通过 cookie 令牌登录 Discourse

[michaeld (Michael - Communiteq)]

This is insecure. A user could tamper with the cookie in their browser and log in as someone else.

You should use DiscourseConnect instead.