_in['hmac']:\n            return abort(404)\n\n        user_info = json.loads(_json)\n        del cookie_logged_in\n        user_info = AttrDict(user_info)\n        username = user_info.username\n\n        if username != js_username:\n            return abort(404)\n\n        other_domains = TRUSTED_HOSTNAMES.copy()\n        other_domains.remove(host)\n\n        origin = f'https://{host}'\n\n        rset(js_key, 'status', Status.PENDING.value)\n        rset(js_key, 'cookies', pickle.dumps(cookies))\n        rset(js_key, 'origin', origin)\n        rset(js_key, 'other_domains', '|'.join(other_domains))\n\n        return resp\n\n    else:\n        status = rget(js_key, 'status')\n\n        # TODO: handle partial finished (user log in to other domain manually)\n        if Status(int(status.decode())) == Status.FINISHED.value:\n            return abort(404)\n\n        origin = rget(js_key, 'origin')\n        origin = origin.decode()\n        cookies = rget(js_key, 'cookies')\n        cookies = pickle.loads(cookies)\n        other_domains = rget(js_key, 'other_domains')\n        other_domains = other_domains.decode()\n        other_domains = set(other_domains.split('|'))\n        if host not in other_domains and request.method == 'GET':\n            return abort(404)\n\n        resp.headers.add('Access-Control-Allow-Origin', origin)\n        resp.headers.add('Access-Control-Allow-Credentials', 'true')\n\n        if request.method == 'GET':\n            req_cookies = request.cookies\n            flag_should_remove_host = []\n            for k, v in cookies.items():\n                print(f'{host}: set {k} to {v}')\n                if k == '_t':\n                    expire_date = datetime.datetime.now() + datetime.timedelta(days=60)  # 1440 hours\n                elif k == '_forum_session':\n                    expire_date = None\n                else:\n                    expire_date = None\n                resp.set_cookie(k, v, domain=get_domain_policy(host), httponly=True, secure=True, samesite='None',\n                                expires=expire_date)\n                if req_cookies.get(k) == v:\n                    flag_should_remove_host.append(True)\n            if len(flag_should_remove_host) > 0 and all(flag_should_remove_host):\n                logging.warning(f'{host}: removed')\n                other_domains.remove(host)\n            rset(js_key, 'other_domains', '|'.join(other_domains))\n            if len(other_domains) == 0:\n                rset(js_key, 'status', Status.FINISHED.value)\n\n        print(f'host {host} finished')\n        return resp\n

config.py

from enum import Enum, auto\n\nTRUSTED_HOSTNAMES = '''\nxjtu.app\nxjtu.app\nxjtu.app\n# cf.xjtu.app\n# ipv4.xjtu.app\n# ipv6.xjtu.app\n# us.xjtu.app\n# jp.xjtu.app\n# hk.xjtu.app\n# direct.xjtu.app\n'''\nTRUSTED_HOSTNAMES = [i.strip() for i in TRUSTED_HOSTNAMES.strip().splitlines()\n                     if len(i.strip()) != 0 and not i.strip().startswith('#')]\nTRUSTED_HOSTNAMES = set(TRUSTED_HOSTNAMES)\n\nname_of = lambda name, key: f'xjtumen-share-session-{name}-{key}'\n\n\nclass AttrDict(dict):\n    __setattr__ = dict.__setitem__\n    __getattr__ = dict.__getitem__\n\nclass Status(int, Enum):\n    PENDING = auto()\n    FINISHED = auto()\n\n

plugin.rb

class ExCurrentUserProvider < Auth::DefaultCurrentUserProvider\n  TOKEN_COOKIX ||= \"logged_in\".freeze\n  TOKEN_COOKIX2 ||= \"universal_auth\".freeze\n\n  def log_on_user(user, session, cookies, opts = {})\n    super\n\n    require 'openssl' if !defined?(OpenSSL)\n    require 'base64' if !defined?(Base64)\n\n    payload = { username: user.username, user_id: user.id, avatar: user.avatar_template, group: user.title }\n    hash_function = OpenSSL::Digest.new('sha256')\n    payload_json = payload.to_json\n    hmac = OpenSSL::HMAC.hexdigest(hash_function, SiteSetting.cookie_ui_key, payload_json)\n    payload_sha = Digest::SHA256.hexdigest SiteSetting.cookie_ui_key\n    payload2 = {json: payload_json, hmac: hmac, payload_sha: payload_sha}\n    token = Base64.strict_encode64(payload2.to_json)\n    cookies.permanent[TOKEN_COOKIX] = { value: token, httponly: true, secure: true, domain: :all, same_site: 'None' }\n  end\n\n  def log_off_user(session, cookies)\n    super\n\n    cookies[TOKEN_COOKIX] = { value: '', httponly: true, secure: true, domain: :all }\n    cookies[TOKEN_COOKIX2] = { value: '', secure: true, domain: :all }\n  end\n\nend\n\n

