From f4687f6cf6ecfdac9e463038cdcc687d2fc77ebc Mon Sep 17 00:00:00 2001
From: engigu <sayheya@qq.com>
Date: Tue, 10 Mar 2026 14:06:44 +0800
Subject: [PATCH] chore: disable openapi page cdn cache

---
 internal/router/openapi_routes.go       | 3 +++
 web/src/views/settings/SiteSettings.vue | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/internal/router/openapi_routes.go b/internal/router/openapi_routes.go
index f18d085..d8f21be 100644
--- a/internal/router/openapi_routes.go
+++ b/internal/router/openapi_routes.go
@@ -72,6 +72,9 @@ func initOpenAPIRoutes(root *gin.RouterGroup, urlPrefix string) {
   </body>
 </html>`
 			c.Header("Content-Type", "text/html; charset=utf-8")
+			c.Header("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate")
+			c.Header("Pragma", "no-cache")
+			c.Header("Expires", "0")
 			c.Status(http.StatusOK)
 			c.Writer.Write([]byte(scalarHTML))
 			c.Abort()
diff --git a/web/src/views/settings/SiteSettings.vue b/web/src/views/settings/SiteSettings.vue
index b609005..1a7ab16 100644
--- a/web/src/views/settings/SiteSettings.vue
+++ b/web/src/views/settings/SiteSettings.vue
@@ -253,7 +253,7 @@ onMounted(loadSettings)
       </div>
       <p class="text-sm text-muted-foreground mb-4">开启全局 OpenAPI 直接访问能力，配置后可通过请求头 <code
           class="bg-muted px-1.5 py-0.5 rounded text-xs select-all font-sans">Authorization: Bearer &lt;在此生成的Token&gt;</code>
-        无需登录直接调用系统的所有接口，请妥善保管并设置合理的有效期。</p>
+        无需登录直接调用系统的所有接口，请妥善保管并设置合理的有效期。<span class="text-amber-600 dark:text-amber-500 font-medium ml-1">注意：必须先开启鉴权开关才能查看接口文档页面和进行调用。</span></p>
 
       <div class="grid grid-cols-1 sm:grid-cols-4 items-center gap-2 sm:gap-4 mb-4">
         <Label class="sm:text-right text-muted-foreground">Token 密钥</Label>