Update app.py

app.py

@@ -8,9 +8,15 @@ from datetime import datetime
 from elo_rank import EloRank
 
 app = Flask(__name__)
-CORS(app)
+CORS(app, supports_credentials=True)
+
 app.secret_key = 'supersecretkey'
 
+app.config['SESSION_COOKIE_SECURE'] = False  # 开发环境中关闭 HTTPS 限制
+app.config['SESSION_COOKIE_HTTPONLY'] = True  # 防止 JavaScript 访问 Cookie
+app.config['SESSION_COOKIE_SAMESITE'] = 'Lax'  # 确保跨站请求时 Cookie 被正确传递
+
+
 base_dir = os.path.dirname(os.path.abspath(__file__))
 
 DATA_DIR = os.path.join(base_dir, '/app/data')