","createdAt":"2023-12-27 10:32:29.131455","updatedAt":"2024-03-17 13:07:47.03283","replyToPostNumber":null,"replyCount":4,"likeCount":3,"wordCount":1182,"liked":false,"bookmarked":false,"polls":[],"reactions":[{"reaction":"❤️","count":3,"users":[{"id":307,"username":"Fast","name":null},{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old"},{"id":6205,"username":"uika_winwing","name":null}],"hasReacted":false}],"wiki":false,"version":4,"publicVersion":4,"deletedAt":null,"isAnonymous":false,"user":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif","admin":false,"moderator":false,"signatureRaw":null,"signatureCooked":null}},{"id":20601,"postNumber":2,"raw":"感觉应该开发个插件，调原生 `log_on_user` API","cooked":"

感觉应该开发个插件，调原生 log_on_user API

\n","createdAt":"2023-12-27 10:45:09.899042","updatedAt":"2024-03-17 13:07:47.155178","replyToPostNumber":null,"replyCount":0,"likeCount":0,"wordCount":15,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif","admin":false,"moderator":false,"signatureRaw":null,"signatureCooked":null}},{"id":20661,"postNumber":3,"raw":"SSO 你值得拥有\n\nhttps://meta.discourse.org/c/sso/24","cooked":"

SSO 你值得拥有

\n","createdAt":"2023-12-27 17:08:14.40166","updatedAt":"2023-12-27 17:08:14.40166","replyToPostNumber":1,"replyCount":0,"likeCount":0,"wordCount":7,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":true,"user":{"id":2191,"username":"anonymous","name":null,"avatarUrl":null,"admin":false,"moderator":false}},{"id":20687,"postNumber":6,"raw":"SSO 你值得拥有\n\nhttps://meta.discourse.org/c/sso/24","cooked":"

SSO 你值得拥有

\n","createdAt":"2023-12-28 02:17:20.763824","updatedAt":"2023-12-28 02:17:20.763824","replyToPostNumber":1,"replyCount":0,"likeCount":0,"wordCount":7,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":true,"user":{"id":2191,"username":"anonymous","name":null,"avatarUrl":null,"admin":false,"moderator":false}},{"id":20691,"postNumber":7,"raw":"SSO 你值得拥有\n\nhttps://meta.discourse.org/c/sso/24","cooked":"

SSO 你值得拥有

\n","createdAt":"2023-12-28 02:17:56.81196","updatedAt":"2023-12-28 02:18:02.456053","replyToPostNumber":1,"replyCount":0,"likeCount":0,"wordCount":7,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":2,"publicVersion":2,"deletedAt":null,"isAnonymous":true,"user":{"id":2191,"username":"anonymous","name":null,"avatarUrl":null,"admin":false,"moderator":false}},{"id":20692,"postNumber":8,"raw":"SSO 你值得拥有\n\nhttps://meta.discourse.org/c/sso/24","cooked":"

SSO 你值得拥有

\n","createdAt":"2023-12-28 02:18:18.682821","updatedAt":"2024-03-17 13:07:47.258948","replyToPostNumber":null,"replyCount":0,"likeCount":0,"wordCount":7,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif","admin":false,"moderator":false,"signatureRaw":null,"signatureCooked":null}},{"id":20694,"postNumber":9,"raw":"匿名回复和问答模式插件冲突","cooked":"

匿名回复和问答模式插件冲突

\n","createdAt":"2023-12-28 02:18:41.670689","updatedAt":"2023-12-28 02:18:41.670689","replyToPostNumber":1,"replyCount":0,"likeCount":0,"wordCount":13,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":true,"user":{"id":2191,"username":"anonymous","name":null,"avatarUrl":null,"admin":false,"moderator":false}},{"id":20695,"postNumber":10,"raw":"匿名回复和问答模式插件冲突","cooked":"

匿名回复和问答模式插件冲突

\n","createdAt":"2023-12-28 02:18:56.292325","updatedAt":"2024-03-17 13:07:47.344944","replyToPostNumber":null,"replyCount":0,"likeCount":0,"wordCount":13,"liked":false,"bookmarked":false,"polls":[],"reactions":[],"wiki":false,"version":1,"publicVersion":1,"deletedAt":null,"isAnonymous":false,"user":{"id":1047,"username":"anonymous_coward_old","name":"Anonymous Coward Old","avatarUrl":"/uploads/image/43/32/4332638c11248b8ff07033c11de0759a55205facfbec85e14458245a91991faf.avif","admin":false,"moderator":false,"signatureRaw":null,"signatureCooked":null}}],"hasMore":false,"lastReadPostNumber":1,"hasUrlPostNumber":false}