rustdesk-api icon indicating copy to clipboard operation
rustdesk-api copied to clipboard

安卓端不关闭APP,用户登录状态不会失效

Open nemodesk opened this issue 3 months ago • 1 comments

MUST_LOGIN=Y

即使管理员禁用该账号,退出该账号登录的tocken,或者token到期

只要安卓客户端在登录状态下没有退出程序,那么就可以继续发起链接

尝试使用jwt来校验token有效性,但也不生效

grep jwt config.yaml -A 2
jwt:
  key: "aaa123"
  expire-duration: 168h
 environment:
       - SINGLE_BANDWIDTH=12
       - RELAY=<server[:21117]>
       - ENCRYPTED_ONLY=1
       - MUST_LOGIN=Y
       - TZ=Asia/Shanghai
       - RUSTDESK_API_RUSTDESK_ID_SERVER=<server[:21116]> #21116
       - RUSTDESK_API_RUSTDESK_RELAY_SERVER=<server[:21117]> #21117
       - RUSTDESK_API_RUSTDESK_API_SERVER=http://<server[:21114]> #21114
       - RUSTDESK_API_RUSTDESK_KEY_FILE=/data/id_ed25519.pub
       - RUSTDESK_API_JWT_KEY=aaa123# jwt key    
       - RUSTDESK_API_JWT_EXPIRE_DURATION=168h     
     volumes:
       - /data/rustdesk/server:/data  #将server的key挂载出来
       - /data/rustdesk/api:/app/data #将数据库挂载
       - ./config.yaml:/app/conf/config.yaml

安卓客户端1.4.2 服务端 lejianwen/rustdesk-server-s6 latest f89e65312906 3 weeks ago 108MB Date Thu Oct 9 18:23:32 CST 2025

nemodesk avatar Oct 09 '25 10:10 nemodesk

确实有这bug,只要他一直不刷新,不切换地址簿,不退出软件,就一直能访问

alonginwind avatar Oct 11 '25 09:10 alonginwind