From da9b2c8d6bd70d1a61e9e0a3cef4b98c23ce1abe Mon Sep 17 00:00:00 2001
From: wxg0103 <727495428@qq.com>
Date: Thu, 30 Jul 2026 17:48:49 +0800
Subject: [PATCH] fix: update secure cookie handling to use request scheme in
 chat and login endpoints

---
 apps/chat/views/chat.py   | 3 +--
 apps/users/views/login.py | 3 +--
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/apps/chat/views/chat.py b/apps/chat/views/chat.py
index 3951451efd1..cfbef93439d 100644
--- a/apps/chat/views/chat.py
+++ b/apps/chat/views/chat.py
@@ -116,14 +116,13 @@ def post(self, request: Request):
                      "Access-Control-Allow-Methods": "POST",
                      "Access-Control-Allow-Headers": "Origin,Content-Type,Cookie,Accept,Token"}
         )
-        secure = request.is_secure()
         response.set_cookie(
             'mk_file_auth',
             value=f_token,
             max_age=7 * 24 * 3600,
             path=f'{CONFIG.get_chat_path()}/{request.data.get("access_token")}',
             domain=None,
-            secure=secure,
+            secure=request.scheme == "https",
             httponly=True,
             samesite="None",
         )
diff --git a/apps/users/views/login.py b/apps/users/views/login.py
index 179d42c868c..a93f43b6796 100644
--- a/apps/users/views/login.py
+++ b/apps/users/views/login.py
@@ -48,14 +48,13 @@ class LoginView(APIView):
     def post(self, request: Request):
         token, f_token = LoginSerializer().login(request.data)
         response = result.success(token)
-        secure = request.is_secure()
         response.set_cookie(
             'mk_file_auth',
             value=f_token,
             max_age=7 * 24 * 3600,
             path=f'{CONFIG.get_admin_path()}',
             domain=None,
-            secure=secure,
+            secure=request.scheme == "https",
             httponly=True,
             samesite="None",
         )